$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d93d8d14-73ea-4f2b-b3bc-c770b73cb4d8.roa File: d93d8d14-73ea-4f2b-b3bc-c770b73cb4d8.roa (raw, json) Hash identifier: ys94RviVHjD5192RiSsJ6SlQ7Pv/dHcyc53GmQ3YqlY= Subject key identifier: 27:2C:7F:3A:6D:2F:77:67:AC:53:98:36:E9:5B:D2:43:22:59:27:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F223958B361940A488FC7BF5B8896EF532B1F0A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d93d8d14-73ea-4f2b-b3bc-c770b73cb4d8.roa Signing time: Fri 09 May 2025 00:40:25 +0000 ROA not before: Fri 09 May 2025 00:40:25 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:22:39:58:b3:61:94:0a:48:8f:c7:bf:5b:88:96:ef:53:2b:1f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:40:25 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=00c73e10a32f7ccc06435742985816434ad8f9a4a6856878229be62fef9dd44f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:3a:9b:a9:fb:76:a9:61:06:3d:c5:80:d7: 8c:db:c8:ca:7a:86:23:91:05:dc:e2:87:19:00:20: 97:5c:c0:af:75:1a:25:d2:9a:de:5b:62:05:af:be: de:ce:fe:e3:22:e3:8f:5a:3e:79:78:5a:2e:3b:46: e9:ac:7e:bd:99:6d:51:84:0a:c7:8d:0a:01:23:d1: 0d:4b:13:68:72:ad:b6:de:40:c8:d0:a5:64:87:84: 14:3f:24:7d:ff:cb:f5:4e:f1:41:4c:64:62:48:48: 3c:c8:29:39:4e:2d:4d:db:4f:9e:64:87:24:3e:c6: cc:aa:4b:11:98:83:2b:e1:2c:64:10:5b:4f:52:63: 14:35:8d:d8:6f:58:19:b5:cc:42:19:20:fa:91:75: 38:0c:7c:d2:de:c6:aa:5d:c7:50:ca:e3:b5:b7:34: 17:15:2d:6c:a6:6b:4e:77:93:e6:21:5f:c2:bb:c6: 44:b1:22:b2:d2:a0:e1:2c:97:eb:b3:b6:07:0f:8b: 64:b9:8e:3d:1a:b4:c9:c4:a9:91:4e:d9:41:30:84: 1d:eb:15:4a:a1:7f:8f:25:8d:b1:d1:89:b7:be:02: 79:8b:4e:f1:9c:bf:4f:3f:4b:72:37:8e:de:4a:9b: 7d:82:ce:a2:80:fc:c5:19:fe:0b:5a:9e:b3:5c:76: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2C:7F:3A:6D:2F:77:67:AC:53:98:36:E9:5B:D2:43:22:59:27:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d93d8d14-73ea-4f2b-b3bc-c770b73cb4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.252.0/22 Signature Algorithm: sha256WithRSAEncryption a4:71:34:58:eb:34:4e:5f:f8:0b:78:ce:96:31:54:48:2c:72: a4:b7:70:ad:0b:ed:25:c5:79:ea:07:66:ff:c8:c4:a3:d0:99: b9:36:e4:c0:74:7a:de:e1:3e:22:ec:f2:d1:17:16:0d:ab:76: f0:49:50:80:e7:96:34:47:15:18:2f:2f:81:b8:e0:c3:57:33: a4:df:8c:0d:df:ed:2e:39:44:e5:06:e5:df:86:0e:96:1f:d5: 14:88:33:e4:71:b5:a3:37:19:77:48:05:bd:34:45:11:b6:ad: 16:4e:e4:db:10:6b:6b:56:a5:31:f2:2a:f8:a8:25:55:72:2c: c4:7c:9c:37:05:fd:53:cc:ab:3b:e2:e6:a5:42:13:01:00:d5: bd:d7:82:45:ea:66:21:34:84:32:0b:95:44:f1:8d:90:78:64: 4e:90:22:ea:11:25:46:d0:a9:36:02:dc:ad:d7:5c:c8:e8:bd: b8:6c:00:fd:ca:45:40:42:65:9e:48:87:b3:97:17:5d:f0:39: e1:5d:bd:ae:dc:37:85:05:ca:62:92:11:8c:08:96:ff:23:74: b8:ec:46:c1:99:85:81:23:ed:58:ee:2b:e4:96:23:b0:49:3d: 90:5a:9b:7e:38:45:bd:45:34:d2:18:c9:52:b0:e4:ff:94:87: 6c:56:67:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULyI5WLNhlApIj8e/W4iW71MrHwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MDI1WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGM3M2UxMGEzMmY3Y2NjMDY0MzU3NDI5ODU4MTY0MzRh ZDhmOWE0YTY4NTY4NzgyMjliZTYyZmVmOWRkNDRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC0Tqbqft2qWEGPcWA14zbyMp6hiORBdzihxkAIJdcwK91 GiXSmt5bYgWvvt7O/uMi449aPnl4Wi47Rumsfr2ZbVGECseNCgEj0Q1LE2hyrbbe QMjQpWSHhBQ/JH3/y/VO8UFMZGJISDzIKTlOLU3bT55khyQ+xsyqSxGYgyvhLGQQ W09SYxQ1jdhvWBm1zEIZIPqRdTgMfNLexqpdx1DK47W3NBcVLWyma053k+YhX8K7 xkSxIrLSoOEsl+uztgcPi2S5jj0atMnEqZFO2UEwhB3rFUqhf48ljbHRibe+AnmL TvGcv08/S3I3jt5Km32CzqKA/MUZ/gtanrNcdtS3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJyx/Om0vd2esU5g26VvSQyJZJ3YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q5M2Q4ZDE0LTczZWEtNGYyYi1iM2JjLWM3NzBiNzNjYjRkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3PwwDQYJKoZIhvcNAQELBQADggEBAKRxNFjrNE5f+At4zpYxVEgscqS3 cK0L7SXFeeoHZv/IxKPQmbk25MB0et7hPiLs8tEXFg2rdvBJUIDnljRHFRgvL4G4 4MNXM6TfjA3f7S45ROUG5d+GDpYf1RSIM+RxtaM3GXdIBb00RRG2rRZO5NsQa2tW pTHyKvioJVVyLMR8nDcF/VPMqzvi5qVCEwEA1b3XgkXqZiE0hDILlUTxjZB4ZE6Q IuoRJUbQqTYC3K3XXMjovbhsAP3KRUBCZZ5Ih7OXF13wOeFdva7cN4UFymKSEYwI lv8jdLjsRsGZhYEj7VjuK+SWI7BJPZBam344Rb1FNNIYyVKw5P+Uh2xWZyU= -----END CERTIFICATE-----Generated at Fri May 9 16:29:57 2025 by rpki-client