$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00096550-9146-49e8-a27a-307c65c0661e.roa File: 00096550-9146-49e8-a27a-307c65c0661e.roa (raw, json) Hash identifier: RAwnN1/Je/N/eI1dTc4qM0UD2EHXdTogR/7ISQlGVH4= Subject key identifier: 21:B7:BB:6E:46:B0:B0:34:7B:02:B9:BE:FC:68:27:C7:94:F4:3F:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F9DE1AEAC343C120E4E02E206BB682F5C8A9DD9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00096550-9146-49e8-a27a-307c65c0661e.roa Signing time: Mon 14 Apr 2025 16:42:00 +0000 ROA not before: Mon 14 Apr 2025 16:42:00 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.68.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9d:e1:ae:ac:34:3c:12:0e:4e:02:e2:06:bb:68:2f:5c:8a:9d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:42:00 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=6a180bc26ffdc6a6c8f3c33a932b61added1db263cbf09eeccbaf8712ee56764, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:05:20:c9:1f:72:07:36:17:2a:e0:03:33: bb:e2:e5:56:84:56:46:c4:00:c9:1e:cf:97:83:63: f1:10:b2:35:33:89:f8:37:38:3a:72:80:76:02:ac: 69:15:68:00:d8:1a:40:c2:f7:1d:29:9d:cd:25:74: 14:01:54:cc:7e:21:53:48:be:78:bf:22:12:5b:30: f5:3c:56:27:f0:fa:04:ce:3d:2a:bc:82:a7:07:e9: ec:d0:3a:75:94:b2:7b:8c:32:28:fe:6d:ec:d6:1e: a9:d9:2a:ac:67:8e:5e:c5:04:b8:02:1c:d9:02:5d: 29:28:3b:73:89:69:f1:78:93:9c:b2:83:5c:71:e1: ea:02:13:f6:c7:5b:2f:ae:d1:24:5e:44:8a:02:46: 61:3f:d8:2f:ea:99:57:5a:11:d1:d8:dc:67:b2:65: 2f:12:85:e4:5c:0b:d9:a4:8d:ed:b9:71:cc:11:7a: 87:79:09:45:3b:55:f8:7d:2c:c6:04:4b:88:55:d5: 7d:2a:92:1c:49:b7:b6:b4:df:ab:a6:58:bf:f6:77: 4a:95:36:fb:e6:52:ea:dc:99:f1:26:69:9e:11:d7: ac:b1:e9:74:21:bf:69:a4:a0:ba:22:95:5c:f5:87: 9f:e1:63:69:9a:3a:9e:97:58:d2:39:ba:89:11:36: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B7:BB:6E:46:B0:B0:34:7B:02:B9:BE:FC:68:27:C7:94:F4:3F:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00096550-9146-49e8-a27a-307c65c0661e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.68.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3a:46:1f:10:a0:67:e5:61:57:25:a6:b2:1d:e7:e6:1e:83:b4: 6e:b0:49:62:17:5f:fc:71:9c:9b:04:47:bb:e7:10:bc:04:43: 73:5a:1a:51:05:75:6f:b2:00:fa:10:a3:82:a2:c4:c0:9d:51: 57:85:8b:16:38:0a:ec:17:24:2f:28:57:d7:57:cc:48:e5:b7: 7b:d0:fe:9c:5b:95:7b:73:fb:6e:bb:b1:2f:a0:c0:3c:09:f0: a8:be:a0:89:12:27:3d:be:a4:5d:9c:34:3e:b1:21:04:7a:b7: 16:38:08:fa:4d:9b:d3:77:10:25:5e:02:32:a1:fc:77:51:8d: e9:67:4f:be:e6:32:a1:ee:df:54:7f:ac:08:ff:90:96:81:47: dd:21:8e:07:88:9b:a6:21:a2:b1:16:f6:0a:64:c3:f2:39:5a: 01:9a:90:18:da:7b:d9:68:95:6f:7a:97:e2:1f:83:33:f1:61: fc:53:47:92:1d:59:84:1e:a0:16:e3:1b:dc:dc:ca:dd:c6:28: d5:46:ec:02:55:ce:10:94:07:9e:ab:1c:ca:6c:56:d9:2c:15: 0e:d6:35:63:c7:a9:ea:99:0e:65:3d:c0:10:ad:8e:2f:1d:d3: cd:aa:18:96:d6:90:8d:b1:5b:9e:24:65:c5:fb:84:41:b9:20: e5:16:89:42 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD53hrqw0PBIOTgLiBrtoL1yKndkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTY0MjAwWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTE4MGJjMjZmZmRjNmE2YzhmM2MzM2E5MzJiNjFhZGRl ZDFkYjI2M2NiZjA5ZWVjY2JhZjg3MTJlZTU2NzY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHowUgyR9yBzYXKuADM7vi5VaEVkbEAMkez5eDY/EQsjUz ifg3ODpygHYCrGkVaADYGkDC9x0pnc0ldBQBVMx+IVNIvni/IhJbMPU8Vifw+gTO PSq8gqcH6ezQOnWUsnuMMij+bezWHqnZKqxnjl7FBLgCHNkCXSkoO3OJafF4k5yy g1xx4eoCE/bHWy+u0SReRIoCRmE/2C/qmVdaEdHY3GeyZS8SheRcC9mkje25ccwR eod5CUU7Vfh9LMYES4hV1X0qkhxJt7a036umWL/2d0qVNvvmUurcmfEmaZ4R16yx 6XQhv2mkoLoilVz1h5/hY2maOp6XWNI5uokRNk0bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUIbe7bkawsDR7Arm+/Ggnx5T0PxYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwMDk2NTUwLTkxNDYtNDllOC1hMjdhLTMwN2M2NWMwNjYxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0RDANBgkqhkiG9w0BAQsFAAOCAQEAOkYfEKBn5WFXJaayHefmHoO0brBJ Yhdf/HGcmwRHu+cQvARDc1oaUQV1b7IA+hCjgqLEwJ1RV4WLFjgK7BckLyhX11fM SOW3e9D+nFuVe3P7bruxL6DAPAnwqL6giRInPb6kXZw0PrEhBHq3FjgI+k2b03cQ JV4CMqH8d1GN6WdPvuYyoe7fVH+sCP+QloFH3SGOB4ibpiGisRb2CmTD8jlaAZqQ GNp72WiVb3qX4h+DM/Fh/FNHkh1ZhB6gFuMb3NzK3cYo1UbsAlXOEJQHnqscymxW 2SwVDtY1Y8ep6pkOZT3AEK2OLx3TzaoYltaQjbFbniRlxfuEQbkg5RaJQg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:37:03 2025 by rpki-client