$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34ccc723-ca9a-4126-8878-c4bec73be18d.roa File: 34ccc723-ca9a-4126-8878-c4bec73be18d.roa (raw, json) Hash identifier: 4Xili0XXPQtoqWOzH+c/sQp18edNQGzTNyXJtYdxgOk= Subject key identifier: 67:90:07:38:33:7E:4F:7D:A9:88:94:9B:BE:4B:FF:ED:AA:0B:1F:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30E229EA000F9E8396A2DAFABB910906C960AD58 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34ccc723-ca9a-4126-8878-c4bec73be18d.roa Signing time: Fri 09 May 2025 00:31:00 +0000 ROA not before: Fri 09 May 2025 00:31:00 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e2:29:ea:00:0f:9e:83:96:a2:da:fa:bb:91:09:06:c9:60:ad:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:31:00 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=0e27713e0b791ef5c8c3714346e85715395d4364436606f57185cb314850b4c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:ca:0a:5c:b7:dd:4a:dd:3a:ad:e1:c3:51: 47:62:ab:0d:1f:ac:5c:5f:80:50:26:a6:43:21:6c: 4c:cf:ac:89:df:95:1c:15:47:fa:3e:f9:f4:e1:50: d9:d8:1a:e7:6d:0d:ad:2a:1a:17:f9:68:4e:2a:3f: 4e:f4:79:7d:b0:09:7f:4e:38:76:5d:6a:75:30:00: 65:c4:84:24:53:28:a3:6b:c5:8e:f7:4a:e8:a2:87: 79:fe:39:cd:f1:41:f8:85:6a:c6:77:45:91:d5:7c: 24:fb:c4:4d:45:4a:d1:91:0d:09:48:6b:00:6a:f5: ff:6c:c1:fc:ad:e3:e7:c1:d3:63:e4:2d:06:cc:6a: 65:b8:f1:e1:6c:d7:09:b6:ea:0f:7f:1f:5e:69:4d: d3:e2:25:9b:da:dd:07:35:4c:02:b7:8b:26:a9:d9: ad:cc:09:86:25:ed:69:30:ea:90:88:0d:0b:be:7e: 92:cd:dc:99:34:10:3e:ba:c8:6e:01:f3:a2:4b:cf: c0:9c:49:6b:33:51:b3:f3:e4:d5:ea:82:e8:e1:a2: 3d:ad:51:9c:4c:0a:79:29:86:b6:a2:c8:9c:a6:3a: c6:04:55:16:ca:2c:94:1a:60:67:23:71:e0:af:98: 2a:24:ab:c2:3c:e7:83:e2:43:be:2e:d6:f8:9c:ce: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:90:07:38:33:7E:4F:7D:A9:88:94:9B:BE:4B:FF:ED:AA:0B:1F:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34ccc723-ca9a-4126-8878-c4bec73be18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.216.0/22 Signature Algorithm: sha256WithRSAEncryption a7:8a:aa:57:b8:c9:a8:94:6c:5b:53:50:46:08:c1:05:2c:f4: 6b:c6:32:8a:e5:9a:33:53:11:e3:ff:19:99:8a:e8:73:42:5e: 70:1f:21:af:e9:1d:ce:78:16:2e:0b:1c:b1:71:13:28:7b:2e: 10:38:ca:ca:89:4c:e5:36:fb:85:06:4c:10:0d:8c:09:8a:e3: 91:17:11:a4:1a:79:07:e4:88:b6:67:6e:52:8e:68:5d:78:a1: 89:b2:f3:83:b6:b3:99:c4:e1:93:21:ce:74:36:b6:06:9f:1c: 15:7e:41:95:11:d9:23:38:7f:3e:d3:14:e8:d7:c6:0e:86:d0: 1f:7f:90:ed:58:2b:c0:7b:be:9a:b3:7e:62:c6:ea:bd:49:3c: 83:6b:c4:38:c5:e5:36:03:2c:2a:1c:c4:5b:ff:8f:29:55:49: a1:90:5d:5d:d2:7a:db:18:fc:af:4e:92:e2:13:26:10:10:b6: c2:8d:d8:b6:16:52:d8:35:fc:89:17:8f:25:67:ca:d1:48:c4: 62:6a:01:73:64:ae:e3:f1:94:8a:9f:34:60:f9:c1:e6:49:21: 3a:ca:6d:46:c2:e2:59:6d:58:31:16:57:88:a3:a2:06:92:2c: d5:df:0e:bc:03:6e:ed:b9:16:47:20:fe:9b:46:01:b8:be:41: a2:98:85:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMOIp6gAPnoOWotr6u5EJBslgrVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDAzMTAwWhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTI3NzEzZTBiNzkxZWY1YzhjMzcxNDM0NmU4NTcxNTM5 NWQ0MzY0NDM2NjA2ZjU3MTg1Y2IzMTQ4NTBiNGM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiVcoKXLfdSt06reHDUUdiqw0frFxfgFAmpkMhbEzPrInf lRwVR/o++fThUNnYGudtDa0qGhf5aE4qP070eX2wCX9OOHZdanUwAGXEhCRTKKNr xY73Suiih3n+Oc3xQfiFasZ3RZHVfCT7xE1FStGRDQlIawBq9f9swfyt4+fB02Pk LQbMamW48eFs1wm26g9/H15pTdPiJZva3Qc1TAK3iyap2a3MCYYl7Wkw6pCIDQu+ fpLN3Jk0ED66yG4B86JLz8CcSWszUbPz5NXqgujhoj2tUZxMCnkphraiyJymOsYE VRbKLJQaYGcjceCvmCokq8I854PiQ74u1viczu7xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ5AHODN+T32piJSbvkv/7aoLH/wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0Y2NjNzIzLWNhOWEtNDEyNi04ODc4LWM0YmVjNzNiZTE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3NgwDQYJKoZIhvcNAQELBQADggEBAKeKqle4yaiUbFtTUEYIwQUs9GvG MorlmjNTEeP/GZmK6HNCXnAfIa/pHc54Fi4LHLFxEyh7LhA4ysqJTOU2+4UGTBAN jAmK45EXEaQaeQfkiLZnblKOaF14oYmy84O2s5nE4ZMhznQ2tgafHBV+QZUR2SM4 fz7TFOjXxg6G0B9/kO1YK8B7vpqzfmLG6r1JPINrxDjF5TYDLCocxFv/jylVSaGQ XV3SetsY/K9OkuITJhAQtsKN2LYWUtg1/IkXjyVnytFIxGJqAXNkruPxlIqfNGD5 weZJITrKbUbC4lltWDEWV4ijogaSLNXfDrwDbu25Fkcg/ptGAbi+QaKYhdk= -----END CERTIFICATE-----Generated at Fri May 9 18:36:57 2025 by rpki-client