$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2abb9321-cc59-464b-bbc7-868fa403618a.roa File: 2abb9321-cc59-464b-bbc7-868fa403618a.roa (raw, json) Hash identifier: KUwnL1jXam56f4UEqTkyFvR2xwqWusEA36E+Beh6Sz8= Subject key identifier: 75:8A:CC:B8:96:EC:DE:35:FF:F2:F2:7B:09:87:17:14:1D:7B:E6:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1618BE7FD3F414BAFE80C554AEE10AD15FF7AE74 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2abb9321-cc59-464b-bbc7-868fa403618a.roa Signing time: Fri 25 Apr 2025 16:30:23 +0000 ROA not before: Fri 25 Apr 2025 16:30:23 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.229.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:18:be:7f:d3:f4:14:ba:fe:80:c5:54:ae:e1:0a:d1:5f:f7:ae:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:30:23 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6196c644575fc2b5d384454dab079b77f3b4a8a233e5f6791ad1a7968ec8ab76, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:be:ff:4e:b1:c0:6c:d6:f1:c6:61:2f:05: 5b:8f:ce:97:1f:11:84:77:a7:71:da:ff:df:fd:af: b6:a1:bc:32:6d:2f:b4:ac:5b:fd:ec:d2:26:84:6f: ec:b5:d9:bf:67:08:a7:69:d4:88:22:3b:7f:22:c2: ef:f6:e4:44:1c:62:0b:c1:38:eb:ba:4e:6c:14:d5: 8d:c5:c2:d2:8d:44:0e:af:96:32:ff:9e:c6:cd:21: dd:73:91:48:7d:9f:eb:15:7b:4f:c6:e3:1d:1a:a7: 94:35:97:d0:21:0c:a4:ec:2c:6f:b5:f4:bb:ee:03: bb:2c:25:e8:93:de:eb:52:6e:c2:3b:1f:9b:91:c0: 71:d6:5d:af:65:a9:1f:82:28:a4:f3:91:26:b6:e9: d8:08:96:7a:d2:7c:23:75:c2:a4:2b:29:6c:88:a6: a7:b5:48:7a:71:52:83:cb:06:c9:04:a1:85:13:41: 29:7d:47:f2:e7:16:39:a8:a1:62:8a:11:5d:48:56: f0:6c:8b:31:a3:a4:89:e9:dd:52:4f:45:e8:6f:08: 2e:a0:9c:df:e0:df:33:fd:ff:0f:b7:e0:a3:7a:4e: 74:e1:bf:9c:7e:c5:40:5c:d7:a8:d0:46:60:a8:82: b9:e0:2c:71:9b:b5:02:0a:39:7d:b2:9a:36:2c:48: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8A:CC:B8:96:EC:DE:35:FF:F2:F2:7B:09:87:17:14:1D:7B:E6:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2abb9321-cc59-464b-bbc7-868fa403618a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:30:a3:96:74:34:b1:be:0e:6c:90:c1:62:ce:1c:4e:1a:9e: 6f:e7:cc:aa:b6:0b:58:2d:f6:6c:5a:a0:36:18:38:b3:6d:77: 31:2d:38:ad:af:0f:68:22:9b:01:85:ab:ad:2d:ae:b7:ea:3a: 0e:c4:e3:bf:75:f1:b2:63:bc:21:1a:35:a8:05:a7:84:9d:f0: 40:c6:c0:ee:6d:bc:ae:b7:6b:cd:17:5c:63:2b:69:12:51:e7: c7:f6:9e:84:6d:6d:7d:c5:5a:18:08:86:23:43:01:9b:42:b7: 55:e5:be:e3:92:48:de:f5:97:47:a5:04:bc:96:12:54:e5:d6: d2:22:52:e1:2d:bd:bc:3d:8f:c3:e8:d4:8c:f9:59:3e:19:be: 26:48:51:24:95:2d:92:78:cd:05:4c:db:c8:ba:b2:3a:8d:71: a9:87:b2:54:dd:61:b3:f5:01:52:c7:87:80:89:e4:fa:94:b0: 86:b6:16:05:0e:1a:17:b6:51:a1:94:73:70:3b:70:d9:bb:cb: 64:08:8c:49:e6:d4:6b:a4:d5:7e:3f:0a:6e:6f:10:2f:09:61: 9e:bf:08:a4:75:3e:30:9b:cc:25:c3:b2:15:89:3c:0a:c8:03: ba:1f:75:d5:81:16:f7:5a:62:90:94:aa:ce:11:76:a3:c3:cd: 88:61:be:c0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFhi+f9P0FLr+gMVUruEK0V/3rnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYzMDIzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTk2YzY0NDU3NWZjMmI1ZDM4NDQ1NGRhYjA3OWI3N2Yz YjRhOGEyMzNlNWY2NzkxYWQxYTc5NjhlYzhhYjc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaJr7/TrHAbNbxxmEvBVuPzpcfEYR3p3Ha/9/9r7ahvDJt L7SsW/3s0iaEb+y12b9nCKdp1IgiO38iwu/25EQcYgvBOOu6TmwU1Y3FwtKNRA6v ljL/nsbNId1zkUh9n+sVe0/G4x0ap5Q1l9AhDKTsLG+19LvuA7ssJeiT3utSbsI7 H5uRwHHWXa9lqR+CKKTzkSa26dgIlnrSfCN1wqQrKWyIpqe1SHpxUoPLBskEoYUT QSl9R/LnFjmooWKKEV1IVvBsizGjpInp3VJPRehvCC6gnN/g3zP9/w+34KN6TnTh v5x+xUBc16jQRmCogrngLHGbtQIKOX2ymjYsSMEdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdYrMuJbs3jX/8vJ7CYcXFB175uAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhYmI5MzIxLWNjNTktNDY0Yi1iYmM3LTg2OGZhNDAzNjE4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS5TANBgkqhkiG9w0BAQsFAAOCAQEAUjCjlnQ0sb4ObJDBYs4cThqeb+fM qrYLWC32bFqgNhg4s213MS04ra8PaCKbAYWrrS2ut+o6DsTjv3XxsmO8IRo1qAWn hJ3wQMbA7m28rrdrzRdcYytpElHnx/aehG1tfcVaGAiGI0MBm0K3VeW+45JI3vWX R6UEvJYSVOXW0iJS4S29vD2Pw+jUjPlZPhm+JkhRJJUtknjNBUzbyLqyOo1xqYey VN1hs/UBUseHgInk+pSwhrYWBQ4aF7ZRoZRzcDtw2bvLZAiMSebUa6TVfj8Kbm8Q Lwlhnr8IpHU+MJvMJcOyFYk8CsgDuh911YEW91pikJSqzhF2o8PNiGG+wA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:12 2025 by rpki-client