$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa File: 2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa (raw, json) Hash identifier: 41/ArzQVr3xvNRyIlQ16yPq0dyuStQrMza+tv0vKOdo= Subject key identifier: 79:30:31:EE:92:C6:BF:CA:CC:A4:D3:31:0E:B1:08:49:55:F8:B4:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72FE243DDE37EFAB4AA2EE4B850FDD39F20D0F95 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa Signing time: Fri 25 Apr 2025 17:01:34 +0000 ROA not before: Fri 25 Apr 2025 17:01:34 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.220.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fe:24:3d:de:37:ef:ab:4a:a2:ee:4b:85:0f:dd:39:f2:0d:0f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:01:34 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=42cd4f1f6d14edbe2a2496440b6f429af074ea633fa24112e247f4498194e1fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:16:23:28:ad:79:3b:2d:11:16:e0:f3:a2: 29:03:87:ac:2d:f5:9b:bd:73:02:0f:96:9d:cc:98: ce:63:f1:ef:29:a7:e8:1d:44:38:4d:03:77:77:cf: 2d:bc:a6:9f:bc:cc:eb:df:f7:3d:ec:fa:a6:73:49: 96:84:c4:04:3e:42:4c:34:83:cb:89:19:a2:b8:ed: d9:22:da:66:df:d3:2f:8b:2e:99:08:cb:83:5a:7c: 92:c9:cc:65:f8:35:57:3d:69:d9:72:e4:00:e5:e1: 08:11:b9:1b:38:d9:1d:79:19:e7:d1:2c:bb:02:dc: 0b:6e:05:17:7b:fa:1d:d8:b6:e1:bc:f1:6b:c6:c2: 0b:5c:5d:f9:de:97:9f:fc:d7:02:5a:28:ec:7f:0d: ae:bc:81:cf:61:c6:ed:13:8c:c6:e6:53:2e:92:b8: f1:7d:57:06:88:80:a3:a9:30:5d:de:38:fb:52:35: 36:cd:87:44:1c:1f:68:be:ee:6e:93:22:c2:fa:54: 46:d0:8c:a3:c1:45:f7:5c:f0:07:9e:6c:ea:1d:a0: 45:21:23:bb:f5:f7:cd:ed:08:7c:14:3c:33:de:7d: 2e:7e:0e:46:5a:18:35:7f:5f:da:7b:c9:78:27:08: 7b:e7:1a:13:f0:32:90:77:95:83:b7:e4:70:64:01: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:30:31:EE:92:C6:BF:CA:CC:A4:D3:31:0E:B1:08:49:55:F8:B4:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f6214f5-5257-492d-b6dc-d87e6251a7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.220.64.0/18 Signature Algorithm: sha256WithRSAEncryption 07:70:66:46:8b:c9:8e:a3:f3:77:e9:ac:52:d5:37:ed:a5:fe: 42:30:51:02:e2:20:a8:76:78:07:55:b0:95:ba:1f:59:d2:a7: 42:b9:18:36:dc:68:62:ac:87:07:4d:3f:a3:9e:10:eb:26:0f: 5c:88:b3:4f:56:0d:24:d3:6e:77:55:20:13:a7:40:58:8c:7d: cb:70:9e:bb:c5:6e:0e:ae:d9:e5:f8:21:a6:ac:40:87:4b:5c: f3:e6:7c:32:f5:77:79:5d:9d:b5:bb:df:29:72:d7:d9:95:6f: ad:0a:82:83:07:e6:84:5a:bc:f1:57:0d:c1:ca:f8:d5:81:48: 6a:57:60:44:5b:5d:df:c8:90:5d:5a:21:52:19:64:c9:51:c4: 82:8d:a9:53:ce:80:f6:61:49:0e:dc:b9:b3:79:62:dc:40:79: 42:44:b0:dc:a0:10:21:9e:04:57:35:04:49:af:66:6b:c6:76: 72:e2:17:47:eb:11:cf:39:99:42:9a:48:d8:b2:45:d3:ad:04: 43:c9:be:1a:a2:5b:83:1a:1b:f8:b5:3e:32:e5:61:24:5c:70: 98:d3:0f:fa:35:a7:fb:35:f7:b2:f3:3c:d8:b3:81:c2:39:f6: 56:50:3a:dc:36:87:f8:03:3b:be:a7:aa:9b:98:73:ea:0c:18: bf:e6:91:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcv4kPd4376tKou5LhQ/dOfIND5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTcwMTM0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmNkNGYxZjZkMTRlZGJlMmEyNDk2NDQwYjZmNDI5YWYw NzRlYTYzM2ZhMjQxMTJlMjQ3ZjQ0OTgxOTRlMWZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm7hYjKK15Oy0RFuDzoikDh6wt9Zu9cwIPlp3MmM5j8e8p p+gdRDhNA3d3zy28pp+8zOvf9z3s+qZzSZaExAQ+Qkw0g8uJGaK47dki2mbf0y+L LpkIy4NafJLJzGX4NVc9adly5ADl4QgRuRs42R15GefRLLsC3AtuBRd7+h3YtuG8 8WvGwgtcXfnel5/81wJaKOx/Da68gc9hxu0TjMbmUy6SuPF9VwaIgKOpMF3eOPtS NTbNh0QcH2i+7m6TIsL6VEbQjKPBRfdc8AeebOodoEUhI7v1983tCHwUPDPefS5+ DkZaGDV/X9p7yXgnCHvnGhPwMpB3lYO35HBkAaWtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeTAx7pLGv8rMpNMxDrEISVX4tP4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmNjIxNGY1LTUyNTctNDkyZC1iNmRjLWQ4N2U2MjUxYTdjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY23EAwDQYJKoZIhvcNAQELBQADggEBAAdwZkaLyY6j83fprFLVN+2l/kIw UQLiIKh2eAdVsJW6H1nSp0K5GDbcaGKshwdNP6OeEOsmD1yIs09WDSTTbndVIBOn QFiMfctwnrvFbg6u2eX4IaasQIdLXPPmfDL1d3ldnbW73yly19mVb60KgoMH5oRa vPFXDcHK+NWBSGpXYERbXd/IkF1aIVIZZMlRxIKNqVPOgPZhSQ7cubN5YtxAeUJE sNygECGeBFc1BEmvZmvGdnLiF0frEc85mUKaSNiyRdOtBEPJvhqiW4MaG/i1PjLl YSRccJjTD/o1p/s197LzPNizgcI59lZQOtw2h/gDO76nqpuYc+oMGL/mkTk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:13 2025 by rpki-client