$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa File: 2da90977-8e35-4017-a057-21f12034dc42.roa (raw, json) Hash identifier: x14fJI2jVqKQorTxJqKMu3CyyjKsLu6Eu6tXULE9V7U= Subject key identifier: 75:41:5E:5C:BC:9A:33:98:D5:30:4A:48:A8:79:94:50:99:B8:1E:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47909C53AAE8076C7BC17ED4E73EE9B8AA87C2E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa Signing time: Fri 25 Apr 2025 16:50:14 +0000 ROA not before: Fri 25 Apr 2025 16:50:14 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:90:9c:53:aa:e8:07:6c:7b:c1:7e:d4:e7:3e:e9:b8:aa:87:c2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:50:14 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=b55647a5f3a2ab2332ecad589832cb89e213cb1a60206c3e663cec63d0b653d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:1f:a1:90:40:43:21:c6:4b:33:33:23:b4: f8:fe:4e:1c:81:34:eb:6f:e1:77:66:25:64:15:a4: 7d:6d:77:19:b9:c5:cb:1b:86:94:d6:56:43:7c:7c: 38:83:61:7b:d2:54:2e:47:bf:ef:13:b1:0f:ef:af: 53:36:9f:2d:cc:30:b7:05:d7:f4:99:99:35:11:53: fb:ef:bf:1e:2b:1e:2b:f2:d3:4c:f4:89:8d:bf:1b: 41:4c:23:96:d9:df:8c:2f:2d:4b:cc:99:69:29:ce: cc:bf:13:05:f5:b5:7f:6b:c2:db:81:84:22:f8:26: cc:1a:cf:f3:96:ef:9e:7f:ee:96:31:c1:c8:57:09: a3:fc:c2:c2:63:3f:44:89:f7:27:b4:11:75:6e:80: 27:95:9b:19:73:1a:69:5e:bc:fe:c1:b8:63:ab:e4: 01:2c:56:19:4b:04:a8:63:c4:43:51:95:88:ac:f2: 2e:2e:f6:c8:10:a7:2b:94:db:0d:97:35:cb:5b:b7: c7:98:7d:47:b2:82:6d:6f:85:7b:4a:11:61:87:f0: 1a:c3:88:45:8a:e2:18:8a:88:d7:02:86:40:a8:ab: a5:bc:75:d2:88:57:d4:56:8b:79:67:2e:db:20:68: 18:d1:d9:23:4e:32:5f:f1:72:48:9e:83:72:00:fb: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:41:5E:5C:BC:9A:33:98:D5:30:4A:48:A8:79:94:50:99:B8:1E:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.3.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e6:8e:3a:b4:92:da:d6:c1:60:76:98:e1:6a:58:4c:01:ea: df:3b:3b:13:fb:e6:5c:a8:35:df:49:f5:97:b7:38:71:07:bb: 14:16:e5:2e:b6:4c:00:e9:8c:34:2e:18:51:49:1a:42:b2:4c: 16:35:12:13:9d:b3:65:2f:2c:6d:08:b8:8a:c3:bc:0c:ca:b8: c2:da:35:e7:20:9c:ca:51:74:01:7a:11:ca:14:b4:93:ad:21: 34:bf:52:63:ef:9d:76:2c:c6:72:ba:8a:bc:b0:04:f8:12:d6: 31:e4:0e:f5:5b:ea:5e:71:10:34:df:34:3e:64:31:b1:1a:4f: cd:49:34:be:51:0a:62:99:42:31:44:c1:91:6b:4b:e1:3d:fd: de:a8:52:c6:f4:71:e0:1d:fe:d8:a6:5a:37:1f:0c:f7:1a:ce: 7a:91:2a:67:fc:57:69:95:68:a3:28:89:16:60:f8:30:b9:41: d5:31:39:af:cc:4f:25:7d:d4:89:9e:35:c6:17:69:73:3c:23: 89:40:93:6f:80:9e:3b:dd:9f:10:40:f3:f6:1d:75:29:73:bc: 6f:bb:9d:73:1e:0c:a4:96:29:b0:df:39:81:8a:51:96:07:fe: 91:1e:f3:69:df:52:70:b2:a3:ba:df:5f:11:37:00:34:e3:ba: 2a:eb:60:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR5CcU6roB2x7wX7U5z7puKqHwuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY1MDE0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTU2NDdhNWYzYTJhYjIzMzJlY2FkNTg5ODMyY2I4OWUy MTNjYjFhNjAyMDZjM2U2NjNjZWM2M2QwYjY1M2Q1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPXh+hkEBDIcZLMzMjtPj+ThyBNOtv4XdmJWQVpH1tdxm5 xcsbhpTWVkN8fDiDYXvSVC5Hv+8TsQ/vr1M2ny3MMLcF1/SZmTURU/vvvx4rHivy 00z0iY2/G0FMI5bZ34wvLUvMmWkpzsy/EwX1tX9rwtuBhCL4Jswaz/OW755/7pYx wchXCaP8wsJjP0SJ9ye0EXVugCeVmxlzGmlevP7BuGOr5AEsVhlLBKhjxENRlYis 8i4u9sgQpyuU2w2XNctbt8eYfUeygm1vhXtKEWGH8BrDiEWK4hiKiNcChkCoq6W8 ddKIV9RWi3lnLtsgaBjR2SNOMl/xckieg3IA+10dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdUFeXLyaM5jVMEpIqHmUUJm4HowwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkYTkwOTc3LThlMzUtNDAxNy1hMDU3LTIxZjEyMDM0ZGM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XQMwDQYJKoZIhvcNAQELBQADggEBADXmjjq0ktrWwWB2mOFqWEwB6t87 OxP75lyoNd9J9Ze3OHEHuxQW5S62TADpjDQuGFFJGkKyTBY1EhOds2UvLG0IuIrD vAzKuMLaNecgnMpRdAF6EcoUtJOtITS/UmPvnXYsxnK6irywBPgS1jHkDvVb6l5x EDTfND5kMbEaT81JNL5RCmKZQjFEwZFrS+E9/d6oUsb0ceAd/timWjcfDPcaznqR Kmf8V2mVaKMoiRZg+DC5QdUxOa/MTyV91ImeNcYXaXM8I4lAk2+AnjvdnxBA8/Yd dSlzvG+7nXMeDKSWKbDfOYGKUZYH/pEe82nfUnCyo7rfXxE3ADTjuirrYA8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:04 2025 by rpki-client