$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ff6e4e8-7384-4501-b7ab-e5ae91fe9794.roa File: 0ff6e4e8-7384-4501-b7ab-e5ae91fe9794.roa (raw, json) Hash identifier: gDw7PypBF2tAwhJQ2qmzuBWRCz7EWUxH2aEVmEotIkw= Subject key identifier: 67:2D:A3:DC:C9:36:E8:F9:71:E8:B6:DE:72:4D:56:48:DD:E6:0E:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4065598E4FAA6004850EECDA1159BB50FABA79D9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ff6e4e8-7384-4501-b7ab-e5ae91fe9794.roa Signing time: Fri 18 Apr 2025 15:31:49 +0000 ROA not before: Fri 18 Apr 2025 15:31:49 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:65:59:8e:4f:aa:60:04:85:0e:ec:da:11:59:bb:50:fa:ba:79:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:31:49 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=d625fd5773b41cda1da54bc241423610bf323c51078c032fcfe5ca9a44c4fbec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:45:a2:a9:ab:c0:e0:cf:36:b7:9f:5a:ce: 38:7c:95:c2:97:43:f5:c5:fb:16:eb:c2:53:f9:a1: b3:da:40:7d:b1:e5:72:1c:bf:58:ac:46:af:3c:ca: 62:8a:83:68:51:22:10:f3:d9:28:05:11:b1:42:04: 29:c6:49:d4:39:ea:37:40:f5:6f:e9:6e:f2:80:e7: 16:13:35:0e:4d:40:5f:b3:41:a5:c1:d3:b5:b9:a1: 44:b9:18:b5:db:a8:75:93:b6:cd:e0:59:1f:55:0f: 2d:46:3e:72:1c:95:59:60:71:ae:86:91:5e:4c:c7: d1:f2:ca:67:62:16:8c:49:2b:a4:29:b5:c2:7b:99: 0d:62:93:40:50:e6:82:f0:1a:86:8a:2f:2e:64:8d: 50:cd:82:64:b1:9c:63:84:c0:b1:cc:4d:17:44:40: bb:17:86:6e:d5:81:fd:f2:50:66:9c:78:7d:e1:a6: fa:58:2b:a7:79:97:7a:3c:01:51:e1:07:9e:65:51: 0a:e6:76:52:99:6b:43:8a:74:11:b0:29:69:7f:19: d2:7e:31:a4:4c:41:3e:11:fa:ce:dc:32:65:64:66: 7a:b5:f3:7a:8e:16:95:cf:ba:9f:c4:9f:54:2f:48: 95:96:ee:cf:db:f1:cd:6d:24:b9:dd:6a:be:f9:af: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2D:A3:DC:C9:36:E8:F9:71:E8:B6:DE:72:4D:56:48:DD:E6:0E:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ff6e4e8-7384-4501-b7ab-e5ae91fe9794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.192.0/24 Signature Algorithm: sha256WithRSAEncryption 39:79:b6:0c:6a:0c:61:83:f7:46:64:90:c4:f5:a3:a6:01:ea: bf:36:ad:d8:30:77:b4:f8:e9:9e:be:63:67:8d:86:24:f3:7a: d3:f8:1f:79:5f:cf:20:89:02:c6:38:26:29:ea:07:ef:f8:9f: ac:42:91:3e:c5:1a:f8:85:d3:6e:1c:be:46:97:bb:11:ea:3d: 35:bc:d0:ff:ca:c1:10:1a:53:da:3b:50:4f:b7:52:a9:a9:b2: 47:86:a8:b0:25:67:af:63:55:95:76:15:78:61:d1:8c:cd:e4: fa:17:99:e1:50:39:18:d5:94:22:f4:8e:6b:c6:f5:23:31:71: bb:cc:4a:24:f5:2a:58:33:d0:0a:4a:cf:b7:50:41:50:74:63: f0:b1:00:7b:55:d1:76:e3:ae:88:81:66:b0:bb:c7:19:dc:c0: 11:89:e3:63:43:d1:ee:96:34:8a:47:b0:a9:66:b7:9b:f1:82: 8d:3e:9d:20:f6:a5:c0:e8:d7:65:a3:5f:f2:fb:56:19:bb:e9: 27:13:1f:39:51:60:95:56:59:9b:84:fd:d4:e7:f2:4b:c7:e2: 5f:a6:6a:83:ec:63:57:fd:59:16:69:e5:58:04:5c:8e:a5:42: 17:b2:bc:d9:35:2b:a6:11:a4:18:78:1c:3e:0e:70:df:ff:3b: f0:3d:9e:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQGVZjk+qYASFDuzaEVm7UPq6edkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUzMTQ5WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjI1ZmQ1NzczYjQxY2RhMWRhNTRiYzI0MTQyMzYxMGJm MzIzYzUxMDc4YzAzMmZjZmU1Y2E5YTQ0YzRmYmVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC02kWiqavA4M82t59azjh8lcKXQ/XF+xbrwlP5obPaQH2x 5XIcv1isRq88ymKKg2hRIhDz2SgFEbFCBCnGSdQ56jdA9W/pbvKA5xYTNQ5NQF+z QaXB07W5oUS5GLXbqHWTts3gWR9VDy1GPnIclVlgca6GkV5Mx9HyymdiFoxJK6Qp tcJ7mQ1ik0BQ5oLwGoaKLy5kjVDNgmSxnGOEwLHMTRdEQLsXhm7Vgf3yUGaceH3h pvpYK6d5l3o8AVHhB55lUQrmdlKZa0OKdBGwKWl/GdJ+MaRMQT4R+s7cMmVkZnq1 83qOFpXPup/En1QvSJWW7s/b8c1tJLndar75r4hvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZy2j3Mk26Plx6Lbeck1WSN3mDsEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmZjZlNGU4LTczODQtNDUwMS1iN2FiLWU1YWU5MWZlOTc5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2xcAwDQYJKoZIhvcNAQELBQADggEBADl5tgxqDGGD90ZkkMT1o6YB6r82 rdgwd7T46Z6+Y2eNhiTzetP4H3lfzyCJAsY4JinqB+/4n6xCkT7FGviF024cvkaX uxHqPTW80P/KwRAaU9o7UE+3UqmpskeGqLAlZ69jVZV2FXhh0YzN5PoXmeFQORjV lCL0jmvG9SMxcbvMSiT1Klgz0ApKz7dQQVB0Y/CxAHtV0XbjroiBZrC7xxncwBGJ 42ND0e6WNIpHsKlmt5vxgo0+nSD2pcDo12WjX/L7Vhm76ScTHzlRYJVWWZuE/dTn 8kvH4l+maoPsY1f9WRZp5VgEXI6lQheyvNk1K6YRpBh4HD4OcN//O/A9nlE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:13 2025 by rpki-client