$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa File: 2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa (raw, json) Hash identifier: QUsWtb6Q4D33j8cCTG2lrtArNMKX5303jLI5mKotVpw= Subject key identifier: 4E:D2:63:F8:37:9D:FB:3E:E1:4E:33:FF:CF:9B:AE:9A:E9:1B:F9:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A11FB2878E65F32A61F02787B395839C46A037F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa Signing time: Mon 19 May 2025 18:50:55 +0000 ROA not before: Mon 19 May 2025 18:50:55 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.250.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:11:fb:28:78:e6:5f:32:a6:1f:02:78:7b:39:58:39:c4:6a:03:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 18:50:55 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=7bd952e31dd3afb53b091bfe2175d607ef9b01c654066547bfa751a53a966f58, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:83:cb:5e:a6:b6:43:81:46:3d:71:26:ba: 09:5b:21:dd:35:32:17:8c:7b:0d:10:4a:f0:b2:e0: 1c:86:5a:8a:4b:17:71:a3:5d:a1:d1:29:01:56:de: d6:5f:2b:f1:09:7c:6b:96:b2:eb:85:13:19:42:3e: e7:ca:dd:74:2d:84:52:10:26:35:8f:3c:84:9b:68: d0:36:48:da:74:8e:d3:5e:67:89:45:fa:5b:c5:eb: d9:d0:33:da:91:6d:8a:93:78:39:f1:cb:6f:d1:23: 89:f2:d7:8d:bf:91:4b:4a:51:ac:74:a5:05:21:df: f2:7e:6f:f4:ba:41:66:2a:ba:30:a7:c6:76:5e:59: 7b:0a:5e:ce:42:a3:c0:73:e7:76:4a:ee:31:b8:e6: 3c:fa:1a:af:e0:20:20:4f:8e:13:c2:cc:61:f2:4e: cf:90:07:b2:67:7e:22:28:97:82:47:0b:b0:d3:a5: 92:f2:c3:30:e2:df:59:b2:61:5b:72:6a:0a:25:0b: a0:0e:56:41:79:cc:1d:3b:af:56:5a:ff:44:00:04: 47:b2:b7:c4:09:1d:6b:ec:11:39:ce:ac:4b:4c:ba: e1:89:77:2b:a1:18:5d:9e:d2:bf:10:b6:ed:57:51: 20:08:a4:1d:f7:85:90:0a:ee:b3:8f:84:96:a9:01: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D2:63:F8:37:9D:FB:3E:E1:4E:33:FF:CF:9B:AE:9A:E9:1B:F9:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.250.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:f6:f2:2a:54:4f:4d:01:87:30:77:84:25:9e:42:d2:6f:77: 13:5d:32:b8:a3:9c:7a:71:12:e7:b4:76:3f:1f:32:ce:24:7e: 31:32:57:50:bd:19:0d:45:7d:e1:79:29:94:60:a9:66:eb:0b: 66:9b:66:32:1d:c7:10:1a:f9:9a:03:04:54:20:2c:02:88:06: 15:a5:9b:ee:8b:5b:e8:90:af:d7:d9:5f:30:12:29:58:3a:67: 27:9b:e9:55:33:1a:d9:f6:e5:a7:77:ee:2c:2c:c2:e2:bd:2a: b2:0d:6b:d5:c9:23:68:17:9f:ac:6d:cf:18:f5:2d:3b:17:f6: f5:62:3f:17:3d:fa:fc:f9:a1:6c:d7:33:61:a8:18:86:b8:ea: 9a:8e:47:43:96:bd:bd:91:4c:4e:6a:d0:ed:ab:02:a0:2e:21: f2:87:51:49:ab:f6:5b:46:a1:50:25:d5:fa:fb:1d:63:30:c6: c8:d8:ea:e2:9f:c0:c4:b4:eb:bc:ea:9a:de:c1:e5:e7:99:82: 53:0d:22:ae:4c:b4:91:33:dd:8e:92:44:4a:4e:88:ab:ed:28: 42:d4:91:5e:57:63:0f:d7:0d:92:80:81:5d:ac:7d:8f:e8:e6: 4a:01:dd:43:14:3d:24:ef:75:78:66:5f:44:7e:80:89:21:72: c0:74:d8:91 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUehH7KHjmXzKmHwJ4ezlYOcRqA38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTE5MTg1MDU1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmQ5NTJlMzFkZDNhZmI1M2IwOTFiZmUyMTc1ZDYwN2Vm OWIwMWM2NTQwNjY1NDdiZmE3NTFhNTNhOTY2ZjU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVLYPLXqa2Q4FGPXEmuglbId01MheMew0QSvCy4ByGWopL F3GjXaHRKQFW3tZfK/EJfGuWsuuFExlCPufK3XQthFIQJjWPPISbaNA2SNp0jtNe Z4lF+lvF69nQM9qRbYqTeDnxy2/RI4ny142/kUtKUax0pQUh3/J+b/S6QWYqujCn xnZeWXsKXs5Co8Bz53ZK7jG45jz6Gq/gICBPjhPCzGHyTs+QB7JnfiIol4JHC7DT pZLywzDi31myYVtyagolC6AOVkF5zB07r1Za/0QABEeyt8QJHWvsETnOrEtMuuGJ dyuhGF2e0r8Qtu1XUSAIpB33hZAK7rOPhJapAYFbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTtJj+Ded+z7hTjP/z5uumukb+VkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkZDdhMDI0LWRiNTItNDEwOC05ZmE5LTEzZGQ5NWZkODVjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+jANBgkqhkiG9w0BAQsFAAOCAQEATPbyKlRPTQGHMHeEJZ5C0m93E10y uKOcenES57R2Px8yziR+MTJXUL0ZDUV94XkplGCpZusLZptmMh3HEBr5mgMEVCAs AogGFaWb7otb6JCv19lfMBIpWDpnJ5vpVTMa2fblp3fuLCzC4r0qsg1r1ckjaBef rG3PGPUtOxf29WI/Fz36/PmhbNczYagYhrjqmo5HQ5a9vZFMTmrQ7asCoC4h8odR Sav2W0ahUCXV+vsdYzDGyNjq4p/AxLTrvOqa3sHl55mCUw0irky0kTPdjpJESk6I q+0oQtSRXldjD9cNkoCBXax9j+jmSgHdQxQ9JO91eGZfRH6AiSFywHTYkQ== -----END CERTIFICATE-----Generated at Mon Jun 2 16:30:52 2025 by rpki-client