$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e56e7-ef6a-4026-b9ae-eaba919553f3.roa File: af8e56e7-ef6a-4026-b9ae-eaba919553f3.roa (raw, json) Hash identifier: EFijHGJ7S5Qc0kC85VhIBKKb2vLEwarjn/waqrUyfH4= Subject key identifier: F5:54:7A:AF:D9:04:61:DD:26:B3:3D:D1:F4:9F:3B:F4:0A:81:7A:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 39EA7EB42993AEC1319145AD684661166D6C6C9B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e56e7-ef6a-4026-b9ae-eaba919553f3.roa Signing time: Fri 09 May 2025 00:40:23 +0000 ROA not before: Fri 09 May 2025 00:40:23 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:7e:b4:29:93:ae:c1:31:91:45:ad:68:46:61:16:6d:6c:6c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:40:23 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=154b4035632549d854a758870a11c2ef75b882a9bcf82a295869a5661159788a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:8c:bd:b9:88:6e:8d:4e:cd:be:3d:99:40: 44:62:89:7e:b7:49:2e:54:5d:59:d5:b9:d9:a3:bd: 2d:76:21:ea:8d:3c:a9:fd:75:7a:3c:1e:c5:c6:9f: bf:b1:62:53:1c:ba:1d:9b:00:91:29:a3:f3:d0:e3: ee:f1:44:36:b7:cd:97:b9:f6:d9:bd:76:6e:b8:44: 3c:3e:58:d6:66:43:72:ff:fb:38:31:ba:5c:2e:a5: 8a:37:a1:23:d5:21:c6:eb:13:c0:86:65:f0:f3:c7: 31:43:b3:f9:f2:76:5d:33:77:55:82:2d:c9:73:c5: f8:93:22:11:28:8b:f8:5c:08:c2:53:2c:b3:60:b6: f0:c6:e3:7a:17:55:62:7d:43:7c:9b:bf:e5:2f:78: 47:16:6f:c6:38:cc:a6:21:e3:e7:5c:1a:f4:3d:8e: 82:f6:ba:b0:e4:d4:87:b1:90:9c:67:88:9d:2e:7b: c3:f7:e5:f6:0e:44:d5:40:76:6e:45:ad:7f:27:d2: 7e:c4:c3:20:18:ea:9c:ac:0d:ac:03:f1:76:88:54: 7c:77:4b:29:7e:92:84:52:8d:22:f5:0a:f2:44:9e: 8d:d1:3b:f6:26:4f:16:68:9b:28:fb:6d:e4:a0:4b: 3a:03:4c:31:2a:e9:d0:15:fa:91:7b:00:7a:68:8a: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:54:7A:AF:D9:04:61:DD:26:B3:3D:D1:F4:9F:3B:F4:0A:81:7A:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8e56e7-ef6a-4026-b9ae-eaba919553f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:10:4b:84:18:fa:5a:96:b9:c9:b4:af:de:9c:b6:02:d3:e2: 05:57:a5:5b:6d:48:a9:20:cc:c4:d9:f7:6a:32:86:43:b4:23: bf:db:06:44:ad:4b:37:12:b4:4b:c7:e8:47:89:30:e5:5d:83: 43:bd:c9:4c:d1:b3:21:9a:47:f0:84:9e:1d:5b:4d:b6:19:59: 95:c8:a0:29:2c:a5:63:ad:a0:ae:5a:09:60:fd:44:05:1b:1b: 85:fa:35:a0:51:4d:96:db:5f:a5:f5:1c:98:6e:58:3b:a3:34: 0a:d5:a7:f3:10:cc:1b:6c:94:92:25:2e:06:2a:2f:0e:97:81: e6:70:6c:07:82:83:fe:53:09:5d:6e:7e:2e:f3:de:2a:1f:5d: ee:8c:e4:bf:5e:d8:16:4b:b3:7a:1c:3f:db:8b:e6:f1:66:7c: 16:18:49:df:70:6d:8a:32:8e:7c:0b:40:16:be:17:90:7d:b4: 25:f1:18:6b:30:18:67:3c:76:3e:15:16:f9:a3:ee:1d:99:7f: 9f:97:36:85:93:f8:f0:9a:6b:e2:7f:ac:e4:f8:97:6a:05:0b: cc:78:5b:9f:31:7f:22:e9:55:41:6e:b1:77:0a:71:91:7c:a4: de:22:2a:55:da:b8:44:79:fe:00:d3:83:4e:01:7c:ee:3d:1f: 13:4d:24:e4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOep+tCmTrsExkUWtaEZhFm1sbJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MDIzWhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTRiNDAzNTYzMjU0OWQ4NTRhNzU4ODcwYTExYzJlZjc1 Yjg4MmE5YmNmODJhMjk1ODY5YTU2NjExNTk3ODhhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY+oy9uYhujU7Nvj2ZQERiiX63SS5UXVnVudmjvS12IeqN PKn9dXo8HsXGn7+xYlMcuh2bAJEpo/PQ4+7xRDa3zZe59tm9dm64RDw+WNZmQ3L/ +zgxulwupYo3oSPVIcbrE8CGZfDzxzFDs/nydl0zd1WCLclzxfiTIhEoi/hcCMJT LLNgtvDG43oXVWJ9Q3ybv+UveEcWb8Y4zKYh4+dcGvQ9joL2urDk1IexkJxniJ0u e8P35fYORNVAdm5FrX8n0n7EwyAY6pysDawD8XaIVHx3Syl+koRSjSL1CvJEno3R O/YmTxZomyj7beSgSzoDTDEq6dAV+pF7AHpoiiXBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9VR6r9kEYd0msz3R9J879AqBeuMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmOGU1NmU3LWVmNmEtNDAyNi1iOWFlLWVhYmE5MTk1NTNmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPtTANBgkqhkiG9w0BAQsFAAOCAQEAfhBLhBj6Wpa5ybSv3py2AtPiBVel W21IqSDMxNn3ajKGQ7Qjv9sGRK1LNxK0S8foR4kw5V2DQ73JTNGzIZpH8ISeHVtN thlZlcigKSylY62grloJYP1EBRsbhfo1oFFNlttfpfUcmG5YO6M0CtWn8xDMG2yU kiUuBiovDpeB5nBsB4KD/lMJXW5+LvPeKh9d7ozkv17YFkuzehw/24vm8WZ8FhhJ 33BtijKOfAtAFr4XkH20JfEYazAYZzx2PhUW+aPuHZl/n5c2hZP48Jpr4n+s5PiX agULzHhbnzF/IulVQW6xdwpxkXyk3iIqVdq4RHn+ANODTgF87j0fE00k5A== -----END CERTIFICATE-----Generated at Fri May 9 16:31:05 2025 by rpki-client