$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13083c8a-1900-47cd-98ec-c6c3f777f906.roa File: 13083c8a-1900-47cd-98ec-c6c3f777f906.roa (raw, json) Hash identifier: 5qRrJntKZOKtu96nU37v+88QDfh09xj4pllZp7gSbig= Subject key identifier: 62:77:E4:91:5F:96:91:49:13:85:65:72:01:7B:95:C6:18:6E:77:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16F57CA816E340B80E53A1603712A94A15F28DDE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13083c8a-1900-47cd-98ec-c6c3f777f906.roa Signing time: Fri 18 Apr 2025 15:51:02 +0000 ROA not before: Fri 18 Apr 2025 15:51:02 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.199.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f5:7c:a8:16:e3:40:b8:0e:53:a1:60:37:12:a9:4a:15:f2:8d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:51:02 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=e7f79e4d8dad67e313427994453b94d169f0776cc37bc7eae50bdc09903184a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:e6:40:ff:59:de:83:ea:2d:a0:bb:29:97: b1:67:8a:50:9c:2f:83:11:d4:be:ba:2b:67:8c:d2: f6:03:29:55:98:9f:0f:16:f8:3d:cb:ed:ac:10:16: cd:8d:e1:64:03:50:26:d0:05:64:1c:0a:bc:5c:5e: 66:72:dd:ad:ec:30:01:26:16:96:18:5d:76:5e:b9: 2f:26:46:21:c2:88:1e:22:f7:91:32:7e:0f:de:6c: 02:a6:38:47:7f:4d:c7:55:75:bc:6f:6b:b2:97:0e: 0a:3d:69:e0:e2:95:dd:5f:f5:5f:76:e6:ab:f2:4e: 31:4d:eb:d7:10:c2:4f:56:94:1a:77:95:74:87:03: 2f:35:7f:be:9f:45:6c:92:9e:01:48:13:55:3e:53: dc:e3:6c:86:12:3d:80:9e:a7:ec:bf:ad:a7:35:f7: c7:e7:4e:d9:bd:32:65:25:3f:ac:85:f3:29:a7:a2: aa:f5:f4:bf:85:8a:e2:a9:e9:c4:a2:57:4a:42:30: 8f:7c:b0:5d:5a:db:a6:bc:e1:2c:c1:de:d9:ae:fc: 87:be:19:6f:6f:7c:09:6c:3e:43:91:b8:65:bb:c5: 17:ff:ef:6c:4e:ae:ff:34:23:6a:46:10:7e:a9:33: 02:4a:07:60:1c:cf:69:3c:dd:5a:61:da:de:a9:d9: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:77:E4:91:5F:96:91:49:13:85:65:72:01:7B:95:C6:18:6E:77:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13083c8a-1900-47cd-98ec-c6c3f777f906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.199.112.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:fb:63:6a:3d:85:4f:8b:f4:4e:c4:3c:36:a6:36:88:31:d6: 78:59:ce:99:48:ef:6b:41:23:27:8d:c5:85:40:f3:a6:a9:97: f8:ee:c3:1f:cd:1b:79:4f:42:4b:d2:d4:26:c9:ba:47:15:2c: 42:7a:44:1b:9f:b2:21:1d:a7:7c:4f:ae:eb:e0:22:5f:df:db: e4:50:24:93:b7:b5:52:85:b4:4c:93:58:fd:a7:df:f5:eb:b5: 8a:5d:d0:1c:94:55:ef:96:a4:41:9d:29:1f:ca:cb:2f:af:f3: f0:12:2b:ee:79:27:0e:30:53:ec:99:d9:3a:19:d7:a0:a6:a4: 5a:93:7f:0e:6b:48:28:ce:92:24:af:2b:4d:91:65:ea:fc:5c: 26:0c:59:3b:aa:46:b6:90:8f:be:af:1c:bc:fc:77:13:93:fe: 8c:de:09:16:7e:47:16:78:65:1a:cf:bb:6b:bb:fa:ba:40:b6: ae:09:6c:a5:20:f8:09:aa:08:8c:b3:4a:ba:c6:88:08:ed:20: 3f:83:34:94:8a:7a:8a:c9:48:46:fa:9f:c8:77:4f:4d:9a:24: a7:9a:e7:02:ca:41:97:98:1a:9d:a8:63:4c:3f:ad:b9:a1:e1: 5a:89:6e:42:00:c4:f2:92:d3:2e:80:f4:08:83:fa:b3:15:d0: bd:a2:23:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFvV8qBbjQLgOU6FgNxKpShXyjd4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTU1MTAyWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlN2Y3OWU0ZDhkYWQ2N2UzMTM0Mjc5OTQ0NTNiOTRkMTY5 ZjA3NzZjYzM3YmM3ZWFlNTBiZGMwOTkwMzE4NGExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+8+ZA/1neg+otoLspl7FnilCcL4MR1L66K2eM0vYDKVWY nw8W+D3L7awQFs2N4WQDUCbQBWQcCrxcXmZy3a3sMAEmFpYYXXZeuS8mRiHCiB4i 95Eyfg/ebAKmOEd/TcdVdbxva7KXDgo9aeDild1f9V925qvyTjFN69cQwk9WlBp3 lXSHAy81f76fRWySngFIE1U+U9zjbIYSPYCep+y/rac198fnTtm9MmUlP6yF8ymn oqr19L+FiuKp6cSiV0pCMI98sF1a26a84SzB3tmu/Ie+GW9vfAlsPkORuGW7xRf/ 72xOrv80I2pGEH6pMwJKB2Acz2k83Vph2t6p2cSlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYnfkkV+WkUkThWVyAXuVxhhud60wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzMDgzYzhhLTE5MDAtNDdjZC05OGVjLWM2YzNmNzc3ZjkwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2x3AwDQYJKoZIhvcNAQELBQADggEBAFr7Y2o9hU+L9E7EPDamNogx1nhZ zplI72tBIyeNxYVA86apl/juwx/NG3lPQkvS1CbJukcVLEJ6RBufsiEdp3xPruvg Il/f2+RQJJO3tVKFtEyTWP2n3/XrtYpd0ByUVe+WpEGdKR/Kyy+v8/ASK+55Jw4w U+yZ2ToZ16CmpFqTfw5rSCjOkiSvK02RZer8XCYMWTuqRraQj76vHLz8dxOT/oze CRZ+RxZ4ZRrPu2u7+rpAtq4JbKUg+AmqCIyzSrrGiAjtID+DNJSKeorJSEb6n8h3 T02aJKea5wLKQZeYGp2oY0w/rbmh4VqJbkIAxPKS0y6A9AiD+rMV0L2iI4o= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:05 2025 by rpki-client