$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4b9a8c-c44e-4442-80c8-1492f92316ab.roa File: 1a4b9a8c-c44e-4442-80c8-1492f92316ab.roa (raw, json) Hash identifier: KKec6QPEPi44W2Udt98BZf3q1GPk3RfzPMUV6q2pP7c= Subject key identifier: 12:8E:8F:58:57:1E:79:B4:6C:86:51:F1:49:73:38:1B:4D:D4:C1:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 13F87B534E18BC1E904B203CCF168B4E0B473E3A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4b9a8c-c44e-4442-80c8-1492f92316ab.roa Signing time: Fri 18 Apr 2025 18:20:22 +0000 ROA not before: Fri 18 Apr 2025 18:20:22 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.255.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f8:7b:53:4e:18:bc:1e:90:4b:20:3c:cf:16:8b:4e:0b:47:3e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 18:20:22 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=c4022483d9cb9996980c571d0558d3cbf5dac1feaebeb652af7369bb24bd694b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:9b:b7:1a:d9:0f:f0:5d:b7:c8:da:0f:2c: c2:35:dc:83:f2:43:1b:6e:0f:48:c0:33:29:43:51: f5:85:e3:d2:bc:e9:65:59:71:cc:32:52:06:5c:d2: 84:a8:3b:34:4e:99:55:68:f3:08:f9:05:9b:b0:01: ae:91:92:c2:93:e2:fd:54:9b:d8:46:58:4e:b2:94: 18:19:6c:6e:c9:61:88:86:93:f1:b2:b1:b9:86:68: b1:93:f8:c5:dd:e0:87:f6:e9:33:f3:79:d4:c3:e2: 37:ea:d4:e4:cc:95:16:0e:c9:1d:27:da:78:3f:45: df:67:9d:29:2a:e2:86:ce:8d:83:e2:e0:6f:8f:2d: db:6c:9b:20:ab:bd:e8:f3:e6:05:ee:ac:6e:fe:c5: ec:6b:b8:c7:5f:fe:57:a7:3b:c1:9d:0d:f6:10:9a: 61:3c:48:a7:eb:80:65:95:02:88:cd:f2:5a:b3:6b: c0:ee:d7:8a:66:16:d1:e8:5c:35:90:7b:ec:64:5a: e6:58:0c:46:82:5d:5f:9a:46:30:9b:f4:2e:9b:ff: e0:25:7b:e1:39:7b:6e:d3:6a:d6:84:73:f0:25:c9: 18:0a:c8:8e:ce:28:3e:8d:1f:03:b7:f7:03:90:a2: 24:84:ee:6b:1c:13:90:54:91:41:07:5e:85:84:a3: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8E:8F:58:57:1E:79:B4:6C:86:51:F1:49:73:38:1B:4D:D4:C1:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a4b9a8c-c44e-4442-80c8-1492f92316ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.255.0.0/18 Signature Algorithm: sha256WithRSAEncryption 15:39:da:5a:19:f1:dd:db:67:ef:f1:d2:8e:26:f8:d2:17:02: 67:2f:51:ad:d5:86:aa:9c:b0:16:0c:c8:6b:32:f0:18:f9:7c: 95:77:50:4e:3b:3e:8b:e5:c4:28:9e:33:0d:99:81:5e:bf:5b: 29:f0:d3:0f:44:ec:6f:e4:85:45:3b:5c:f1:7f:b1:a7:a5:cf: 34:4e:83:3f:dc:b1:3e:e3:b7:3b:93:da:37:83:cb:86:e9:c6: 17:7f:be:a2:d1:5e:26:84:97:01:93:b4:e0:16:8e:af:e0:51: f9:87:89:e3:2e:e4:4f:39:a1:e4:84:4f:b3:c2:f1:01:73:c9: d4:73:03:bd:7a:41:98:97:fd:04:0b:62:b8:c1:2b:a6:dc:eb: 1e:02:87:e1:d8:89:00:16:69:10:60:3f:3f:65:3b:82:13:ce: f3:87:a7:d8:66:a5:1d:ab:bd:fd:f0:fe:d8:ab:df:11:fb:12: 87:ed:b5:2c:7b:35:98:7e:98:3b:48:cc:2e:d8:6b:a3:d8:d1: 5b:b8:22:c5:d0:a3:49:24:54:f6:bd:e1:c2:2b:d2:11:ec:93: 98:5f:a4:00:37:93:82:84:17:1a:42:c8:71:67:89:09:71:27: 77:b9:7a:40:73:11:8d:13:71:2b:6a:83:11:15:4e:96:ee:4f: 5b:8c:48:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE/h7U04YvB6QSyA8zxaLTgtHPjowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTgyMDIyWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDAyMjQ4M2Q5Y2I5OTk2OTgwYzU3MWQwNTU4ZDNjYmY1 ZGFjMWZlYWViZWI2NTJhZjczNjliYjI0YmQ2OTRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0uJu3GtkP8F23yNoPLMI13IPyQxtuD0jAMylDUfWF49K8 6WVZccwyUgZc0oSoOzROmVVo8wj5BZuwAa6RksKT4v1Um9hGWE6ylBgZbG7JYYiG k/GysbmGaLGT+MXd4If26TPzedTD4jfq1OTMlRYOyR0n2ng/Rd9nnSkq4obOjYPi 4G+PLdtsmyCrvejz5gXurG7+xexruMdf/lenO8GdDfYQmmE8SKfrgGWVAojN8lqz a8Du14pmFtHoXDWQe+xkWuZYDEaCXV+aRjCb9C6b/+Ale+E5e27TataEc/AlyRgK yI7OKD6NHwO39wOQoiSE7mscE5BUkUEHXoWEo4nfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEo6PWFceebRshlHxSXM4G03UwXMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhNGI5YThjLWM0NGUtNDQ0Mi04MGM4LTE0OTJmOTIzMTZhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2/wAwDQYJKoZIhvcNAQELBQADggEBABU52loZ8d3bZ+/x0o4m+NIXAmcv Ua3VhqqcsBYMyGsy8Bj5fJV3UE47PovlxCieMw2ZgV6/Wynw0w9E7G/khUU7XPF/ saelzzROgz/csT7jtzuT2jeDy4bpxhd/vqLRXiaElwGTtOAWjq/gUfmHieMu5E85 oeSET7PC8QFzydRzA716QZiX/QQLYrjBK6bc6x4Ch+HYiQAWaRBgPz9lO4ITzvOH p9hmpR2rvf3w/tir3xH7EofttSx7NZh+mDtIzC7Ya6PY0Vu4IsXQo0kkVPa94cIr 0hHsk5hfpAA3k4KEFxpCyHFniQlxJ3e5ekBzEY0TcStqgxEVTpbuT1uMSM8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:49:52 2025 by rpki-client