$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9b357f7-22f8-408b-878f-fb8337c8f082.roa File: e9b357f7-22f8-408b-878f-fb8337c8f082.roa (raw, json) Hash identifier: e65F8SGLMmf1khI2aDsqLzylafokwksAVqwp/9gmSpM= Subject key identifier: 8C:0A:40:19:F9:71:1F:3C:B3:FC:32:D9:84:E8:9F:FE:4D:D4:31:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49F8D6CEB8573F4103B3EC7E2E15DD1D40AE2E35 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9b357f7-22f8-408b-878f-fb8337c8f082.roa Signing time: Wed 21 May 2025 00:10:29 +0000 ROA not before: Wed 21 May 2025 00:10:29 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f8:d6:ce:b8:57:3f:41:03:b3:ec:7e:2e:15:dd:1d:40:ae:2e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:10:29 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=4b9205080c88b39d90ed69e0db5bf56be20d84ac9043b32beac002aaf6d81406, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:bb:e6:c2:65:a9:44:7a:cc:ba:98:dd:8f: df:0f:a4:90:97:6d:e6:c5:8d:e2:a4:94:92:8d:37: c5:c6:c2:58:d9:ef:7a:60:fb:54:2a:ac:73:40:b1: ec:98:27:38:99:43:06:cf:26:74:77:d0:92:dc:ce: 75:4e:d5:44:b0:be:bb:16:f1:e7:d6:c9:bd:de:37: 44:b4:19:d2:96:7d:e5:c6:aa:f3:61:6c:41:65:89: 07:cf:17:65:fe:57:d9:0d:37:d9:9e:27:70:30:c7: ac:a3:ee:82:e2:e3:c2:61:e9:b0:6b:6b:34:12:9e: fd:d5:4e:4f:8e:04:01:f8:93:59:19:3c:98:58:f8: c3:aa:e5:e7:cb:e4:ab:3f:86:01:b6:ed:af:28:0c: 28:3b:ff:a3:af:d7:1c:a4:d1:e7:bb:d1:ef:e3:53: a5:2e:38:76:75:42:63:c0:0e:c6:d3:96:3b:85:7d: d9:37:3f:1d:77:8b:66:8b:6e:65:ea:e0:15:84:49: 2f:3c:2b:31:6a:c9:d4:96:9e:9f:b0:ae:99:0b:41: 87:90:42:44:ea:a9:ef:74:c5:67:87:7c:c3:b3:26: 5e:90:b2:74:19:78:af:4b:b8:83:21:73:ac:f4:ee: d1:87:04:77:64:cf:52:dc:6d:57:24:80:0d:23:af: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:40:19:F9:71:1F:3C:B3:FC:32:D9:84:E8:9F:FE:4D:D4:31:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9b357f7-22f8-408b-878f-fb8337c8f082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.138.0/24 Signature Algorithm: sha256WithRSAEncryption 01:86:f4:2c:da:7e:c9:25:06:72:5a:bc:43:f6:c0:ec:de:e0: 49:19:51:ea:ad:90:5f:06:c4:86:55:34:28:37:56:0d:f5:c0: 3f:f9:1c:95:68:44:53:81:dc:43:38:9a:12:4f:a9:fb:74:7f: 7a:d8:16:87:e0:b8:91:c0:b5:a2:ec:97:90:9c:aa:31:1a:4c: 92:af:b4:c6:0e:90:9b:20:8b:b0:91:d8:4a:a8:88:57:9d:69: 8b:7d:a2:d4:06:96:d9:4c:f6:4b:67:55:88:5b:03:20:11:01: 96:6a:11:2c:bb:c3:b6:b2:f0:ed:59:e9:cc:1a:36:ad:d0:23: 85:84:45:4a:c0:af:85:11:2a:bf:22:e8:17:cc:87:31:97:15: a2:90:2b:fd:1a:5e:af:9c:56:01:2d:d8:cf:11:e1:a9:69:88: 94:25:9d:2d:87:38:53:d2:a0:dc:93:33:bb:b7:e8:aa:a3:5a: 6b:e0:2b:0b:0e:38:2c:14:a7:d3:bd:78:f6:e3:1f:71:fe:dd: f5:c2:a0:50:0f:6b:1b:5f:85:68:0e:79:41:72:cf:56:5b:78: 0c:04:4e:94:f0:6f:14:e9:cd:ff:cb:67:1e:bb:a8:f7:ee:bd: 5b:e0:4c:8c:97:e3:ca:67:58:ac:31:a1:4e:01:6a:af:53:46: e6:2a:15:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSfjWzrhXP0EDs+x+LhXdHUCuLjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAxMDI5WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjkyMDUwODBjODhiMzlkOTBlZDY5ZTBkYjViZjU2YmUy MGQ4NGFjOTA0M2IzMmJlYWMwMDJhYWY2ZDgxNDA2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmhrvmwmWpRHrMupjdj98PpJCXbebFjeKklJKNN8XGwljZ 73pg+1QqrHNAseyYJziZQwbPJnR30JLcznVO1USwvrsW8efWyb3eN0S0GdKWfeXG qvNhbEFliQfPF2X+V9kNN9meJ3Awx6yj7oLi48Jh6bBrazQSnv3VTk+OBAH4k1kZ PJhY+MOq5efL5Ks/hgG27a8oDCg7/6Ov1xyk0ee70e/jU6UuOHZ1QmPADsbTljuF fdk3Px13i2aLbmXq4BWESS88KzFqydSWnp+wrpkLQYeQQkTqqe90xWeHfMOzJl6Q snQZeK9LuIMhc6z07tGHBHdkz1LcbVckgA0jr8rDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjApAGflxHzyz/DLZhOif/k3UMbUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5YjM1N2Y3LTIyZjgtNDA4Yi04NzhmLWZiODMzN2M4ZjA4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3oowDQYJKoZIhvcNAQELBQADggEBAAGG9CzafsklBnJavEP2wOze4EkZ UeqtkF8GxIZVNCg3Vg31wD/5HJVoRFOB3EM4mhJPqft0f3rYFofguJHAtaLsl5Cc qjEaTJKvtMYOkJsgi7CR2EqoiFedaYt9otQGltlM9ktnVYhbAyARAZZqESy7w7ay 8O1Z6cwaNq3QI4WERUrAr4URKr8i6BfMhzGXFaKQK/0aXq+cVgEt2M8R4alpiJQl nS2HOFPSoNyTM7u36KqjWmvgKwsOOCwUp9O9ePbjH3H+3fXCoFAPaxtfhWgOeUFy z1ZbeAwETpTwbxTpzf/LZx67qPfuvVvgTIyX48pnWKwxoU4Baq9TRuYqFf4= -----END CERTIFICATE-----Generated at Sat Jun 14 23:42:46 2025 by rpki-client