$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c00bb77a-bf87-433c-8520-37a88e9af99d.roa File: c00bb77a-bf87-433c-8520-37a88e9af99d.roa (raw, json) Hash identifier: oudNAGTryYsyHhI8Ye0rq8P9nZgLPwN5AwRObLXsvys= Subject key identifier: 17:07:EA:56:C1:9B:42:5E:73:F0:C6:C2:DE:25:8A:D8:AC:23:15:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62B3FE4DBEEA046CA0551AC9592EABECC4D6E824 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c00bb77a-bf87-433c-8520-37a88e9af99d.roa Signing time: Wed 16 Apr 2025 00:20:59 +0000 ROA not before: Wed 16 Apr 2025 00:20:59 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.193.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:fe:4d:be:ea:04:6c:a0:55:1a:c9:59:2e:ab:ec:c4:d6:e8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 16 00:20:59 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=96092b9b589661e0a6857f7fb931aa3ec10b5de285cc8498e520aa8f2cc061d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:df:59:7b:cc:f1:9c:46:0c:26:c1:6a:d5: 71:f6:04:f7:71:68:1b:19:d1:c8:25:92:fd:0e:4b: 2a:ea:dd:0a:69:ab:3e:0e:3d:62:aa:d8:ec:74:9c: 30:a6:ea:b3:e0:c8:70:f5:43:34:d2:ba:7c:5b:9c: 8f:da:c8:30:1f:6e:98:d4:00:dd:6f:a4:32:ee:ed: dd:5c:5b:75:49:2d:f1:94:41:78:96:ac:b8:2d:94: f4:69:41:d5:96:29:1e:f2:bd:51:bf:21:83:5e:94: 78:9b:d5:91:bf:79:7f:15:92:5e:26:03:63:53:de: c0:27:71:02:22:38:de:59:04:6e:b3:f4:7a:e3:d6: 54:f6:f1:07:03:5b:7e:54:63:e1:0d:78:98:89:ce: 3f:a6:92:a5:79:e4:2a:5f:d5:2f:0c:e5:1d:ba:77: f9:57:08:5c:73:33:77:be:6d:c9:2c:6f:f4:3d:7a: a5:76:02:b9:b8:fb:7d:78:41:dc:d5:02:42:79:81: 6d:c0:4c:bd:2a:6f:2a:30:df:78:31:7e:30:58:0a: f4:15:68:f7:c1:76:e6:0f:40:03:56:6b:ef:de:32: e4:24:3c:aa:41:a5:3e:3d:a2:df:aa:05:86:0e:54: 2e:50:e9:56:13:85:df:fa:b0:5c:db:cf:fd:bf:5a: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:07:EA:56:C1:9B:42:5E:73:F0:C6:C2:DE:25:8A:D8:AC:23:15:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c00bb77a-bf87-433c-8520-37a88e9af99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.193.4.0/24 Signature Algorithm: sha256WithRSAEncryption 25:34:8c:a2:13:5f:a8:e2:45:14:0b:89:80:ea:2e:0f:5f:a1: 0a:ec:08:93:f8:b8:36:38:fc:fe:1c:bd:12:14:c0:e5:6e:93: ff:4d:3e:c2:d4:bf:d5:f8:b8:5f:11:fd:f2:33:7d:23:ee:f4: 6e:0d:79:22:73:ca:ed:7a:ab:ec:f0:85:3f:be:7c:33:d9:11: d2:dd:ae:d1:f2:bd:1b:4a:8e:87:c7:f2:85:47:20:8d:0b:85: 59:e7:33:46:42:a4:38:1b:dd:75:d4:fe:bb:47:eb:3c:da:43: ab:82:36:cd:25:10:28:b5:27:96:74:9c:8a:6a:54:d5:59:c3: 76:e5:07:d8:d3:1a:a2:c0:27:d0:5f:27:76:09:6c:2d:fd:17: 39:b1:bb:da:07:fe:68:8e:47:0c:dd:d6:fa:ae:85:7a:d4:22: 2e:f2:5c:4d:f9:99:50:0f:7e:12:69:a9:a2:4f:4a:b6:97:b1: a6:62:fc:8b:3b:63:02:cb:28:e1:0f:2c:dc:04:66:03:4a:8d: 9e:f3:3f:ba:5a:bf:bf:df:20:cd:2e:8e:2f:8b:54:60:64:0e: a5:67:45:a0:ce:a6:2d:a0:19:b7:90:07:b2:bb:13:d8:bb:69: 1f:26:e9:12:d1:b6:b4:7b:30:0d:27:3a:68:b0:dd:11:33:1f: 1e:1a:1b:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYrP+Tb7qBGygVRrJWS6r7MTW6CQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE2MDAyMDU5WhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjA5MmI5YjU4OTY2MWUwYTY4NTdmN2ZiOTMxYWEzZWMx MGI1ZGUyODVjYzg0OThlNTIwYWE4ZjJjYzA2MWQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4cd9Ze8zxnEYMJsFq1XH2BPdxaBsZ0cglkv0OSyrq3Qpp qz4OPWKq2Ox0nDCm6rPgyHD1QzTSunxbnI/ayDAfbpjUAN1vpDLu7d1cW3VJLfGU QXiWrLgtlPRpQdWWKR7yvVG/IYNelHib1ZG/eX8Vkl4mA2NT3sAncQIiON5ZBG6z 9Hrj1lT28QcDW35UY+ENeJiJzj+mkqV55Cpf1S8M5R26d/lXCFxzM3e+bcksb/Q9 eqV2Arm4+314QdzVAkJ5gW3ATL0qbyow33gxfjBYCvQVaPfBduYPQANWa+/eMuQk PKpBpT49ot+qBYYOVC5Q6VYThd/6sFzbz/2/WlNvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFwfqVsGbQl5z8MbC3iWK2KwjFVYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwMGJiNzdhLWJmODctNDMzYy04NTIwLTM3YTg4ZTlhZjk5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPwQQwDQYJKoZIhvcNAQELBQADggEBACU0jKITX6jiRRQLiYDqLg9foQrs CJP4uDY4/P4cvRIUwOVuk/9NPsLUv9X4uF8R/fIzfSPu9G4NeSJzyu16q+zwhT++ fDPZEdLdrtHyvRtKjofH8oVHII0LhVnnM0ZCpDgb3XXU/rtH6zzaQ6uCNs0lECi1 J5Z0nIpqVNVZw3blB9jTGqLAJ9BfJ3YJbC39Fzmxu9oH/miORwzd1vquhXrUIi7y XE35mVAPfhJpqaJPSraXsaZi/Is7YwLLKOEPLNwEZgNKjZ7zP7pav7/fIM0uji+L VGBkDqVnRaDOpi2gGbeQB7K7E9i7aR8m6RLRtrR7MA0nOmiw3REzHx4aGxQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:49:30 2025 by rpki-client