$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37595ac7-5355-47c4-b6e9-f90c0e7071e7.roa File: 37595ac7-5355-47c4-b6e9-f90c0e7071e7.roa (raw, json) Hash identifier: I892WWJgko+Ep0N0oqTVnNtdm7KRuyJncGgD/KuEy04= Subject key identifier: 82:53:AC:94:6A:23:87:F8:51:67:E3:99:43:07:E1:B1:A2:0E:A4:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A72FCAF4A5EF5D08D7AB057DE406C37D0C76C5D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37595ac7-5355-47c4-b6e9-f90c0e7071e7.roa Signing time: Wed 21 May 2025 00:20:19 +0000 ROA not before: Wed 21 May 2025 00:20:19 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 151.162.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:72:fc:af:4a:5e:f5:d0:8d:7a:b0:57:de:40:6c:37:d0:c7:6c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:20:19 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=937baf0346b6aea729616e457b002b342445d8ec23784b45a6fd900aea4b867d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:a8:8d:cf:3b:2f:8f:d6:06:b3:23:dc:a5: 1f:f0:01:68:c1:96:5d:21:63:8d:c8:de:d3:e3:36: 85:68:89:6c:52:5b:0a:2b:66:84:d3:1b:41:17:4e: 7e:e5:67:e3:ba:85:03:71:27:1d:55:be:59:8a:f9: d0:f7:d8:bd:ea:df:cf:bc:c0:f1:24:94:51:4e:0b: 6a:d7:1e:f7:e2:b9:3d:93:24:98:e4:1f:a8:0b:da: 72:39:4a:23:5e:26:1f:1c:65:1c:6f:84:79:96:54: 36:b3:ab:8b:74:ea:2d:2e:15:f2:cd:57:b4:83:cb: cd:ce:fb:93:6d:84:51:4a:d9:ed:f5:1d:5c:c5:be: 16:87:b5:55:56:98:9c:7a:39:b4:26:ab:81:50:7b: 59:ad:89:13:bb:83:c0:f9:42:41:e4:b3:9d:7c:90: 2b:9d:35:d2:26:fd:93:5d:4f:7f:c8:be:9b:be:e6: 2d:60:26:37:e4:19:71:68:f6:23:9e:c8:6d:54:d1: 42:2a:50:d7:65:1c:ae:b4:d7:c5:ad:f3:aa:73:fb: 51:8f:b6:55:1f:a4:2a:b0:13:da:57:f4:1d:bf:70: 86:cc:fc:46:2c:ec:22:e4:ce:ab:84:12:bf:8c:1e: d7:4b:3c:22:7f:6a:a9:ea:1a:96:7e:0e:b6:95:9c: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:53:AC:94:6A:23:87:F8:51:67:E3:99:43:07:E1:B1:A2:0E:A4:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37595ac7-5355-47c4-b6e9-f90c0e7071e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:29:35:21:62:7e:9e:af:93:65:a3:42:34:82:55:ed:47:c9: 52:ea:0d:a8:cc:3d:88:7e:e4:c8:3a:ab:a4:59:d0:e0:75:4f: 01:f2:db:2e:1c:91:5d:94:a1:2d:3d:b9:0c:27:26:79:6e:67: 6d:2e:e5:1c:9c:77:8c:85:79:f2:88:21:a6:21:ed:f4:c6:d3: 7c:ec:d3:d0:95:90:70:c7:5d:56:57:49:2d:b1:79:86:02:de: da:e0:de:ba:2a:8b:d5:a4:fd:53:e4:45:1c:fb:13:2d:b8:67: dd:07:7f:2e:36:b2:16:b7:90:4e:3f:ba:5b:e2:cf:a3:15:ff: 43:80:fb:21:ea:5b:47:ef:19:b4:0c:94:7f:82:2d:e7:b4:dd: ad:a8:bd:ac:bb:e7:49:83:8d:be:11:b6:5a:ae:81:e1:1f:24: 87:2b:fe:01:cf:8e:6d:1a:f8:bf:c7:19:47:6e:57:e8:52:87: a2:cb:a9:c3:15:67:6d:3b:f4:b8:9f:ad:f7:c0:f3:57:3f:fa: 86:fd:58:59:6e:40:53:86:c0:b7:f5:15:52:82:03:51:cd:99: 84:7e:4a:2b:d5:90:4b:b0:c7:ea:e1:ab:ff:84:44:b6:b7:45: 45:fe:52:c7:a5:a5:1b:50:cf:57:f3:a2:6e:27:98:34:e5:08: 5b:52:19:a2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSnL8r0pe9dCNerBX3kBsN9DHbF0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAyMDE5WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzdiYWYwMzQ2YjZhZWE3Mjk2MTZlNDU3YjAwMmIzNDI0 NDVkOGVjMjM3ODRiNDVhNmZkOTAwYWVhNGI4NjdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIr6iNzzsvj9YGsyPcpR/wAWjBll0hY43I3tPjNoVoiWxS WworZoTTG0EXTn7lZ+O6hQNxJx1VvlmK+dD32L3q38+8wPEklFFOC2rXHvfiuT2T JJjkH6gL2nI5SiNeJh8cZRxvhHmWVDazq4t06i0uFfLNV7SDy83O+5NthFFK2e31 HVzFvhaHtVVWmJx6ObQmq4FQe1mtiRO7g8D5QkHks518kCudNdIm/ZNdT3/Ivpu+ 5i1gJjfkGXFo9iOeyG1U0UIqUNdlHK6018Wt86pz+1GPtlUfpCqwE9pX9B2/cIbM /EYs7CLkzquEEr+MHtdLPCJ/aqnqGpZ+DraVnDVFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUglOslGojh/hRZ+OZQwfhsaIOpDYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3NTk1YWM3LTUzNTUtNDdjNC1iNmU5LWY5MGMwZTcwNzFlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCXojANBgkqhkiG9w0BAQsFAAOCAQEAZyk1IWJ+nq+TZaNCNIJV7UfJUuoN qMw9iH7kyDqrpFnQ4HVPAfLbLhyRXZShLT25DCcmeW5nbS7lHJx3jIV58oghpiHt 9MbTfOzT0JWQcMddVldJLbF5hgLe2uDeuiqL1aT9U+RFHPsTLbhn3Qd/LjayFreQ Tj+6W+LPoxX/Q4D7IepbR+8ZtAyUf4It57Tdrai9rLvnSYONvhG2Wq6B4R8khyv+ Ac+ObRr4v8cZR25X6FKHosupwxVnbTv0uJ+t98DzVz/6hv1YWW5AU4bAt/UVUoID Uc2ZhH5KK9WQS7DH6uGr/4REtrdFRf5Sx6WlG1DPV/OibieYNOUIW1IZog== -----END CERTIFICATE-----Generated at Sat Jun 14 05:45:28 2025 by rpki-client