$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b28799cb-3f9d-4dcc-93c1-35a8bb8021f1.roa File: b28799cb-3f9d-4dcc-93c1-35a8bb8021f1.roa (raw, json) Hash identifier: gNKQIvQw3wIu+blxW4DQzuQXq58EJNX0CPFRe5jzG44= Subject key identifier: 3E:70:D3:B4:5F:01:4A:9F:F6:39:2F:CF:C4:0E:B9:DA:FA:46:3A:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09CCE159FB9796A065646F97898B6A7FE5E30A25 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b28799cb-3f9d-4dcc-93c1-35a8bb8021f1.roa Signing time: Mon 19 May 2025 18:50:10 +0000 ROA not before: Mon 19 May 2025 18:50:10 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.153.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:e1:59:fb:97:96:a0:65:64:6f:97:89:8b:6a:7f:e5:e3:0a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 18:50:10 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=718e091a16f52a8d2d8a57208bfadc1cc6fc1b8a127ba0cd6a8e254e95135ab2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:7b:81:88:96:0b:dd:78:87:f6:c8:24:1e: f7:1d:cd:53:d2:63:68:6f:1d:71:f3:c1:6c:c6:ba: 1f:ab:cd:a6:7c:53:5e:a0:d6:9f:be:d3:47:c1:f2: 9d:11:79:e7:c3:1f:cb:a9:8d:4b:8f:12:a3:27:c8: 2a:45:4c:dc:12:06:a3:a0:b2:0a:51:e1:62:b8:2e: 40:b7:b4:a3:7b:34:de:12:97:53:00:57:97:92:23: fd:b4:ed:5c:cb:92:1f:f2:f3:2c:e2:c3:da:2d:93: 2f:b6:7f:74:33:4b:8d:07:10:bc:23:44:c2:d3:aa: b8:79:f2:83:c1:db:0e:0a:6e:64:8f:5b:d8:1f:f9: a6:f8:4a:bd:2d:fa:79:0a:3c:c8:6c:27:35:9a:30: 8c:ff:5d:58:40:3f:0f:5d:ba:3c:23:d8:c9:6c:21: 11:83:58:04:e9:3b:ec:e2:f3:cc:cf:cf:38:26:5d: 4e:a9:99:98:f5:8f:33:b6:8a:59:dd:b0:1a:f4:25: e3:7a:df:ea:6a:4a:63:23:9b:56:f7:4a:55:36:a2: 6b:f6:a3:2d:00:4d:e0:50:57:07:9b:d6:42:6c:92: 2c:7a:68:b9:16:ae:00:33:cc:15:35:ab:2b:7f:c4: e1:8c:70:58:0f:55:a7:73:18:38:07:ce:09:1c:99: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:70:D3:B4:5F:01:4A:9F:F6:39:2F:CF:C4:0E:B9:DA:FA:46:3A:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b28799cb-3f9d-4dcc-93c1-35a8bb8021f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:35:ca:d8:cd:41:e0:37:20:77:e0:93:b3:48:90:1a:19:21: 62:e2:17:e9:92:2d:ea:f5:2e:be:5b:53:8a:f5:b9:0a:8c:7d: ff:7a:33:7d:3e:67:f3:c2:75:43:63:74:b0:4e:d7:e7:e3:cf: 47:30:88:fc:a8:4c:f0:37:a7:59:28:68:70:f8:21:60:4a:3a: 01:f8:51:fc:94:19:1d:5a:43:50:d2:60:ef:c3:a6:1e:43:a3: 10:99:56:a9:f9:d7:e7:b8:ab:a7:96:c0:92:ac:00:ad:f2:fb: 87:05:43:75:df:f5:8f:80:14:f6:f2:55:cd:f5:79:d4:42:ce: 50:69:a2:83:b2:f3:fd:69:c4:dd:5a:47:cf:ff:59:1d:68:03: fc:8e:81:fe:07:35:75:06:80:2e:38:91:52:fe:ad:8b:a1:86: c6:f6:80:29:7f:61:ba:3e:e8:dc:b9:fa:2c:49:e5:43:49:af: 57:7b:2a:f4:f6:2d:ad:1c:b1:35:4b:55:52:d2:06:23:f3:cc: 1b:45:c6:27:73:2a:e8:4d:52:6a:0b:f3:63:a2:75:8e:5c:06: e6:02:32:fc:c8:53:82:5f:1a:5e:4e:76:1a:f9:59:d0:a3:a6: 49:4f:e7:e1:0a:96:30:3d:cc:a0:eb:8b:15:0e:03:d8:bf:19: ea:51:5f:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCczhWfuXlqBlZG+XiYtqf+XjCiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTE5MTg1MDEwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MThlMDkxYTE2ZjUyYThkMmQ4YTU3MjA4YmZhZGMxY2M2 ZmMxYjhhMTI3YmEwY2Q2YThlMjU0ZTk1MTM1YWIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm0XuBiJYL3XiH9sgkHvcdzVPSY2hvHXHzwWzGuh+rzaZ8 U16g1p++00fB8p0ReefDH8upjUuPEqMnyCpFTNwSBqOgsgpR4WK4LkC3tKN7NN4S l1MAV5eSI/207VzLkh/y8yziw9otky+2f3QzS40HELwjRMLTqrh58oPB2w4KbmSP W9gf+ab4Sr0t+nkKPMhsJzWaMIz/XVhAPw9dujwj2MlsIRGDWATpO+zi88zPzzgm XU6pmZj1jzO2ilndsBr0JeN63+pqSmMjm1b3SlU2omv2oy0ATeBQVweb1kJskix6 aLkWrgAzzBU1qyt/xOGMcFgPVadzGDgHzgkcmV/7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPnDTtF8BSp/2OS/PxA652vpGOvYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyODc5OWNiLTNmOWQtNGRjYy05M2MxLTM1YThiYjgwMjFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPmTANBgkqhkiG9w0BAQsFAAOCAQEAWDXK2M1B4Dcgd+CTs0iQGhkhYuIX 6ZIt6vUuvltTivW5Cox9/3ozfT5n88J1Q2N0sE7X5+PPRzCI/KhM8DenWShocPgh YEo6AfhR/JQZHVpDUNJg78OmHkOjEJlWqfnX57irp5bAkqwArfL7hwVDdd/1j4AU 9vJVzfV51ELOUGmig7Lz/WnE3VpHz/9ZHWgD/I6B/gc1dQaALjiRUv6ti6GGxvaA KX9huj7o3Ln6LEnlQ0mvV3sq9PYtrRyxNUtVUtIGI/PMG0XGJ3Mq6E1SagvzY6J1 jlwG5gIy/MhTgl8aXk52GvlZ0KOmSU/n4QqWMD3MoOuLFQ4D2L8Z6lFf0g== -----END CERTIFICATE-----Generated at Mon Jun 2 16:30:31 2025 by rpki-client