$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cc80c0a-c7cf-4eda-8529-53154b873db1.roa File: 6cc80c0a-c7cf-4eda-8529-53154b873db1.roa (raw, json) Hash identifier: gk7ms/uV7ED3/r/HqZCkZmeC5ZUr3v710wt92RB6z2k= Subject key identifier: 36:14:12:69:78:06:1A:F6:87:96:59:07:1F:D5:16:55:8D:96:D8:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E59E2F550EF625FA41DFE311516F12C7B9AD98A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cc80c0a-c7cf-4eda-8529-53154b873db1.roa Signing time: Fri 18 Apr 2025 16:00:06 +0000 ROA not before: Fri 18 Apr 2025 16:00:06 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:59:e2:f5:50:ef:62:5f:a4:1d:fe:31:15:16:f1:2c:7b:9a:d9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 16:00:06 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=767761d61a6f43ee1a964f8d880380b55d96893d18c0fab46a79d23c7ff7ecf4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:11:9e:a2:cc:26:16:01:3c:4d:5a:fc:47: 6c:87:46:08:3a:f8:2d:d3:a4:7c:60:f3:3c:08:44: 02:99:87:5d:6c:84:c6:fe:d3:6d:9f:ed:6e:8d:70: 9f:55:e0:07:a3:a3:76:60:15:74:5e:93:7e:d5:a1: 38:87:ef:53:b1:0b:93:2c:21:94:28:0f:16:3b:96: 2d:44:5e:d2:6d:2e:eb:d6:c2:85:2c:57:f7:7c:c4: bd:69:3c:6a:04:62:41:3a:8f:20:59:75:c4:0d:f8: 25:9a:5e:94:b7:fc:9a:45:f7:c5:c4:87:d5:da:17: 3a:17:e0:01:d8:af:2f:49:29:a5:36:83:b1:28:4f: cc:c0:64:e4:14:a4:89:86:05:90:51:86:98:1c:86: 56:97:f8:ab:48:0d:29:27:a4:3f:a7:a6:61:2d:c8: fd:be:7e:bf:d9:11:f3:86:23:e9:2b:cd:a4:ea:46: 1f:f5:ab:91:99:85:d9:d6:0f:1c:c5:84:bd:17:ea: ec:6f:2d:98:38:be:24:e5:25:cd:f0:05:67:90:1d: 04:f4:a5:26:c2:6c:2c:7c:ef:85:41:b3:1b:26:1f: e5:d5:d7:1c:03:25:10:d4:20:cd:40:c4:00:d0:6e: 8c:50:b4:21:c7:1d:0c:09:c7:82:27:b1:4e:fe:bd: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:14:12:69:78:06:1A:F6:87:96:59:07:1F:D5:16:55:8D:96:D8:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cc80c0a-c7cf-4eda-8529-53154b873db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:28:d7:ed:46:a0:fe:79:f2:11:c3:b7:2c:b0:df:11:dc:2d: 7b:a9:ec:1f:32:28:15:f9:23:26:bd:9f:87:a3:16:23:a6:cd: 2b:69:25:f3:af:c5:ad:31:d4:45:20:ea:a2:18:30:cc:ef:bb: 8b:3a:b0:fa:2d:a5:b2:dd:0e:fe:a7:f5:13:58:e2:2e:1a:e3: ac:24:f5:a6:87:d2:6b:18:90:1a:52:06:90:16:c0:05:74:80: 06:76:0a:4a:7c:cc:89:29:dd:ec:3c:97:14:8c:73:a9:db:6d: 38:df:d7:bb:50:fe:fd:99:8b:bb:c2:16:bc:1a:46:2e:b2:56: ad:0c:ba:02:83:67:b3:48:d1:81:f7:75:ba:e6:3e:30:1d:a3: 6e:ef:64:1f:cd:72:f5:8b:08:27:b0:c8:71:7d:d2:11:33:f9: 8a:2d:c4:99:94:74:b5:8f:c0:25:2e:41:59:6f:ea:43:36:55: 16:93:d7:84:df:75:ef:02:da:b4:a5:05:a6:82:99:0a:35:b1: cb:63:1e:53:10:4b:83:02:6c:b1:b1:b6:be:49:db:30:15:67: 82:d1:7d:e6:2b:f7:d4:91:0e:1f:d1:36:ad:b8:46:7d:e6:4e: 73:f2:47:91:a6:41:05:7f:52:14:58:57:40:6a:81:77:14:27: 7a:68:a5:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUflni9VDvYl+kHf4xFRbxLHua2YowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTYwMDA2WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Njc3NjFkNjFhNmY0M2VlMWE5NjRmOGQ4ODAzODBiNTVk OTY4OTNkMThjMGZhYjQ2YTc5ZDIzYzdmZjdlY2Y0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDSRGeoswmFgE8TVr8R2yHRgg6+C3TpHxg8zwIRAKZh11s hMb+022f7W6NcJ9V4Aejo3ZgFXRek37VoTiH71OxC5MsIZQoDxY7li1EXtJtLuvW woUsV/d8xL1pPGoEYkE6jyBZdcQN+CWaXpS3/JpF98XEh9XaFzoX4AHYry9JKaU2 g7EoT8zAZOQUpImGBZBRhpgchlaX+KtIDSknpD+npmEtyP2+fr/ZEfOGI+krzaTq Rh/1q5GZhdnWDxzFhL0X6uxvLZg4viTlJc3wBWeQHQT0pSbCbCx874VBsxsmH+XV 1xwDJRDUIM1AxADQboxQtCHHHQwJx4InsU7+vcilAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNhQSaXgGGvaHllkHH9UWVY2W2EkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjYzgwYzBhLWM3Y2YtNGVkYS04NTI5LTUzMTU0Yjg3M2RiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPvjANBgkqhkiG9w0BAQsFAAOCAQEAoyjX7Uag/nnyEcO3LLDfEdwte6ns HzIoFfkjJr2fh6MWI6bNK2kl86/FrTHURSDqohgwzO+7izqw+i2lst0O/qf1E1ji LhrjrCT1pofSaxiQGlIGkBbABXSABnYKSnzMiSnd7DyXFIxzqdttON/Xu1D+/ZmL u8IWvBpGLrJWrQy6AoNns0jRgfd1uuY+MB2jbu9kH81y9YsIJ7DIcX3SETP5ii3E mZR0tY/AJS5BWW/qQzZVFpPXhN917wLatKUFpoKZCjWxy2MeUxBLgwJssbG2vknb MBVngtF95iv31JEOH9E2rbhGfeZOc/JHkaZBBX9SFFhXQGqBdxQnemilZw== -----END CERTIFICATE-----Generated at Mon May 5 21:44:20 2025 by rpki-client