$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa File: 38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa (raw, json) Hash identifier: vk8/o4sePpBmO0ELII8gip13DvCYjU0e1sebWZoaaQA= Subject key identifier: 90:28:52:D3:51:D3:A7:E2:8A:FA:67:FF:23:02:B0:26:A1:C4:B1:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AF4C5BF4A7CCC99011A7719E28720BFAF074EF5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa Signing time: Tue 22 Apr 2025 18:01:49 +0000 ROA not before: Tue 22 Apr 2025 18:01:49 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 52.46.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f4:c5:bf:4a:7c:cc:99:01:1a:77:19:e2:87:20:bf:af:07:4e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:01:49 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=2616f8f419be8730fcb999f4b88caeeb730da83e7fd6a4366e26cbd298891832, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:66:f7:48:d6:38:38:57:ea:50:52:72:4e:e2: 0a:53:05:0e:d5:9e:c7:48:dc:a4:dc:f0:86:b7:8f: b4:f1:1d:24:a7:e8:33:f5:7e:6f:b2:c5:94:9a:2b: 43:ee:f8:f1:ed:7f:33:56:d8:25:c4:cb:e4:e7:38: df:b5:c5:c1:c5:46:74:db:df:fc:a0:2e:4c:79:a0: ab:3b:81:88:e1:ba:2d:0e:92:31:ad:32:d8:64:14: 65:3a:d7:d6:b2:18:a0:5d:72:e3:c5:43:e1:df:2c: 15:41:3d:2a:9e:fb:94:4c:db:d2:84:b3:38:0d:88: c6:5a:d9:a3:71:4c:79:73:2a:bd:0f:f1:2a:62:42: 51:d7:ad:e7:75:a5:9f:b5:f3:c4:2b:52:22:0c:ce: 86:9a:dd:75:09:24:b2:7d:8a:6c:39:01:93:77:c8: c5:56:07:d8:36:4a:d6:ac:60:81:6b:fa:03:10:d4: 06:69:c1:9c:0b:4c:50:d6:90:83:e3:30:ba:3f:c7: 4a:4e:d9:dd:9d:b6:51:83:1e:97:02:f0:e2:3e:c5: 92:37:0e:37:ce:c1:05:ba:c0:ee:d0:7b:a6:cb:36: 67:0c:c4:fa:4d:3d:db:76:3f:27:f5:b9:20:b0:7b: 0b:fc:e0:52:a6:37:3f:72:2c:3f:ea:49:d1:39:a2: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:28:52:D3:51:D3:A7:E2:8A:FA:67:FF:23:02:B0:26:A1:C4:B1:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38326fa1-49e7-4ea9-9996-2cd0a6abd83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.176.0/22 Signature Algorithm: sha256WithRSAEncryption 88:fa:0c:4a:a4:3e:c8:3e:6f:0e:74:62:a6:e5:db:a7:d8:ba: 71:f9:45:ea:41:2a:87:01:23:91:b2:fe:34:1c:46:76:c1:9a: 77:0c:cb:bb:58:b5:c9:9f:3e:7f:3e:be:1c:f5:5b:c7:05:40: f3:18:46:e5:d4:fa:08:5f:4d:f3:7d:20:99:0d:48:a7:1c:9c: dd:40:07:5f:4b:04:69:8f:2c:36:34:03:d5:42:b2:e6:b4:27: 37:10:d3:ee:34:5a:c0:88:fe:f2:27:eb:42:27:48:64:31:da: b0:c0:d2:6e:a0:88:1c:ea:49:94:21:ca:0f:ba:57:af:32:aa: ee:54:89:02:3a:3c:76:2c:55:7b:e0:26:ea:10:15:21:b8:ef: 44:63:85:8b:53:8b:60:a9:d3:50:ca:9a:05:ca:1b:9c:3e:8d: b2:32:86:4e:fc:c9:6e:35:9d:2f:a2:a2:77:50:79:68:9a:02: 7d:c4:99:59:80:35:6f:00:a1:ae:a5:1b:f2:f9:28:e9:91:9c: fb:c3:ca:8a:8e:21:db:27:0a:94:26:83:cd:fc:59:64:78:c5: 6b:18:74:b3:a8:95:00:0d:7b:35:4f:4d:8b:62:06:8a:60:68: 95:1b:45:33:65:cc:67:32:00:3e:e5:20:e6:28:09:c4:ad:7a: 44:25:d3:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGvTFv0p8zJkBGncZ4ocgv68HTvUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgwMTQ5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjE2ZjhmNDE5YmU4NzMwZmNiOTk5ZjRiODhjYWVlYjcz MGRhODNlN2ZkNmE0MzY2ZTI2Y2JkMjk4ODkxODMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSZvdI1jg4V+pQUnJO4gpTBQ7VnsdI3KTc8Ia3j7TxHSSn 6DP1fm+yxZSaK0Pu+PHtfzNW2CXEy+TnON+1xcHFRnTb3/ygLkx5oKs7gYjhui0O kjGtMthkFGU619ayGKBdcuPFQ+HfLBVBPSqe+5RM29KEszgNiMZa2aNxTHlzKr0P 8SpiQlHXred1pZ+188QrUiIMzoaa3XUJJLJ9imw5AZN3yMVWB9g2StasYIFr+gMQ 1AZpwZwLTFDWkIPjMLo/x0pO2d2dtlGDHpcC8OI+xZI3DjfOwQW6wO7Qe6bLNmcM xPpNPdt2Pyf1uSCwewv84FKmNz9yLD/qSdE5oo7TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkChS01HTp+KK+mf/IwKwJqHEsSMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4MzI2ZmExLTQ5ZTctNGVhOS05OTk2LTJjZDBhNmFiZDgzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0LrAwDQYJKoZIhvcNAQELBQADggEBAIj6DEqkPsg+bw50Yqbl26fYunH5 RepBKocBI5Gy/jQcRnbBmncMy7tYtcmfPn8+vhz1W8cFQPMYRuXU+ghfTfN9IJkN SKccnN1AB19LBGmPLDY0A9VCsua0JzcQ0+40WsCI/vIn60InSGQx2rDA0m6giBzq SZQhyg+6V68yqu5UiQI6PHYsVXvgJuoQFSG470RjhYtTi2Cp01DKmgXKG5w+jbIy hk78yW41nS+iondQeWiaAn3EmVmANW8Aoa6lG/L5KOmRnPvDyoqOIdsnCpQmg838 WWR4xWsYdLOolQANezVPTYtiBopgaJUbRTNlzGcyAD7lIOYoCcStekQl0yY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:29 2025 by rpki-client