$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2823dcd-3a81-4cbf-a5bf-1be7913f6498.roa File: c2823dcd-3a81-4cbf-a5bf-1be7913f6498.roa (raw, json) Hash identifier: l0uQqo4Cau7txG3PAqP2EObGqvWEG5VEwTKFhOn8w3E= Subject key identifier: A8:41:3E:C0:45:64:18:88:4F:87:5C:B3:00:2D:93:98:A4:06:1E:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60359CBF45733F98425313F18B04F35A833C1B19 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2823dcd-3a81-4cbf-a5bf-1be7913f6498.roa Signing time: Tue 25 Feb 2025 15:01:03 +0000 ROA not before: Tue 25 Feb 2025 15:01:03 +0000 ROA not after: Tue 01 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:35:9c:bf:45:73:3f:98:42:53:13:f1:8b:04:f3:5a:83:3c:1b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 25 15:01:03 2025 GMT Not After : Apr 1 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:99:5b:a0:34:a0:a6:c1:c8:3e:10:1f:bd: a4:3c:37:1f:b9:3e:05:ec:42:8d:54:ce:e0:86:ae: af:42:ae:18:9f:2b:40:12:bc:f4:d8:47:ef:16:66: 54:34:2a:c3:9e:46:c5:ad:6f:1f:0e:61:6d:22:ef: 59:71:f3:e8:90:ba:ed:db:ae:b0:49:26:5d:73:ca: 05:58:ed:ee:8e:96:90:d4:8b:c5:be:ed:80:ec:c7: 55:b6:a7:17:d1:37:0a:ea:0b:6b:33:be:9c:bf:09: 35:5b:44:f1:9e:67:2a:eb:56:2a:5b:de:3e:3e:d7: 0a:b6:89:c7:0f:e0:9e:47:0a:7c:9f:ce:bf:4a:12: f5:4a:2f:9d:34:7d:c7:dd:97:3d:e5:8a:5e:d5:2a: 3b:0a:f1:f7:18:03:8d:07:38:0b:d8:50:f4:63:9a: a6:95:5e:18:66:37:d0:ec:de:61:c8:0b:43:4d:17: 83:ab:d2:4c:ab:75:69:b7:2c:58:04:9b:6c:9a:7f: 48:0a:7b:08:5c:59:46:8e:0c:12:f7:2f:0c:10:f8: f7:74:63:b3:93:04:70:35:49:68:c8:17:c5:e0:8b: 4a:a8:91:19:38:b0:d1:9a:f5:17:84:04:95:90:02: 07:65:c3:a4:5b:c4:6a:c0:50:34:3c:cb:fa:56:fe: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:41:3E:C0:45:64:18:88:4F:87:5C:B3:00:2D:93:98:A4:06:1E:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2823dcd-3a81-4cbf-a5bf-1be7913f6498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.79.0/24 Signature Algorithm: sha256WithRSAEncryption 14:95:f2:ca:db:54:03:06:a3:03:e8:20:2c:23:c1:d6:72:37: 5b:0c:68:f3:c0:11:b1:1d:9f:d5:16:c9:7c:b4:bc:bd:3c:c9: a2:a5:a7:9c:f5:b8:8f:63:d4:0d:d6:79:bd:ea:67:e6:4a:c3: db:49:49:e9:2d:39:9d:f1:54:92:b2:d2:00:35:53:c1:a9:83: e3:95:af:44:0e:e1:82:04:86:49:9c:5e:dc:61:e5:80:e3:c1: 7c:66:51:1b:07:0e:89:86:fc:78:6b:23:27:3d:1e:3e:2b:cc: aa:66:be:e9:b3:00:84:24:9b:6d:ca:76:be:db:01:6f:06:90: d3:8d:ee:fa:19:ac:eb:66:60:86:2e:6f:5f:06:5f:d9:f0:6b: 52:1d:31:43:ac:5d:16:12:32:72:4d:0c:cf:4b:97:7a:c8:2a: 65:57:98:03:f1:3e:02:4d:67:65:4b:2c:1c:d7:97:23:d3:4a: 95:85:93:1a:53:d9:db:0f:60:74:4d:70:5b:4d:57:ad:25:bc: 45:b3:af:a4:f9:98:85:19:74:d6:f1:4c:fc:76:26:69:03:de: a7:52:1e:6c:a8:89:eb:9a:74:6d:8b:74:7a:c1:08:e1:93:88: 66:56:fd:4d:f9:48:dc:9c:9a:33:73:70:7e:ca:72:a0:33:41: 15:99:32:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYDWcv0VzP5hCUxPxiwTzWoM8GxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMjI1MTUwMTAzWhcNMjUwNDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYThjN2MzMTI5N2Q5MDgyYjMyMTZhY2IzZjc2ZGZkMjNl YzQyOTcwYmZmNzliMTM4OGUxNGQ3YjY4NDE4N2RhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3vplboDSgpsHIPhAfvaQ8Nx+5PgXsQo1UzuCGrq9Crhif K0ASvPTYR+8WZlQ0KsOeRsWtbx8OYW0i71lx8+iQuu3brrBJJl1zygVY7e6OlpDU i8W+7YDsx1W2pxfRNwrqC2szvpy/CTVbRPGeZyrrVipb3j4+1wq2iccP4J5HCnyf zr9KEvVKL500fcfdlz3lil7VKjsK8fcYA40HOAvYUPRjmqaVXhhmN9Ds3mHIC0NN F4Or0kyrdWm3LFgEm2yaf0gKewhcWUaODBL3LwwQ+Pd0Y7OTBHA1SWjIF8Xgi0qo kRk4sNGa9ReEBJWQAgdlw6RbxGrAUDQ8y/pW/sf5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqEE+wEVkGIhPh1yzAC2TmKQGHqcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyODIzZGNkLTNhODEtNGNiZi1hNWJmLTFiZTc5MTNmNjQ5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3k8wDQYJKoZIhvcNAQELBQADggEBABSV8srbVAMGowPoICwjwdZyN1sM aPPAEbEdn9UWyXy0vL08yaKlp5z1uI9j1A3Web3qZ+ZKw9tJSektOZ3xVJKy0gA1 U8Gpg+OVr0QO4YIEhkmcXtxh5YDjwXxmURsHDomG/HhrIyc9Hj4rzKpmvumzAIQk m23Kdr7bAW8GkNON7voZrOtmYIYub18GX9nwa1IdMUOsXRYSMnJNDM9Ll3rIKmVX mAPxPgJNZ2VLLBzXlyPTSpWFkxpT2dsPYHRNcFtNV60lvEWzr6T5mIUZdNbxTPx2 JmkD3qdSHmyoieuadG2LdHrBCOGTiGZW/U35SNycmjNzcH7KcqAzQRWZMmc= -----END CERTIFICATE-----Generated at Thu Mar 13 23:49:14 2025 by rpki-client