$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa File: a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa (raw, json) Hash identifier: yFTsz9gXKHobZ5cyEU9Z5Zy8d02oXYYBfkbdanAj9zo= Subject key identifier: 2A:3C:66:58:C6:0E:8E:31:7D:F6:7C:AD:EA:33:3B:FD:DE:13:89:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DB8870B243FDB3BAA7EC67D311B585A0BD117 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa Signing time: Fri 09 May 2025 15:00:17 +0000 ROA not before: Fri 09 May 2025 15:00:17 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b8:87:0b:24:3f:db:3b:aa:7e:c6:7d:31:1b:58:5a:0b:d1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 15:00:17 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=af18d7ed03b05ea5c245947f98e8bb2a7ce04d37e6845fa477226df46916dccf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:e4:9e:52:91:30:74:06:f5:16:49:a5:42: 8f:d0:5c:25:77:9b:eb:30:47:9e:6b:de:7e:03:7a: cd:1b:bd:5f:d6:7c:97:69:66:d5:62:b9:24:4b:a6: a8:a0:22:29:6e:24:87:9b:51:e9:b6:02:3a:c4:ff: 32:00:21:0a:ea:67:8e:01:59:9c:04:d0:ed:f0:ef: ca:88:f4:3d:db:3a:29:b4:91:af:d7:86:c2:32:1c: 85:6e:72:69:e2:0c:31:d9:18:d8:35:62:ec:78:1c: 91:dc:1a:be:b1:26:7b:f3:ac:7d:6a:fd:af:bb:c7: e4:3b:59:85:9b:a7:ba:d8:d3:92:24:3f:a9:f0:01: ee:d1:47:5f:97:03:29:c8:6a:82:0c:f5:6d:e8:ea: b1:aa:a2:c3:93:72:ec:da:8e:fe:25:62:30:26:bd: 7a:56:34:c3:4e:2d:48:ce:ef:11:9f:46:3e:27:a7: 3d:74:e5:e4:2f:b1:57:f2:0a:cb:9a:3d:fe:51:36: ad:e1:50:5e:87:31:cf:16:de:eb:56:12:fa:8d:36: 7c:d1:f5:ed:38:30:56:9d:8c:a8:1d:49:08:98:a2: ea:eb:ec:40:06:a4:e3:44:4d:c5:1a:40:4d:07:8b: 54:01:93:09:16:d8:23:db:b7:ea:4b:94:da:a0:06: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:66:58:C6:0E:8E:31:7D:F6:7C:AD:EA:33:3B:FD:DE:13:89:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f4b3f9-2f97-48ff-932c-3f8db5d15a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:3c:0d:2f:b1:de:56:c9:5c:bf:15:aa:9d:5e:1e:37:1e:df: ef:01:ab:2a:53:06:0b:f4:e8:9c:92:56:78:c1:76:58:ca:7c: 43:4e:c6:d4:3d:de:bf:1b:63:42:54:12:ba:df:eb:91:04:09: a7:0a:f9:8d:7c:75:8a:40:49:d5:7b:1d:2e:99:f2:17:d2:7b: 02:0a:37:cd:71:72:7a:a1:31:30:fb:32:1a:84:25:31:10:c5: 45:0f:e0:fc:26:28:28:72:84:83:28:48:b8:63:2c:52:40:ea: 1a:fd:1b:61:ff:12:1d:ab:5a:47:f4:c8:a9:5d:fc:e8:1b:84: 0c:fa:dc:fb:b3:80:f6:37:9b:33:28:36:ad:5b:33:c1:9e:3b: ec:69:30:f0:ae:52:2b:c9:07:47:71:de:7f:3e:2b:6b:cc:d6: 63:f4:26:57:03:16:36:98:d4:31:3c:cf:eb:54:26:50:e5:68: 06:24:55:4b:d7:b1:36:b7:d7:5b:7c:63:3c:cc:43:67:d3:cf: b4:81:a1:1a:0e:93:ee:d6:b3:f4:42:80:74:9d:bf:1c:dc:c8: 6e:99:b5:8a:f8:ec:11:13:28:eb:4c:12:09:05:49:bf:f7:9b: 12:9b:25:83:49:43:47:8c:e5:7d:14:3a:8f:ce:02:39:a9:41: 33:9a:23:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITbbiHCyQ/2zuqfsZ9MRtYWgvRFzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA1MDkxNTAwMTdaFw0yNTA2MTMyMzU5NTla MHoxSTBHBgNVBAUTQGFmMThkN2VkMDNiMDVlYTVjMjQ1OTQ3Zjk4ZThiYjJhN2Nl MDRkMzdlNjg0NWZhNDc3MjI2ZGY0NjkxNmRjY2YxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ/z5J5SkTB0BvUWSaVCj9BcJXeb6zBHnmvefgN6zRu9X9Z8 l2lm1WK5JEumqKAiKW4kh5tR6bYCOsT/MgAhCupnjgFZnATQ7fDvyoj0Pds6KbSR r9eGwjIchW5yaeIMMdkY2DVi7HgckdwavrEme/OsfWr9r7vH5DtZhZunutjTkiQ/ qfAB7tFHX5cDKchqggz1bejqsaqiw5Ny7NqO/iViMCa9elY0w04tSM7vEZ9GPien PXTl5C+xV/IKy5o9/lE2reFQXocxzxbe61YS+o02fNH17TgwVp2MqB1JCJii6uvs QAak40RNxRpATQeLVAGTCRbYI9u36kuU2qAGOW0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQqPGZYxg6OMX32fK3qMzv93hOJFDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYThmNGIzZjktMmY5Ny00OGZmLTkzMmMtM2Y4ZGI1ZDE1YTU2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBg+xADANBgkqhkiG9w0BAQsFAAOCAQEAajwNL7HeVslcvxWqnV4eNx7f7wGr KlMGC/TonJJWeMF2WMp8Q07G1D3evxtjQlQSut/rkQQJpwr5jXx1ikBJ1XsdLpny F9J7Ago3zXFyeqExMPsyGoQlMRDFRQ/g/CYoKHKEgyhIuGMsUkDqGv0bYf8SHata R/TIqV386BuEDPrc+7OA9jebMyg2rVszwZ477Gkw8K5SK8kHR3Hefz4ra8zWY/Qm VwMWNpjUMTzP61QmUOVoBiRVS9exNrfXW3xjPMxDZ9PPtIGhGg6T7taz9EKAdJ2/ HNzIbpm1ivjsERMo60wSCQVJv/ebEpslg0lDR4zlfRQ6j84COalBM5ojPA== -----END CERTIFICATE-----Generated at Fri May 9 19:53:03 2025 by rpki-client