$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e31fe26-fd8d-4e30-b848-e006b6980e2f.roa File: 4e31fe26-fd8d-4e30-b848-e006b6980e2f.roa (raw, json) Hash identifier: JbRxvu/6nGu3GIbM5Exva/txlJ7gEh/qYJcw8448vDw= Subject key identifier: C8:23:57:08:0A:2C:F6:0E:34:16:FF:8C:CB:3B:FA:42:F1:2C:68:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14B9B855D27C7387236CEB7ECE6710F84BC5A093 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e31fe26-fd8d-4e30-b848-e006b6980e2f.roa Signing time: Fri 25 Apr 2025 17:20:13 +0000 ROA not before: Fri 25 Apr 2025 17:20:13 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.90.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b9:b8:55:d2:7c:73:87:23:6c:eb:7e:ce:67:10:f8:4b:c5:a0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:20:13 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=7bd0df7c345d333d2f6f2015ce3d1c77e7ab63c8b3a37d7d26b3ba25c783fd82, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:01:b5:f2:18:17:02:e2:a5:80:d9:c7:0c: 9d:d2:36:1e:cc:ed:60:e6:96:8a:17:35:10:13:0c: 32:39:a2:a6:ea:26:a7:2d:7e:55:55:f6:43:c6:66: 21:ad:fa:0f:c7:f7:c5:b4:74:71:78:bc:4c:7d:48: 34:71:86:14:2d:f8:7a:16:d9:36:48:f0:29:c2:b3: ef:28:0c:a9:24:29:21:7c:d7:8b:75:f4:d4:39:b2: b2:c1:26:c6:55:f3:ac:b6:eb:83:69:81:c1:5f:19: 63:1b:5d:53:a4:aa:7d:dd:46:87:f5:a5:48:59:1d: 09:cd:56:99:fc:a8:48:9d:0d:99:42:9e:4e:a7:c7: 04:c4:27:ab:d6:fb:ee:03:8b:dc:ce:80:ac:3f:e8: b8:96:ef:32:ab:d2:d7:9b:a5:d7:e0:c6:3c:93:4f: 05:75:71:85:44:55:45:cb:28:13:b1:69:28:ca:cb: c3:bb:1b:bd:85:3a:2e:94:b0:c0:e9:58:8e:56:78: c4:4c:57:74:0a:68:45:31:cb:7e:17:42:f1:4d:86: c4:16:64:65:b5:f5:de:8e:f7:e9:e7:d3:2c:fd:90: 5c:eb:12:7a:61:9a:f9:51:4c:83:f1:62:ce:dc:76: af:bb:14:56:17:03:3a:40:ed:b6:79:8b:8d:2b:6a: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:23:57:08:0A:2C:F6:0E:34:16:FF:8C:CB:3B:FA:42:F1:2C:68:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e31fe26-fd8d-4e30-b848-e006b6980e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.90.64.0/18 Signature Algorithm: sha256WithRSAEncryption b3:23:72:0f:99:b4:df:6b:e2:ec:aa:ae:95:e5:e6:76:4d:f5: 3a:56:e3:74:cc:10:30:76:00:0d:a5:56:b2:aa:23:7e:2f:aa: 6c:55:58:0c:94:b9:61:ec:e3:6b:9d:59:53:aa:9a:bb:e9:b8: 37:63:c6:9c:06:22:1b:9c:0e:87:c6:e1:a6:f3:ac:6f:d1:a2: 3d:62:17:72:81:31:6e:d3:15:9a:fa:86:29:f7:48:63:51:27: c5:46:9a:84:73:10:0f:80:73:56:57:e7:1d:74:f0:15:1c:cf: 69:b5:63:53:0b:b4:29:ea:02:fc:5b:8c:a0:c2:ec:c7:b8:a9: 51:59:9b:25:47:56:87:1a:78:73:07:4e:00:87:96:98:66:88: ad:74:06:39:aa:01:ab:e4:38:f1:8c:25:c3:cd:a2:a1:0a:67: 77:4c:31:ac:c0:bf:10:69:e8:5b:5c:12:e8:23:d3:28:d1:df: 9c:7d:36:41:7a:3a:16:eb:39:7c:90:26:9f:07:d2:79:6d:84: b8:95:d5:29:1c:86:35:44:dc:91:46:5d:93:09:7a:d9:da:0e: 04:d7:9d:c0:5d:4e:ae:74:8c:7d:b7:3d:fe:1c:8a:30:bc:11: 5f:18:e5:a2:32:25:33:2a:16:3f:72:ca:a9:3c:eb:73:bc:75: 11:a8:5a:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFLm4VdJ8c4cjbOt+zmcQ+EvFoJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTcyMDEzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmQwZGY3YzM0NWQzMzNkMmY2ZjIwMTVjZTNkMWM3N2U3 YWI2M2M4YjNhMzdkN2QyNmIzYmEyNWM3ODNmZDgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNggG18hgXAuKlgNnHDJ3SNh7M7WDmlooXNRATDDI5oqbq JqctflVV9kPGZiGt+g/H98W0dHF4vEx9SDRxhhQt+HoW2TZI8CnCs+8oDKkkKSF8 14t19NQ5srLBJsZV86y264NpgcFfGWMbXVOkqn3dRof1pUhZHQnNVpn8qEidDZlC nk6nxwTEJ6vW++4Di9zOgKw/6LiW7zKr0tebpdfgxjyTTwV1cYVEVUXLKBOxaSjK y8O7G72FOi6UsMDpWI5WeMRMV3QKaEUxy34XQvFNhsQWZGW19d6O9+nn0yz9kFzr EnphmvlRTIPxYs7cdq+7FFYXAzpA7bZ5i40raporAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyCNXCAos9g40Fv+Myzv6QvEsaKkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlMzFmZTI2LWZkOGQtNGUzMC1iODQ4LWUwMDZiNjk4MGUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2WkAwDQYJKoZIhvcNAQELBQADggEBALMjcg+ZtN9r4uyqrpXl5nZN9TpW 43TMEDB2AA2lVrKqI34vqmxVWAyUuWHs42udWVOqmrvpuDdjxpwGIhucDofG4abz rG/Roj1iF3KBMW7TFZr6hin3SGNRJ8VGmoRzEA+Ac1ZX5x108BUcz2m1Y1MLtCnq AvxbjKDC7Me4qVFZmyVHVocaeHMHTgCHlphmiK10BjmqAavkOPGMJcPNoqEKZ3dM MazAvxBp6FtcEugj0yjR35x9NkF6OhbrOXyQJp8H0nlthLiV1SkchjVE3JFGXZMJ etnaDgTXncBdTq50jH23Pf4cijC8EV8Y5aIyJTMqFj9yyqk863O8dRGoWvI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:49:10 2025 by rpki-client