$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa File: 4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa (raw, json) Hash identifier: sfaRfzcPLUMKTwJE+ZlhgyKh0+t/C5O9/O6q8zpfysw= Subject key identifier: 0C:36:AD:CA:92:E0:C4:CB:E2:A0:78:22:3D:02:C4:A1:75:0F:D5:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F9C67DBC1A54AC16DEF4CF106EEAEEF2DDF30D0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa Signing time: Fri 25 Apr 2025 16:21:53 +0000 ROA not before: Fri 25 Apr 2025 16:21:53 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.153.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9c:67:db:c1:a5:4a:c1:6d:ef:4c:f1:06:ee:ae:ef:2d:df:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:21:53 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=696afdc8d70eb98a4e9b82acfdd068c9d374cdd688e2760ba4a76e212d557a07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:e2:9c:4f:2c:67:0e:e2:88:02:81:6b:58: df:28:14:a9:98:24:21:4e:f0:a4:6e:59:a8:98:da: 3c:a4:8b:41:b3:b5:4a:6e:b3:c6:10:15:43:d6:ad: e5:b6:b4:31:fe:26:dc:0b:01:49:bc:3f:ad:09:20: e7:92:19:9b:24:01:13:fa:b4:19:ca:47:d0:7a:d8: c6:36:73:af:64:b1:ab:b4:8a:bc:5a:87:62:a5:74: 92:ff:cc:b2:7f:46:14:e1:f4:be:3a:ed:15:e0:3e: 3b:2c:c7:27:62:d2:f9:d6:9d:09:c6:a8:2a:6a:95: 98:35:1f:c7:4d:4f:7b:e9:39:a0:40:6e:23:e8:e4: 67:0f:7b:a0:1c:17:1f:85:15:b8:34:93:84:fe:25: ed:ef:e5:82:46:33:d9:10:63:85:a0:67:55:6a:c2: 43:0b:64:17:c9:c6:f1:cc:12:0a:72:7a:6f:a5:1d: 3a:72:0b:9e:d9:16:f0:8a:b4:70:68:bf:d8:f7:22: fa:cc:bc:7d:bf:0f:d1:ed:de:38:70:84:17:0a:cb: 80:c7:b7:af:30:0b:b5:a5:01:40:bd:68:bb:4d:07: a7:f3:20:f3:14:7f:a8:64:92:9a:a4:b9:68:d8:3c: 11:38:8a:94:97:22:4a:2d:73:8b:a9:6f:ea:b0:8d: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:36:AD:CA:92:E0:C4:CB:E2:A0:78:22:3D:02:C4:A1:75:0F:D5:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a4462bc-1ca7-4b01-9ad0-08988b60d8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.153.40.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:04:68:9c:d4:58:39:97:e5:a2:1a:79:e3:45:20:27:44:b3: f4:45:f1:5f:3b:e4:15:0f:13:b6:b5:cf:ca:8e:3e:89:15:31: a0:52:3c:5f:b3:b9:59:da:40:60:df:f9:44:7a:80:9d:84:bf: 32:1e:72:fe:14:ac:e4:c9:27:28:f1:20:d3:40:03:01:6e:b8: 5e:b5:c3:46:9f:36:a4:a7:99:08:22:77:40:47:e9:c7:fd:fb: 1f:e4:77:75:06:6c:c5:8c:71:76:0d:41:cc:b9:c4:8a:4e:e8: cf:86:14:ef:48:cf:cb:98:6a:a9:7f:45:73:ae:7d:92:94:c8: b9:1c:76:cf:aa:43:06:cc:1e:7e:d1:6b:a6:f4:6d:3f:18:0e: 1e:df:e8:22:a4:75:18:0d:aa:1c:4a:da:22:41:69:30:78:23: 58:a1:24:ba:48:d9:cf:42:7c:29:11:1b:7b:36:94:91:bf:02: ca:42:3f:2a:f0:48:bb:1b:e5:74:c4:49:c3:c9:b4:1e:d7:4d: 34:31:17:f6:2c:cf:59:38:f1:ea:d8:ce:0b:ba:62:95:b1:50: 49:83:a7:20:0a:a3:99:c3:2a:6f:b8:ea:8c:dc:9a:d1:80:73: c5:20:73:50:e5:5a:0a:ef:e3:24:23:21:99:0c:2f:d6:ba:16: e4:5a:a2:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH5xn28GlSsFt70zxBu6u7y3fMNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYyMTUzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTZhZmRjOGQ3MGViOThhNGU5YjgyYWNmZGQwNjhjOWQz NzRjZGQ2ODhlMjc2MGJhNGE3NmUyMTJkNTU3YTA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqoOKcTyxnDuKIAoFrWN8oFKmYJCFO8KRuWaiY2jyki0Gz tUpus8YQFUPWreW2tDH+JtwLAUm8P60JIOeSGZskARP6tBnKR9B62MY2c69ksau0 irxah2KldJL/zLJ/RhTh9L467RXgPjssxydi0vnWnQnGqCpqlZg1H8dNT3vpOaBA biPo5GcPe6AcFx+FFbg0k4T+Je3v5YJGM9kQY4WgZ1VqwkMLZBfJxvHMEgpyem+l HTpyC57ZFvCKtHBov9j3IvrMvH2/D9Ht3jhwhBcKy4DHt68wC7WlAUC9aLtNB6fz IPMUf6hkkpqkuWjYPBE4ipSXIkotc4upb+qwjYq3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDDatypLgxMvioHgiPQLEoXUP1eAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhNDQ2MmJjLTFjYTctNGIwMS05YWQwLTA4OTg4YjYwZDhjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmSgwDQYJKoZIhvcNAQELBQADggEBAFwEaJzUWDmX5aIaeeNFICdEs/RF 8V875BUPE7a1z8qOPokVMaBSPF+zuVnaQGDf+UR6gJ2EvzIecv4UrOTJJyjxINNA AwFuuF61w0afNqSnmQgid0BH6cf9+x/kd3UGbMWMcXYNQcy5xIpO6M+GFO9Iz8uY aql/RXOufZKUyLkcds+qQwbMHn7Ra6b0bT8YDh7f6CKkdRgNqhxK2iJBaTB4I1ih JLpI2c9CfCkRG3s2lJG/AspCPyrwSLsb5XTEScPJtB7XTTQxF/Ysz1k48erYzgu6 YpWxUEmDpyAKo5nDKm+46ozcmtGAc8Ugc1DlWgrv4yQjIZkML9a6FuRaopg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:12 2025 by rpki-client