$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e5cb1a5-3ed3-44b2-b227-f654e6992022.roa File: 2e5cb1a5-3ed3-44b2-b227-f654e6992022.roa (raw, json) Hash identifier: ZWuqwYGJYlIfjpipsCiiea0db2bbCrt+rAHCsFAMUeM= Subject key identifier: 23:C6:F3:D8:D0:63:EF:3E:44:B4:FB:69:6F:9E:42:E4:B7:61:1F:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04388A0AB17E82412BDCD9C117343ABCFA42E566 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e5cb1a5-3ed3-44b2-b227-f654e6992022.roa Signing time: Fri 18 Apr 2025 17:10:15 +0000 ROA not before: Fri 18 Apr 2025 17:10:15 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.233.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:38:8a:0a:b1:7e:82:41:2b:dc:d9:c1:17:34:3a:bc:fa:42:e5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:10:15 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=a14c0bc7ba7b2ccc74722160c2d45daf2bd5859780c3f047cc44cff74688c441, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:58:33:70:cf:d2:0b:cf:d3:cd:58:37:1a: 19:87:5a:bf:4d:be:d6:81:4a:6e:c7:ab:7a:48:0b: 36:44:f4:b0:37:bf:e3:e9:c0:79:9a:70:91:0c:d2: a1:40:87:06:37:70:fa:fd:d7:bc:8f:74:72:d2:25: ad:65:f4:64:90:c9:a7:7e:b7:10:38:f0:e9:36:2e: 8e:68:19:90:de:39:d9:e1:7b:c5:de:b6:f3:0d:c5: 82:f8:a4:3c:f0:e6:02:d3:05:76:f8:c8:b0:a3:b5: 6f:f0:df:df:87:1a:3a:29:17:74:ca:ac:38:02:9e: d5:d8:77:7e:4e:45:35:26:d1:81:ac:97:e5:0b:02: 9f:44:b9:15:82:ec:a0:a3:8b:03:82:b8:50:71:3b: 9e:b2:fe:05:ce:7d:5b:2e:ba:af:4c:f3:59:c9:11: 32:28:18:d0:ff:e6:22:0e:95:08:e4:ef:12:97:cd: 05:2e:66:8c:c2:43:27:f5:f0:03:24:3a:a6:b2:82: 59:04:14:6e:a4:03:4d:65:0b:7f:09:c8:ff:7b:88: cc:21:f4:02:26:1e:5c:28:68:ac:6c:25:35:15:e1: dc:e0:cb:72:c5:30:5d:3b:ed:10:17:90:92:e2:58: d3:f1:8e:78:35:80:81:18:e3:35:de:fe:03:7b:f6: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C6:F3:D8:D0:63:EF:3E:44:B4:FB:69:6F:9E:42:E4:B7:61:1F:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e5cb1a5-3ed3-44b2-b227-f654e6992022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.233.64.0/18 Signature Algorithm: sha256WithRSAEncryption 31:e4:37:d0:fc:23:00:41:c9:aa:60:22:20:b9:cd:4a:bb:27: 76:b2:26:d8:a0:4a:c8:7d:44:fd:65:85:c0:45:d4:8e:53:8a: ed:2a:80:ca:cb:9d:9d:db:3f:5a:ae:a9:31:e4:dd:0f:d6:6e: 18:97:c4:87:bf:3c:a0:8c:8a:61:7e:b7:53:b8:0b:39:11:97: 15:6c:0d:01:8d:f8:7e:00:39:cc:80:ff:4b:25:8a:1c:31:6e: c6:4f:31:27:0f:20:9c:86:65:91:0a:4c:3d:56:d7:f2:18:65: 40:1e:34:bc:6a:51:82:41:1d:6a:1b:3c:41:59:c1:7d:63:9c: 4b:ca:24:96:00:78:f2:17:f7:76:b3:9d:27:fd:22:90:32:63: 31:2d:28:17:58:bd:72:9c:6f:1e:57:f0:fc:28:e9:39:09:9c: 36:59:f7:62:82:03:67:f8:e5:04:68:03:1c:3b:d0:8c:88:72: ea:a1:ea:25:96:9b:31:fb:c0:42:52:db:1c:5b:a4:7c:3d:03: d1:bd:55:37:de:97:9c:ae:77:7a:95:fc:40:79:44:ac:20:6f: 29:c7:41:d1:a4:10:0d:3d:83:3a:96:d7:24:15:6f:c1:06:4c: 29:1c:39:33:4f:23:44:4c:e9:5e:43:0e:66:a8:97:a7:a0:47: 27:eb:65:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBDiKCrF+gkEr3NnBFzQ6vPpC5WYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTcxMDE1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTRjMGJjN2JhN2IyY2NjNzQ3MjIxNjBjMmQ0NWRhZjJi ZDU4NTk3ODBjM2YwNDdjYzQ0Y2ZmNzQ2ODhjNDQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaGlgzcM/SC8/TzVg3GhmHWr9NvtaBSm7Hq3pICzZE9LA3 v+PpwHmacJEM0qFAhwY3cPr917yPdHLSJa1l9GSQyad+txA48Ok2Lo5oGZDeOdnh e8XetvMNxYL4pDzw5gLTBXb4yLCjtW/w39+HGjopF3TKrDgCntXYd35ORTUm0YGs l+ULAp9EuRWC7KCjiwOCuFBxO56y/gXOfVsuuq9M81nJETIoGND/5iIOlQjk7xKX zQUuZozCQyf18AMkOqayglkEFG6kA01lC38JyP97iMwh9AImHlwoaKxsJTUV4dzg y3LFMF077RAXkJLiWNPxjng1gIEY4zXe/gN79mezAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI8bz2NBj7z5EtPtpb55C5LdhH8UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlNWNiMWE1LTNlZDMtNDRiMi1iMjI3LWY2NTRlNjk5MjAyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY26UAwDQYJKoZIhvcNAQELBQADggEBADHkN9D8IwBByapgIiC5zUq7J3ay JtigSsh9RP1lhcBF1I5Tiu0qgMrLnZ3bP1quqTHk3Q/WbhiXxIe/PKCMimF+t1O4 CzkRlxVsDQGN+H4AOcyA/0slihwxbsZPMScPIJyGZZEKTD1W1/IYZUAeNLxqUYJB HWobPEFZwX1jnEvKJJYAePIX93aznSf9IpAyYzEtKBdYvXKcbx5X8Pwo6TkJnDZZ 92KCA2f45QRoAxw70IyIcuqh6iWWmzH7wEJS2xxbpHw9A9G9VTfel5yud3qV/EB5 RKwgbynHQdGkEA09gzqW1yQVb8EGTCkcOTNPI0RM6V5DDmaol6egRyfrZcs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:48:22 2025 by rpki-client