$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa File: 33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa (raw, json) Hash identifier: Dz1hLFmlgoZoD2mYm5ZfHT/5r1haNvUD/ruGj2pV+fk= Subject key identifier: F0:A4:B5:7A:7F:CC:B1:13:EA:12:1B:CB:13:5C:4E:73:8B:FA:58:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 167F95464ECEC7A2E93D2C04526D46E694A15AFA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa Signing time: Fri 25 Apr 2025 17:11:40 +0000 ROA not before: Fri 25 Apr 2025 17:11:40 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.75.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7f:95:46:4e:ce:c7:a2:e9:3d:2c:04:52:6d:46:e6:94:a1:5a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:11:40 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8f239c11e49396ea646912c70b3d69c57b586e1c1302708b57155b81806e9f9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a0:db:0e:d5:68:01:2e:07:c4:59:08:22:b5: de:21:c9:99:b3:d0:6b:26:86:f0:1d:13:01:60:77: b7:71:4e:c3:a1:78:bf:b4:e7:28:fb:7f:0c:ae:2f: dc:03:54:ff:79:6c:65:f7:10:f2:02:0e:c7:a4:04: 91:71:47:86:b1:41:1e:30:9d:11:32:99:a4:a1:dd: 93:f1:9e:0b:0a:0c:b3:ba:b4:22:5a:62:95:3c:f7: b9:f0:c7:76:71:15:f1:04:65:ea:cc:87:22:e8:ee: 5b:8b:bf:3a:bd:28:fe:26:4a:72:44:f6:a2:36:df: de:3a:33:e7:33:10:57:33:fa:f2:06:a2:8d:5b:1b: 7f:d3:e5:4b:56:49:53:9e:77:20:d4:77:05:93:f8: 1c:86:a4:a8:f7:ba:63:1a:86:b2:89:65:f8:d8:35: a3:c1:15:7e:2c:28:8f:29:78:e0:b0:e6:f7:5a:b1: bc:44:9b:34:ed:25:88:36:05:1a:ca:52:f4:b9:50: 4c:80:a8:07:d1:83:08:18:e7:c1:c5:58:78:f4:b5: 88:d9:ea:94:d2:09:a4:69:f3:9c:b1:df:47:15:71: 4c:33:19:47:af:74:f7:79:d1:33:b0:c8:f8:e9:62: f1:db:51:c8:1a:07:24:c0:d9:68:27:b7:ae:94:b4: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A4:B5:7A:7F:CC:B1:13:EA:12:1B:CB:13:5C:4E:73:8B:FA:58:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.75.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:7e:e9:94:4f:6c:73:32:67:13:a6:79:ab:46:c1:7b:ff:d6: d6:31:8d:09:70:cd:04:2e:38:73:c1:1f:f3:0b:0b:e7:81:33: 40:5c:e9:d0:0c:a4:8b:40:79:3b:02:b5:8e:91:b7:6a:78:a5: 2e:2e:c2:c2:67:16:2a:f4:19:3a:0c:e4:38:89:63:08:09:b0: 39:ad:1b:ec:be:41:83:e2:ae:ac:47:01:6a:02:04:39:bb:43: 1b:7d:c8:b7:6e:df:ef:f8:5d:9b:43:1a:42:e4:29:ef:40:80: b2:dc:6f:a6:91:44:61:c4:fe:39:80:d0:28:66:3a:9a:a9:5f: 76:10:53:dd:36:a6:ca:29:9f:86:3d:73:dc:e3:c3:1b:91:a0: 2d:b9:a8:d9:1e:74:d5:77:cc:6d:66:06:8b:13:c9:a2:17:59: 8a:2c:97:18:cd:f2:ac:01:00:d8:a9:98:1e:32:c0:d9:35:b1: 49:ac:0f:a2:86:c6:72:e9:16:7b:2d:1c:e9:42:88:0a:ea:f1: 4c:e6:6e:a4:de:ec:6d:00:84:ce:d4:db:de:1d:1c:62:dd:70: 54:8d:38:7c:88:c2:56:9c:fb:d6:6e:c9:44:c3:41:38:f1:62: 70:ee:46:11:4d:92:6a:64:17:a8:3c:e4:dc:e2:4f:f3:89:1c: 7d:72:17:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFn+VRk7Ox6LpPSwEUm1G5pShWvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTcxMTQwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjIzOWMxMWU0OTM5NmVhNjQ2OTEyYzcwYjNkNjljNTdi NTg2ZTFjMTMwMjcwOGI1NzE1NWI4MTgwNmU5ZjliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLoNsO1WgBLgfEWQgitd4hyZmz0GsmhvAdEwFgd7dxTsOh eL+05yj7fwyuL9wDVP95bGX3EPICDsekBJFxR4axQR4wnREymaSh3ZPxngsKDLO6 tCJaYpU897nwx3ZxFfEEZerMhyLo7luLvzq9KP4mSnJE9qI23946M+czEFcz+vIG oo1bG3/T5UtWSVOedyDUdwWT+ByGpKj3umMahrKJZfjYNaPBFX4sKI8peOCw5vda sbxEmzTtJYg2BRrKUvS5UEyAqAfRgwgY58HFWHj0tYjZ6pTSCaRp85yx30cVcUwz GUevdPd50TOwyPjpYvHbUcgaByTA2Wgnt66UtL9jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8KS1en/MsRPqEhvLE1xOc4v6WMQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzZjhmNDRhLWMwYjYtNGVlOS05ZTNlLWUxNDkzMDQ4ZTc0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2S8AwDQYJKoZIhvcNAQELBQADggEBAEt+6ZRPbHMyZxOmeatGwXv/1tYx jQlwzQQuOHPBH/MLC+eBM0Bc6dAMpItAeTsCtY6Rt2p4pS4uwsJnFir0GToM5DiJ YwgJsDmtG+y+QYPirqxHAWoCBDm7Qxt9yLdu3+/4XZtDGkLkKe9AgLLcb6aRRGHE /jmA0ChmOpqpX3YQU902psopn4Y9c9zjwxuRoC25qNkedNV3zG1mBosTyaIXWYos lxjN8qwBANipmB4ywNk1sUmsD6KGxnLpFnstHOlCiArq8UzmbqTe7G0AhM7U294d HGLdcFSNOHyIwlac+9ZuyUTDQTjxYnDuRhFNkmpkF6g85NziT/OJHH1yF8o= -----END CERTIFICATE-----Generated at Sat Apr 26 12:46:25 2025 by rpki-client