$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09841762-a46f-48b0-b1d1-c33dc1aada32.roa File: 09841762-a46f-48b0-b1d1-c33dc1aada32.roa (raw, json) Hash identifier: JPeL1zz5SFtLJqjevnGivknN5BIzx44PsZLxYeLbA1Y= Subject key identifier: 4E:E3:1D:72:7D:4D:17:01:B6:D3:3D:F4:96:78:22:D3:E6:B6:FD:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27966A4253F0EDA9A5F45BC31DC0161A2A2D6C8F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09841762-a46f-48b0-b1d1-c33dc1aada32.roa Signing time: Fri 18 Apr 2025 15:51:55 +0000 ROA not before: Fri 18 Apr 2025 15:51:55 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.202.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:96:6a:42:53:f0:ed:a9:a5:f4:5b:c3:1d:c0:16:1a:2a:2d:6c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:51:55 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=a3df8b81e0c78dc53a8099fd94572e80b71c9d3b712fbd9533a5bc18f8e88a0e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:a2:cb:4b:cd:0c:24:c7:bc:2f:38:8a:33: 54:bf:bd:ff:40:f9:19:9d:be:44:da:1c:af:cb:8f: 18:45:79:47:90:76:b0:7a:84:d3:3d:cf:31:c8:9a: 59:b2:39:b9:e4:59:fe:75:c5:fe:3c:b6:41:a5:af: 51:c1:59:3f:9a:d5:e8:84:a7:10:0b:21:82:2a:52: 71:95:09:d4:89:3e:20:27:af:5e:97:57:c5:92:8e: f0:30:cc:66:02:91:51:18:a6:38:37:7a:71:90:ad: a5:d5:5c:f2:06:a5:78:39:56:0e:18:dc:c8:35:0c: c2:08:71:7f:ae:bc:ef:e0:a2:a0:a7:e4:32:26:f5: b8:ad:b8:99:a2:32:d2:42:0b:87:9d:c0:f1:a1:ae: 22:3e:a0:6c:6d:40:a0:e2:10:f5:e2:2f:57:bd:4a: 7f:11:27:c5:f0:86:66:d8:94:a9:b0:32:d0:59:43: 86:ac:bc:a2:5a:fb:7e:51:6b:93:7f:cd:bd:f1:e5: 4d:c0:8a:32:2d:e3:27:ec:f8:e0:d5:d5:d5:1f:9a: a8:04:f8:d1:f2:98:09:c1:a0:e8:18:af:f4:3b:59: 7a:be:f8:23:f2:a1:9d:94:07:77:ca:03:f8:0f:82: b0:a4:92:c5:dd:30:da:22:52:d7:27:73:30:8f:32: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E3:1D:72:7D:4D:17:01:B6:D3:3D:F4:96:78:22:D3:E6:B6:FD:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09841762-a46f-48b0-b1d1-c33dc1aada32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.202.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:21:bf:96:58:5c:d3:b6:16:fa:30:cc:57:de:90:26:21:bb: 98:75:c0:40:f8:c3:cb:6d:91:c8:cd:0c:87:84:74:83:73:a4: eb:53:0c:ef:b6:4d:38:52:4a:d5:0d:7c:04:54:8d:a5:55:c6: b9:6f:70:52:04:08:6f:33:07:79:3e:c1:fd:b6:10:d1:e5:96: d0:d1:56:3c:00:ed:90:64:7f:a0:1f:8c:81:d7:65:38:78:20: 48:07:71:7d:ef:c1:44:88:60:d9:b2:cc:17:67:4b:d6:19:fa: 1a:db:b6:77:0e:6b:75:6d:9d:ed:0a:3d:8d:9b:6b:1d:17:54: 13:a7:c4:92:df:28:eb:d6:c2:46:15:59:fd:c5:41:94:fd:19: d6:d7:95:d0:ad:02:0f:71:2c:5a:bc:bd:94:fb:d9:85:ef:31: ba:8a:3e:96:a6:3d:e5:fa:e6:ab:83:aa:d2:13:b9:e6:60:62: 1a:04:46:c2:d2:7f:79:e3:0b:57:47:15:69:0d:8b:5e:a9:6a: 16:f6:1f:3d:df:3f:59:4a:13:e3:fa:31:d8:8e:2d:b0:35:f1: e9:a2:c2:14:39:37:19:b4:2b:7a:25:ca:ae:52:a7:f3:77:be: e4:46:59:35:b9:dd:20:30:16:5a:9e:63:c8:92:f2:1e:01:fa: ea:df:22:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ5ZqQlPw7aml9FvDHcAWGiotbI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTU1MTU1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2RmOGI4MWUwYzc4ZGM1M2E4MDk5ZmQ5NDU3MmU4MGI3 MWM5ZDNiNzEyZmJkOTUzM2E1YmMxOGY4ZTg4YTBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoW6LLS80MJMe8LziKM1S/vf9A+RmdvkTaHK/LjxhFeUeQ drB6hNM9zzHImlmyObnkWf51xf48tkGlr1HBWT+a1eiEpxALIYIqUnGVCdSJPiAn r16XV8WSjvAwzGYCkVEYpjg3enGQraXVXPIGpXg5Vg4Y3Mg1DMIIcX+uvO/goqCn 5DIm9bituJmiMtJCC4edwPGhriI+oGxtQKDiEPXiL1e9Sn8RJ8XwhmbYlKmwMtBZ Q4asvKJa+35Ra5N/zb3x5U3AijIt4yfs+ODV1dUfmqgE+NHymAnBoOgYr/Q7WXq+ +CPyoZ2UB3fKA/gPgrCkksXdMNoiUtcnczCPMipNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTuMdcn1NFwG20z30lngi0+a2/UkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5ODQxNzYyLWE0NmYtNDhiMC1iMWQxLWMzM2RjMWFhZGEzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2ygQwDQYJKoZIhvcNAQELBQADggEBAH0hv5ZYXNO2FvowzFfekCYhu5h1 wED4w8ttkcjNDIeEdINzpOtTDO+2TThSStUNfARUjaVVxrlvcFIECG8zB3k+wf22 ENHlltDRVjwA7ZBkf6AfjIHXZTh4IEgHcX3vwUSIYNmyzBdnS9YZ+hrbtncOa3Vt ne0KPY2bax0XVBOnxJLfKOvWwkYVWf3FQZT9GdbXldCtAg9xLFq8vZT72YXvMbqK PpamPeX65quDqtITueZgYhoERsLSf3njC1dHFWkNi16pahb2Hz3fP1lKE+P6MdiO LbA18emiwhQ5Nxm0K3olyq5Sp/N3vuRGWTW53SAwFlqeY8iS8h4B+urfInk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:47:32 2025 by rpki-client