$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac90cb56-bc99-4676-b64a-509a8ac49d6d.roa File: ac90cb56-bc99-4676-b64a-509a8ac49d6d.roa (raw, json) Hash identifier: 3Wq2tW5z9JRFztNoPGL95N3iCmLLfQhIl33yXmiKvVw= Subject key identifier: BB:A8:32:FB:21:B6:96:92:12:D4:09:8D:47:BF:6F:7B:91:F9:F6:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2FE7699A899C244799498EC11C597F84CB3515BD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac90cb56-bc99-4676-b64a-509a8ac49d6d.roa Signing time: Fri 25 Apr 2025 15:41:06 +0000 ROA not before: Fri 25 Apr 2025 15:41:06 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.193.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e7:69:9a:89:9c:24:47:99:49:8e:c1:1c:59:7f:84:cb:35:15:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:41:06 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f71b4c14991eef029be5adc7d5725937084ec510a13dccfca0b31762d9365052, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cb:7a:f1:95:3c:f8:a4:42:ff:92:c7:a3:8c: f3:16:cc:5a:f9:6f:6a:b1:ae:4f:59:7e:eb:e8:24: b6:2e:36:36:06:3a:39:33:45:ed:88:b1:a8:c4:75: 49:a3:5d:14:aa:ba:f8:6a:b4:19:dd:e7:bc:98:37: 98:b2:1e:c8:95:85:41:0a:95:04:b8:17:db:48:64: fe:9a:e2:9a:cb:1b:23:24:35:44:45:0d:a6:b8:e7: a9:65:23:20:b0:70:70:1a:30:a1:74:7f:36:16:07: de:7b:c3:5b:6b:15:a7:c4:ea:fb:3f:c8:b4:44:35: 2a:52:86:04:6c:5f:48:5c:0d:8f:d0:55:cb:20:cf: a2:7c:b2:ae:ec:b5:ee:d7:2a:f4:54:09:48:a9:8c: 87:f4:8d:17:6b:4d:88:dc:56:dc:23:37:2f:b4:63: da:97:b9:36:5f:22:84:a6:cd:4b:34:74:3c:7b:e2: c1:b8:6f:ca:bc:3d:6d:96:d6:f4:fb:d0:47:5c:11: 61:e6:e6:a6:b4:d3:26:f3:b5:35:47:5d:a2:0f:87: 41:f1:97:a0:2c:78:34:f1:7b:85:48:f3:c0:cf:88: 8c:5d:08:fd:25:1c:e2:ad:7f:29:9c:28:d4:04:11: db:45:df:be:9b:70:9e:87:58:87:2c:46:ac:6a:e9: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A8:32:FB:21:B6:96:92:12:D4:09:8D:47:BF:6F:7B:91:F9:F6:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac90cb56-bc99-4676-b64a-509a8ac49d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.193.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:fe:ae:b9:41:7e:aa:c5:4a:46:53:e2:22:0a:bc:25:f3:c2: 74:a4:11:24:70:fa:28:53:81:6d:58:59:7b:75:c8:d9:ef:0a: ac:cf:a3:b9:f8:64:dd:d6:97:f5:3d:f6:1d:1f:8d:0b:9d:d6: ac:9d:7a:82:09:c7:5d:cc:69:08:af:fb:8b:4c:ae:4d:c2:43: d1:a8:d6:e9:a9:79:7e:e0:29:a9:df:09:98:e8:8f:a1:c6:94: 92:77:0b:46:51:5c:ab:bb:9a:4f:9d:7d:62:f0:63:85:4d:8b: 71:2a:eb:60:f0:2a:e0:ab:05:20:ab:2a:38:58:48:f4:6a:f3: b8:f0:07:83:b8:15:08:b8:80:b8:5e:77:3e:4e:2d:73:1b:e6: 6c:4d:ad:7a:7c:1a:ac:1f:b3:c4:3a:22:be:e0:0f:34:94:8f: 18:c1:51:7a:5f:7b:38:90:70:bc:fc:a6:67:87:d6:16:f2:7b: a0:fc:62:d7:12:07:a4:7f:70:31:66:bf:96:e3:c7:c2:05:8d: bf:5a:33:b4:8c:7f:20:db:49:b6:01:ff:ce:bb:7a:df:fa:8a: 88:1f:49:77:55:be:35:5e:1e:f7:f9:40:60:c1:f8:cb:60:d4: 12:13:04:83:03:e8:ed:2c:44:fc:40:64:4f:41:42:6e:ab:52: 14:bd:0f:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL+dpmomcJEeZSY7BHFl/hMs1Fb0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTU0MTA2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzFiNGMxNDk5MWVlZjAyOWJlNWFkYzdkNTcyNTkzNzA4 NGVjNTEwYTEzZGNjZmNhMGIzMTc2MmQ5MzY1MDUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDly3rxlTz4pEL/ksejjPMWzFr5b2qxrk9ZfuvoJLYuNjYG OjkzRe2IsajEdUmjXRSquvhqtBnd57yYN5iyHsiVhUEKlQS4F9tIZP6a4prLGyMk NURFDaa456llIyCwcHAaMKF0fzYWB957w1trFafE6vs/yLRENSpShgRsX0hcDY/Q Vcsgz6J8sq7ste7XKvRUCUipjIf0jRdrTYjcVtwjNy+0Y9qXuTZfIoSmzUs0dDx7 4sG4b8q8PW2W1vT70EdcEWHm5qa00ybztTVHXaIPh0Hxl6AseDTxe4VI88DPiIxd CP0lHOKtfymcKNQEEdtF376bcJ6HWIcsRqxq6R57AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu6gy+yG2lpIS1AmNR79ve5H59nIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjOTBjYjU2LWJjOTktNDY3Ni1iNjRhLTUwOWE4YWM0OWQ2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPwQkwDQYJKoZIhvcNAQELBQADggEBADz+rrlBfqrFSkZT4iIKvCXzwnSk ESRw+ihTgW1YWXt1yNnvCqzPo7n4ZN3Wl/U99h0fjQud1qydeoIJx13MaQiv+4tM rk3CQ9Go1umpeX7gKanfCZjoj6HGlJJ3C0ZRXKu7mk+dfWLwY4VNi3Eq62DwKuCr BSCrKjhYSPRq87jwB4O4FQi4gLhedz5OLXMb5mxNrXp8Gqwfs8Q6Ir7gDzSUjxjB UXpfeziQcLz8pmeH1hbye6D8YtcSB6R/cDFmv5bjx8IFjb9aM7SMfyDbSbYB/867 et/6iogfSXdVvjVeHvf5QGDB+Mtg1BITBIMD6O0sRPxAZE9BQm6rUhS9D14= -----END CERTIFICATE-----Generated at Sat Apr 26 12:46:57 2025 by rpki-client