$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f346bedb-88f9-4202-adb1-7292d0a527e4.roa File: f346bedb-88f9-4202-adb1-7292d0a527e4.roa (raw, json) Hash identifier: 4uPGpWqQzbVKkpNOKwvdTE2WIC9QPxIknKW2h60xwnM= Subject key identifier: A9:1A:F7:E3:8E:6A:08:73:A3:06:59:90:F6:D6:E3:44:0B:D2:2D:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 161F3A8BAD7F9F2857966F35E1FE2315B9CCD6A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f346bedb-88f9-4202-adb1-7292d0a527e4.roa Signing time: Sat 26 Apr 2025 00:21:29 +0000 ROA not before: Sat 26 Apr 2025 00:21:29 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1f:3a:8b:ad:7f:9f:28:57:96:6f:35:e1:fe:23:15:b9:cc:d6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 26 00:21:29 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=cc0556229bf08f72330e6fc15b14747b8a297e6c8e78fd7e9d80970249618bd4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:3f:3e:2a:ae:ff:7f:92:0a:17:1c:45:2f: 24:2b:45:38:a8:5f:5d:6c:4e:be:1b:fe:5e:32:1b: d4:4a:92:f3:99:8e:4f:12:78:5e:e4:91:a7:7f:1f: 5e:82:56:02:6f:69:a4:c4:7e:13:1f:0b:9a:0d:3d: 49:88:36:62:a8:3f:e2:7b:6d:bc:6d:a2:c1:7e:c5: 32:3e:a0:36:1f:06:1f:e9:68:a7:d1:85:c3:eb:a9: fc:ed:96:33:d4:f0:20:08:5e:d0:99:06:c4:d4:e7: 0f:3b:9e:16:8e:fc:4d:04:4c:aa:3d:29:e6:87:c0: 0e:e4:ff:eb:89:70:30:4e:e8:39:09:aa:17:77:06: bc:91:48:0b:3a:b8:7f:62:43:3c:7f:4c:c1:b6:4a: 5b:6c:76:30:07:2c:35:c1:fe:7b:fd:4c:6e:d4:ca: 80:76:1b:05:51:e4:82:28:57:2d:b7:19:d2:94:7c: 14:33:bd:d4:c0:83:01:b3:7c:eb:ac:11:ab:09:21: 9c:8e:91:65:d7:b1:89:9a:f0:ad:c4:f2:a3:de:0f: d6:50:aa:25:f1:df:4f:01:ec:37:b9:c9:11:99:f9: 5b:5e:35:59:4c:69:98:3d:97:7d:8e:b9:46:2c:7d: 7d:17:ad:c5:07:17:b0:20:93:67:7e:63:87:46:91: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1A:F7:E3:8E:6A:08:73:A3:06:59:90:F6:D6:E3:44:0B:D2:2D:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f346bedb-88f9-4202-adb1-7292d0a527e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.218.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:09:0a:6d:f0:3e:1c:76:98:ca:7b:f3:cc:3a:c9:37:e2:09: 10:f0:d6:8f:75:27:85:af:8b:29:78:ca:ac:70:3b:17:23:c9: ef:7f:86:b7:26:9c:70:d3:49:27:f8:56:4b:a3:ad:49:c5:d3: 05:e1:17:03:91:10:c2:59:ab:71:d5:91:6d:25:61:91:93:f5: 78:b8:f8:76:57:3c:d7:d0:b1:03:ea:38:08:7c:b2:92:6d:85: 28:38:15:63:2b:14:a2:6a:87:5a:0d:4f:09:ad:8e:a9:bf:0f: 18:37:40:ed:c4:6f:96:3c:df:b5:14:97:78:37:f4:50:b3:b9: 4d:1b:47:29:bf:c8:60:3a:97:78:a7:d1:7f:c0:92:83:d3:d1: 92:01:9d:4c:eb:cd:6c:41:e7:0e:f4:20:d4:a2:83:07:25:67: 5d:9e:e3:ac:de:61:de:86:c4:1c:26:a6:95:a7:7e:a8:52:75: 65:9a:31:a6:1d:f9:35:13:c2:f9:af:01:60:df:19:ec:6c:f3: 67:15:4e:69:29:56:d9:ed:83:7f:51:fe:21:7a:d8:41:7f:4a: 1a:81:7f:15:99:03:8c:e3:3e:bd:cb:d2:23:46:d2:2d:88:9a: 20:64:05:a8:19:bf:c1:1f:59:c7:a5:57:84:4c:d0:e6:c7:fc: 80:36:2a:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFh86i61/nyhXlm814f4jFbnM1qUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI2MDAyMTI5WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzA1NTYyMjliZjA4ZjcyMzMwZTZmYzE1YjE0NzQ3Yjhh Mjk3ZTZjOGU3OGZkN2U5ZDgwOTcwMjQ5NjE4YmQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeVD8+Kq7/f5IKFxxFLyQrRTioX11sTr4b/l4yG9RKkvOZ jk8SeF7kkad/H16CVgJvaaTEfhMfC5oNPUmINmKoP+J7bbxtosF+xTI+oDYfBh/p aKfRhcPrqfztljPU8CAIXtCZBsTU5w87nhaO/E0ETKo9KeaHwA7k/+uJcDBO6DkJ qhd3BryRSAs6uH9iQzx/TMG2SltsdjAHLDXB/nv9TG7UyoB2GwVR5IIoVy23GdKU fBQzvdTAgwGzfOusEasJIZyOkWXXsYma8K3E8qPeD9ZQqiXx308B7De5yRGZ+Vte NVlMaZg9l32OuUYsfX0XrcUHF7Agk2d+Y4dGka/DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqRr3445qCHOjBlmQ9tbjRAvSLVcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzNDZiZWRiLTg4ZjktNDIwMi1hZGIxLTcyOTJkMGE1MjdlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3towDQYJKoZIhvcNAQELBQADggEBAEoJCm3wPhx2mMp788w6yTfiCRDw 1o91J4Wviyl4yqxwOxcjye9/hrcmnHDTSSf4VkujrUnF0wXhFwOREMJZq3HVkW0l YZGT9Xi4+HZXPNfQsQPqOAh8spJthSg4FWMrFKJqh1oNTwmtjqm/Dxg3QO3Eb5Y8 37UUl3g39FCzuU0bRym/yGA6l3in0X/AkoPT0ZIBnUzrzWxB5w70INSigwclZ12e 46zeYd6GxBwmppWnfqhSdWWaMaYd+TUTwvmvAWDfGexs82cVTmkpVtntg39R/iF6 2EF/ShqBfxWZA4zjPr3L0iNG0i2ImiBkBagZv8EfWcelV4RM0ObH/IA2Kro= -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:43 2025 by rpki-client