$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20c14785-06ee-49e1-ab2a-aa6599f0ea2a.roa File: 20c14785-06ee-49e1-ab2a-aa6599f0ea2a.roa (raw, json) Hash identifier: O9G2fevARNAKSPuhp53giLKxPpupzxsrY831T/YAzBk= Subject key identifier: 3E:CE:8B:AB:5F:BB:76:BA:2D:B8:10:87:3E:14:53:6F:1C:7D:47:3B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 136E71DA04B5CE05387A654AD1915D8E7DDCC1A9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20c14785-06ee-49e1-ab2a-aa6599f0ea2a.roa Signing time: Fri 25 Apr 2025 16:50:20 +0000 ROA not before: Fri 25 Apr 2025 16:50:20 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6e:71:da:04:b5:ce:05:38:7a:65:4a:d1:91:5d:8e:7d:dc:c1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:50:20 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=a0ab8458a463d3ecf0e8394d4a1771f0128a77ae5da063fa20b02203a16e6a0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:72:4d:31:4f:8b:c7:02:a7:d7:4e:30:67: 4e:1b:f3:2a:5d:bb:68:34:fa:bc:4b:80:4f:ba:28: 2a:cf:0b:79:17:ea:ae:7d:e2:cf:06:49:81:91:d4: 74:7d:fb:fb:c7:ae:d2:f0:ab:27:2f:32:46:9c:5a: be:24:62:55:b3:85:74:60:1d:7f:f0:e6:c6:cc:89: 52:c1:6e:f0:b0:5c:d1:17:15:d0:28:e6:89:72:9f: af:cd:30:2c:a9:f8:a4:99:f7:df:cb:b5:1b:fe:75: e9:df:7d:14:1b:7c:61:47:9b:86:a1:83:af:0b:02: b2:78:1f:65:67:21:a9:45:fa:73:5b:f2:7d:7c:6c: 63:ba:21:83:cf:94:3d:66:31:66:40:e4:90:1f:33: 58:c8:9a:5a:7d:b3:57:6b:e5:d7:f2:41:c4:cb:f0: 24:d2:10:e3:63:47:5e:fc:25:b1:36:90:76:28:8b: 8c:ba:c0:72:8d:82:b8:81:9a:04:20:45:9a:2d:7f: 94:69:b2:2f:f5:5b:d8:1f:b9:e2:4c:31:f7:c9:fc: 7a:e8:54:2b:b5:21:c4:ce:fa:50:aa:ca:25:fa:00: 44:0e:aa:ea:21:7e:22:f9:9e:59:49:f0:62:d3:bc: f5:30:73:b4:54:01:0e:83:a4:02:c9:94:dd:6f:cf: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:8B:AB:5F:BB:76:BA:2D:B8:10:87:3E:14:53:6F:1C:7D:47:3B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20c14785-06ee-49e1-ab2a-aa6599f0ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.196.0/24 Signature Algorithm: sha256WithRSAEncryption a8:dd:f4:44:9b:5c:38:e6:9f:32:75:1b:b5:1c:2e:e7:05:16: 46:6e:b5:fb:79:cb:79:ff:60:85:b8:39:6f:17:d0:73:91:dc: 5b:e6:ee:8c:e9:0a:b0:3b:6a:7f:62:f2:02:f0:a6:9d:bc:80: 35:b9:44:7e:75:6c:68:05:9e:3a:05:63:54:a4:d2:08:25:c1: 9f:01:6a:83:02:68:04:f1:3c:5c:d3:bb:e2:44:a7:b4:6b:2a: 06:df:70:c3:8e:56:d6:d4:17:40:fe:17:bf:63:98:5a:1d:84: 56:58:e7:67:e7:f0:aa:c6:d6:5c:0f:32:08:ac:2a:62:98:f6: 89:e2:7f:bb:0d:5e:e7:08:2d:52:35:3d:2b:81:02:e2:ed:d5: 1f:91:b4:e2:84:4b:96:be:b7:a2:a8:8d:71:8c:35:81:0e:4a: ef:9e:48:41:0f:87:24:da:05:ce:03:1a:31:46:63:9a:9e:4d: e9:32:05:8f:f2:02:63:55:82:a2:33:83:8b:8d:a4:df:0c:ca: de:df:7e:20:97:44:48:1a:df:c3:47:cf:16:b2:ae:ca:c8:08: 49:30:1e:ce:e8:7d:9a:5c:39:36:6d:32:ae:92:96:3c:07:b8: 7a:80:83:ab:92:0f:38:d8:c1:37:02:52:0c:c0:6e:0a:40:0d: c1:ea:0e:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE25x2gS1zgU4emVK0ZFdjn3cwakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY1MDIwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGFiODQ1OGE0NjNkM2VjZjBlODM5NGQ0YTE3NzFmMDEy OGE3N2FlNWRhMDYzZmEyMGIwMjIwM2ExNmU2YTBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4M3JNMU+LxwKn104wZ04b8ypdu2g0+rxLgE+6KCrPC3kX 6q594s8GSYGR1HR9+/vHrtLwqycvMkacWr4kYlWzhXRgHX/w5sbMiVLBbvCwXNEX FdAo5olyn6/NMCyp+KSZ99/LtRv+denffRQbfGFHm4ahg68LArJ4H2VnIalF+nNb 8n18bGO6IYPPlD1mMWZA5JAfM1jImlp9s1dr5dfyQcTL8CTSEONjR178JbE2kHYo i4y6wHKNgriBmgQgRZotf5Rpsi/1W9gfueJMMffJ/HroVCu1IcTO+lCqyiX6AEQO quohfiL5nllJ8GLTvPUwc7RUAQ6DpALJlN1vz5eFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPs6Lq1+7drotuBCHPhRTbxx9RzswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwYzE0Nzg1LTA2ZWUtNDllMS1hYjJhLWFhNjU5OWYwZWEyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XsQwDQYJKoZIhvcNAQELBQADggEBAKjd9ESbXDjmnzJ1G7UcLucFFkZu tft5y3n/YIW4OW8X0HOR3Fvm7ozpCrA7an9i8gLwpp28gDW5RH51bGgFnjoFY1Sk 0gglwZ8BaoMCaATxPFzTu+JEp7RrKgbfcMOOVtbUF0D+F79jmFodhFZY52fn8KrG 1lwPMgisKmKY9onif7sNXucILVI1PSuBAuLt1R+RtOKES5a+t6KojXGMNYEOSu+e SEEPhyTaBc4DGjFGY5qeTekyBY/yAmNVgqIzg4uNpN8Myt7ffiCXREga38NHzxay rsrICEkwHs7ofZpcOTZtMq6SljwHuHqAg6uSDzjYwTcCUgzAbgpADcHqDh8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:01 2025 by rpki-client