$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcc1e2b2-9c70-4578-8a20-429b2859e362.roa File: fcc1e2b2-9c70-4578-8a20-429b2859e362.roa (raw, json) Hash identifier: RPx/SPWaVsl2qvc2FPgyz17H21r++77a2SVxEsmA5cA= Subject key identifier: 2F:B7:89:59:A0:5F:AC:B1:55:FC:66:FD:20:CF:1E:A6:53:36:4E:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 182E37075EE68CA59E5F1CAAB1F09A583E0F1CD8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcc1e2b2-9c70-4578-8a20-429b2859e362.roa Signing time: Tue 22 Apr 2025 17:41:51 +0000 ROA not before: Tue 22 Apr 2025 17:41:51 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2e:37:07:5e:e6:8c:a5:9e:5f:1c:aa:b1:f0:9a:58:3e:0f:1c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 17:41:51 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=e82eeff9e21d6ea1aa4002cbe2a03fe85ace6f5b101ad912658030b06f805e93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:0e:f8:dd:b8:a0:4e:61:52:b0:66:5f:af: 26:6b:08:f7:1b:17:fe:b3:46:54:3d:71:a9:e4:e7: c8:b3:3c:7b:be:3d:8d:b6:dd:b0:57:b9:85:46:bf: 92:9d:36:81:54:35:77:dc:d4:64:93:8b:dc:7e:3a: 7a:f1:70:39:bb:96:8f:61:e1:e9:4d:a2:fd:e6:26: d0:02:49:89:b7:02:dc:aa:96:11:66:4c:ed:43:fb: 53:c0:f3:a3:77:a9:d6:c8:26:20:c5:54:93:59:02: 11:7e:e8:3b:66:2f:59:12:bc:71:f1:9c:da:e2:f7: cd:9d:53:8d:69:ca:25:cd:40:1c:a2:50:aa:0a:c4: 69:da:4c:79:eb:8e:64:88:4a:ab:85:0c:88:a8:a8: 6f:f4:d9:0b:ad:50:37:51:a2:9c:b3:56:39:f6:78: 72:ce:1a:55:76:2a:64:a5:48:53:f5:c5:bf:7f:a8: 4a:79:0b:a7:ec:9e:c3:91:9a:a5:96:b2:48:76:55: 36:63:dd:11:be:18:d3:02:68:9d:e3:1f:65:5b:fe: a6:82:d7:3e:c7:07:87:5f:10:fe:d9:b8:62:4b:ef: 89:e7:4e:9f:48:d9:18:b7:10:ba:94:df:dd:92:98: 94:91:db:fb:82:90:13:69:25:07:8a:70:1e:3b:f9: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B7:89:59:A0:5F:AC:B1:55:FC:66:FD:20:CF:1E:A6:53:36:4E:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fcc1e2b2-9c70-4578-8a20-429b2859e362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.103.0/24 Signature Algorithm: sha256WithRSAEncryption a5:85:a6:b8:ef:94:60:89:0b:cc:2f:42:e3:75:3d:75:37:92: a8:df:4b:39:8e:03:c9:e3:3e:ef:ba:48:b8:b2:18:34:7b:83: a6:0d:2d:39:7d:f5:64:25:47:89:9d:ab:14:aa:a1:f3:71:aa: de:1a:72:c2:a0:bc:d3:25:c1:1a:ae:72:ba:d1:48:a8:17:7a: 97:21:50:56:05:92:39:4e:03:e2:1a:54:83:2b:1a:fe:61:d1: 8a:03:76:12:35:88:2c:ea:72:7c:c0:70:55:76:8d:81:ff:35: 2c:15:94:bd:c3:9c:4b:00:2f:6e:0b:86:73:0b:36:f2:e1:6f: c2:5a:f7:70:ff:10:9b:62:2a:52:81:bc:a4:cb:77:2a:d1:e6: c1:c2:b8:9d:68:b8:40:5a:3e:6a:74:7a:cb:24:e7:bf:59:d0: ae:90:09:8c:a6:d2:4a:64:c9:bc:8a:b6:4b:b1:bc:75:cf:77: 0b:c3:43:2c:ba:b4:b4:7e:57:97:f6:85:63:5e:a0:c1:6d:b1: e0:8a:6a:2b:0c:27:19:b9:29:9f:da:52:31:b9:36:d4:48:df: 5a:26:10:8b:3c:0e:65:bc:af:6d:37:b6:52:34:95:ce:bf:f7: 5a:aa:c7:6b:32:95:88:0d:b5:18:be:dd:a3:15:a5:da:98:e8: d4:24:f8:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGC43B17mjKWeXxyqsfCaWD4PHNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTc0MTUxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODJlZWZmOWUyMWQ2ZWExYWE0MDAyY2JlMmEwM2ZlODVh Y2U2ZjViMTAxYWQ5MTI2NTgwMzBiMDZmODA1ZTkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJTw743bigTmFSsGZfryZrCPcbF/6zRlQ9cank58izPHu+ PY223bBXuYVGv5KdNoFUNXfc1GSTi9x+OnrxcDm7lo9h4elNov3mJtACSYm3Atyq lhFmTO1D+1PA86N3qdbIJiDFVJNZAhF+6DtmL1kSvHHxnNri982dU41pyiXNQByi UKoKxGnaTHnrjmSISquFDIioqG/02QutUDdRopyzVjn2eHLOGlV2KmSlSFP1xb9/ qEp5C6fsnsORmqWWskh2VTZj3RG+GNMCaJ3jH2Vb/qaC1z7HB4dfEP7ZuGJL74nn Tp9I2Ri3ELqU392SmJSR2/uCkBNpJQeKcB47+b6ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL7eJWaBfrLFV/Gb9IM8eplM2TlswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjYzFlMmIyLTljNzAtNDU3OC04YTIwLTQyOWIyODU5ZTM2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3mcwDQYJKoZIhvcNAQELBQADggEBAKWFprjvlGCJC8wvQuN1PXU3kqjf SzmOA8njPu+6SLiyGDR7g6YNLTl99WQlR4mdqxSqofNxqt4acsKgvNMlwRqucrrR SKgXepchUFYFkjlOA+IaVIMrGv5h0YoDdhI1iCzqcnzAcFV2jYH/NSwVlL3DnEsA L24LhnMLNvLhb8Ja93D/EJtiKlKBvKTLdyrR5sHCuJ1ouEBaPmp0essk579Z0K6Q CYym0kpkybyKtkuxvHXPdwvDQyy6tLR+V5f2hWNeoMFtseCKaisMJxm5KZ/aUjG5 NtRI31omEIs8DmW8r203tlI0lc6/91qqx2sylYgNtRi+3aMVpdqY6NQk+HI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:09 2025 by rpki-client