$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4570f34c-671a-4fcc-a171-7871c3923f46.roa File: 4570f34c-671a-4fcc-a171-7871c3923f46.roa (raw, json) Hash identifier: AWgNxcNceODAEGz3cvy3VEj7cZYIZOfU6+M5mzQdJ3o= Subject key identifier: 54:FA:3F:85:D0:CE:27:41:9B:80:BA:95:AA:59:55:9A:18:A7:74:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 410E18FE6196F795866E58C8184A7438F98AEEFA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4570f34c-671a-4fcc-a171-7871c3923f46.roa Signing time: Mon 14 Apr 2025 16:41:58 +0000 ROA not before: Mon 14 Apr 2025 16:41:58 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.72.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0e:18:fe:61:96:f7:95:86:6e:58:c8:18:4a:74:38:f9:8a:ee:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:41:58 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=8a0d3ce759ada5f3b595b8806567ea570510cf7757ac92d05fb934b370f86214, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:d4:45:4b:ed:09:18:2e:32:48:2b:d4:9b: b5:24:48:cb:4d:d7:13:c3:a0:7f:6a:55:6c:63:da: 38:51:e5:db:26:a8:b8:42:d6:f0:e6:3f:ca:87:51: 61:5c:d4:0e:fe:24:de:8a:e3:66:f1:10:6e:ef:42: 67:02:e2:58:6a:b7:8d:a6:09:de:7f:f2:d9:13:13: 46:b8:6b:6a:12:4d:7a:9e:58:46:07:d8:97:8b:a7: 81:49:49:d4:5f:76:bb:f5:41:8a:c3:4f:f6:8e:39: 61:f1:49:58:b2:9a:77:0f:80:75:43:e2:d4:14:bf: 72:05:94:3c:85:de:19:8f:d8:23:d5:a1:f8:12:34: ed:ea:c6:bd:d8:13:74:2d:11:0f:7e:68:f1:3a:bf: d8:bf:80:3a:36:22:3f:46:0b:65:24:70:92:0e:e7: 96:4a:16:10:89:22:68:47:c7:f5:4d:ec:ae:dd:cf: f5:b7:7d:52:16:5f:5e:bc:a3:be:34:ce:49:dc:2a: 7d:3b:71:49:02:f3:3f:2d:d9:ad:2e:b4:76:e0:d8: d9:60:51:04:84:42:bf:67:45:f2:80:9b:a5:ea:a8: e8:87:d3:6c:33:13:5f:77:97:be:de:1e:52:ca:63: 46:ad:b3:de:ca:86:9b:bc:12:9b:c3:62:84:41:f8: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FA:3F:85:D0:CE:27:41:9B:80:BA:95:AA:59:55:9A:18:A7:74:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4570f34c-671a-4fcc-a171-7871c3923f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.72.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9a:2c:54:23:09:06:b1:5e:83:57:d5:c7:7a:4f:4f:65:3b:c2: 1b:dc:8c:7a:f0:3c:42:fe:86:80:5d:ba:95:6d:d4:39:b3:80: 56:a1:29:3d:70:ce:28:ae:3f:3e:45:a1:cf:3f:16:ca:36:7e: d2:14:0f:3f:e7:38:cf:84:77:8a:18:f7:e0:f4:26:1d:47:a2: e8:d9:2e:17:ce:66:b1:5b:69:d4:60:a1:11:cc:22:57:4f:27: 6b:ef:53:87:a6:e0:9b:b3:31:21:c6:72:52:da:2d:51:17:4b: 46:bd:38:54:02:b9:21:58:60:47:ea:fd:62:61:5b:2e:6e:7b: cf:75:fb:48:c4:53:f5:9e:4c:f3:d8:fe:b7:e7:a1:d9:24:2b: 78:8c:f7:ab:49:40:3a:ca:99:45:27:4b:59:26:2e:56:19:ec: f3:d7:a7:cf:e2:64:3b:08:c6:4f:b3:d0:d0:55:d5:fc:12:13: ff:ec:c4:2b:e3:3c:99:ad:4a:d0:a2:72:ca:a0:0e:9e:c1:fd: 48:c0:78:24:9a:39:28:a3:bb:1b:d4:7d:84:2a:ef:b2:fd:35: 89:17:ec:75:fb:d7:23:db:dd:d7:8b:ca:b6:68:86:c0:e5:fa: 4e:71:b6:62:66:d6:c3:39:fe:b9:b4:e5:a6:3d:83:01:c4:86: 88:5e:e7:8f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQQ4Y/mGW95WGbljIGEp0OPmK7vowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTY0MTU4WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTBkM2NlNzU5YWRhNWYzYjU5NWI4ODA2NTY3ZWE1NzA1 MTBjZjc3NTdhYzkyZDA1ZmI5MzRiMzcwZjg2MjE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJINRFS+0JGC4ySCvUm7UkSMtN1xPDoH9qVWxj2jhR5dsm qLhC1vDmP8qHUWFc1A7+JN6K42bxEG7vQmcC4lhqt42mCd5/8tkTE0a4a2oSTXqe WEYH2JeLp4FJSdRfdrv1QYrDT/aOOWHxSViymncPgHVD4tQUv3IFlDyF3hmP2CPV ofgSNO3qxr3YE3QtEQ9+aPE6v9i/gDo2Ij9GC2UkcJIO55ZKFhCJImhHx/VN7K7d z/W3fVIWX168o740zkncKn07cUkC8z8t2a0utHbg2NlgUQSEQr9nRfKAm6XqqOiH 02wzE193l77eHlLKY0ats97Khpu8EpvDYoRB+D23AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVPo/hdDOJ0GbgLqVqllVmhindOgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1NzBmMzRjLTY3MWEtNGZjYy1hMTcxLTc4NzFjMzkyM2Y0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0SDANBgkqhkiG9w0BAQsFAAOCAQEAmixUIwkGsV6DV9XHek9PZTvCG9yM evA8Qv6GgF26lW3UObOAVqEpPXDOKK4/PkWhzz8WyjZ+0hQPP+c4z4R3ihj34PQm HUei6NkuF85msVtp1GChEcwiV08na+9Th6bgm7MxIcZyUtotURdLRr04VAK5IVhg R+r9YmFbLm57z3X7SMRT9Z5M89j+t+eh2SQreIz3q0lAOsqZRSdLWSYuVhns89en z+JkOwjGT7PQ0FXV/BIT/+zEK+M8ma1K0KJyyqAOnsH9SMB4JJo5KKO7G9R9hCrv sv01iRfsdfvXI9vd14vKtmiGwOX6TnG2YmbWwzn+ubTlpj2DAcSGiF7njw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:32 2025 by rpki-client