$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f79e1b73-6b17-42fa-9543-b605e625e533.roa File: f79e1b73-6b17-42fa-9543-b605e625e533.roa (raw, json) Hash identifier: oCUJAA7gdNGYkUoJPVYqSwCkMOn51H22OgKpXSLkOSc= Subject key identifier: 2E:D4:90:09:F3:35:7D:BC:7E:DE:09:9C:86:4F:29:CF:10:57:C6:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58E2A0E7EA38BB98009CAAFCCBB21166AE52D475 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f79e1b73-6b17-42fa-9543-b605e625e533.roa Signing time: Fri 09 May 2025 00:31:44 +0000 ROA not before: Fri 09 May 2025 00:31:44 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e2:a0:e7:ea:38:bb:98:00:9c:aa:fc:cb:b2:11:66:ae:52:d4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:31:44 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=6665b3a998f26ed6ac594ebab8ff2d14c2c11a7ea90a1ec37c130a4e72bdd8b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:21:27:40:fd:9c:2e:08:98:da:64:2c:42: 1e:67:e2:e7:eb:55:ef:ec:38:4e:6d:63:44:6a:40: 3d:03:1b:47:87:f8:14:73:65:e7:df:40:e2:80:07: b0:e5:a2:d0:bc:4f:39:5d:97:e4:92:87:8f:dc:38: b3:a6:d2:d6:e6:8c:3a:43:14:c7:84:9c:fc:d7:35: ef:77:a2:01:31:f8:29:d8:22:f9:88:da:e8:ed:bb: 82:f1:b5:fd:7e:e2:ff:1e:fe:f4:de:f3:45:63:9c: 8e:93:e4:30:f5:a3:60:6d:11:c9:0c:b2:38:27:cd: e9:d1:59:c4:d5:e8:26:f4:a1:48:fc:22:f2:fa:92: 8a:fb:1e:cd:50:7b:ed:77:71:da:e5:47:3a:d5:14: 48:22:79:0b:c3:29:f7:87:c5:cb:d4:74:5a:bd:a5: f7:ea:c3:c6:27:7b:50:d7:4a:06:89:d5:be:60:00: 6b:ed:20:af:00:44:13:80:6e:ef:0c:fb:72:89:1e: 02:1b:f5:5d:26:08:8c:ce:4a:e7:3a:5b:7e:80:8c: 1a:35:dd:51:a3:fd:32:11:28:8e:1c:60:8c:d3:c1: 90:d5:b3:9a:31:ff:6b:1a:b0:84:a5:be:df:b8:e8: 93:e6:10:7c:03:d9:51:be:02:e4:28:02:07:ad:42: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D4:90:09:F3:35:7D:BC:7E:DE:09:9C:86:4F:29:CF:10:57:C6:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f79e1b73-6b17-42fa-9543-b605e625e533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:e9:62:6f:1f:75:be:51:3f:e5:4b:2f:a7:a7:bb:00:eb:93: fc:e6:fd:32:f4:0f:a7:44:60:3d:df:b2:d8:d9:c9:eb:ce:df: 5e:81:38:5b:32:d5:41:31:d3:19:25:09:bc:20:99:1f:5d:01: 54:6b:2e:7b:6b:fc:27:4b:90:19:5c:58:89:5f:ab:8b:9a:1d: 57:d8:f7:30:66:d6:bb:1d:42:ef:24:13:7d:69:12:87:fd:e4: 2b:ec:1d:dd:07:0c:fa:4d:12:f7:8b:06:36:68:5b:c8:99:b9: 2b:cd:de:8f:1f:3e:61:d2:d0:7c:e6:a3:66:1f:3a:ad:82:9f: 9d:ee:fe:48:f0:00:e3:0a:42:77:39:44:56:3c:2b:60:4e:01: a7:a6:43:4b:c3:d4:8b:40:ba:3a:7d:70:7e:4c:96:ad:1a:b5: c5:3f:7e:15:f2:28:07:aa:0c:f9:5e:07:98:67:57:8f:9a:9c: fd:48:3b:36:3d:96:56:d6:a6:d3:41:d3:f0:8a:d6:20:94:d2: 8f:0b:1d:40:a0:9e:40:d7:4c:66:90:b6:6c:19:8e:83:53:bb: eb:53:88:09:58:c4:a8:25:f6:63:d8:aa:6a:57:9c:fd:90:48: cd:cb:f8:50:8f:35:17:12:57:b5:0e:cf:d6:c3:be:e5:2d:75: 43:f3:c9:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWOKg5+o4u5gAnKr8y7IRZq5S1HUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDAzMTQ0WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjY1YjNhOTk4ZjI2ZWQ2YWM1OTRlYmFiOGZmMmQxNGMy YzExYTdlYTkwYTFlYzM3YzEzMGE0ZTcyYmRkOGIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxeiEnQP2cLgiY2mQsQh5n4ufrVe/sOE5tY0RqQD0DG0eH +BRzZeffQOKAB7DlotC8Tzldl+SSh4/cOLOm0tbmjDpDFMeEnPzXNe93ogEx+CnY IvmI2ujtu4Lxtf1+4v8e/vTe80VjnI6T5DD1o2BtEckMsjgnzenRWcTV6Cb0oUj8 IvL6kor7Hs1Qe+13cdrlRzrVFEgieQvDKfeHxcvUdFq9pffqw8Yne1DXSgaJ1b5g AGvtIK8ARBOAbu8M+3KJHgIb9V0mCIzOSuc6W36AjBo13VGj/TIRKI4cYIzTwZDV s5ox/2sasISlvt+46JPmEHwD2VG+AuQoAgetQiNXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULtSQCfM1fbx+3gmchk8pzxBXxsYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3OWUxYjczLTZiMTctNDJmYS05NTQzLWI2MDVlNjI1ZTUzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPtWIwDQYJKoZIhvcNAQELBQADggEBACrpYm8fdb5RP+VLL6enuwDrk/zm /TL0D6dEYD3fstjZyevO316BOFsy1UEx0xklCbwgmR9dAVRrLntr/CdLkBlcWIlf q4uaHVfY9zBm1rsdQu8kE31pEof95CvsHd0HDPpNEveLBjZoW8iZuSvN3o8fPmHS 0Hzmo2YfOq2Cn53u/kjwAOMKQnc5RFY8K2BOAaemQ0vD1ItAujp9cH5Mlq0atcU/ fhXyKAeqDPleB5hnV4+anP1IOzY9llbWptNB0/CK1iCU0o8LHUCgnkDXTGaQtmwZ joNTu+tTiAlYxKgl9mPYqmpXnP2QSM3L+FCPNRcSV7UOz9bDvuUtdUPzyYM= -----END CERTIFICATE-----Generated at Fri May 9 16:28:49 2025 by rpki-client