$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa File: 5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa (raw, json) Hash identifier: 95WuGKBT5vDq9NgCbNmL241dveGceRYFYdeYy5NPDLM= Subject key identifier: 9B:14:C0:AF:07:50:3D:DD:EC:91:1B:1F:3C:E2:9F:BF:E3:17:EC:B9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 683612D24CFDF7E75EE9DC395EC02745599E92B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa Signing time: Mon 31 Mar 2025 16:31:01 +0000 ROA not before: Mon 31 Mar 2025 16:31:01 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:36:12:d2:4c:fd:f7:e7:5e:e9:dc:39:5e:c0:27:45:59:9e:92:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 31 16:31:01 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:40:7f:82:e7:eb:e1:23:40:75:f2:c6:30:da: 93:55:75:4f:0b:d0:53:e5:b0:49:a2:e8:28:b1:10: 5d:9f:9c:4a:7b:59:dc:40:bd:0c:64:58:f1:c4:eb: 3a:c0:45:03:99:24:ac:6d:35:cd:82:00:2a:26:2f: 9c:dc:5b:b1:e4:4c:44:ac:7d:9c:7c:5e:ad:ce:1b: f3:2f:e4:ed:66:5b:15:6a:6e:34:3c:47:5d:5d:3e: 62:d3:55:91:ce:1d:64:03:76:e8:76:e6:07:4f:07: d8:e7:3b:b9:4a:c5:00:56:ad:5e:f4:13:98:1b:38: f7:3b:89:17:7e:9f:4a:0e:3a:49:d3:06:1f:36:20: e9:4c:4d:ed:f2:26:08:91:ea:d6:04:92:2b:1b:c0: c1:61:ec:1a:76:10:07:12:e3:a6:b0:95:00:3e:67: 88:ec:86:d5:8d:f3:65:33:b1:04:1a:a5:61:cd:f9: bb:3b:c3:03:25:84:c5:e7:7b:ff:fa:cf:3f:79:50: 1a:09:46:ba:8b:6d:32:d5:26:82:6b:c3:83:a4:b4: a9:ac:5b:a7:40:27:fd:c3:0e:67:d2:79:59:03:ca: 47:c3:9e:61:1d:52:c0:88:96:0b:f4:1b:3f:84:ff: 26:c1:8b:0c:0a:02:62:d5:f6:4d:00:b9:6e:cf:8c: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:C0:AF:07:50:3D:DD:EC:91:1B:1F:3C:E2:9F:BF:E3:17:EC:B9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c7f6f04-bfce-4f41-a157-64e6e6ebef4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.144.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:54:83:60:fc:f2:9c:36:61:1b:d6:5a:d0:ae:1d:ae:70:51: c5:97:b6:e3:46:f8:4d:28:83:2d:fc:ea:c9:8c:8c:47:39:74: 3e:74:05:d8:e7:37:92:c4:9d:98:c6:db:87:9a:d6:a6:a0:ac: f5:2d:91:a7:89:13:87:55:21:b6:91:e9:33:8b:f6:75:67:43: 77:2b:3c:8b:28:a2:24:a7:c0:be:e8:cd:e2:9a:b8:c3:6f:5e: 93:d2:00:82:6e:1a:ea:33:be:1a:ef:5c:bc:6e:53:16:8b:b8: 14:dc:4e:a4:25:69:8a:87:b6:04:00:e2:e0:59:8a:a7:32:99: 15:9e:0b:e7:7c:80:ba:6a:64:fb:09:10:b8:ce:70:14:43:ba: e2:93:c2:33:6e:d1:26:a0:71:c1:2b:db:33:40:33:af:a3:68: 01:cb:57:a0:41:08:51:a0:38:5a:99:0e:6b:a6:25:64:3f:e6: 28:01:ac:8c:8b:63:33:e3:06:8d:06:16:16:2d:52:86:72:59: 1b:95:49:a2:21:07:b6:7e:d1:2c:1a:d1:a0:fd:a6:fc:73:05: a4:e0:94:a8:79:1f:3a:dc:41:1a:07:47:63:fe:ac:1e:ed:f5: a4:18:16:21:34:45:0e:17:ea:0e:04:db:cf:58:1e:a7:01:11: 3e:76:92:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaDYS0kz99+de6dw5XsAnRVmekrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzMxMTYzMTAxWhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzIxZmIwNWQzMTQ3MWRhZTZlOTlmNjY3MjI4MWUyMjVi MjM3ZGQwZThiYjJkYzU1OTQxOWZkNzljZjNkYzBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFQH+C5+vhI0B18sYw2pNVdU8L0FPlsEmi6CixEF2fnEp7 WdxAvQxkWPHE6zrARQOZJKxtNc2CAComL5zcW7HkTESsfZx8Xq3OG/Mv5O1mWxVq bjQ8R11dPmLTVZHOHWQDduh25gdPB9jnO7lKxQBWrV70E5gbOPc7iRd+n0oOOknT Bh82IOlMTe3yJgiR6tYEkisbwMFh7Bp2EAcS46awlQA+Z4jshtWN82UzsQQapWHN +bs7wwMlhMXne//6zz95UBoJRrqLbTLVJoJrw4OktKmsW6dAJ/3DDmfSeVkDykfD nmEdUsCIlgv0Gz+E/ybBiwwKAmLV9k0AuW7PjF3VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmxTArwdQPd3skRsfPOKfv+MX7LkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjN2Y2ZjA0LWJmY2UtNGY0MS1hMTU3LTY0ZTZlNmViZWY0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3JAwDQYJKoZIhvcNAQELBQADggEBAI9Ug2D88pw2YRvWWtCuHa5wUcWX tuNG+E0ogy386smMjEc5dD50BdjnN5LEnZjG24ea1qagrPUtkaeJE4dVIbaR6TOL 9nVnQ3crPIsooiSnwL7ozeKauMNvXpPSAIJuGuozvhrvXLxuUxaLuBTcTqQlaYqH tgQA4uBZiqcymRWeC+d8gLpqZPsJELjOcBRDuuKTwjNu0SagccEr2zNAM6+jaAHL V6BBCFGgOFqZDmumJWQ/5igBrIyLYzPjBo0GFhYtUoZyWRuVSaIhB7Z+0Swa0aD9 pvxzBaTglKh5HzrcQRoHR2P+rB7t9aQYFiE0RQ4X6g4E289YHqcBET52kkw= -----END CERTIFICATE-----Generated at Sat Apr 5 12:08:52 2025 by rpki-client