$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/056c132e-4148-44cc-b263-a445ceafabdd.roa File: 056c132e-4148-44cc-b263-a445ceafabdd.roa (raw, json) Hash identifier: 2OJLOQymA453XgQvfiyDHFpV3/vsKUNlNCezpADUDgE= Subject key identifier: 1C:60:91:BD:DC:D4:F7:3B:2E:02:9D:C1:85:59:EA:F2:E0:93:C2:7A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29F7ABB1D0C3A892D22890E2D4B1DD16D26688DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/056c132e-4148-44cc-b263-a445ceafabdd.roa Signing time: Fri 25 Apr 2025 16:40:48 +0000 ROA not before: Fri 25 Apr 2025 16:40:48 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 18.253.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f7:ab:b1:d0:c3:a8:92:d2:28:90:e2:d4:b1:dd:16:d2:66:88:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:40:48 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=09cda3f8029dfc2bc36000a772a6d5efbd2a47fdbe5c0a16ca60c7a61a30c299, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fc:7c:83:a5:f9:b2:3d:70:c0:56:bb:8b:bd: 64:35:f1:cf:2c:54:9c:bc:a5:eb:b0:7a:2a:f2:c5: 24:f7:7a:6d:ce:ee:9d:c5:81:66:70:ae:1d:2f:23: 26:c3:b1:e6:c1:0d:f5:d0:ba:8c:ec:31:5a:56:26: 33:32:f8:7f:14:f9:1f:74:70:87:49:78:57:23:a6: 89:b4:ac:f6:55:8d:e3:fc:db:1a:8c:fb:1d:1d:a3: 7f:c2:e7:03:c2:36:74:1a:42:72:97:7a:df:7e:24: 46:1a:4d:0a:22:ee:fd:53:ba:54:e3:58:c8:3b:8b: 7d:b7:58:8e:d0:99:da:c9:f2:f0:08:fc:d5:f1:15: 6a:72:5e:ff:df:0b:3e:62:12:1f:2a:b2:05:6b:87: e6:c8:d2:2e:3c:88:db:77:5c:f8:31:95:02:07:1c: 78:59:93:f4:7a:6a:12:d6:dd:70:0e:57:4b:47:e5: 75:f0:4e:49:d2:c9:63:c7:f6:e7:43:8f:71:e3:c5: 2e:78:c7:7e:c2:99:66:92:ba:15:dc:dc:c5:0c:fc: 51:f8:81:d4:03:32:b4:40:64:4d:80:20:d2:c0:c5: 7e:be:8d:a5:27:fa:22:9b:ef:61:93:cd:8d:58:01: b8:2e:99:dc:b5:9c:36:e3:26:6a:a7:84:36:a5:df: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:60:91:BD:DC:D4:F7:3B:2E:02:9D:C1:85:59:EA:F2:E0:93:C2:7A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/056c132e-4148-44cc-b263-a445ceafabdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.64.0/18 Signature Algorithm: sha256WithRSAEncryption 90:70:6b:47:e1:08:ae:82:e6:13:9b:af:e2:44:2f:18:ae:33: ee:6b:80:c8:e1:fc:b4:c9:e7:f6:4b:f9:0a:73:9e:58:17:66: ef:13:dc:bf:b4:c6:87:63:01:24:07:d5:1d:b4:50:ed:2f:89: a5:6b:2f:71:8f:24:ae:36:be:6a:72:64:6a:07:20:b4:e2:0e: 44:a2:a5:99:19:f2:fc:90:00:d5:e2:3a:11:01:36:99:cf:82: 5e:f0:bb:92:92:fe:b3:17:c2:3e:83:dc:eb:82:f2:04:ac:69: 83:42:8e:5e:4e:7b:ee:ee:ca:3d:38:db:ce:2e:f5:56:b9:d3: c3:34:55:d5:92:5c:9e:ae:be:78:a4:f8:1e:c5:3b:32:c7:90: a7:16:18:e9:56:ff:eb:7e:67:0d:0a:98:7f:5f:0b:1d:66:b1: fd:4e:c7:4b:f0:f7:ac:45:97:82:88:f4:82:16:54:3a:39:5c: 63:16:5c:26:b9:16:b2:64:64:63:86:64:11:13:db:70:6a:21: 0b:61:83:53:80:7e:35:4d:ae:22:15:00:36:d6:fd:79:99:65: 49:f3:f4:d6:01:bc:f0:d7:85:0e:07:bf:1a:46:e8:e9:f5:4f: cc:1c:d2:6f:48:f4:7a:2b:bd:d1:6a:91:56:53:3f:60:f6:99: 2e:8e:a5:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKfersdDDqJLSKJDi1LHdFtJmiN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY0MDQ4WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWNkYTNmODAyOWRmYzJiYzM2MDAwYTc3MmE2ZDVlZmJk MmE0N2ZkYmU1YzBhMTZjYTYwYzdhNjFhMzBjMjk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV/HyDpfmyPXDAVruLvWQ18c8sVJy8peuweiryxST3em3O 7p3FgWZwrh0vIybDsebBDfXQuozsMVpWJjMy+H8U+R90cIdJeFcjpom0rPZVjeP8 2xqM+x0do3/C5wPCNnQaQnKXet9+JEYaTQoi7v1TulTjWMg7i323WI7QmdrJ8vAI /NXxFWpyXv/fCz5iEh8qsgVrh+bI0i48iNt3XPgxlQIHHHhZk/R6ahLW3XAOV0tH 5XXwTknSyWPH9udDj3HjxS54x37CmWaSuhXc3MUM/FH4gdQDMrRAZE2AINLAxX6+ jaUn+iKb72GTzY1YAbgumdy1nDbjJmqnhDal383/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHGCRvdzU9zsuAp3BhVnq8uCTwnowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA1NmMxMzJlLTQxNDgtNDRjYy1iMjYzLWE0NDVjZWFmYWJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYS/UAwDQYJKoZIhvcNAQELBQADggEBAJBwa0fhCK6C5hObr+JELxiuM+5r gMjh/LTJ5/ZL+QpznlgXZu8T3L+0xodjASQH1R20UO0viaVrL3GPJK42vmpyZGoH ILTiDkSipZkZ8vyQANXiOhEBNpnPgl7wu5KS/rMXwj6D3OuC8gSsaYNCjl5Oe+7u yj04284u9Va508M0VdWSXJ6uvnik+B7FOzLHkKcWGOlW/+t+Zw0KmH9fCx1msf1O x0vw96xFl4KI9IIWVDo5XGMWXCa5FrJkZGOGZBET23BqIQthg1OAfjVNriIVADbW /XmZZUnz9NYBvPDXhQ4HvxpG6On1T8wc0m9I9HorvdFqkVZTP2D2mS6OpY8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:42 2025 by rpki-client