$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbaec2c1-d792-4f54-94e7-add0b77501e4.roa File: bbaec2c1-d792-4f54-94e7-add0b77501e4.roa (raw, json) Hash identifier: pbYTVqJPxSTvrMHJinoAD9j1vRESwVkdsEi9WBDGpo8= Subject key identifier: 4D:F6:B1:B8:EE:9B:E3:09:63:22:CE:54:37:63:BA:AD:EB:C1:AC:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 602445B63EE6EA2CE1E74BAE079971D4DE00F9A6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbaec2c1-d792-4f54-94e7-add0b77501e4.roa Signing time: Mon 14 Apr 2025 15:31:12 +0000 ROA not before: Mon 14 Apr 2025 15:31:12 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.181.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:24:45:b6:3e:e6:ea:2c:e1:e7:4b:ae:07:99:71:d4:de:00:f9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 15:31:12 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=d8c1a6b2445ccc87f8fe89b3db5b749d2e0d5522699fa533633cfdfe4e1d89d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:78:0a:35:19:11:ae:28:05:ec:bc:78:67: 77:ee:04:60:75:ae:29:ee:40:a2:de:5e:b5:d4:8c: 5f:16:ef:4f:90:8c:1b:37:81:38:bc:a9:16:6f:1d: 41:3b:2b:cb:e1:61:cc:25:9a:a9:f2:ba:e4:9a:4b: 4c:d5:c1:0a:05:db:05:74:85:37:d4:8e:26:c1:36: c2:98:e9:b7:db:41:19:ed:ab:e4:55:24:79:2e:58: 13:6b:c6:c2:14:21:3d:95:53:6b:cd:30:b2:ca:13: 8d:01:a7:99:c0:36:a5:1d:77:46:ad:7e:95:80:d8: d5:ff:57:a6:6f:61:aa:f5:79:43:95:08:ee:ad:8e: 54:be:53:a4:f9:1c:b7:ee:72:97:f7:9f:a0:75:b8: a7:47:e2:f6:1d:93:c7:a9:93:fd:5d:5d:64:4d:b2: 72:a9:d0:0d:f8:ab:95:6c:98:3f:af:48:84:cc:c7: 27:c7:97:53:6b:8a:4e:77:d5:a6:52:be:9b:9b:78: f2:21:d9:24:1d:f2:7e:d1:b0:f8:3a:e0:f2:65:21: ba:14:a6:b3:1f:4b:15:85:34:5e:70:6b:21:d3:bf: 42:d6:c0:9e:70:27:db:25:21:91:42:71:07:b7:1b: 1a:e7:41:0d:33:b1:15:84:a1:8b:b7:27:65:eb:e4: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:B1:B8:EE:9B:E3:09:63:22:CE:54:37:63:BA:AD:EB:C1:AC:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbaec2c1-d792-4f54-94e7-add0b77501e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.120.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:50:5d:e8:ee:ee:b9:83:d0:bb:60:2c:a9:08:42:20:82:d3: ce:a8:6e:29:d6:36:89:cb:91:6b:84:c7:6d:b0:1a:90:5c:a0: 65:e0:2b:e5:f1:85:f1:c3:f9:b5:b8:aa:1e:83:88:0d:28:16: 16:fe:14:0f:a4:56:df:a3:90:0c:0b:33:8f:04:0f:2e:fa:16: 68:af:60:b4:f4:93:0f:c1:b1:c9:8b:11:c9:b2:fd:8a:86:8e: a5:0d:80:49:63:9a:4e:54:8d:30:65:4d:7a:fb:c8:6e:d5:5f: 19:9d:11:b2:cd:5c:15:4b:41:15:09:db:a4:74:ce:82:6d:10: d3:d5:a0:ee:4b:b9:ed:5d:73:51:a1:b6:e9:6c:4f:68:4a:5c: d7:4d:5b:ad:0c:c0:47:ca:18:d0:21:7b:c4:3f:75:88:b1:df: 09:65:88:cd:f2:4a:31:ff:e8:4f:3f:d8:c6:e3:21:38:c4:8d: 1d:a9:a4:0f:f9:55:24:15:a5:9a:2a:3d:3c:fc:33:9a:ff:59: db:b9:51:b4:32:65:90:4a:b6:8a:4d:14:a7:9a:48:ec:e9:96: 6f:56:d5:03:1c:7f:0f:d6:c4:3a:d7:25:53:96:3f:96:1c:76: 55:60:9c:f3:bc:16:c1:5a:f4:c2:a1:bf:39:9c:09:47:ba:5b: f3:59:01:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYCRFtj7m6izh50uuB5lx1N4A+aYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTUzMTEyWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGMxYTZiMjQ0NWNjYzg3ZjhmZTg5YjNkYjViNzQ5ZDJl MGQ1NTIyNjk5ZmE1MzM2MzNjZmRmZTRlMWQ4OWQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsr3gKNRkRrigF7Lx4Z3fuBGB1rinuQKLeXrXUjF8W70+Q jBs3gTi8qRZvHUE7K8vhYcwlmqnyuuSaS0zVwQoF2wV0hTfUjibBNsKY6bfbQRnt q+RVJHkuWBNrxsIUIT2VU2vNMLLKE40Bp5nANqUdd0atfpWA2NX/V6ZvYar1eUOV CO6tjlS+U6T5HLfucpf3n6B1uKdH4vYdk8epk/1dXWRNsnKp0A34q5VsmD+vSITM xyfHl1Nrik531aZSvpubePIh2SQd8n7RsPg64PJlIboUprMfSxWFNF5wayHTv0LW wJ5wJ9slIZFCcQe3GxrnQQ0zsRWEoYu3J2Xr5CxRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTfaxuO6b4wljIs5UN2O6revBrBkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiYWVjMmMxLWQ3OTItNGY1NC05NGU3LWFkZDBiNzc1MDFlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPtXgwDQYJKoZIhvcNAQELBQADggEBAI1QXeju7rmD0LtgLKkIQiCC086o binWNonLkWuEx22wGpBcoGXgK+XxhfHD+bW4qh6DiA0oFhb+FA+kVt+jkAwLM48E Dy76FmivYLT0kw/BscmLEcmy/YqGjqUNgEljmk5UjTBlTXr7yG7VXxmdEbLNXBVL QRUJ26R0zoJtENPVoO5Lue1dc1GhtulsT2hKXNdNW60MwEfKGNAhe8Q/dYix3wll iM3ySjH/6E8/2MbjITjEjR2ppA/5VSQVpZoqPTz8M5r/Wdu5UbQyZZBKtopNFKea SOzplm9W1QMcfw/WxDrXJVOWP5YcdlVgnPO8FsFa9MKhvzmcCUe6W/NZAYI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:49:19 2025 by rpki-client