$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa File: 34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa (raw, json) Hash identifier: VhnhXEt01Vp5AiExZfRHmNJRvqOLxRTIgbzVFcGHcw0= Subject key identifier: 61:A6:D0:2A:CE:80:32:40:65:18:8B:6D:CF:A6:5A:86:FB:91:A7:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0204D8D09A9CC041E4D04ABE3B95B2012AE11CA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa Signing time: Sat 26 Apr 2025 00:20:51 +0000 ROA not before: Sat 26 Apr 2025 00:20:51 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:04:d8:d0:9a:9c:c0:41:e4:d0:4a:be:3b:95:b2:01:2a:e1:1c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 26 00:20:51 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=1af6c4bafbf29073fe8c2b10669f8efb68b8ede12d9822650674502d771cdb34, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:07:84:cb:45:16:57:05:c3:d8:7e:27:38:c2: 92:14:e2:74:40:f2:12:4c:16:be:6d:18:a3:80:a1: 2a:ee:38:b6:4c:ae:81:e2:a8:b0:1c:8a:99:fa:a4: 03:2d:62:a0:bd:60:b0:43:87:ed:6b:05:da:d5:4b: 92:cd:d9:6b:c6:43:d0:fa:5a:c6:fc:df:24:3b:18: 10:17:df:8f:9c:48:34:ef:e2:a9:1b:68:12:b9:97: 21:6e:c5:cb:53:ea:93:5b:81:24:e0:9f:f7:37:65: a0:58:6f:63:7d:c2:c7:4b:eb:b0:51:6d:7e:fc:95: 8e:59:1c:2b:48:73:d3:a9:b7:89:82:3d:4c:03:98: d5:bb:89:8b:a1:5c:60:e4:d4:14:ec:c7:66:ee:d1: a1:ab:d3:3a:3c:1f:1d:da:be:ec:b5:e1:f3:08:fc: e7:eb:ba:01:f0:d3:09:90:80:35:28:75:28:5e:02: fc:62:61:89:8f:1f:4f:6b:55:5b:54:97:48:4e:dd: e7:eb:6b:d2:f2:06:6b:a1:88:ee:d7:90:31:ee:34: 96:51:c8:e5:7e:ab:a3:db:14:06:26:26:3c:24:d3: f0:cc:b8:83:a9:48:22:a0:f1:64:89:30:d2:62:d3: b6:72:83:a9:e0:c8:64:c5:37:3f:86:5f:28:1e:e5: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:D0:2A:CE:80:32:40:65:18:8B:6D:CF:A6:5A:86:FB:91:A7:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:e2:ee:96:04:34:2f:d7:07:a0:b6:54:1a:97:ad:2c:28:88: dd:b8:0a:51:e0:a0:22:14:7a:6a:68:b6:98:b6:ce:39:ef:2b: 7a:a4:af:4b:9a:bf:62:8d:c5:7b:3c:c9:79:c7:f6:e5:01:e7: ac:4a:fd:82:6e:c0:65:1b:88:9a:41:26:33:de:94:46:42:c7: 65:eb:2e:fb:77:be:b2:0d:2c:3c:7c:e2:53:97:81:92:76:b9: 38:34:86:63:b7:60:ec:9f:d7:af:a9:91:60:77:b2:94:a3:95: 28:af:71:3f:14:23:ef:30:91:37:5b:65:e0:53:55:03:1d:d3: 18:15:a1:87:3d:87:67:7c:18:85:17:64:6d:1b:fb:1f:ad:b0: 65:05:a5:5a:ed:27:32:f2:58:dc:17:48:4c:13:4e:2f:17:00: bd:c9:6d:cb:15:90:f9:19:85:c2:f5:89:b1:9c:39:fa:2a:30: 50:38:90:38:b7:be:d6:e5:c2:e7:b6:e5:42:1a:00:91:bb:48: eb:0d:94:39:84:19:3d:65:a7:24:07:20:19:0a:01:59:ac:fb: 68:32:87:59:56:b5:c5:cf:d9:5e:d0:af:54:16:df:69:cb:b1: db:40:1b:e5:70:c8:92:aa:12:f3:e8:7f:4d:1f:f4:fc:7d:f5: d8:8a:62:98 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAgTY0JqcwEHk0Eq+O5WyASrhHKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI2MDAyMDUxWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYWY2YzRiYWZiZjI5MDczZmU4YzJiMTA2NjlmOGVmYjY4 YjhlZGUxMmQ5ODIyNjUwNjc0NTAyZDc3MWNkYjM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQB4TLRRZXBcPYfic4wpIU4nRA8hJMFr5tGKOAoSruOLZM roHiqLAcipn6pAMtYqC9YLBDh+1rBdrVS5LN2WvGQ9D6Wsb83yQ7GBAX34+cSDTv 4qkbaBK5lyFuxctT6pNbgSTgn/c3ZaBYb2N9wsdL67BRbX78lY5ZHCtIc9Opt4mC PUwDmNW7iYuhXGDk1BTsx2bu0aGr0zo8Hx3avuy14fMI/OfrugHw0wmQgDUodShe AvxiYYmPH09rVVtUl0hO3efra9LyBmuhiO7XkDHuNJZRyOV+q6PbFAYmJjwk0/DM uIOpSCKg8WSJMNJi07Zyg6ngyGTFNz+GXyge5RJvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYabQKs6AMkBlGIttz6ZahvuRpwYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0NzQ4ZTJiLTQzZjEtNGQ0My1iNWM4LTRmZTczZjU4ZmEyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASejANBgkqhkiG9w0BAQsFAAOCAQEAQuLulgQ0L9cHoLZUGpetLCiI3bgK UeCgIhR6ami2mLbOOe8reqSvS5q/Yo3FezzJecf25QHnrEr9gm7AZRuImkEmM96U RkLHZesu+3e+sg0sPHziU5eBkna5ODSGY7dg7J/Xr6mRYHeylKOVKK9xPxQj7zCR N1tl4FNVAx3TGBWhhz2HZ3wYhRdkbRv7H62wZQWlWu0nMvJY3BdITBNOLxcAvclt yxWQ+RmFwvWJsZw5+iowUDiQOLe+1uXC57blQhoAkbtI6w2UOYQZPWWnJAcgGQoB Waz7aDKHWVa1xc/ZXtCvVBbfacux20Ab5XDIkqoS8+h/TR/0/H312IpimA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:26:57 2025 by rpki-client