$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3f23d3-f769-4c01-87bb-32e4f659936d.roa File: 2c3f23d3-f769-4c01-87bb-32e4f659936d.roa (raw, json) Hash identifier: dcgGU/PWcFkxk/GD6U1yoxOERNIif/2Q+4dvQyh0Sj4= Subject key identifier: BC:84:BB:24:95:73:31:2D:00:08:E8:69:32:94:D9:46:AC:AB:A3:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 520421FD8564C83455128A38062ED5242B6CB3B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3f23d3-f769-4c01-87bb-32e4f659936d.roa Signing time: Fri 09 May 2025 00:41:37 +0000 ROA not before: Fri 09 May 2025 00:41:37 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:04:21:fd:85:64:c8:34:55:12:8a:38:06:2e:d5:24:2b:6c:b3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:41:37 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=7d0081f09a5627ae2b2bf29c5bc3cbd5b4b82a889d142aa4e700e40c36fc1b2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:e8:d8:58:12:64:ac:1f:a6:f8:ed:b6:8b: 56:24:4a:47:a2:39:ae:b6:2b:b0:d0:ac:be:f2:dd: 7d:3f:27:60:01:da:cf:fc:5e:88:b0:39:04:46:02: 3c:1c:63:f6:cc:a6:87:90:0f:20:de:06:83:92:b2: 25:16:84:6b:30:9f:e2:ce:b6:4a:00:02:6e:98:ad: 3a:69:bf:e7:7e:10:7d:c5:6f:d1:7a:52:26:ad:a4: 60:a6:c5:24:26:cf:a8:f6:8c:62:68:2d:e4:2a:d1: 1e:49:2f:87:39:e6:99:70:62:27:6d:2c:7c:db:bf: 5b:6a:a3:8b:75:9b:b9:49:d5:90:06:d0:34:61:7e: 53:ca:97:17:d1:bd:fc:97:4b:c5:5d:88:a7:16:dc: c8:43:02:e3:98:0c:9e:72:f4:e9:5d:b2:da:39:05: 30:e4:93:18:e2:0f:a3:68:e0:53:db:7d:2a:ed:72: 1c:28:e2:79:1a:2c:8f:83:69:d5:b6:06:3d:c3:c1: f2:12:50:a1:a9:d0:54:0a:b6:6a:54:5a:fb:2e:ef: 53:bf:4f:08:1d:43:0d:3e:5e:37:83:07:dc:7c:29: 9b:ee:55:00:91:ec:83:6c:4e:ae:ee:cf:db:35:34: 33:b0:ef:74:18:93:fc:13:12:7a:01:14:c4:87:6a: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:BB:24:95:73:31:2D:00:08:E8:69:32:94:D9:46:AC:AB:A3:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3f23d3-f769-4c01-87bb-32e4f659936d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.24.0/21 Signature Algorithm: sha256WithRSAEncryption 49:77:02:24:4e:3d:0e:86:13:d6:6a:bb:d5:08:9f:65:64:9e: 9a:9c:f7:98:c3:3b:ed:1a:55:11:99:20:38:6d:13:9c:6b:c3: cc:0b:f7:97:df:6b:00:c2:2f:7a:c5:43:b7:59:11:ae:a4:8b: 21:e7:29:a9:b9:12:69:f8:21:ed:37:3b:4e:44:01:b6:3e:64: 0a:99:85:c6:5f:89:b9:7e:11:84:86:fe:7b:c3:fa:db:78:5c: db:b1:c3:f2:0c:b7:1f:1f:ef:c9:88:00:77:64:7f:49:29:a2: 4e:d5:04:da:63:de:f2:09:e5:3f:c2:86:33:e9:a0:b9:5a:fa: 71:ca:8b:f2:69:70:03:e4:52:d1:cd:9c:5c:70:da:77:81:33: c0:1b:9e:cd:28:0d:fa:69:57:ac:ef:6c:ac:f9:11:aa:e0:7f: dc:b7:df:61:0d:ab:a9:18:29:4e:f9:24:c5:b9:30:a8:09:7c: dd:7c:69:64:5e:39:b6:76:4a:cd:12:7e:f4:01:87:fd:2e:6e: ca:8b:f6:b5:0e:84:53:35:bb:21:7f:f3:1f:98:b2:28:23:5b: 97:23:90:5b:73:89:f2:f0:df:de:79:2c:dd:3a:9b:40:51:9c: d6:3b:19:89:31:3d:b7:2f:64:b5:33:f6:78:c8:b6:56:1e:94: ba:de:7b:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUgQh/YVkyDRVEoo4Bi7VJCtss7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MTM3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDAwODFmMDlhNTYyN2FlMmIyYmYyOWM1YmMzY2JkNWI0 YjgyYTg4OWQxNDJhYTRlNzAwZTQwYzM2ZmMxYjJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGsejYWBJkrB+m+O22i1YkSkeiOa62K7DQrL7y3X0/J2AB 2s/8XoiwOQRGAjwcY/bMpoeQDyDeBoOSsiUWhGswn+LOtkoAAm6YrTppv+d+EH3F b9F6UiatpGCmxSQmz6j2jGJoLeQq0R5JL4c55plwYidtLHzbv1tqo4t1m7lJ1ZAG 0DRhflPKlxfRvfyXS8VdiKcW3MhDAuOYDJ5y9Oldsto5BTDkkxjiD6No4FPbfSrt chwo4nkaLI+DadW2Bj3DwfISUKGp0FQKtmpUWvsu71O/TwgdQw0+XjeDB9x8KZvu VQCR7INsTq7uz9s1NDOw73QYk/wTEnoBFMSHau5DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvIS7JJVzMS0ACOhpMpTZRqyro0EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjM2YyM2QzLWY3NjktNGMwMS04N2JiLTMyZTRmNjU5OTM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3BgwDQYJKoZIhvcNAQELBQADggEBAEl3AiROPQ6GE9Zqu9UIn2Vknpqc 95jDO+0aVRGZIDhtE5xrw8wL95ffawDCL3rFQ7dZEa6kiyHnKam5Emn4Ie03O05E AbY+ZAqZhcZfibl+EYSG/nvD+tt4XNuxw/IMtx8f78mIAHdkf0kpok7VBNpj3vIJ 5T/ChjPpoLla+nHKi/JpcAPkUtHNnFxw2neBM8Abns0oDfppV6zvbKz5Eargf9y3 32ENq6kYKU75JMW5MKgJfN18aWReObZ2Ss0SfvQBh/0ubsqL9rUOhFM1uyF/8x+Y sigjW5cjkFtzifLw3955LN06m0BRnNY7GYkxPbcvZLUz9njItlYelLree5Q= -----END CERTIFICATE-----Generated at Fri May 9 18:11:57 2025 by rpki-client