$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f91a965-4d5c-4bab-86cf-96b20618c854.roa File: 1f91a965-4d5c-4bab-86cf-96b20618c854.roa (raw, json) Hash identifier: Y+mlVkjX2grVO644LkxhBcFjcZZZw5NbOOrZqiENuPc= Subject key identifier: 60:DA:A6:62:88:8E:C4:D7:65:46:08:FE:ED:98:C7:9D:3E:79:44:4A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2254ABB445DB5C60A45115F0216B9F8E6D386A22 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f91a965-4d5c-4bab-86cf-96b20618c854.roa Signing time: Tue 22 Apr 2025 17:51:05 +0000 ROA not before: Tue 22 Apr 2025 17:51:05 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:54:ab:b4:45:db:5c:60:a4:51:15:f0:21:6b:9f:8e:6d:38:6a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 17:51:05 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=0c2f3804b4cabbbe0f730de5e9ddf713b1141c0267675506da123ffce4d83381, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:bc:d3:1b:eb:2b:d8:d8:f8:8f:30:5c:e5: 07:0f:18:b2:8c:a5:d2:97:0a:e4:2e:76:fb:48:e9: 6a:9a:9c:09:60:d7:cb:2c:0e:50:d8:56:32:97:2f: 7f:32:8e:d6:04:4e:4b:d6:bb:4b:5a:54:56:d0:8e: aa:9b:f3:fe:8a:2d:a7:aa:e1:00:b3:7c:18:48:93: f9:bc:b1:b4:4b:23:0c:a8:e3:95:f1:5d:6e:65:ab: 0e:53:96:91:7b:77:ca:df:8c:c8:d4:67:7b:a9:fd: 1f:66:b5:e3:40:9c:28:ba:33:06:0a:38:37:3c:8f: 67:8b:b4:eb:27:be:0e:bd:32:19:93:cb:85:b6:2b: dc:66:5d:24:b9:2d:f8:c0:48:d6:4a:a5:61:c8:78: ff:90:18:f5:77:b6:a9:4a:05:cf:07:70:c2:3c:3b: 2f:41:ca:2d:8d:39:3f:b4:d4:e1:30:30:88:26:55: 3a:37:5e:6f:76:c5:c7:f2:bd:8a:22:5a:f5:84:f6: 29:ad:ca:c1:60:68:67:6a:3b:5d:7f:12:2f:b7:86: d6:ad:82:b7:db:47:18:d0:cb:49:92:f6:c6:48:13: 6b:30:86:00:c8:a7:5e:00:04:f7:80:e5:9b:fd:ea: a0:51:66:34:f2:d8:11:c7:0c:85:88:4b:1e:1f:8a: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:A6:62:88:8E:C4:D7:65:46:08:FE:ED:98:C7:9D:3E:79:44:4A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f91a965-4d5c-4bab-86cf-96b20618c854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.178.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:4b:43:ab:f6:85:fb:44:da:ee:98:10:f1:54:8e:78:5b:d6: 71:8f:14:ca:64:e4:db:3b:62:70:c3:5f:d1:0e:f5:5b:08:2e: 6d:c5:7d:f3:b4:69:7c:28:31:be:fe:72:c2:60:b1:be:89:55: 85:55:8c:cc:63:57:87:b2:10:6d:bd:83:74:ba:5a:34:7f:7d: 1f:49:9e:2a:ee:09:b4:a0:d6:e5:49:7b:73:81:22:32:29:cd: 71:7f:30:63:f3:b5:79:c3:07:1f:70:b7:d2:a0:01:c9:66:82: ed:d8:d8:66:8c:db:7a:bf:a0:28:ce:94:67:87:21:74:98:cf: a0:cc:48:70:36:6c:e2:94:c9:b8:b1:ad:a4:2e:16:0b:73:a0: f7:cd:af:ac:14:6e:b5:b7:02:c3:d0:d9:10:f5:8a:91:9e:e9: c0:54:43:b8:91:a4:56:24:4d:21:4e:a4:e2:af:92:d4:39:c8: e2:a9:99:93:eb:fb:58:fe:29:24:27:bb:32:b2:d4:a8:08:b6: 2a:7d:4a:b1:99:f3:84:05:53:f0:f1:a1:8e:7c:f7:77:4a:3b: 82:a5:03:c5:68:70:56:5d:fe:d8:0b:13:cf:b4:55:b2:2a:0c: 23:9a:27:3c:af:91:31:de:ae:cd:a9:ba:c9:23:b8:51:29:a3: d7:fd:4d:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIlSrtEXbXGCkURXwIWufjm04aiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTc1MTA1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzJmMzgwNGI0Y2FiYmJlMGY3MzBkZTVlOWRkZjcxM2Ix MTQxYzAyNjc2NzU1MDZkYTEyM2ZmY2U0ZDgzMzgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaUrzTG+sr2Nj4jzBc5QcPGLKMpdKXCuQudvtI6WqanAlg 18ssDlDYVjKXL38yjtYETkvWu0taVFbQjqqb8/6KLaeq4QCzfBhIk/m8sbRLIwyo 45XxXW5lqw5TlpF7d8rfjMjUZ3up/R9mteNAnCi6MwYKODc8j2eLtOsnvg69MhmT y4W2K9xmXSS5LfjASNZKpWHIeP+QGPV3tqlKBc8HcMI8Oy9Byi2NOT+01OEwMIgm VTo3Xm92xcfyvYoiWvWE9imtysFgaGdqO11/Ei+3htatgrfbRxjQy0mS9sZIE2sw hgDIp14ABPeA5Zv96qBRZjTy2BHHDIWISx4fim/pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYNqmYoiOxNdlRgj+7ZjHnT55REowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmOTFhOTY1LTRkNWMtNGJhYi04NmNmLTk2YjIwNjE4Yzg1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvLIwDQYJKoZIhvcNAQELBQADggEBAAtLQ6v2hftE2u6YEPFUjnhb1nGP FMpk5Ns7YnDDX9EO9VsILm3FffO0aXwoMb7+csJgsb6JVYVVjMxjV4eyEG29g3S6 WjR/fR9JniruCbSg1uVJe3OBIjIpzXF/MGPztXnDBx9wt9KgAclmgu3Y2GaM23q/ oCjOlGeHIXSYz6DMSHA2bOKUybixraQuFgtzoPfNr6wUbrW3AsPQ2RD1ipGe6cBU Q7iRpFYkTSFOpOKvktQ5yOKpmZPr+1j+KSQnuzKy1KgItip9SrGZ84QFU/DxoY58 93dKO4KlA8VocFZd/tgLE8+0VbIqDCOaJzyvkTHers2puskjuFEpo9f9TRo= -----END CERTIFICATE-----Generated at Sun Apr 27 12:08:15 2025 by rpki-client