$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1715650b-8c48-4ccc-9826-cb805d373095.roa File: 1715650b-8c48-4ccc-9826-cb805d373095.roa (raw, json) Hash identifier: C9jwiCoGWJ8LY1SDKS9xAjPfp9lgIf43hJsjOrRsL+g= Subject key identifier: 82:63:B5:12:02:8F:8B:E7:16:DB:27:36:D9:5A:E6:80:BF:83:82:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53D5BCACDF6FE7EE75F17AA33815ECF1741B1389 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1715650b-8c48-4ccc-9826-cb805d373095.roa Signing time: Fri 09 May 2025 00:30:56 +0000 ROA not before: Fri 09 May 2025 00:30:56 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d5:bc:ac:df:6f:e7:ee:75:f1:7a:a3:38:15:ec:f1:74:1b:13:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:30:56 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=017b76d1bceaa85bbaf28d2779dd499fd2f2814a52da271dfb14305d8402d86d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:8f:37:f8:a9:bc:2b:26:62:e5:4a:a6:a0: 2e:b3:5b:aa:14:18:19:2b:12:99:5a:d9:cf:66:5b: ad:dd:16:e3:3b:4d:fe:46:4d:e8:03:7a:1e:42:8f: 18:97:bd:41:f8:da:9a:75:00:4b:63:b3:d7:32:76: ef:60:88:93:05:1c:99:49:4f:99:85:df:a5:36:2c: ab:bf:02:20:8f:04:33:c2:6d:4c:d7:c3:d5:cb:92: 73:f7:f4:e5:fe:65:63:5c:39:75:dd:d7:4d:01:d8: a5:db:9d:23:79:05:66:6f:10:e0:99:61:ef:12:d3: 9b:4e:02:f3:07:c8:bc:a5:6a:24:b2:52:90:16:7f: b0:c3:27:d4:2d:fe:31:aa:8f:ff:f7:a4:d6:0b:bd: f7:f0:8a:ad:6d:fa:20:ed:ad:3c:84:fb:51:82:49: 8e:bb:2c:cc:13:97:48:9f:67:3a:3e:5d:fa:1f:f9: be:62:4b:a9:0a:51:9c:3a:3e:5c:0b:31:1c:23:98: ca:3c:74:ab:5d:5d:67:74:8c:df:8a:93:fd:de:28: 23:9e:0d:e2:e9:76:01:e1:3c:9b:f5:c2:b7:ae:39: 4d:a0:a8:91:b4:65:e0:9c:7a:db:1a:34:7e:7e:e1: 0a:78:83:ea:c4:77:97:5a:21:ad:7e:11:7c:66:65: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:63:B5:12:02:8F:8B:E7:16:DB:27:36:D9:5A:E6:80:BF:83:82:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1715650b-8c48-4ccc-9826-cb805d373095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.222.0/23 Signature Algorithm: sha256WithRSAEncryption 52:7e:ed:06:0d:e3:c8:4e:70:22:d7:1a:99:c7:c5:7a:69:81: bf:36:71:be:07:47:85:c1:72:7f:62:81:16:3e:5f:42:3b:6b: 71:eb:a2:08:22:31:d3:9a:33:80:87:fe:ae:8e:f6:b2:fc:da: 7e:f7:74:11:94:19:fe:50:36:0a:d4:ea:0b:b7:58:6e:b4:01: 58:e8:96:47:84:34:47:3a:95:63:29:8e:bf:a2:22:f6:05:36: 7b:45:2c:a0:37:7e:64:90:81:78:65:92:2e:ad:b3:60:7a:f1: 76:bc:e0:98:57:db:96:fa:eb:d5:9e:b9:da:20:cd:77:36:73: 7c:ec:f6:51:3e:4a:fa:47:4a:99:00:2e:d2:2d:3d:c8:f0:f2: 97:bb:ec:8c:43:eb:9b:0b:d4:2b:4a:f2:24:d0:da:17:cf:f5: 4a:d7:22:25:eb:d7:94:e4:94:ba:d8:b9:b6:e7:e3:50:8a:db: 36:4a:fb:7c:d0:f0:87:c9:0b:11:85:4c:f6:46:85:07:25:1a: 89:be:52:cb:36:e4:f6:c3:1d:6a:97:04:46:2b:9f:ad:e8:33: c4:a8:0c:6d:25:0d:8f:af:07:c3:b8:80:04:b8:b3:60:c6:e6: be:a1:a4:87:48:7f:da:0e:d1:a0:64:71:63:12:06:00:e6:e4: 43:6a:d2:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU9W8rN9v5+518XqjOBXs8XQbE4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDAzMDU2WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTdiNzZkMWJjZWFhODViYmFmMjhkMjc3OWRkNDk5ZmQy ZjI4MTRhNTJkYTI3MWRmYjE0MzA1ZDg0MDJkODZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgXY83+Km8KyZi5UqmoC6zW6oUGBkrEpla2c9mW63dFuM7 Tf5GTegDeh5CjxiXvUH42pp1AEtjs9cydu9giJMFHJlJT5mF36U2LKu/AiCPBDPC bUzXw9XLknP39OX+ZWNcOXXd100B2KXbnSN5BWZvEOCZYe8S05tOAvMHyLylaiSy UpAWf7DDJ9Qt/jGqj//3pNYLvffwiq1t+iDtrTyE+1GCSY67LMwTl0ifZzo+Xfof +b5iS6kKUZw6PlwLMRwjmMo8dKtdXWd0jN+Kk/3eKCOeDeLpdgHhPJv1wreuOU2g qJG0ZeCcetsaNH5+4Qp4g+rEd5daIa1+EXxmZYepAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgmO1EgKPi+cW2yc22VrmgL+DgsIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3MTU2NTBiLThjNDgtNGNjYy05ODI2LWNiODA1ZDM3MzA5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3N4wDQYJKoZIhvcNAQELBQADggEBAFJ+7QYN48hOcCLXGpnHxXppgb82 cb4HR4XBcn9igRY+X0I7a3HroggiMdOaM4CH/q6O9rL82n73dBGUGf5QNgrU6gu3 WG60AVjolkeENEc6lWMpjr+iIvYFNntFLKA3fmSQgXhlki6ts2B68Xa84JhX25b6 69WeudogzXc2c3zs9lE+SvpHSpkALtItPcjw8pe77IxD65sL1CtK8iTQ2hfP9UrX IiXr15TklLrYubbn41CK2zZK+3zQ8IfJCxGFTPZGhQclGom+Uss25PbDHWqXBEYr n63oM8SoDG0lDY+vB8O4gAS4s2DG5r6hpIdIf9oO0aBkcWMSBgDm5ENq0lI= -----END CERTIFICATE-----Generated at Fri May 9 16:54:59 2025 by rpki-client