$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/447abeb4-58ef-4c84-862a-2c2e9ac5c607.roa File: 447abeb4-58ef-4c84-862a-2c2e9ac5c607.roa (raw, json) Hash identifier: ZqODJ+7FdRBaPBRSAqn0yJQD18RXxaRGbKghW+ePHKk= Subject key identifier: AF:27:3E:B2:23:8A:5A:44:6A:B1:75:4E:DC:9B:E9:37:65:A3:74:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 622FBDC98857CDEF8B106115EFD8F4596354D75D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/447abeb4-58ef-4c84-862a-2c2e9ac5c607.roa Signing time: Fri 25 Apr 2025 16:31:34 +0000 ROA not before: Fri 25 Apr 2025 16:31:34 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 18.252.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2f:bd:c9:88:57:cd:ef:8b:10:61:15:ef:d8:f4:59:63:54:d7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:31:34 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=086907a3663e0716b88f11583a1d7427c25679ab958bfbc5b8e22403e95deb61, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:28:13:e3:e6:9e:24:3e:b6:ce:4d:d5:d5: a0:5b:9d:25:24:35:3c:49:9c:6b:2f:5e:b5:73:69: 33:2b:1a:1f:fb:bd:f2:c5:fe:cb:73:96:fa:87:41: 89:4a:e2:99:89:94:78:d6:5c:ea:34:46:58:0e:d8: 1c:2f:f2:b5:79:c5:74:b3:f8:f1:bb:69:49:28:5e: a8:9a:cf:50:26:84:ce:29:02:ea:1d:a7:7f:a0:f3: 81:93:69:0a:9d:80:d9:49:0c:51:c5:e4:a3:b9:12: f4:8f:ac:e2:d4:8a:d9:0b:6a:16:51:64:4d:68:f8: d9:a0:3b:94:2b:c9:69:d2:ca:b9:f2:93:34:d8:9c: 54:8c:e0:19:63:f3:e5:bc:c9:b3:d0:49:6b:66:8f: 4b:33:c9:3c:b8:e4:3c:62:55:fb:09:d0:89:42:54: b4:db:0e:1a:c9:75:67:1b:c0:8d:d0:d6:22:5e:7b: 90:a9:84:29:a5:cd:ba:62:e7:4c:3c:43:53:5d:0c: af:00:19:1e:05:a5:7e:de:02:42:91:44:76:97:d1: 9a:7b:15:76:a6:50:b8:55:4f:ef:c1:56:de:c2:a8: 19:26:2e:da:4d:92:09:63:27:5c:c9:ca:dd:a7:8e: 5f:1e:1c:23:61:68:88:59:56:9b:68:d2:fa:4a:d7: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:27:3E:B2:23:8A:5A:44:6A:B1:75:4E:DC:9B:E9:37:65:A3:74:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/447abeb4-58ef-4c84-862a-2c2e9ac5c607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.252.58.0/23 Signature Algorithm: sha256WithRSAEncryption 94:61:68:4f:2e:a9:a9:c1:7c:6b:94:b3:7e:e7:e8:23:33:15: d2:8c:67:92:5b:13:64:eb:c6:15:59:0c:fd:21:40:0d:30:17: ec:21:5f:a9:ad:5b:58:0b:84:57:c5:32:9f:ff:bb:a5:66:b9: e9:a9:90:87:c4:79:c4:9c:b3:1f:a8:52:a7:8d:a0:b7:08:4b: 8d:3a:90:e5:ea:ef:0d:96:ef:f1:0c:6a:2f:45:fc:ab:fc:dc: 98:c8:22:29:9a:19:fb:ba:57:b5:a1:a2:ba:67:e3:e3:67:89: 76:ad:4f:7d:a2:fd:7e:ae:2f:90:d6:e4:e9:69:b9:de:ff:68: 77:1c:ab:fb:74:0b:b1:34:4a:64:0f:2e:21:e7:6e:40:2f:21: 27:fe:c6:b5:c3:a2:1b:95:23:db:2b:85:23:61:66:e8:0f:69: ba:c2:af:e6:94:17:bc:72:5e:b6:f7:d9:25:b1:b4:12:25:da: 81:42:24:ae:2c:0e:a3:0a:ad:ac:be:6e:06:d4:e7:5a:ab:ac: b8:c7:f5:ef:e4:cb:e5:ba:76:59:68:4f:fb:d9:07:8b:1f:61: 3e:39:e0:14:69:fb:f5:27:dd:29:9d:61:50:03:bf:35:86:1c: ad:67:62:97:d0:e4:3f:4b:28:e0:e8:01:5d:aa:e8:f7:95:1f: d8:9e:8a:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYi+9yYhXze+LEGEV79j0WWNU110wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYzMTM0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODY5MDdhMzY2M2UwNzE2Yjg4ZjExNTgzYTFkNzQyN2My NTY3OWFiOTU4YmZiYzViOGUyMjQwM2U5NWRlYjYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4KSgT4+aeJD62zk3V1aBbnSUkNTxJnGsvXrVzaTMrGh/7 vfLF/stzlvqHQYlK4pmJlHjWXOo0RlgO2Bwv8rV5xXSz+PG7aUkoXqiaz1AmhM4p Auodp3+g84GTaQqdgNlJDFHF5KO5EvSPrOLUitkLahZRZE1o+NmgO5QryWnSyrny kzTYnFSM4Blj8+W8ybPQSWtmj0szyTy45DxiVfsJ0IlCVLTbDhrJdWcbwI3Q1iJe e5CphCmlzbpi50w8Q1NdDK8AGR4FpX7eAkKRRHaX0Zp7FXamULhVT+/BVt7CqBkm LtpNkgljJ1zJyt2njl8eHCNhaIhZVpto0vpK1yL/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUryc+siOKWkRqsXVO3JvpN2WjdP8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0N2FiZWI0LTU4ZWYtNGM4NC04NjJhLTJjMmU5YWM1YzYwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES/DowDQYJKoZIhvcNAQELBQADggEBAJRhaE8uqanBfGuUs37n6CMzFdKM Z5JbE2TrxhVZDP0hQA0wF+whX6mtW1gLhFfFMp//u6VmuempkIfEecScsx+oUqeN oLcIS406kOXq7w2W7/EMai9F/Kv83JjIIimaGfu6V7Whorpn4+NniXatT32i/X6u L5DW5Olpud7/aHccq/t0C7E0SmQPLiHnbkAvISf+xrXDohuVI9srhSNhZugPabrC r+aUF7xyXrb32SWxtBIl2oFCJK4sDqMKray+bgbU51qrrLjH9e/ky+W6dlloT/vZ B4sfYT454BRp+/Un3SmdYVADvzWGHK1nYpfQ5D9LKODoAV2q6PeVH9ieilg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:47 2025 by rpki-client