$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21976c57-99c7-4d18-80a9-a6a8620a155d.roa File: 21976c57-99c7-4d18-80a9-a6a8620a155d.roa (raw, json) Hash identifier: T1M96o+gMlyheE5/gjerdQlKgGBDCTqCHsF3gvh8www= Subject key identifier: AA:8B:99:66:17:65:17:D4:DB:77:63:8A:49:EA:AB:C9:3D:11:42:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44311423E845C1EB4D4A19077EF42BA4D173BB71 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21976c57-99c7-4d18-80a9-a6a8620a155d.roa Signing time: Mon 14 Apr 2025 16:31:37 +0000 ROA not before: Mon 14 Apr 2025 16:31:37 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.200.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:31:14:23:e8:45:c1:eb:4d:4a:19:07:7e:f4:2b:a4:d1:73:bb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:31:37 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=23f42a42306659cc1854518f4949268d346af0003b8446b91939bb4527519b5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:cc:49:2c:ff:0f:2e:16:d4:32:64:bf:ee: 1d:ed:e4:be:76:75:e6:22:53:39:92:f3:d5:3d:12: d3:41:f2:e0:f6:3f:04:5e:9f:ae:b7:93:3e:b7:63: b0:b7:9d:99:92:22:21:a7:82:28:d4:bf:8b:e2:b5: 74:8f:2e:60:f9:e6:4d:e9:37:fb:23:13:9c:ea:7c: fa:2a:42:c2:7c:42:0c:6c:9e:80:9f:ae:38:c0:b1: 81:e0:ec:a5:3a:33:14:4c:8d:ac:c6:06:c5:25:a6: 2c:1a:31:95:19:91:4a:96:26:cd:0d:1e:39:76:a8: bb:8b:c0:a8:35:5d:ca:7f:02:ca:b5:c6:a8:af:ac: 5c:d8:49:96:e2:6e:a8:1d:f0:87:32:8b:99:dd:19: ac:59:25:88:d0:53:45:50:5c:56:d5:79:b4:9c:4d: af:f4:71:6e:a9:95:24:36:47:30:be:54:8e:05:16: f5:f0:a7:71:57:de:ca:eb:bc:8f:07:fd:e4:5b:f4: 14:98:69:2e:67:bd:7a:6f:07:25:b6:16:41:d3:ef: 8f:b7:dd:ae:52:1e:b9:0d:17:2e:b2:a1:e4:8b:dd: 27:ab:5c:b1:74:26:9a:2f:41:f9:49:31:d4:96:57: 7e:5e:d0:a4:11:53:a4:c3:39:9f:77:a0:96:2f:38: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8B:99:66:17:65:17:D4:DB:77:63:8A:49:EA:AB:C9:3D:11:42:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21976c57-99c7-4d18-80a9-a6a8620a155d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 5e:39:cb:63:a5:db:7b:10:cf:c0:f9:42:c3:dc:b4:d2:af:f1: 26:f1:b2:6b:5d:e2:eb:7f:06:c0:a7:ef:02:c6:e0:e5:2f:b1: f2:23:8c:1d:f6:06:2b:ba:43:ec:22:be:2d:ef:c2:59:2f:05: a6:ea:82:fe:21:d1:5c:ba:50:96:47:02:eb:7c:95:0c:5f:94: 62:f6:ce:b7:24:62:84:69:75:65:8f:b9:e2:06:ff:90:90:68: 36:39:a0:e2:a4:ca:08:15:54:a6:2d:d7:09:f5:65:8a:eb:64: 33:d9:9d:f1:df:5d:9f:aa:75:9d:38:a2:87:8d:2c:20:ad:9b: b3:f0:d0:e1:76:8a:53:28:cc:cb:88:e8:10:5c:26:b5:4e:bd: f8:4e:82:d5:7c:98:a9:92:62:7e:74:b9:ca:b0:f7:b9:3d:87: d5:af:ff:dc:cb:e8:d7:eb:ae:c4:91:a3:d1:c0:1c:f4:df:93: ee:bd:69:ad:23:af:a5:3f:0a:f0:35:b0:ee:d2:ff:ec:92:ad: 53:0a:d6:3d:f7:8b:d1:74:35:bd:27:d6:90:e4:49:73:30:4b: 3d:cd:2b:9c:7d:e0:ad:d1:8b:4c:dc:ec:7f:3f:8c:eb:41:0c: 00:46:d9:3a:86:d7:2a:3e:c5:d1:8a:ac:37:ca:74:b0:a0:13: 6d:d8:a8:93 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURDEUI+hFwetNShkHfvQrpNFzu3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTYzMTM3WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2Y0MmE0MjMwNjY1OWNjMTg1NDUxOGY0OTQ5MjY4ZDM0 NmFmMDAwM2I4NDQ2YjkxOTM5YmI0NTI3NTE5YjVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU8MxJLP8PLhbUMmS/7h3t5L52deYiUzmS89U9EtNB8uD2 PwRen663kz63Y7C3nZmSIiGngijUv4vitXSPLmD55k3pN/sjE5zqfPoqQsJ8Qgxs noCfrjjAsYHg7KU6MxRMjazGBsUlpiwaMZUZkUqWJs0NHjl2qLuLwKg1Xcp/Asq1 xqivrFzYSZbibqgd8Icyi5ndGaxZJYjQU0VQXFbVebScTa/0cW6plSQ2RzC+VI4F FvXwp3FX3srrvI8H/eRb9BSYaS5nvXpvByW2FkHT74+33a5SHrkNFy6yoeSL3Ser XLF0JpovQflJMdSWV35e0KQRU6TDOZ93oJYvOJD1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqouZZhdlF9Tbd2OKSeqryT0RQkwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxOTc2YzU3LTk5YzctNGQxOC04MGE5LWE2YTg2MjBhMTU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwM0yDANBgkqhkiG9w0BAQsFAAOCAQEAXjnLY6XbexDPwPlCw9y00q/xJvGy a13i638GwKfvAsbg5S+x8iOMHfYGK7pD7CK+Le/CWS8FpuqC/iHRXLpQlkcC63yV DF+UYvbOtyRihGl1ZY+54gb/kJBoNjmg4qTKCBVUpi3XCfVliutkM9md8d9dn6p1 nTiih40sIK2bs/DQ4XaKUyjMy4joEFwmtU69+E6C1XyYqZJifnS5yrD3uT2H1a// 3Mvo1+uuxJGj0cAc9N+T7r1prSOvpT8K8DWw7tL/7JKtUwrWPfeL0XQ1vSfWkORJ czBLPc0rnH3grdGLTNzsfz+M60EMAEbZOobXKj7F0YqsN8p0sKATbdiokw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:48:18 2025 by rpki-client