$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed3e8250-e4ed-4908-aa11-3c3d149d39ef.roa File: ed3e8250-e4ed-4908-aa11-3c3d149d39ef.roa (raw, json) Hash identifier: p9gV9iFPGMHCBiLS6jzWsX/QqimWGT8acHHJ94Z2cYU= Subject key identifier: 99:96:EE:97:48:8F:0A:A1:E8:16:38:31:59:16:4F:53:C9:79:BB:8E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C8DE5678CA94D7F58D206CC8A39E70481D5681E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed3e8250-e4ed-4908-aa11-3c3d149d39ef.roa Signing time: Sat 22 Mar 2025 00:21:30 +0000 ROA not before: Sat 22 Mar 2025 00:21:30 +0000 ROA not after: Sat 26 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8d:e5:67:8c:a9:4d:7f:58:d2:06:cc:8a:39:e7:04:81:d5:68:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 22 00:21:30 2025 GMT Not After : Apr 26 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:75:4a:08:9b:bd:6f:32:27:eb:7c:fd:91: 50:3f:c6:54:bb:58:7a:1c:f3:4a:75:22:65:80:39: d4:98:94:e4:26:f5:f3:21:18:af:d0:a1:de:7b:59: 1c:e6:92:4a:a8:da:93:43:35:01:ca:52:19:f5:00: 29:06:0f:bc:04:5a:d8:7c:1e:9d:32:40:dc:96:e9: 01:18:ed:9d:77:7f:f7:ba:0a:97:70:ec:3d:be:88: 96:f3:11:21:c1:4a:41:af:4d:b4:c0:41:5d:d0:93: 03:51:a3:3b:22:8b:ad:5a:cd:ac:c3:1b:1a:97:cd: 56:78:7e:7b:0e:6f:0a:8b:b6:25:72:f2:b4:c2:06: 6a:b5:4c:09:5e:77:6d:39:9c:76:c7:c0:e4:99:6c: 42:86:80:46:a5:bd:7e:06:4e:80:81:c6:5f:ee:06: 07:37:88:be:ae:b9:56:c7:62:0b:a3:27:3d:3e:a6: 82:79:00:93:a1:bb:8b:f0:e5:aa:d0:d0:eb:ec:6c: 95:b8:e5:fd:af:dd:aa:df:8b:34:04:fc:33:bf:60: a4:00:69:54:52:a5:2e:f2:59:d5:bb:d6:d5:f2:65: 98:80:67:ba:aa:4b:25:41:8c:02:e2:cc:63:37:92: d0:b4:b0:15:0d:ed:a8:da:05:94:1f:e4:34:ba:54: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:96:EE:97:48:8F:0A:A1:E8:16:38:31:59:16:4F:53:C9:79:BB:8E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ed3e8250-e4ed-4908-aa11-3c3d149d39ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.76.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:92:4d:8e:ab:ed:c9:0c:e3:30:c5:6d:72:6a:4b:f2:ac:a1: 76:c5:d5:42:33:f4:81:8c:4b:6b:67:f2:b3:d0:ae:c2:c4:b9: a8:a2:9d:34:72:cd:b1:63:49:df:3f:ae:2d:4a:df:e2:e4:b9: 76:a2:6f:f4:4d:03:6e:3c:2b:79:dc:9b:3b:dc:c3:da:66:87: 8c:06:e1:c6:e8:e5:1c:c2:fa:ef:01:07:e7:2f:e0:a2:8b:7a: 04:58:36:76:9d:21:3a:09:f3:3b:37:c2:c2:97:a3:06:8c:a9: 58:58:20:52:69:c7:b9:dc:a0:1f:5b:78:ca:4a:bb:d2:9b:46: 6b:e9:48:b3:3b:a8:8b:09:80:21:bc:b7:5f:07:9a:3b:27:19: 5a:a8:ba:f2:67:61:2e:8d:05:ce:61:83:95:62:dd:7a:39:6d: 86:b4:c4:5c:43:8e:22:16:18:cb:78:64:9b:4f:01:74:c9:ed: eb:a9:d0:17:03:c1:2e:a8:69:b6:1b:fd:5f:30:32:1a:83:10: fb:82:95:3d:fe:0b:8a:a2:d8:72:6d:72:65:79:6f:35:44:c7: 70:7d:cd:51:b5:28:08:09:17:2b:36:a4:2d:1b:5a:f7:5d:78: 4a:3f:d3:40:9d:7e:de:17:fb:f8:87:63:01:2c:74:f5:ac:38: 86:9a:88:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfI3lZ4ypTX9Y0gbMijnnBIHVaB4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzIyMDAyMTMwWhcNMjUwNDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDhlNzBjZmJlYTNhMjkwNzZkYzNhZjA4MzA5NTY4Njhm NGFmNDRjMGVjZDk2MjUxZWM2OWE3YmY2MjYwY2YyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSn3VKCJu9bzIn63z9kVA/xlS7WHoc80p1ImWAOdSYlOQm 9fMhGK/Qod57WRzmkkqo2pNDNQHKUhn1ACkGD7wEWth8Hp0yQNyW6QEY7Z13f/e6 Cpdw7D2+iJbzESHBSkGvTbTAQV3QkwNRozsii61azazDGxqXzVZ4fnsObwqLtiVy 8rTCBmq1TAled205nHbHwOSZbEKGgEalvX4GToCBxl/uBgc3iL6uuVbHYgujJz0+ poJ5AJOhu4vw5arQ0OvsbJW45f2v3arfizQE/DO/YKQAaVRSpS7yWdW71tXyZZiA Z7qqSyVBjALizGM3ktC0sBUN7ajaBZQf5DS6VF2FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmZbul0iPCqHoFjgxWRZPU8l5u44wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VkM2U4MjUwLWU0ZWQtNDkwOC1hYTExLTNjM2QxNDlkMzllZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsUwwDQYJKoZIhvcNAQELBQADggEBAHuSTY6r7ckM4zDFbXJqS/KsoXbF 1UIz9IGMS2tn8rPQrsLEuaiinTRyzbFjSd8/ri1K3+LkuXaib/RNA248K3ncmzvc w9pmh4wG4cbo5RzC+u8BB+cv4KKLegRYNnadIToJ8zs3wsKXowaMqVhYIFJpx7nc oB9beMpKu9KbRmvpSLM7qIsJgCG8t18HmjsnGVqouvJnYS6NBc5hg5Vi3Xo5bYa0 xFxDjiIWGMt4ZJtPAXTJ7eup0BcDwS6oabYb/V8wMhqDEPuClT3+C4qi2HJtcmV5 bzVEx3B9zVG1KAgJFys2pC0bWvddeEo/00Cdft4X+/iHYwEsdPWsOIaaiNY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:14 2025 by rpki-client