$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa File: 3623dc19-022a-4a7a-8a6b-a47be66dff37.roa (raw, json) Hash identifier: /PNtB6Uu9hxt3CiudEAChvE+eTNEYUSzXQ6dOgRkcss= Subject key identifier: 59:F6:82:D2:03:D0:E8:E9:D5:45:DD:34:CE:39:30:A6:DA:66:1E:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1426C1CE89C9DEF96FCABF62B7B1D5DD257F0F29 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa Signing time: Fri 18 Apr 2025 17:31:15 +0000 ROA not before: Fri 18 Apr 2025 17:31:15 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.251.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:26:c1:ce:89:c9:de:f9:6f:ca:bf:62:b7:b1:d5:dd:25:7f:0f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:31:15 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=a571cd9ac477918285aff1deb606b3ec51dd777c4a8d2c95980cf29dbe5a1753, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:85:af:1e:c7:cc:09:57:57:12:ee:d5:9c: c6:79:9a:1c:8f:a9:66:6c:9e:1b:b4:3c:c5:6f:92: 37:9d:0b:af:67:a4:66:28:45:60:9d:59:6f:4d:15: 70:9a:d0:fb:87:f5:bb:2b:98:41:db:69:67:4d:e2: 1a:5e:de:a0:56:1b:01:09:3e:9c:7c:33:91:f1:6c: e3:8c:53:7d:e3:e4:2a:88:20:c4:40:5e:a1:b7:ed: ab:b1:c7:3b:57:93:1e:8b:11:33:01:bc:ef:94:78: c6:43:c1:de:98:70:42:b8:0e:e6:cc:68:38:1b:6f: 9c:76:eb:70:d0:7b:f1:1c:83:57:38:8f:74:87:bc: 14:28:b9:0a:95:3d:c2:34:ea:9f:e0:8f:c2:5f:72: dd:18:7a:0f:2b:4a:6f:62:55:54:fc:9b:85:0b:d5: 70:b5:a9:00:9c:3a:d3:f3:95:a6:fc:d4:28:27:e9: 11:6f:fe:97:47:fe:c0:73:4f:9e:9c:4b:00:50:bf: 1b:06:5f:83:42:3e:bd:55:66:3b:40:2b:13:20:ce: 98:65:f9:3c:23:2a:26:b3:30:a2:a2:92:7a:68:b7: 73:2f:ee:62:df:b1:67:56:9f:9b:f3:1d:40:3b:56: 23:85:8f:06:1a:fa:aa:63:7a:05:b4:f9:c5:9a:d9: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F6:82:D2:03:D0:E8:E9:D5:45:DD:34:CE:39:30:A6:DA:66:1E:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.251.252.0/23 Signature Algorithm: sha256WithRSAEncryption 44:7f:54:92:f8:14:da:64:62:32:5f:88:ee:83:60:f6:83:6c: 0f:a1:f7:e1:15:e9:7c:f6:a0:c0:dd:dc:dd:e6:1b:ba:83:40: 9e:55:f2:e6:27:b1:0c:3a:26:f1:77:53:d5:59:2f:2a:01:19: a8:60:8f:5f:d6:2a:3f:f5:86:ea:92:05:00:ce:39:7f:b9:9c: 0d:dd:e9:3d:c9:82:5c:a2:29:d5:00:00:79:72:16:32:7f:5a: 21:31:ba:0b:fe:ad:0a:d9:a7:a0:cc:f9:d9:03:55:26:3a:90: d4:be:18:78:48:b1:5b:ce:54:92:27:87:f3:15:1e:b6:84:44: e7:29:8c:56:1d:ed:7b:63:af:35:45:4c:7f:4e:fd:25:1d:54: 58:ed:28:9d:c3:e8:be:69:0a:f5:79:38:d8:58:8a:53:17:9f: dd:07:c1:95:ce:de:58:14:3c:82:28:49:97:1a:9a:2d:d6:3e: e9:3a:bf:bf:51:2f:3e:6e:c5:58:38:e9:3c:66:5a:3f:aa:d4: 97:55:e8:89:b8:ab:5f:43:0f:78:e5:a7:06:8f:84:91:af:5e: cd:70:d8:6a:31:cd:ca:ab:a7:b2:ea:91:2c:45:7f:3f:95:61: e4:e3:af:53:9d:67:9e:82:85:ad:0b:89:6a:8b:4f:26:9b:f7: 54:e1:dd:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFCbBzonJ3vlvyr9it7HV3SV/DykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTczMTE1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTcxY2Q5YWM0Nzc5MTgyODVhZmYxZGViNjA2YjNlYzUx ZGQ3NzdjNGE4ZDJjOTU5ODBjZjI5ZGJlNWExNzUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYZYWvHsfMCVdXEu7VnMZ5mhyPqWZsnhu0PMVvkjedC69n pGYoRWCdWW9NFXCa0PuH9bsrmEHbaWdN4hpe3qBWGwEJPpx8M5HxbOOMU33j5CqI IMRAXqG37auxxztXkx6LETMBvO+UeMZDwd6YcEK4DubMaDgbb5x263DQe/Ecg1c4 j3SHvBQouQqVPcI06p/gj8Jfct0Yeg8rSm9iVVT8m4UL1XC1qQCcOtPzlab81Cgn 6RFv/pdH/sBzT56cSwBQvxsGX4NCPr1VZjtAKxMgzphl+TwjKiazMKKiknpot3Mv 7mLfsWdWn5vzHUA7ViOFjwYa+qpjegW0+cWa2eaTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWfaC0gPQ6OnVRd00zjkwptpmHrowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2MjNkYzE5LTAyMmEtNGE3YS04YTZiLWE0N2JlNjZkZmYzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2+/wwDQYJKoZIhvcNAQELBQADggEBAER/VJL4FNpkYjJfiO6DYPaDbA+h 9+EV6Xz2oMDd3N3mG7qDQJ5V8uYnsQw6JvF3U9VZLyoBGahgj1/WKj/1huqSBQDO OX+5nA3d6T3JglyiKdUAAHlyFjJ/WiExugv+rQrZp6DM+dkDVSY6kNS+GHhIsVvO VJInh/MVHraEROcpjFYd7XtjrzVFTH9O/SUdVFjtKJ3D6L5pCvV5ONhYilMXn90H wZXO3lgUPIIoSZcami3WPuk6v79RLz5uxVg46TxmWj+q1JdV6Im4q19DD3jlpwaP hJGvXs1w2Goxzcqrp7LqkSxFfz+VYeTjr1OdZ56Cha0LiWqLTyab91Th3dY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:28:43 2025 by rpki-client