$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ed5fae1-c958-4600-a7cf-149c315b2d49.roa File: 0ed5fae1-c958-4600-a7cf-149c315b2d49.roa (raw, json) Hash identifier: KIKrZ7FPX52UuGDxza2gjqWU5N7rghDdQNMZbIrwPu0= Subject key identifier: A6:47:66:A8:E6:C2:17:63:C2:7F:C8:8C:B9:02:31:4E:E5:AE:4D:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53D41CB818CA9F97F615C99B0EEF37F4A172596F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ed5fae1-c958-4600-a7cf-149c315b2d49.roa Signing time: Fri 18 Apr 2025 16:31:42 +0000 ROA not before: Fri 18 Apr 2025 16:31:42 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.202.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:1c:b8:18:ca:9f:97:f6:15:c9:9b:0e:ef:37:f4:a1:72:59:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 16:31:42 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=f6effa0445b9970ad0451b3fd8c5ddb6b7ea14a022ee58c25bd5960ae31ec118, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:29:59:bb:33:d2:9b:e5:ef:d4:ae:d6:33: 0e:1f:92:2e:26:d0:59:5e:1c:ff:a9:63:74:57:a0: f6:0a:82:71:e3:c7:73:28:d2:0f:f7:0a:3a:4c:b0: fc:ae:b7:98:db:7b:7c:a3:d4:0a:91:aa:90:fe:5d: 8b:a4:5c:fa:8a:34:2b:c5:2e:e2:8c:4f:6c:56:aa: 4c:11:df:d8:dd:61:b7:ce:13:f6:be:9c:ef:fe:57: f5:93:dc:6f:76:a4:5b:ae:d7:3f:ad:90:b7:3d:d1: af:10:d4:25:46:dd:b4:ee:ec:74:7f:51:23:59:cb: 3e:8c:4d:67:8a:57:91:b5:f5:c6:12:a1:52:c4:cb: 50:1c:e8:a1:f6:da:b5:07:a2:d2:da:c4:1a:e7:10: b8:3a:60:c8:a9:4c:2a:85:3d:dc:80:47:0e:71:26: 35:f1:45:0c:48:1c:20:6e:34:60:93:9f:b0:96:d2: 70:1e:58:6b:08:13:06:4a:8b:0a:26:e0:56:2b:c2: bc:f3:43:eb:38:53:43:0f:52:43:9c:8e:27:65:b0: f1:6a:f7:8e:47:83:d9:b3:63:a6:87:b4:63:6a:ac: 23:c5:29:ef:a1:b0:7b:b3:e5:5c:81:6c:fd:eb:47: 91:25:23:db:0c:09:96:62:a6:ee:56:16:09:65:5e: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:47:66:A8:E6:C2:17:63:C2:7F:C8:8C:B9:02:31:4E:E5:AE:4D:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ed5fae1-c958-4600-a7cf-149c315b2d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.202.0.0/15 Signature Algorithm: sha256WithRSAEncryption 37:1c:9d:e3:26:60:60:b3:c9:90:c2:61:52:76:0d:97:78:db: 08:b2:72:98:cd:aa:10:7c:11:27:99:fc:63:12:0d:36:54:54: ae:25:10:3a:8c:a8:90:af:e7:77:44:ec:4d:86:fe:79:c0:cb: 8b:ef:fc:10:2c:6c:6f:2c:d7:8b:dc:b4:7c:d8:9f:1d:47:89: 69:27:ba:c4:d6:f4:7c:e0:f4:a1:8d:16:8f:8e:26:1b:58:e9: fd:98:07:d6:63:8f:95:fa:21:31:7b:05:be:d9:b6:ec:80:20: 27:6e:82:fa:aa:63:4d:39:3e:1a:bc:ad:f3:7a:6d:15:4a:95: 1c:9c:56:42:81:9b:04:9b:75:1a:f8:4d:df:f8:80:65:bb:14: 07:29:93:ab:d7:7a:ce:3b:4c:59:c5:94:70:5e:a6:97:5d:82: 4b:91:71:97:8e:58:dd:0e:10:c9:a8:fa:eb:4c:db:2c:1e:99: 82:a3:bc:7f:21:89:8c:6b:ed:00:0d:5a:97:45:30:05:5c:11: 73:36:b1:3a:35:2d:98:21:0b:54:65:48:59:e3:94:56:1f:57: 6c:93:83:bc:33:c4:71:ff:bd:69:11:f3:1a:a2:c7:39:bc:9d: d2:42:bf:8f:9c:a1:f5:c9:8c:0f:37:4c:89:9e:0e:2d:a8:45: cb:92:c7:3f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU9QcuBjKn5f2FcmbDu839KFyWW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTYzMTQyWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmVmZmEwNDQ1Yjk5NzBhZDA0NTFiM2ZkOGM1ZGRiNmI3 ZWExNGEwMjJlZTU4YzI1YmQ1OTYwYWUzMWVjMTE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4aClZuzPSm+Xv1K7WMw4fki4m0FleHP+pY3RXoPYKgnHj x3Mo0g/3CjpMsPyut5jbe3yj1AqRqpD+XYukXPqKNCvFLuKMT2xWqkwR39jdYbfO E/a+nO/+V/WT3G92pFuu1z+tkLc90a8Q1CVG3bTu7HR/USNZyz6MTWeKV5G19cYS oVLEy1Ac6KH22rUHotLaxBrnELg6YMipTCqFPdyARw5xJjXxRQxIHCBuNGCTn7CW 0nAeWGsIEwZKiwom4FYrwrzzQ+s4U0MPUkOcjidlsPFq945Hg9mzY6aHtGNqrCPF Ke+hsHuz5VyBbP3rR5ElI9sMCZZipu5WFgllXszLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpkdmqObCF2PCf8iMuQIxTuWuTWwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlZDVmYWUxLWM5NTgtNDYwMC1hN2NmLTE0OWMzMTViMmQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2yjANBgkqhkiG9w0BAQsFAAOCAQEANxyd4yZgYLPJkMJhUnYNl3jbCLJy mM2qEHwRJ5n8YxINNlRUriUQOoyokK/nd0TsTYb+ecDLi+/8ECxsbyzXi9y0fNif HUeJaSe6xNb0fOD0oY0Wj44mG1jp/ZgH1mOPlfohMXsFvtm27IAgJ26C+qpjTTk+ Gryt83ptFUqVHJxWQoGbBJt1GvhN3/iAZbsUBymTq9d6zjtMWcWUcF6ml12CS5Fx l45Y3Q4Qyaj660zbLB6ZgqO8fyGJjGvtAA1al0UwBVwRczaxOjUtmCELVGVIWeOU Vh9XbJODvDPEcf+9aRHzGqLHObyd0kK/j5yh9cmMDzdMiZ4OLahFy5LHPw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:07 2025 by rpki-client