$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa File: 250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa (raw, json) Hash identifier: 9UZigAxr9tsH7Lk+8F8Ws7U610tkuUeUP1Tt5Wc9+6Y= Subject key identifier: A6:68:D0:50:E4:75:79:28:1C:26:15:76:62:96:A7:E1:BC:D1:D0:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E67D2E7E745F7D2D66CF9EF019625AD32CB67DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa Signing time: Fri 18 Apr 2025 15:10:19 +0000 ROA not before: Fri 18 Apr 2025 15:10:19 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.146.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:67:d2:e7:e7:45:f7:d2:d6:6c:f9:ef:01:96:25:ad:32:cb:67:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:10:19 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=735d75f39a6cff32b8178094030298a7c585d0ad8fe094b386bcba179eba4991, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:c1:88:f2:5f:c8:b1:d3:45:2c:52:6e:a1: 0c:fc:d5:93:58:cd:de:a9:37:9d:65:58:61:ec:ff: 9d:f9:93:73:78:3e:ea:74:02:d4:38:5b:3d:11:97: 1d:79:7f:9e:bd:61:c2:ca:2e:c6:8f:c5:5e:ea:66: 83:9c:c5:9a:b7:aa:aa:d8:da:74:fa:3f:2d:4e:5e: cf:3c:dd:1d:c8:33:3a:96:4b:70:00:ae:7a:ed:a6: 57:c8:59:a7:9b:b4:cc:6f:40:ff:8b:86:6a:a5:3b: e3:80:89:8a:53:7f:cd:26:51:3e:b0:38:b1:11:46: a2:e1:f4:30:59:44:da:dd:88:a7:39:9b:ed:64:16: 71:9c:ab:0a:db:d4:15:e2:d1:0a:7c:c4:c2:41:bc: 96:a8:26:67:4e:00:b0:35:5b:73:0a:34:75:8b:04: 8c:2e:41:43:2a:b5:fa:dc:18:f9:45:78:ff:7e:d0: c5:f5:c0:66:d1:0b:e4:42:78:ca:dd:30:6d:78:d6: 91:a5:13:66:01:be:0c:05:5b:ed:c5:7c:9c:f8:64: 76:d9:89:a9:70:cf:39:4b:f0:92:ca:49:a4:b8:bf: bc:1e:ef:a5:56:ef:b8:bb:5a:5f:33:b4:c5:ef:7e: ea:00:d8:f4:c0:76:a6:21:56:a8:58:54:46:7b:d8: 68:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:D0:50:E4:75:79:28:1C:26:15:76:62:96:A7:E1:BC:D1:D0:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/250d59b0-8e99-4c0b-a5cf-a3a7150e6d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.146.0.0/18 Signature Algorithm: sha256WithRSAEncryption 04:9c:4e:2e:42:5d:82:89:e4:44:61:11:9e:89:b6:99:b5:87: c5:8a:55:7e:05:96:c5:dc:41:17:d2:51:32:23:e5:e7:16:0a: c0:be:c0:f6:ee:67:9a:03:41:fb:ef:7b:5b:ba:91:c6:f0:69: 51:8b:ca:03:eb:1c:20:ba:22:97:39:e9:52:9a:af:f5:78:28: bc:2a:75:fd:e7:a5:77:3f:9e:03:49:bd:78:72:40:cb:75:22: 12:b1:79:e2:f7:52:80:1a:da:89:b1:55:92:95:ac:e8:68:b8: 34:54:af:f6:57:92:96:99:e2:e2:fe:2b:d5:4d:8f:26:71:76: db:cf:39:5f:8d:4a:8a:ce:16:b9:dd:b0:85:b6:92:43:29:1d: 85:27:29:82:86:6c:b5:04:61:dc:e1:ef:93:7a:bd:ab:f4:7c: df:bb:ed:b1:6b:89:51:6e:69:df:2b:2c:2c:b1:7e:fa:b3:25: e3:b6:3e:cd:58:d1:b4:bb:1e:09:ca:fe:10:a3:3a:b0:d3:46: eb:e1:12:a7:f3:cc:fd:6a:7d:fc:ba:4f:59:2b:6f:d7:0e:96: 06:3d:a5:89:df:4e:09:20:5b:c7:4d:1b:bb:68:37:da:b6:d4: cb:de:32:85:ab:5b:25:84:c0:a2:18:a6:b4:8b:8e:31:69:e1: fc:39:65:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTmfS5+dF99LWbPnvAZYlrTLLZ90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUxMDE5WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzVkNzVmMzlhNmNmZjMyYjgxNzgwOTQwMzAyOThhN2M1 ODVkMGFkOGZlMDk0YjM4NmJjYmExNzllYmE0OTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe8sGI8l/IsdNFLFJuoQz81ZNYzd6pN51lWGHs/535k3N4 Pup0AtQ4Wz0Rlx15f569YcLKLsaPxV7qZoOcxZq3qqrY2nT6Py1OXs883R3IMzqW S3AArnrtplfIWaebtMxvQP+LhmqlO+OAiYpTf80mUT6wOLERRqLh9DBZRNrdiKc5 m+1kFnGcqwrb1BXi0Qp8xMJBvJaoJmdOALA1W3MKNHWLBIwuQUMqtfrcGPlFeP9+ 0MX1wGbRC+RCeMrdMG141pGlE2YBvgwFW+3FfJz4ZHbZialwzzlL8JLKSaS4v7we 76VW77i7Wl8ztMXvfuoA2PTAdqYhVqhYVEZ72GgdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpmjQUOR1eSgcJhV2Ypan4bzR0EQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1MGQ1OWIwLThlOTktNGMwYi1hNWNmLWEzYTcxNTBlNmQ2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2kgAwDQYJKoZIhvcNAQELBQADggEBAAScTi5CXYKJ5ERhEZ6Jtpm1h8WK VX4FlsXcQRfSUTIj5ecWCsC+wPbuZ5oDQfvve1u6kcbwaVGLygPrHCC6Ipc56VKa r/V4KLwqdf3npXc/ngNJvXhyQMt1IhKxeeL3UoAa2omxVZKVrOhouDRUr/ZXkpaZ 4uL+K9VNjyZxdtvPOV+NSorOFrndsIW2kkMpHYUnKYKGbLUEYdzh75N6vav0fN+7 7bFriVFuad8rLCyxfvqzJeO2Ps1Y0bS7HgnK/hCjOrDTRuvhEqfzzP1qffy6T1kr b9cOlgY9pYnfTgkgW8dNG7toN9q21MveMoWrWyWEwKIYprSLjjFp4fw5ZZ4= -----END CERTIFICATE-----Generated at Sat Apr 26 18:28:07 2025 by rpki-client