$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa File: 9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa (raw, json) Hash identifier: p2AGVT4Q28OJLcDxz8uppKrGaJE1Zi25ygNfctqvfD4= Subject key identifier: 68:48:7D:A1:1A:F6:1B:11:3D:94:AD:2F:68:EE:CB:C2:BE:70:FF:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E7E8491AE753F9410C28AAE3E12EF8A79287C19 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa Signing time: Fri 25 Apr 2025 15:40:17 +0000 ROA not before: Fri 25 Apr 2025 15:40:17 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7e:84:91:ae:75:3f:94:10:c2:8a:ae:3e:12:ef:8a:79:28:7c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:40:17 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=128033adfe51fc7ed12b4ab170aeb3f01d88eb35ff96cb0759d40e6e1ba0451b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:55:f1:20:9e:c8:58:20:9e:05:35:63:28: 58:9f:5e:96:37:f0:7c:b5:a5:12:dc:b0:f2:9a:90: 1f:45:e5:f9:b7:4e:2b:bd:e7:e1:ea:1b:65:51:04: 23:be:68:1a:8b:20:e4:15:31:39:13:0c:e4:4c:e6: 24:ef:89:2a:91:b7:1d:50:57:08:70:b1:7e:39:ed: e9:08:25:42:71:06:10:48:bd:c8:d0:ce:bf:45:c3: f4:ac:45:bf:7a:16:4d:e5:90:6a:bc:df:03:93:92: b7:73:6b:c0:3a:6f:00:49:54:ff:1a:a0:1d:2c:6c: 9d:93:b4:c1:94:3a:0d:60:16:6e:6c:e3:69:9b:21: fb:83:b8:08:14:7b:29:ad:fc:42:c2:7b:22:9c:ee: 56:62:8f:db:2a:2f:39:d6:aa:f7:c7:f9:e1:23:fa: d3:5d:50:e0:14:3b:ac:40:5a:b6:54:a8:30:2d:93: 77:62:70:ee:e5:30:1b:a3:c5:46:1d:d7:55:2c:0d: be:ac:ad:42:88:a2:1d:44:05:90:74:b9:17:03:7a: e4:b6:da:6f:0a:b3:ac:6b:14:ff:68:f2:9b:b3:37: de:9f:1c:12:db:17:6c:41:66:13:6e:09:49:58:ab: 7b:4a:21:e6:c5:8b:4a:d4:00:30:52:e9:1e:ea:90: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:7D:A1:1A:F6:1B:11:3D:94:AD:2F:68:EE:CB:C2:BE:70:FF:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b92732f-9dc6-4614-84c0-7256b3a5bb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.251.0/24 Signature Algorithm: sha256WithRSAEncryption 79:8b:58:a5:5a:50:6c:d0:bb:1d:3c:6e:5a:00:26:05:f1:61: 93:53:24:0f:0e:c5:52:b8:b1:d9:ac:8c:36:d0:94:85:04:9e: e5:64:3f:7f:3d:18:32:c5:31:67:9a:77:3b:05:0f:be:d1:65: 7b:f3:83:8b:4b:8e:b1:bb:e3:21:d0:22:1c:d2:fe:b9:ea:4d: 7e:c2:93:ff:53:0a:f9:2a:e0:44:d4:94:2c:1b:c7:12:5f:2f: dc:ec:ec:8c:e0:37:f2:62:49:9a:55:89:b5:94:3f:0b:fa:7b: 4e:a8:fb:a8:65:a1:c6:ef:8f:8e:00:42:d3:c5:cc:15:c9:7d: d6:4d:df:31:5a:c4:41:be:71:a7:cc:fe:64:48:4b:6d:1f:ec: f1:b3:c2:f0:33:f9:04:8f:59:7e:60:da:97:6a:c2:8c:c1:f1: 48:fe:4e:b4:2f:e7:0e:a2:b3:d2:af:49:88:14:1e:48:5d:5d: d7:25:a0:59:24:37:c0:66:53:93:7a:ec:b6:6d:6f:a2:05:32: 62:f5:8b:fd:10:5d:d1:73:a7:46:34:54:f3:2b:dc:22:dd:97: b8:9c:23:d5:84:08:0a:ed:8b:46:44:8e:62:04:ea:08:97:68: 05:2f:72:b8:82:78:a7:0c:2b:b9:ac:f0:0a:da:da:22:b6:14: af:3c:66:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfn6Eka51P5QQwoquPhLvinkofBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTU0MDE3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjgwMzNhZGZlNTFmYzdlZDEyYjRhYjE3MGFlYjNmMDFk ODhlYjM1ZmY5NmNiMDc1OWQ0MGU2ZTFiYTA0NTFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMwVXxIJ7IWCCeBTVjKFifXpY38Hy1pRLcsPKakB9F5fm3 Tiu95+HqG2VRBCO+aBqLIOQVMTkTDORM5iTviSqRtx1QVwhwsX457ekIJUJxBhBI vcjQzr9Fw/SsRb96Fk3lkGq83wOTkrdza8A6bwBJVP8aoB0sbJ2TtMGUOg1gFm5s 42mbIfuDuAgUeymt/ELCeyKc7lZij9sqLznWqvfH+eEj+tNdUOAUO6xAWrZUqDAt k3dicO7lMBujxUYd11UsDb6srUKIoh1EBZB0uRcDeuS22m8Ks6xrFP9o8puzN96f HBLbF2xBZhNuCUlYq3tKIebFi0rUADBS6R7qkMP/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaEh9oRr2GxE9lK0vaO7Lwr5w/4IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzliOTI3MzJmLTlkYzYtNDYxNC04NGMwLTcyNTZiM2E1YmI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPtfswDQYJKoZIhvcNAQELBQADggEBAHmLWKVaUGzQux08bloAJgXxYZNT JA8OxVK4sdmsjDbQlIUEnuVkP389GDLFMWeadzsFD77RZXvzg4tLjrG74yHQIhzS /rnqTX7Ck/9TCvkq4ETUlCwbxxJfL9zs7IzgN/JiSZpVibWUPwv6e06o+6hlocbv j44AQtPFzBXJfdZN3zFaxEG+cafM/mRIS20f7PGzwvAz+QSPWX5g2pdqwozB8Uj+ TrQv5w6is9KvSYgUHkhdXdcloFkkN8BmU5N67LZtb6IFMmL1i/0QXdFzp0Y0VPMr 3CLdl7icI9WECArti0ZEjmIE6giXaAUvcriCeKcMK7ms8Ara2iK2FK88Zus= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:56 2025 by rpki-client