$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa7c29f6-9304-412b-bf8c-bfba121327cc.roa File: aa7c29f6-9304-412b-bf8c-bfba121327cc.roa (raw, json) Hash identifier: 9Tw56+I0UuKcI/Zbx9N7aYuMlkfnAdBtLxPrWJ23uFs= Subject key identifier: C9:B1:84:89:66:F0:4A:82:C8:AC:D6:CF:54:73:5C:E5:05:D8:A8:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 67C160978D8EA7C1C655775042E53E5243AA30BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa7c29f6-9304-412b-bf8c-bfba121327cc.roa Signing time: Fri 25 Apr 2025 15:41:17 +0000 ROA not before: Fri 25 Apr 2025 15:41:17 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 15.200.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c1:60:97:8d:8e:a7:c1:c6:55:77:50:42:e5:3e:52:43:aa:30:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:41:17 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6ded00b8425f4cea927ffcf4aa8d7485dafd1ec9e8ddd482c55fc923e10d408f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:eb:c6:8f:a0:cf:1d:b2:c6:f2:74:16:aa: 5f:98:04:d2:68:88:ea:eb:20:50:cb:91:bc:8f:f5: dc:26:b5:82:fe:eb:5d:4b:47:62:84:4b:b4:e9:cc: ae:d1:62:fa:71:11:a1:71:dc:ef:e9:ac:42:e0:5b: b8:e0:59:16:14:d0:06:9e:43:25:4a:5f:a9:b4:43: ad:96:83:16:e4:e7:3f:d9:1b:f1:18:0d:de:50:19: 56:cf:b4:43:ab:a1:26:4b:5b:3c:25:2e:a9:71:33: 65:25:d9:26:b5:85:d9:0e:ac:f3:71:4b:64:a1:95: 47:dc:70:aa:00:1d:a9:c5:fb:b6:76:6b:08:61:12: 67:c6:c5:b9:26:e4:4f:87:d2:6a:fa:b8:db:91:51: b7:e8:66:34:e9:b7:d6:16:04:87:74:b2:50:a9:08: 06:a6:fd:02:08:1b:f5:68:1c:5a:b2:16:ba:50:f0: 4e:28:56:0b:3c:13:10:ff:a5:40:b5:31:c2:ab:41: 92:a2:a1:6a:bb:57:a2:7a:f4:fa:eb:be:bc:34:88: ff:3b:dc:d5:c9:d7:78:1b:69:a7:11:50:62:fe:86: 32:df:96:52:b1:2e:67:11:ab:5f:53:29:bb:78:c4: 3d:5b:88:f9:9c:13:b5:46:8d:6f:15:d2:c8:6e:10: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B1:84:89:66:F0:4A:82:C8:AC:D6:CF:54:73:5C:E5:05:D8:A8:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa7c29f6-9304-412b-bf8c-bfba121327cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:3f:fd:9f:dc:12:ef:0a:4f:e8:a8:97:30:6a:95:7f:d3:dc: d4:29:0c:3f:fd:6e:99:3d:6c:f8:08:16:c5:38:b9:3a:b1:81: bd:9b:2d:67:42:0c:23:30:97:80:68:e0:f9:74:ab:19:71:50: 1a:0b:5b:22:55:a4:9d:13:db:71:1a:48:94:f0:7c:68:f9:cc: d3:fd:01:ca:e5:ff:bf:1c:5c:aa:a6:6d:35:e8:a9:0c:e0:3a: 13:bd:17:bf:27:69:38:74:5b:3e:60:62:96:18:ee:2c:e4:fc: a0:60:30:5d:ab:45:5e:1a:bc:f3:a7:cc:8f:b5:58:fb:ef:96: b4:42:0c:4d:7a:87:99:bc:cc:f5:9e:8b:20:91:c1:b9:38:99: bd:2f:4a:ee:a8:04:70:27:c0:cb:f7:be:cc:04:56:e3:01:8a: 68:44:39:40:10:0a:3a:c3:34:dc:df:c9:f9:28:57:ee:04:9a: ba:67:23:39:fb:38:67:40:fe:14:86:4f:72:b2:08:85:05:53: 49:a7:5c:6a:07:1f:16:2c:34:11:3a:68:2a:94:03:4f:1a:d2: 6d:1d:bc:cc:ef:e8:25:9d:e1:37:90:d7:a9:ea:be:c3:29:c9: 1d:f6:bb:bb:d1:d8:55:8b:ed:2b:83:4f:c1:14:00:80:cd:32: 27:68:8e:1a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ8Fgl42Op8HGVXdQQuU+UkOqML4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTU0MTE3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGVkMDBiODQyNWY0Y2VhOTI3ZmZjZjRhYThkNzQ4NWRh ZmQxZWM5ZThkZGQ0ODJjNTVmYzkyM2UxMGQ0MDhmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcN+vGj6DPHbLG8nQWql+YBNJoiOrrIFDLkbyP9dwmtYL+ 611LR2KES7TpzK7RYvpxEaFx3O/prELgW7jgWRYU0AaeQyVKX6m0Q62Wgxbk5z/Z G/EYDd5QGVbPtEOroSZLWzwlLqlxM2Ul2Sa1hdkOrPNxS2ShlUfccKoAHanF+7Z2 awhhEmfGxbkm5E+H0mr6uNuRUbfoZjTpt9YWBId0slCpCAam/QIIG/VoHFqyFrpQ 8E4oVgs8ExD/pUC1McKrQZKioWq7V6J69Prrvrw0iP873NXJ13gbaacRUGL+hjLf llKxLmcRq19TKbt4xD1biPmcE7VGjW8V0shuEFntAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUybGEiWbwSoLIrNbPVHNc5QXYqPkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhN2MyOWY2LTkzMDQtNDEyYi1iZjhjLWJmYmExMjEzMjdjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPyDANBgkqhkiG9w0BAQsFAAOCAQEABT/9n9wS7wpP6KiXMGqVf9Pc1CkM P/1umT1s+AgWxTi5OrGBvZstZ0IMIzCXgGjg+XSrGXFQGgtbIlWknRPbcRpIlPB8 aPnM0/0ByuX/vxxcqqZtNeipDOA6E70XvydpOHRbPmBilhjuLOT8oGAwXatFXhq8 86fMj7VY+++WtEIMTXqHmbzM9Z6LIJHBuTiZvS9K7qgEcCfAy/e+zARW4wGKaEQ5 QBAKOsM03N/J+ShX7gSaumcjOfs4Z0D+FIZPcrIIhQVTSadcagcfFiw0ETpoKpQD TxrSbR28zO/oJZ3hN5DXqeq+wynJHfa7u9HYVYvtK4NPwRQAgM0yJ2iOGg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:49:31 2025 by rpki-client