$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2651d7ce-fa7d-456b-9aa6-0fd9e5265e68.roa File: 2651d7ce-fa7d-456b-9aa6-0fd9e5265e68.roa (raw, json) Hash identifier: 8oQopK4Tr9vR3ANrw/9XBWT5b/qQoOjup6NEApkxOY8= Subject key identifier: AF:25:10:81:9C:EB:1B:52:A9:B7:38:43:6C:38:B3:E3:55:B0:C5:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B8FB8B6D02224CCD402842F9A0F9FDC07D55329 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2651d7ce-fa7d-456b-9aa6-0fd9e5265e68.roa Signing time: Fri 18 Apr 2025 17:11:50 +0000 ROA not before: Fri 18 Apr 2025 17:11:50 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.236.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8f:b8:b6:d0:22:24:cc:d4:02:84:2f:9a:0f:9f:dc:07:d5:53:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:11:50 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=2ba2c842e64ee6bd16f3c5c67e96e0c7b94b335c8638506bab9925861d62cff6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:03:62:79:19:71:37:f2:f1:1b:0a:bc:34: 68:da:08:e3:80:cc:05:b9:67:16:22:c4:73:6e:39: 79:ec:eb:c7:f6:d8:c8:db:8e:f7:59:b8:ed:ce:6a: 89:0b:c4:a6:b3:08:81:26:88:9a:f5:74:e9:d6:4f: d0:28:41:6b:23:11:f1:ac:e3:f7:1d:42:2c:94:e5: 40:65:7e:94:30:6d:4b:73:83:e7:b3:93:70:9a:07: b5:50:14:6b:1d:b7:c4:8d:ac:2e:2f:38:7b:5f:1c: 7e:41:f6:6c:88:f4:5d:08:b5:4c:ee:48:9d:e1:7f: ca:ef:ea:51:52:9f:c9:a1:f8:a1:6f:99:7d:b1:c5: 9e:25:68:5f:15:b2:e9:0f:9e:b6:db:df:25:b6:df: fe:a9:59:83:c9:af:a5:1a:60:93:ee:65:23:77:29: f7:5a:a2:50:f3:2e:be:8a:19:7a:51:93:ec:f4:01: a7:03:76:1a:29:21:6f:8c:d0:e6:55:cf:46:2b:83: 3e:09:ee:a4:67:c7:25:b6:42:96:3b:03:e5:90:36: fe:36:00:2d:dd:bd:af:f4:e5:ac:29:1d:4a:99:0c: c5:14:27:fb:7d:e5:fc:8e:06:3d:e5:ae:9e:a8:6d: 5f:61:c1:9e:28:f9:48:20:41:5c:26:3f:3d:11:45: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:25:10:81:9C:EB:1B:52:A9:B7:38:43:6C:38:B3:E3:55:B0:C5:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2651d7ce-fa7d-456b-9aa6-0fd9e5265e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.236.0.0/15 Signature Algorithm: sha256WithRSAEncryption ab:6a:03:b1:e7:2e:f6:a6:5f:fc:9b:29:54:58:8e:98:64:71: af:f1:30:b0:65:5b:66:db:80:60:f3:ca:40:d7:a0:21:3d:a5: 2e:80:4f:1c:6d:10:ca:90:3c:cb:8f:91:7f:75:f6:7d:0d:85: 66:4a:5c:8a:f2:f0:21:2f:18:ac:6b:26:94:ab:ae:98:12:0c: f8:d5:ca:67:ca:8c:97:83:a0:c1:48:dd:68:57:29:98:c4:57: e0:5a:b6:34:59:44:fc:76:e6:45:42:04:95:7c:72:36:3e:09: 31:1c:a0:d9:f8:c3:30:29:89:74:46:0b:e3:ca:99:f7:79:33: 09:d7:d6:ca:12:87:5a:8a:32:47:37:c4:9f:8d:86:f5:2a:bb: 51:95:f0:8d:a4:7d:44:1a:d0:b2:ca:be:4f:02:a5:6d:c0:34: 97:1a:08:c9:4e:35:57:8a:bb:e2:d0:c4:4b:38:27:02:5e:77: d8:d5:d0:c6:26:8b:e3:9b:51:14:64:9b:cb:2b:1d:3b:10:16: a6:15:19:40:7a:ec:2d:7f:fb:8c:5a:28:b3:72:7b:b2:a4:cb: c4:4a:89:7a:e4:07:55:f7:18:fa:c4:41:1c:e5:4e:ea:0b:32: 19:22:d2:52:f8:b2:9d:42:ed:a4:af:b3:a6:6d:d1:d4:27:c3: 9d:1f:f0:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW4+4ttAiJMzUAoQvmg+f3AfVUykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTcxMTUwWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmEyYzg0MmU2NGVlNmJkMTZmM2M1YzY3ZTk2ZTBjN2I5 NGIzMzVjODYzODUwNmJhYjk5MjU4NjFkNjJjZmY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvtwNieRlxN/LxGwq8NGjaCOOAzAW5ZxYixHNuOXns68f2 2MjbjvdZuO3OaokLxKazCIEmiJr1dOnWT9AoQWsjEfGs4/cdQiyU5UBlfpQwbUtz g+ezk3CaB7VQFGsdt8SNrC4vOHtfHH5B9myI9F0ItUzuSJ3hf8rv6lFSn8mh+KFv mX2xxZ4laF8VsukPnrbb3yW23/6pWYPJr6UaYJPuZSN3KfdaolDzLr6KGXpRk+z0 AacDdhopIW+M0OZVz0Yrgz4J7qRnxyW2QpY7A+WQNv42AC3dva/05awpHUqZDMUU J/t95fyOBj3lrp6obV9hwZ4o+UggQVwmPz0RRZoxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUryUQgZzrG1KptzhDbDiz41Wwxf8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI2NTFkN2NlLWZhN2QtNDU2Yi05YWE2LTBmZDllNTI2NWU2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE27DANBgkqhkiG9w0BAQsFAAOCAQEAq2oDsecu9qZf/JspVFiOmGRxr/Ew sGVbZtuAYPPKQNegIT2lLoBPHG0QypA8y4+Rf3X2fQ2FZkpcivLwIS8YrGsmlKuu mBIM+NXKZ8qMl4OgwUjdaFcpmMRX4Fq2NFlE/HbmRUIElXxyNj4JMRyg2fjDMCmJ dEYL48qZ93kzCdfWyhKHWooyRzfEn42G9Sq7UZXwjaR9RBrQssq+TwKlbcA0lxoI yU41V4q74tDESzgnAl532NXQxiaL45tRFGSbyysdOxAWphUZQHrsLX/7jFoos3J7 sqTLxEqJeuQHVfcY+sRBHOVO6gsyGSLSUviynULtpK+zpm3R1CfDnR/wAg== -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:11 2025 by rpki-client