$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/511e6291-de99-4a88-bab1-6d51bbe7a84a.roa File: 511e6291-de99-4a88-bab1-6d51bbe7a84a.roa (raw, json) Hash identifier: tySeW3lVLiT/7K4sZKR7opSSR78OfRSM6GfqneKd0Rk= Subject key identifier: 7F:76:C4:72:A5:A1:F9:70:F7:C8:C8:08:FD:A0:DE:84:71:01:C1:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3038F9A2DAF2A8F595C2A983EBB27ED448C650B6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/511e6291-de99-4a88-bab1-6d51bbe7a84a.roa Signing time: Fri 18 Apr 2025 15:10:05 +0000 ROA not before: Fri 18 Apr 2025 15:10:05 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.158.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:f9:a2:da:f2:a8:f5:95:c2:a9:83:eb:b2:7e:d4:48:c6:50:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:10:05 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=37f34eff650d848a1963bf2df6ef1cdf7222449b89e51b1087518dcf1192cc6f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:63:83:da:6b:53:e6:6c:27:c0:fb:ce:27: dc:16:b9:c6:09:32:de:a4:20:8b:71:30:e1:03:3b: b5:31:9a:37:78:88:90:02:93:73:48:89:1b:54:fd: 9a:f6:5c:5a:bd:fd:93:84:5f:b5:fa:6c:94:2a:ea: fc:d8:8f:85:f8:59:08:4f:20:0b:61:22:81:22:b7: 6d:81:97:38:d7:36:45:a9:54:0e:9e:f2:2b:cc:d2: e3:ab:42:56:44:05:bd:2f:f1:60:9b:21:23:1d:eb: 13:71:7e:81:96:32:3c:e0:55:ec:14:6a:7e:f0:03: 3f:a6:c5:1c:0d:f1:f0:cf:79:f6:ce:f6:a1:26:92: 04:2c:79:cd:64:54:2f:e9:aa:b5:a2:ac:7c:56:a9: 28:ed:05:f8:52:8a:cb:eb:fd:a5:e9:3f:d8:95:8d: 78:04:a3:df:88:92:de:b8:04:4b:5c:1b:83:c3:50: 6e:e4:1c:14:55:9a:bb:62:45:44:06:c3:e4:47:49: 1f:7c:86:c4:42:1b:2f:f0:c6:a3:00:62:ba:09:a8: af:8b:d3:88:24:d2:16:ec:54:58:18:54:62:be:84: aa:3a:d0:7d:b6:14:83:14:11:16:6d:fd:2b:d7:2d: 95:aa:00:d3:c5:b3:a8:0a:c6:0d:f3:4c:5e:0f:aa: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:76:C4:72:A5:A1:F9:70:F7:C8:C8:08:FD:A0:DE:84:71:01:C1:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/511e6291-de99-4a88-bab1-6d51bbe7a84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.158.128.0/18 Signature Algorithm: sha256WithRSAEncryption 56:3f:e3:f7:fb:7a:77:f9:c9:ff:24:c1:b2:e8:c2:88:31:84: 33:85:a4:08:95:0c:b0:d3:9e:04:33:96:31:c8:21:97:cf:ff: a1:7c:cd:bc:e4:cd:5d:4e:64:75:b1:69:9f:57:45:dd:74:56: 73:ac:9c:61:9d:55:0f:fb:ba:f3:87:fe:e1:04:54:ee:39:a7: bd:5d:c9:34:1b:a2:03:b6:a8:bc:c3:c2:90:3e:a9:a0:ef:19: a4:c7:6d:c0:2d:df:3e:76:05:2a:d1:eb:1a:d7:5a:e8:80:25: a4:61:8d:19:12:53:b2:1c:13:85:f6:9a:40:f9:e4:e9:1d:26: 0c:cf:17:ba:95:25:76:40:ee:c0:8f:99:fe:e1:04:ed:69:b7: 5b:a4:41:4a:f9:6e:61:a7:90:9c:f7:a7:c6:bd:ed:4d:e2:02: ec:36:d6:aa:27:af:34:16:67:7d:29:b6:09:da:f3:e5:ad:37: c4:3f:6a:ce:05:3e:db:9c:41:fe:68:23:f6:54:dd:61:d0:c4: 16:72:10:af:ee:93:a1:6a:6c:d9:fa:1d:19:2f:19:c9:cf:cd: 0f:b6:87:d6:c8:cb:22:30:7f:64:f8:a3:76:f0:1c:ad:f3:82: 87:e6:c8:76:71:3b:82:07:7f:d9:00:77:53:f8:e9:22:66:09: 7c:c7:dd:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMDj5otryqPWVwqmD67J+1EjGULYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUxMDA1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2YzNGVmZjY1MGQ4NDhhMTk2M2JmMmRmNmVmMWNkZjcy MjI0NDliODllNTFiMTA4NzUxOGRjZjExOTJjYzZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZeGOD2mtT5mwnwPvOJ9wWucYJMt6kIItxMOEDO7Uxmjd4 iJACk3NIiRtU/Zr2XFq9/ZOEX7X6bJQq6vzYj4X4WQhPIAthIoEit22BlzjXNkWp VA6e8ivM0uOrQlZEBb0v8WCbISMd6xNxfoGWMjzgVewUan7wAz+mxRwN8fDPefbO 9qEmkgQsec1kVC/pqrWirHxWqSjtBfhSisvr/aXpP9iVjXgEo9+Ikt64BEtcG4PD UG7kHBRVmrtiRUQGw+RHSR98hsRCGy/wxqMAYroJqK+L04gk0hbsVFgYVGK+hKo6 0H22FIMUERZt/SvXLZWqANPFs6gKxg3zTF4PqnE3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf3bEcqWh+XD3yMgI/aDehHEBwQgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxMWU2MjkxLWRlOTktNGE4OC1iYWIxLTZkNTFiYmU3YTg0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2noAwDQYJKoZIhvcNAQELBQADggEBAFY/4/f7enf5yf8kwbLowogxhDOF pAiVDLDTngQzljHIIZfP/6F8zbzkzV1OZHWxaZ9XRd10VnOsnGGdVQ/7uvOH/uEE VO45p71dyTQbogO2qLzDwpA+qaDvGaTHbcAt3z52BSrR6xrXWuiAJaRhjRkSU7Ic E4X2mkD55OkdJgzPF7qVJXZA7sCPmf7hBO1pt1ukQUr5bmGnkJz3p8a97U3iAuw2 1qonrzQWZ30ptgna8+WtN8Q/as4FPtucQf5oI/ZU3WHQxBZyEK/uk6FqbNn6HRkv GcnPzQ+2h9bIyyIwf2T4o3bwHK3zgofmyHZxO4IHf9kAd1P46SJmCXzH3dU= -----END CERTIFICATE-----Generated at Mon Apr 28 00:09:59 2025 by rpki-client