$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa File: 22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa (raw, json) Hash identifier: xv6Ksc/795Iod8sP9ZQ0NAIooiQeTtFKl7FpHeUy77M= Subject key identifier: 01:5A:29:EA:0E:54:5A:9A:E2:42:23:A3:7E:03:7B:9C:DF:B2:E2:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 386FEED91D2A442D6677867D3F300043DB5747 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa Signing time: Fri 18 Apr 2025 15:01:53 +0000 ROA not before: Fri 18 Apr 2025 15:01:53 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.156.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6f:ee:d9:1d:2a:44:2d:66:77:86:7d:3f:30:00:43:db:57:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:01:53 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=1c8da156191f32fadcfcff8c4e469acfcda749146cff1c8da73cc1c072a1fca9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:9e:9d:29:f1:88:31:74:36:b2:01:8f:0f: a0:ae:fb:0a:f8:fa:13:5b:e2:8b:95:0f:7e:5a:0a: 26:45:e8:8a:09:65:a3:a8:cb:9c:a2:ba:4f:e5:64: 5a:a0:28:a5:88:53:06:4e:fe:78:4c:5a:cf:dd:e8: 7c:62:55:53:c8:7d:ce:4a:b0:bb:5f:88:cc:d6:49: a1:6b:72:90:44:a3:c0:a6:c8:e6:18:22:5f:97:26: ef:35:7d:31:63:86:10:50:55:6d:ca:c1:17:1d:23: 2b:d8:cf:e7:44:71:d1:2e:ae:f2:48:38:df:00:23: 6c:df:d1:e4:7b:a2:c0:94:6b:83:6a:6a:da:9d:e5: 1a:73:d9:ef:8c:4c:ba:19:a4:00:95:26:38:29:8b: a0:41:97:75:07:fe:29:d3:6a:f7:23:af:fd:4a:7e: ad:a6:47:5e:ad:f3:de:81:93:ad:b8:49:13:8f:c3: 3a:72:63:88:76:b6:10:21:65:b0:ec:d5:8e:7f:4e: 89:0d:0f:bf:23:73:c6:44:93:bb:dd:20:f9:cc:2e: de:fb:5d:29:ee:2d:2e:ab:06:a2:4e:f1:0f:95:5a: a9:8c:a3:e1:b7:f9:02:59:6c:1c:8b:78:5e:9c:fe: 16:ac:bd:10:d4:f8:a9:12:55:3c:31:00:ff:fb:5d: 59:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:29:EA:0E:54:5A:9A:E2:42:23:A3:7E:03:7B:9C:DF:B2:E2:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.16.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:16:b2:23:c8:e5:29:62:f8:d0:54:6c:3d:ac:46:4f:33:b2: 96:5e:12:62:e0:c6:ab:28:77:8c:36:13:7a:b2:a3:07:01:cf: 44:87:a1:83:61:87:48:44:d1:f0:43:64:1f:69:2d:22:fc:7a: d5:c9:f8:a1:00:7b:bc:13:75:e0:df:87:ea:1d:87:ed:86:71: e2:89:0f:7c:d5:98:59:18:3f:b7:bf:17:29:96:6b:23:d9:d5: b5:75:32:e0:2d:40:b0:e3:78:e1:e3:65:96:6c:c9:7d:9c:f4: 12:51:7b:38:66:9f:00:b8:ff:b1:13:66:dc:b6:8a:48:3b:21: fc:21:0e:02:ae:2e:72:7a:56:d4:65:21:a2:4d:ae:c1:f2:f6: 9b:04:1d:b4:5e:c6:84:6a:c3:0c:a6:98:0f:df:34:2a:20:ad: 4f:fc:95:3e:18:54:1b:ca:51:a4:0d:b7:4e:d5:5a:19:82:57: 1d:5f:10:86:a4:8a:fd:9f:50:ba:68:67:88:b9:97:1c:9f:cb: 5c:bd:94:c0:11:85:10:eb:29:89:e2:00:d9:e8:e5:65:02:eb: 88:cb:1c:19:48:c8:c9:f7:5d:92:99:2f:1c:b8:f6:c1:8b:74: 33:a9:ce:a1:a4:09:17:94:80:f7:92:92:0e:6b:b0:cd:ab:11: 5b:bc:fa:0b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOG/u2R0qRC1md4Z9PzAAQ9tXRzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA0MTgxNTAxNTNaFw0yNTA1MjMyMzU5NTla MHoxSTBHBgNVBAUTQDFjOGRhMTU2MTkxZjMyZmFkY2ZjZmY4YzRlNDY5YWNmY2Rh NzQ5MTQ2Y2ZmMWM4ZGE3M2NjMWMwNzJhMWZjYTkxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMzLnp0p8YgxdDayAY8PoK77Cvj6E1vii5UPfloKJkXoigll o6jLnKK6T+VkWqAopYhTBk7+eExaz93ofGJVU8h9zkqwu1+IzNZJoWtykESjwKbI 5hgiX5cm7zV9MWOGEFBVbcrBFx0jK9jP50Rx0S6u8kg43wAjbN/R5HuiwJRrg2pq 2p3lGnPZ74xMuhmkAJUmOCmLoEGXdQf+KdNq9yOv/Up+raZHXq3z3oGTrbhJE4/D OnJjiHa2ECFlsOzVjn9OiQ0PvyNzxkSTu90g+cwu3vtdKe4tLqsGok7xD5VaqYyj 4bf5AllsHIt4Xpz+Fqy9ENT4qRJVPDEA//tdWa0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQBWinqDlRamuJCI6N+A3uc37LiYTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMjJiMmE4ZmItZDE3Mi00MGY3LTlhYWUtYjQyZTZlMWZkZWY2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBDacEDANBgkqhkiG9w0BAQsFAAOCAQEAPBayI8jlKWL40FRsPaxGTzOyll4S YuDGqyh3jDYTerKjBwHPRIehg2GHSETR8ENkH2ktIvx61cn4oQB7vBN14N+H6h2H 7YZx4okPfNWYWRg/t78XKZZrI9nVtXUy4C1AsON44eNllmzJfZz0ElF7OGafALj/ sRNm3LaKSDsh/CEOAq4ucnpW1GUhok2uwfL2mwQdtF7GhGrDDKaYD980KiCtT/yV PhhUG8pRpA23TtVaGYJXHV8QhqSK/Z9QumhniLmXHJ/LXL2UwBGFEOspieIA2ejl ZQLriMscGUjIyfddkpkvHLj2wYt0M6nOoaQJF5SA95KSDmuwzasRW7z6Cw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:23 2025 by rpki-client