$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39ed776a-4b27-4772-993b-9f7d8a2212c6.roa File: 39ed776a-4b27-4772-993b-9f7d8a2212c6.roa (raw, json) Hash identifier: x3McNu0XFv5ahZosN5l+tr4965h4uD85/Wbo1+Y/JXU= Subject key identifier: 67:F3:F1:58:00:EF:A5:8F:BA:24:B6:3D:B0:9C:E5:52:87:1D:07:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32FBE4980EB61F537E716F8D4E43E3A11B9E4085 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39ed776a-4b27-4772-993b-9f7d8a2212c6.roa Signing time: Mon 05 May 2025 15:51:08 +0000 ROA not before: Mon 05 May 2025 15:51:08 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.248.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fb:e4:98:0e:b6:1f:53:7e:71:6f:8d:4e:43:e3:a1:1b:9e:40:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 5 15:51:08 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=ae6c93fc699e97e93c8b941c8ebc421d38efc36b0a43d86845f031b220593c02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:cf:74:9d:3e:ff:24:c5:9e:d2:35:21:8a: 53:92:ee:38:72:84:41:09:9b:59:fc:c9:8c:76:cc: cb:76:3e:4c:79:d0:ec:ac:fe:1b:e2:5e:d1:36:7d: 8d:34:27:11:08:56:a5:65:fc:e6:fe:1b:1e:f4:cf: 89:6a:a2:26:55:11:61:b6:ba:b2:f5:99:cd:88:53: 48:0f:5d:59:d8:86:5b:0c:06:82:71:4d:b7:b9:df: 6e:0f:72:03:12:3a:80:6a:5c:1a:69:80:93:14:21: 46:ee:22:29:fd:65:f7:8c:8b:ba:a5:ec:0a:12:cb: 4c:c0:38:54:7b:9d:e2:7b:e4:32:12:89:bd:5b:a5: 77:9c:e1:21:7d:42:77:ba:e1:c8:71:be:fa:aa:c7: e3:c4:b1:4d:1a:7a:1d:56:0e:16:03:2c:b7:20:d4: 5c:42:7d:60:bc:a3:70:ba:00:15:fb:ee:d6:c0:f5: a2:dc:0d:6b:cb:5d:f1:76:25:6a:d7:93:10:6b:df: 74:36:15:0e:9a:a4:62:9a:d0:a7:5a:ab:82:55:fb: 57:87:fa:5e:de:5c:bd:f6:9b:08:94:ca:45:04:6b: 76:db:8f:1a:bc:da:c1:bf:00:20:1f:2b:e7:cd:67: 33:49:f0:cb:8d:b1:59:bf:31:a8:5e:5b:a7:af:20: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F3:F1:58:00:EF:A5:8F:BA:24:B6:3D:B0:9C:E5:52:87:1D:07:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39ed776a-4b27-4772-993b-9f7d8a2212c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.138.0/24 Signature Algorithm: sha256WithRSAEncryption 71:c6:ce:e0:c4:8a:87:fe:8f:a7:28:23:f3:92:84:8a:8a:42: 45:8c:a6:08:b9:b9:39:bc:30:98:72:2a:d3:de:c5:33:4b:d2: af:e5:5d:19:48:40:8e:98:59:86:b4:19:50:e8:7c:41:f3:9f: 52:06:57:af:17:b1:98:ef:8e:ef:c3:a6:85:c2:00:b5:4b:be: 3e:01:32:b0:6c:94:b3:90:c6:ac:25:5f:98:f9:36:b1:10:89: 0b:12:88:4c:3b:39:67:86:3f:a3:05:ca:2f:19:95:ac:29:09: 6b:a4:9e:1d:b0:65:08:00:51:fd:8e:4b:0a:dc:85:07:aa:10: af:00:55:dd:65:0d:b0:c7:8b:73:5d:44:8f:2c:ef:da:87:c2: 66:e6:a7:49:44:1d:08:7a:e5:90:ab:6d:f4:f4:db:56:4e:38: 9f:de:4b:d2:fd:70:85:b1:5b:16:7c:a8:72:d2:29:1a:68:0d: 63:1b:dc:63:83:ac:38:82:90:38:aa:da:e1:4f:da:71:ec:c1: 30:21:6d:2c:04:dc:1c:8a:38:bd:e4:79:57:31:ac:dd:2b:db: 28:da:70:9d:5f:e9:50:7b:f2:61:92:35:92:68:36:ea:7f:d7: 33:6f:d0:a6:a6:0b:ba:5a:df:be:b2:4e:e4:7b:dc:03:2a:50: de:5a:a2:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMvvkmA62H1N+cW+NTkPjoRueQIUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA1MTU1MTA4WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTZjOTNmYzY5OWU5N2U5M2M4Yjk0MWM4ZWJjNDIxZDM4 ZWZjMzZiMGE0M2Q4Njg0NWYwMzFiMjIwNTkzYzAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrOM90nT7/JMWe0jUhilOS7jhyhEEJm1n8yYx2zMt2Pkx5 0Oys/hviXtE2fY00JxEIVqVl/Ob+Gx70z4lqoiZVEWG2urL1mc2IU0gPXVnYhlsM BoJxTbe5324PcgMSOoBqXBppgJMUIUbuIin9ZfeMi7ql7AoSy0zAOFR7neJ75DIS ib1bpXec4SF9Qne64chxvvqqx+PEsU0aeh1WDhYDLLcg1FxCfWC8o3C6ABX77tbA 9aLcDWvLXfF2JWrXkxBr33Q2FQ6apGKa0Kdaq4JV+1eH+l7eXL32mwiUykUEa3bb jxq82sG/ACAfK+fNZzNJ8MuNsVm/MaheW6evIIZ7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ/PxWADvpY+6JLY9sJzlUocdB5QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5ZWQ3NzZhLTRiMjctNDc3Mi05OTNiLTlmN2Q4YTIyMTJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP+IowDQYJKoZIhvcNAQELBQADggEBAHHGzuDEiof+j6coI/OShIqKQkWM pgi5uTm8MJhyKtPexTNL0q/lXRlIQI6YWYa0GVDofEHzn1IGV68XsZjvju/DpoXC ALVLvj4BMrBslLOQxqwlX5j5NrEQiQsSiEw7OWeGP6MFyi8ZlawpCWuknh2wZQgA Uf2OSwrchQeqEK8AVd1lDbDHi3NdRI8s79qHwmbmp0lEHQh65ZCrbfT021ZOOJ/e S9L9cIWxWxZ8qHLSKRpoDWMb3GODrDiCkDiq2uFP2nHswTAhbSwE3ByKOL3keVcx rN0r2yjacJ1f6VB78mGSNZJoNup/1zNv0KamC7pa376yTuR73AMqUN5aos0= -----END CERTIFICATE-----Generated at Fri May 9 18:19:58 2025 by rpki-client