$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa49f9b7-7e83-4f9d-911d-c9adb6b3a6c9.roa File: fa49f9b7-7e83-4f9d-911d-c9adb6b3a6c9.roa (raw, json) Hash identifier: aAKP2IPurs0UlEQvp0MdSRa6OdB4SjC7X8gYUjlOZy4= Subject key identifier: 58:10:7F:5C:4C:12:19:20:72:42:41:D6:02:EE:E3:B5:53:FA:96:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24761A99EF767ADE7891ED6E57457347C5CEF7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa49f9b7-7e83-4f9d-911d-c9adb6b3a6c9.roa Signing time: Tue 08 Apr 2025 15:00:44 +0000 ROA not before: Tue 08 Apr 2025 15:00:44 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:76:1a:99:ef:76:7a:de:78:91:ed:6e:57:45:73:47:c5:ce:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 8 15:00:44 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=626241c95770dce04794b26d7029dc9418a71f2592098bf4bee2ed8683a7369d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:e3:f3:f1:b2:3c:f1:bb:f8:44:1b:d1:10: cf:0e:3e:34:cb:77:1f:25:d7:0e:c6:f5:80:e7:d3: d3:55:9c:ce:4b:8c:8a:f1:db:4f:f9:b5:70:69:52: 0b:77:0b:58:1b:72:5e:86:0f:25:18:c9:5f:7d:43: a8:c4:dd:5d:9e:a0:cd:a2:ba:64:d8:57:a2:17:48: 67:95:b7:d8:cd:0a:eb:59:1c:07:a5:ce:31:98:a0: 81:ef:e6:c0:78:d3:ce:51:93:60:d1:55:6e:28:37: a8:fb:08:cc:5a:dd:f7:74:88:35:77:23:67:90:97: d7:58:23:03:5a:f3:7e:c2:56:32:02:90:ef:5d:f0: 3a:dc:8f:d9:95:94:47:2a:34:8f:98:d9:c2:a3:dd: 79:8e:ce:2a:b1:5f:7c:01:91:68:41:54:62:64:d1: 35:26:06:8c:59:82:fd:99:cc:32:33:fc:46:69:c0: b0:48:81:7a:77:50:c1:80:50:09:1c:26:38:ee:d4: ff:d6:1a:8d:2b:4b:53:0f:4b:48:3b:28:32:46:0a: 0f:eb:50:fa:2b:a4:df:25:47:cb:c7:1f:3d:90:54: 8f:09:b0:1c:92:d3:63:0c:bd:7e:bb:dd:5e:a6:0a: 5f:cb:dc:42:66:cb:e7:14:3a:bd:33:af:1c:e3:4c: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:7F:5C:4C:12:19:20:72:42:41:D6:02:EE:E3:B5:53:FA:96:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa49f9b7-7e83-4f9d-911d-c9adb6b3a6c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.33.0/24 Signature Algorithm: sha256WithRSAEncryption ab:99:e0:f4:54:1e:e5:34:c4:43:b0:73:a2:40:ff:ae:30:5c: 11:0d:f3:72:3b:5e:68:e2:fc:61:3b:16:fe:32:4d:81:d1:56: 2f:81:00:18:a2:c8:e1:87:5e:fe:0c:5e:fe:b2:d6:1e:8e:0d: b5:95:39:ab:76:7f:81:d4:f9:9a:ac:43:c0:31:8d:3f:a2:5d: 93:b7:7f:bb:75:55:4c:9c:72:e3:76:7e:03:c3:62:c3:06:3a: 6f:67:65:fd:66:c8:c9:8e:35:e5:d9:11:18:75:21:8b:85:02: bb:f1:94:d8:ee:24:00:e2:cd:54:58:01:b5:f9:2a:fd:50:ff: 8e:c8:bc:57:ff:69:63:6d:77:a6:c9:db:fe:45:6e:7d:1f:f0: 51:64:7e:fd:b7:45:48:e0:03:63:14:8f:90:9f:c2:a8:cf:ce: 43:6f:31:da:61:b7:93:a2:3d:b8:52:9e:93:09:d9:96:da:d7: c8:d5:c3:62:30:69:03:a6:c5:f8:a1:2a:de:57:a9:ef:09:9d: af:23:b1:60:7a:02:e5:bf:71:b6:1b:d9:3b:01:8e:54:8e:1c: 85:e9:9a:c7:cb:0d:55:03:e1:3d:9c:8d:f4:19:23:9e:78:55: 83:6c:ba:07:88:73:eb:8a:7c:44:68:01:8c:05:4b:b2:1c:3c: da:a1:41:28 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITJHYame92et54ke1uV0VzR8XO9zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA0MDgxNTAwNDRaFw0yNTA1MTMyMzU5NTla MHoxSTBHBgNVBAUTQDYyNjI0MWM5NTc3MGRjZTA0Nzk0YjI2ZDcwMjlkYzk0MThh NzFmMjU5MjA5OGJmNGJlZTJlZDg2ODNhNzM2OWQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANBq4/Pxsjzxu/hEG9EQzw4+NMt3HyXXDsb1gOfT01WczkuM ivHbT/m1cGlSC3cLWBtyXoYPJRjJX31DqMTdXZ6gzaK6ZNhXohdIZ5W32M0K61kc B6XOMZigge/mwHjTzlGTYNFVbig3qPsIzFrd93SINXcjZ5CX11gjA1rzfsJWMgKQ 713wOtyP2ZWURyo0j5jZwqPdeY7OKrFffAGRaEFUYmTRNSYGjFmC/ZnMMjP8RmnA sEiBendQwYBQCRwmOO7U/9YajStLUw9LSDsoMkYKD+tQ+iuk3yVHy8cfPZBUjwmw HJLTYwy9frvdXqYKX8vcQmbL5xQ6vTOvHONMIq0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRYEH9cTBIZIHJCQdYC7uO1U/qWfTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZmE0OWY5YjctN2U4My00ZjlkLTkxMWQtYzlhZGI2YjNhNmM5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJbeITANBgkqhkiG9w0BAQsFAAOCAQEAq5ng9FQe5TTEQ7BzokD/rjBcEQ3z cjteaOL8YTsW/jJNgdFWL4EAGKLI4Yde/gxe/rLWHo4NtZU5q3Z/gdT5mqxDwDGN P6Jdk7d/u3VVTJxy43Z+A8NiwwY6b2dl/WbIyY415dkRGHUhi4UCu/GU2O4kAOLN VFgBtfkq/VD/jsi8V/9pY213psnb/kVufR/wUWR+/bdFSOADYxSPkJ/CqM/OQ28x 2mG3k6I9uFKekwnZltrXyNXDYjBpA6bF+KEq3lep7wmdryOxYHoC5b9xthvZOwGO VI4chemax8sNVQPhPZyN9BkjnnhVg2y6B4hz64p8RGgBjAVLshw82qFBKA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:21 2025 by rpki-client