$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19252366-70d5-437f-b43d-c40d957db22f.roa File: 19252366-70d5-437f-b43d-c40d957db22f.roa (raw, json) Hash identifier: s93ySuT41j9ImEthjGcju2BE/1QZggoyGkZMhoqIdKk= Subject key identifier: 24:69:18:33:03:AE:AE:2F:FA:33:63:30:91:6A:B8:CD:62:8A:38:1D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D2A977FD825F1B9576C4C414BAA076B2293BD74 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19252366-70d5-437f-b43d-c40d957db22f.roa Signing time: Fri 25 Apr 2025 16:22:06 +0000 ROA not before: Fri 25 Apr 2025 16:22:06 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.175.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2a:97:7f:d8:25:f1:b9:57:6c:4c:41:4b:aa:07:6b:22:93:bd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:22:06 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=83e8dfda00a879f4b1640a9354fe0cec387834a609c07b172cad0bde956a941f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:15:d7:70:1c:ec:fd:3b:01:42:a2:ce:6b: 53:47:04:22:06:9e:65:67:b9:ed:c2:1e:2a:c7:b7: a4:a2:ea:6b:83:9c:47:b5:2a:d5:bc:c9:57:f3:5c: b3:3b:94:64:bd:46:33:f5:06:01:4d:2c:cf:f4:56: ed:b7:43:96:eb:c5:96:8b:7b:14:cc:c7:e6:a3:18: 28:03:57:15:40:64:66:63:08:56:d7:84:0f:9c:4e: c3:ea:db:16:14:92:42:61:b6:c1:cc:87:0f:5d:76: a6:68:8b:e7:8d:f7:77:5f:11:0a:b2:92:64:20:e2: f7:f0:30:ca:2e:2d:0a:ed:35:a8:88:6f:b6:93:82: a4:9f:9b:78:15:1e:7a:13:98:ff:0b:b9:31:72:45: 90:50:ec:6d:a1:5e:db:96:39:fb:9d:1a:72:0b:29: 4b:76:b1:0f:fb:af:5d:c3:fb:9c:5e:96:1f:f0:be: de:8b:eb:c6:61:1e:ad:3f:f3:7f:4d:4e:7b:8e:46: 21:58:51:94:1b:eb:d9:6d:b7:ce:30:5e:79:66:c8: bd:d4:66:8b:b5:6f:63:a0:96:46:dc:61:c3:b2:f5: 4b:4b:dc:a4:be:d3:3b:cf:4a:0c:44:12:5a:f8:17: 73:79:b0:e5:76:71:d2:8c:56:3e:91:6b:cc:ad:8f: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:18:33:03:AE:AE:2F:FA:33:63:30:91:6A:B8:CD:62:8A:38:1D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19252366-70d5-437f-b43d-c40d957db22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.175.30.0/24 Signature Algorithm: sha256WithRSAEncryption 33:d9:28:3d:10:a4:db:84:8a:d1:c3:fe:51:43:af:d0:5e:76: a5:ca:b6:7b:af:a4:60:91:7c:cc:ae:81:96:ed:4b:de:09:7b: 8f:9c:98:55:9c:35:28:88:fd:b7:59:bd:36:53:f8:b7:9f:f8: ac:80:d3:2d:1b:b3:a0:c7:24:3f:bc:0c:e1:56:ca:d9:b5:4d: 67:52:24:7b:1d:5b:c6:b9:09:bf:8f:67:1f:58:70:63:52:ff: 90:b4:d1:fe:15:65:f3:88:4e:23:3b:40:3b:8e:36:bc:72:a5: b2:8d:2a:61:01:49:f7:03:c0:32:c1:c7:56:5f:c8:ff:59:43: 09:79:01:67:62:4d:25:7f:9f:5d:8b:c9:65:fc:38:2e:4c:0f: dc:0b:00:32:48:2d:62:81:fb:59:41:24:b2:d1:b7:fc:ec:83: 08:1e:e5:ff:a3:91:f8:a2:a0:d5:b3:30:4c:64:a1:06:22:7d: 39:9d:61:08:4d:79:66:7f:94:cb:19:10:fc:00:5b:53:ec:e0: 82:c2:e8:2a:d0:cb:9e:23:65:f2:5d:4c:98:5e:d0:ff:fc:f0: ec:ad:d0:37:58:9a:9b:ca:1b:c7:ac:b5:c8:9f:d4:d1:88:95: 6c:2c:d1:e8:f8:69:a8:73:2c:6d:f9:96:c4:06:37:3c:34:fd: de:2d:42:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULSqXf9gl8blXbExBS6oHayKTvXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYyMjA2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2U4ZGZkYTAwYTg3OWY0YjE2NDBhOTM1NGZlMGNlYzM4 NzgzNGE2MDljMDdiMTcyY2FkMGJkZTk1NmE5NDFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNpxXXcBzs/TsBQqLOa1NHBCIGnmVnue3CHirHt6Si6muD nEe1KtW8yVfzXLM7lGS9RjP1BgFNLM/0Vu23Q5brxZaLexTMx+ajGCgDVxVAZGZj CFbXhA+cTsPq2xYUkkJhtsHMhw9ddqZoi+eN93dfEQqykmQg4vfwMMouLQrtNaiI b7aTgqSfm3gVHnoTmP8LuTFyRZBQ7G2hXtuWOfudGnILKUt2sQ/7r13D+5xelh/w vt6L68ZhHq0/839NTnuORiFYUZQb69ltt84wXnlmyL3UZou1b2OglkbcYcOy9UtL 3KS+0zvPSgxEElr4F3N5sOV2cdKMVj6Ra8ytj6zxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJGkYMwOuri/6M2MwkWq4zWKKOB0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5MjUyMzY2LTcwZDUtNDM3Zi1iNDNkLWM0MGQ5NTdkYjIyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrx4wDQYJKoZIhvcNAQELBQADggEBADPZKD0QpNuEitHD/lFDr9BedqXK tnuvpGCRfMyugZbtS94Je4+cmFWcNSiI/bdZvTZT+Lef+KyA0y0bs6DHJD+8DOFW ytm1TWdSJHsdW8a5Cb+PZx9YcGNS/5C00f4VZfOITiM7QDuONrxypbKNKmEBSfcD wDLBx1ZfyP9ZQwl5AWdiTSV/n12LyWX8OC5MD9wLADJILWKB+1lBJLLRt/zsgwge 5f+jkfiioNWzMExkoQYifTmdYQhNeWZ/lMsZEPwAW1Ps4ILC6CrQy54jZfJdTJhe 0P/88Oyt0DdYmpvKG8estcif1NGIlWws0ej4aahzLG35lsQGNzw0/d4tQmk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:48:00 2025 by rpki-client