$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2de8cef-fb8f-4887-9901-3075dd865195.roa File: d2de8cef-fb8f-4887-9901-3075dd865195.roa (raw, json) Hash identifier: a1w2495hl/OTQzk5DwJlU/uzvUAMszE9rBFGkFpnxrY= Subject key identifier: 26:2B:BB:A2:E3:06:0C:9F:BA:14:35:C4:84:86:49:57:6D:1E:49:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AA9E612F55DF8CE60740F5A8C1C881D136606DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2de8cef-fb8f-4887-9901-3075dd865195.roa Signing time: Mon 03 Mar 2025 22:40:08 +0000 ROA not before: Mon 03 Mar 2025 22:40:08 +0000 ROA not after: Mon 07 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a9:e6:12:f5:5d:f8:ce:60:74:0f:5a:8c:1c:88:1d:13:66:06:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 3 22:40:08 2025 GMT Not After : Apr 7 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:52:71:57:32:d1:7f:84:86:3b:f5:75:f2: 57:04:63:8b:f5:5e:7d:29:1b:32:4a:8a:66:72:c5: b6:ec:47:6e:c8:08:06:e0:1a:be:05:13:d4:86:2b: ad:c5:43:fc:86:ce:18:16:66:06:a7:b5:d9:b9:37: 36:72:8e:20:0b:da:23:8c:50:d4:c8:be:9c:6a:96: fb:60:14:e5:fe:f5:b6:53:b1:59:ea:60:2c:9e:1c: be:f5:7e:2f:99:a3:75:25:bc:ad:fd:3a:41:1d:95: 29:ff:91:d6:56:00:5a:35:cc:b5:6e:9b:dc:1b:9e: 19:2f:70:c5:f2:51:ba:aa:6e:a7:95:be:4f:cd:67: 4c:81:e8:7c:7c:d8:8c:35:17:d4:d6:f4:58:17:5e: 7d:e3:43:41:9c:af:71:8d:42:c7:e6:82:5a:5b:d9: a8:fe:4a:dc:0f:d9:4b:39:54:09:8f:ca:2e:6b:6e: ae:b4:3a:ec:a9:e6:c9:2e:e3:1b:db:26:17:df:57: 63:e1:63:fc:49:16:c8:b5:5b:53:b7:df:af:8c:9f: d3:cd:1c:de:6d:f2:37:02:a9:7e:57:d5:7e:7e:e7: db:59:60:27:4c:eb:bb:13:21:17:f9:cf:66:97:b7: 68:c9:15:ae:f7:47:4a:d7:ba:1a:a0:b7:e0:58:c2: ef:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2B:BB:A2:E3:06:0C:9F:BA:14:35:C4:84:86:49:57:6D:1E:49:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2de8cef-fb8f-4887-9901-3075dd865195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.152.0/21 Signature Algorithm: sha256WithRSAEncryption 90:19:5a:0f:09:fd:bd:5e:5b:01:e4:8e:07:fd:ce:fc:a4:d2: c0:18:95:8d:34:8e:3a:a8:62:bf:32:36:05:d0:f9:b3:55:20: 23:45:fb:27:1b:1e:f5:4c:20:be:21:8b:bd:50:37:7b:17:f2: 7a:b6:49:f3:cd:ce:3d:78:66:eb:7e:9e:8e:ea:ba:97:bd:16: 73:ec:1c:70:f4:67:b2:c2:6d:bd:dc:1d:f8:a2:8a:65:80:68: fd:5b:1a:7b:ae:29:5b:5a:5e:f3:a8:29:7f:a5:01:5a:ce:5c: e5:f5:49:b0:46:5d:7e:1e:6e:87:d9:33:fc:39:21:ab:e3:da: 17:4a:ff:65:d7:65:f0:ff:7c:d8:34:ca:0e:45:08:54:bc:a6: 6e:c2:a2:c7:f6:06:06:42:36:30:be:05:ee:18:ff:51:6a:58: 36:4e:73:2e:04:66:c4:24:5b:ee:62:82:a4:68:40:58:c5:f3: d6:5a:cf:6e:83:0c:66:40:97:42:92:21:69:ef:c5:e8:d1:62: fc:3d:2e:94:2e:d3:89:43:55:25:18:c3:e8:e1:8d:65:63:51: 88:e3:31:03:97:90:3e:16:16:bc:84:b4:f6:b8:fc:c3:ab:16: fe:22:e5:37:8a:1f:7c:8b:7c:91:27:1b:9f:29:49:94:fa:6f: db:01:8d:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGqnmEvVd+M5gdA9ajByIHRNmBt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzAzMjI0MDA4WhcNMjUwNDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDNiMTkzODY3N2Y4ZTMxZjgxNjRjNjkzZGM1YjgzYWQz MDFjYzIwZWRiOTEzMzFkMzRiMzdiNzRhMWM0M2NiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+9VJxVzLRf4SGO/V18lcEY4v1Xn0pGzJKimZyxbbsR27I CAbgGr4FE9SGK63FQ/yGzhgWZgantdm5NzZyjiAL2iOMUNTIvpxqlvtgFOX+9bZT sVnqYCyeHL71fi+Zo3UlvK39OkEdlSn/kdZWAFo1zLVum9wbnhkvcMXyUbqqbqeV vk/NZ0yB6Hx82Iw1F9TW9FgXXn3jQ0Gcr3GNQsfmglpb2aj+StwP2Us5VAmPyi5r bq60Ouyp5sku4xvbJhffV2PhY/xJFsi1W1O336+Mn9PNHN5t8jcCqX5X1X5+59tZ YCdM67sTIRf5z2aXt2jJFa73R0rXuhqgt+BYwu/lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJiu7ouMGDJ+6FDXEhIZJV20eSYQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyZGU4Y2VmLWZiOGYtNDg4Ny05OTAxLTMwNzVkZDg2NTE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3JgwDQYJKoZIhvcNAQELBQADggEBAJAZWg8J/b1eWwHkjgf9zvyk0sAY lY00jjqoYr8yNgXQ+bNVICNF+ycbHvVMIL4hi71QN3sX8nq2SfPNzj14Zut+no7q upe9FnPsHHD0Z7LCbb3cHfiiimWAaP1bGnuuKVtaXvOoKX+lAVrOXOX1SbBGXX4e bofZM/w5Iavj2hdK/2XXZfD/fNg0yg5FCFS8pm7Cosf2BgZCNjC+Be4Y/1FqWDZO cy4EZsQkW+5igqRoQFjF89Zaz26DDGZAl0KSIWnvxejRYvw9LpQu04lDVSUYw+jh jWVjUYjjMQOXkD4WFryEtPa4/MOrFv4i5TeKH3yLfJEnG58pSZT6b9sBjWE= -----END CERTIFICATE-----Generated at Thu Mar 13 23:49:15 2025 by rpki-client