$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8071286-120f-4c39-8215-795f270e9092.roa File: d8071286-120f-4c39-8215-795f270e9092.roa (raw, json) Hash identifier: lnBc967VqOWlxoG+S9w78qwIzb4Th9X+GVDlbKFgjbo= Subject key identifier: 0C:8F:D2:80:B1:66:35:77:70:BB:C8:45:50:4A:13:D2:B6:1F:61:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2583CEA9E80CFB632826910FC4CC7C86B2EC8A43 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8071286-120f-4c39-8215-795f270e9092.roa Signing time: Fri 09 May 2025 00:51:47 +0000 ROA not before: Fri 09 May 2025 00:51:47 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:83:ce:a9:e8:0c:fb:63:28:26:91:0f:c4:cc:7c:86:b2:ec:8a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:51:47 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=1a45a1a26485a2f0805fc8316207acc230e9996769744ed2859568f7238b6662, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:e8:b7:e0:ff:a6:ea:95:63:a9:81:40:6b: cf:63:ec:8d:f0:49:6a:02:fc:c5:bb:6e:c1:a6:64: c5:a6:df:ec:b0:43:69:8a:8a:02:4b:1e:e0:07:dc: 61:06:a9:e4:51:2c:bf:9d:1e:6a:2e:18:48:8b:5d: ff:29:cc:36:1a:9f:2d:82:ef:b7:56:e5:59:ed:48: 59:44:d9:b3:7f:b6:da:5b:8e:b9:ed:c2:fe:b8:d6: 66:2e:30:6f:c7:9b:10:da:6e:1e:e5:df:c4:ca:60: 7b:eb:28:81:9f:6e:8f:13:00:58:e8:89:07:8a:5a: 5e:eb:ca:97:1d:c1:51:31:44:7f:70:e9:d7:a4:b1: 7c:ba:17:26:2d:c4:42:ea:4f:c2:9b:65:4c:6b:17: 16:ec:f7:5d:96:75:fd:cf:a7:8b:9f:25:be:27:5e: da:ac:e6:41:37:ad:d1:8b:ba:40:20:e8:83:b2:cc: 28:83:49:7d:40:f9:94:be:c9:82:4e:e1:be:c2:25: fd:2c:cc:52:c5:dd:3b:48:34:50:55:d5:1a:ce:59: ae:51:c0:0f:1e:22:72:78:80:3f:09:b8:17:45:f5: b7:95:cd:6d:e5:c4:b4:dd:43:7b:61:b2:2d:d5:64: 25:c5:05:a2:6c:cd:d5:e5:f5:e7:b9:4f:0f:13:66: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:D2:80:B1:66:35:77:70:BB:C8:45:50:4A:13:D2:B6:1F:61:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8071286-120f-4c39-8215-795f270e9092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.234.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:ee:5b:40:6b:16:ec:da:ce:93:6d:81:1d:c7:e6:21:59:73: a4:17:c5:01:3a:c3:d8:a4:02:b2:65:f7:f0:cb:44:66:e6:02: 9f:df:2f:0c:60:5e:7a:6d:33:06:ce:5b:46:56:51:45:7c:04: 7f:77:3c:be:48:c1:6d:e4:b9:02:73:1d:64:51:c3:70:63:58: 17:ab:40:25:8d:20:10:a3:1e:25:d9:49:8b:aa:56:73:ad:54: 8b:91:d4:4f:f5:95:0c:a9:b2:a5:18:2f:e7:52:78:25:fc:04: 2d:5d:c3:19:16:c8:f7:89:c8:55:a1:23:93:de:4f:cb:1a:99: 00:32:a3:30:fc:da:6e:88:55:b3:09:23:13:42:c0:23:41:9d: 66:83:90:25:9d:8d:22:3a:59:70:05:33:b9:e9:ce:7b:61:ba: 5e:4d:cf:95:04:59:9c:1d:f6:12:fc:9e:55:1a:e8:80:29:48: 10:9a:bc:5d:c9:7d:b0:43:38:43:02:58:cb:71:5a:36:98:a8: f0:1d:fd:72:c6:4b:2d:fc:6b:a3:c9:62:84:e6:1a:62:16:3a: 1f:9e:46:56:f9:8e:da:ec:e4:6d:25:c8:88:05:32:3b:44:18: 26:72:d6:eb:d3:97:4e:bb:23:15:85:68:02:b7:cf:eb:30:a3: 98:55:79:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJYPOqegM+2MoJpEPxMx8hrLsikMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA1MTQ3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTQ1YTFhMjY0ODVhMmYwODA1ZmM4MzE2MjA3YWNjMjMw ZTk5OTY3Njk3NDRlZDI4NTk1NjhmNzIzOGI2NjYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3X+i34P+m6pVjqYFAa89j7I3wSWoC/MW7bsGmZMWm3+yw Q2mKigJLHuAH3GEGqeRRLL+dHmouGEiLXf8pzDYany2C77dW5VntSFlE2bN/ttpb jrntwv641mYuMG/HmxDabh7l38TKYHvrKIGfbo8TAFjoiQeKWl7rypcdwVExRH9w 6deksXy6FyYtxELqT8KbZUxrFxbs912Wdf3Pp4ufJb4nXtqs5kE3rdGLukAg6IOy zCiDSX1A+ZS+yYJO4b7CJf0szFLF3TtINFBV1RrOWa5RwA8eInJ4gD8JuBdF9beV zW3lxLTdQ3thsi3VZCXFBaJszdXl9ee5Tw8TZpUXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDI/SgLFmNXdwu8hFUEoT0rYfYbgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4MDcxMjg2LTEyMGYtNGMzOS04MjE1LTc5NWYyNzBlOTA5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3OowDQYJKoZIhvcNAQELBQADggEBAIvuW0BrFuzazpNtgR3H5iFZc6QX xQE6w9ikArJl9/DLRGbmAp/fLwxgXnptMwbOW0ZWUUV8BH93PL5IwW3kuQJzHWRR w3BjWBerQCWNIBCjHiXZSYuqVnOtVIuR1E/1lQypsqUYL+dSeCX8BC1dwxkWyPeJ yFWhI5PeT8samQAyozD82m6IVbMJIxNCwCNBnWaDkCWdjSI6WXAFM7npznthul5N z5UEWZwd9hL8nlUa6IApSBCavF3JfbBDOEMCWMtxWjaYqPAd/XLGSy38a6PJYoTm GmIWOh+eRlb5jtrs5G0lyIgFMjtEGCZy1uvTl067IxWFaAK3z+swo5hVecA= -----END CERTIFICATE-----Generated at Fri May 9 22:33:57 2025 by rpki-client