$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/964a8422-112c-423b-ab5a-3ae9829b360a.roa File: 964a8422-112c-423b-ab5a-3ae9829b360a.roa (raw, json) Hash identifier: s5LwYBory6TktPdr7UqpqRaGCvT6GldjXe87X/k/NPs= Subject key identifier: 9F:C4:73:A1:6C:B3:81:1F:78:B3:3D:6B:D9:AB:68:8E:FA:1B:11:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B3CB7D000029BC1836CAB5914E2C1720155F3B9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/964a8422-112c-423b-ab5a-3ae9829b360a.roa Signing time: Tue 01 Apr 2025 00:10:33 +0000 ROA not before: Tue 01 Apr 2025 00:10:33 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3c:b7:d0:00:02:9b:c1:83:6c:ab:59:14:e2:c1:72:01:55:f3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:10:33 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:52:15:56:45:27:c0:93:1e:5d:11:1e:cb:04: f8:ce:b6:02:a9:73:9b:a8:d5:8c:23:4b:e7:b2:b2: 21:16:df:02:ef:c2:ea:d6:26:f8:26:bb:24:7f:a3: 93:39:55:fe:9e:70:5d:d4:f7:7c:6e:ba:50:73:e4: dd:b4:73:83:ff:8e:24:92:17:d3:02:f1:87:d4:a1: 01:35:f2:0c:f8:d2:62:9a:12:d3:f9:f2:2b:95:a0: 1c:6d:4d:e4:1d:1f:75:30:25:95:14:35:b7:5d:d3: 31:6b:24:da:d2:2e:85:06:b4:f1:68:fc:1a:97:79: 99:fb:76:d2:69:47:da:29:c9:c0:a9:86:83:6b:1d: e3:1b:45:11:b6:12:da:96:ab:72:fc:2d:b5:d2:b5: bc:e1:cd:5a:09:58:2a:0d:aa:c5:69:24:9a:98:c5: ba:1f:8b:b1:56:81:a0:bd:1a:7b:7f:7c:5a:a7:ab: 74:50:c7:3f:21:26:b5:fb:6c:ae:a0:6f:bf:1a:1f: 6d:b8:0f:42:d3:0f:26:35:6f:5d:9e:0c:75:74:0e: c4:17:b2:71:2f:4e:22:af:3d:20:39:e4:25:20:54: 1e:7d:7e:5e:b4:e2:03:c9:b5:45:06:f6:59:9d:34: 5e:f2:4d:7d:83:ed:e1:59:c4:dd:75:fc:1d:15:38: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C4:73:A1:6C:B3:81:1F:78:B3:3D:6B:D9:AB:68:8E:FA:1B:11:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/964a8422-112c-423b-ab5a-3ae9829b360a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.236.0/24 Signature Algorithm: sha256WithRSAEncryption 43:f6:f0:eb:52:43:43:58:79:9c:82:2c:47:e0:13:89:06:8d: 62:15:fd:af:b0:c4:ed:26:8a:0a:5b:b8:ae:82:1d:94:45:25: 78:a5:b1:5e:00:c2:01:2f:61:b7:96:43:47:fd:c4:86:2f:c5: c2:79:c1:3d:f3:50:b7:55:59:33:69:26:e0:3f:15:fa:01:ee: 15:25:74:85:e1:b9:a2:cb:5b:1b:3b:7c:9d:8f:4e:ab:41:66: fe:9a:c5:82:ff:ac:a1:ea:93:4f:02:59:85:fb:b0:0a:ad:3a: fa:8d:9b:7f:94:0f:a9:17:16:5a:35:ed:6e:6e:9f:84:83:2f: c1:9b:14:01:fc:14:14:35:ae:f9:d2:87:d1:06:b8:08:36:c0: 36:38:7a:16:67:d5:cf:ef:c6:4c:c8:76:f7:0d:94:e8:64:53: 87:cd:83:56:52:a1:9f:61:46:89:33:58:80:56:3e:8b:ad:82: e3:5b:fb:bd:4b:f8:a0:6a:1e:51:83:5a:e4:9c:62:04:8c:42: a7:30:6a:e9:1a:3f:42:6e:0f:85:24:ac:71:ce:21:60:43:c7: e3:45:ea:0e:59:b8:aa:78:51:31:30:65:a7:3b:00:ed:17:03: 19:ed:5d:fe:a2:c7:0b:8f:9a:11:ed:18:56:08:6d:24:da:ea: 69:e2:46:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKzy30AACm8GDbKtZFOLBcgFV87kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDAxMDAxMDMzWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWIxYTRiYzg1MWJlMWMyYzA3ODhjNDRiNzY1NDZlNjU0 MDM5NGY0YTg0MWM5ZjQzM2U5MGMzMTY0N2I4ZTM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD8UhVWRSfAkx5dER7LBPjOtgKpc5uo1YwjS+eysiEW3wLv wurWJvgmuyR/o5M5Vf6ecF3U93xuulBz5N20c4P/jiSSF9MC8YfUoQE18gz40mKa EtP58iuVoBxtTeQdH3UwJZUUNbdd0zFrJNrSLoUGtPFo/BqXeZn7dtJpR9opycCp hoNrHeMbRRG2EtqWq3L8LbXStbzhzVoJWCoNqsVpJJqYxbofi7FWgaC9Gnt/fFqn q3RQxz8hJrX7bK6gb78aH224D0LTDyY1b12eDHV0DsQXsnEvTiKvPSA55CUgVB59 fl604gPJtUUG9lmdNF7yTX2D7eFZxN11/B0VOL0/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn8RzoWyzgR94sz1r2atojvobEWIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2NGE4NDIyLTExMmMtNDIzYi1hYjVhLTNhZTk4MjliMzYwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3uwwDQYJKoZIhvcNAQELBQADggEBAEP28OtSQ0NYeZyCLEfgE4kGjWIV /a+wxO0migpbuK6CHZRFJXilsV4AwgEvYbeWQ0f9xIYvxcJ5wT3zULdVWTNpJuA/ FfoB7hUldIXhuaLLWxs7fJ2PTqtBZv6axYL/rKHqk08CWYX7sAqtOvqNm3+UD6kX Flo17W5un4SDL8GbFAH8FBQ1rvnSh9EGuAg2wDY4ehZn1c/vxkzIdvcNlOhkU4fN g1ZSoZ9hRokzWIBWPoutguNb+71L+KBqHlGDWuScYgSMQqcwaukaP0JuD4UkrHHO IWBDx+NF6g5ZuKp4UTEwZac7AO0XAxntXf6ixwuPmhHtGFYIbSTa6mniRsM= -----END CERTIFICATE-----Generated at Tue Apr 8 13:05:21 2025 by rpki-client