$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52aaa874-d629-452b-b3e0-9cf494e24a6c.roa File: 52aaa874-d629-452b-b3e0-9cf494e24a6c.roa (raw, json) Hash identifier: g18RW1kNebmMN43jWqEKHkNie4tbjV6dkLz1hEBPUdM= Subject key identifier: 5B:7D:1D:25:9B:9C:DE:0D:59:6F:D8:76:B0:29:CF:49:B3:5A:13:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B0E41ADCAA1CE7462F3B37AB42DACFE889226B6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52aaa874-d629-452b-b3e0-9cf494e24a6c.roa Signing time: Fri 25 Apr 2025 16:31:21 +0000 ROA not before: Fri 25 Apr 2025 16:31:21 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.236.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0e:41:ad:ca:a1:ce:74:62:f3:b3:7a:b4:2d:ac:fe:88:92:26:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:31:21 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=7fdc44802b66dd020f439156ebba4176542632d9841be76b7e68305f8e83b99d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:84:8b:b4:97:8c:b1:2d:fa:5a:0a:71:e4: e5:b7:7e:cf:df:90:25:0d:e9:df:1b:f7:e1:c2:35: 97:c4:64:17:3f:a2:78:f4:d6:76:0c:81:23:12:88: ab:02:ce:36:3b:27:04:33:e0:20:69:fa:18:14:d3: af:96:bb:52:de:cd:4b:b1:f6:d2:5d:a4:ca:b0:a0: 26:dc:9c:d1:cb:45:b4:20:0f:42:c8:c1:52:f4:c3: 82:e6:29:8a:48:30:48:0d:86:c4:71:ba:0d:78:34: 52:48:e8:10:5d:e1:84:8c:96:3d:b2:ee:dd:d3:58: 97:2f:c7:d4:71:bf:96:5d:4e:d0:dd:39:ba:9a:80: a1:9d:ff:af:da:03:d0:1f:3e:3e:54:1c:cb:e5:e1: ff:51:44:26:a6:8e:bd:02:44:f7:05:86:e8:ee:39: 3e:64:a2:d1:6b:55:fa:0b:4f:43:52:0a:b5:4e:18: 4a:d6:8a:5f:5d:5b:fb:f3:09:ed:48:5f:27:71:ec: bc:66:9c:49:30:56:06:f7:2a:18:0f:2e:13:32:aa: 5d:07:6e:b7:53:8e:8c:5c:42:f2:c4:4d:a5:f0:5a: da:07:b6:4a:40:ed:22:e1:63:df:72:87:3f:7a:54: 25:46:4f:ff:d0:1f:db:98:f3:a0:b6:d4:69:6f:89: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:1D:25:9B:9C:DE:0D:59:6F:D8:76:B0:29:CF:49:B3:5A:13:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52aaa874-d629-452b-b3e0-9cf494e24a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.236.0.0/15 Signature Algorithm: sha256WithRSAEncryption 92:85:f2:01:5a:0e:67:04:e9:34:7a:5d:a1:1b:3b:42:85:fb: c2:70:68:4a:3d:e3:97:96:08:b6:b6:ce:98:9b:05:42:ce:4c: 4b:a6:28:04:29:64:00:b7:fb:74:57:4d:0b:a2:c4:f3:38:0a: 69:7a:3a:cc:9f:6c:92:cb:28:65:0b:19:18:b2:06:cf:22:b9: 9d:05:41:69:9b:83:6d:4b:88:89:e2:3e:32:d7:e9:7c:27:6c: f3:75:5d:a9:6e:44:9c:6c:ab:2a:6b:67:8d:9b:87:f1:e5:38: e8:0c:2e:d4:27:5e:3b:86:6f:bb:76:62:ff:bc:e4:59:d0:b6: 7c:4d:00:da:38:03:4b:6e:34:d0:c2:49:c4:d9:93:d9:24:9f: 85:5b:2f:e2:db:45:e0:54:ab:d3:c1:4d:99:46:3a:4b:32:9f: ba:14:da:2b:bc:ec:08:0f:cb:99:c1:d3:a3:70:2d:34:6a:ea: cc:0d:d4:de:9d:af:63:67:7c:fb:7f:0c:64:21:35:d3:91:76: f6:a0:d6:6a:5c:2b:c7:62:6e:18:cc:84:42:0c:3e:98:32:52: d6:2f:38:ab:7a:c6:05:26:34:7b:cb:b7:00:ae:03:db:d9:ab: 9b:0f:8d:45:27:34:1f:67:58:be:28:78:4e:2a:36:ed:e4:98: 30:4f:e0:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGw5BrcqhznRi87N6tC2s/oiSJrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYzMTIxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmRjNDQ4MDJiNjZkZDAyMGY0MzkxNTZlYmJhNDE3NjU0 MjYzMmQ5ODQxYmU3NmI3ZTY4MzA1ZjhlODNiOTlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+jYSLtJeMsS36Wgpx5OW3fs/fkCUN6d8b9+HCNZfEZBc/ onj01nYMgSMSiKsCzjY7JwQz4CBp+hgU06+Wu1LezUux9tJdpMqwoCbcnNHLRbQg D0LIwVL0w4LmKYpIMEgNhsRxug14NFJI6BBd4YSMlj2y7t3TWJcvx9Rxv5ZdTtDd ObqagKGd/6/aA9AfPj5UHMvl4f9RRCamjr0CRPcFhujuOT5kotFrVfoLT0NSCrVO GErWil9dW/vzCe1IXydx7LxmnEkwVgb3KhgPLhMyql0HbrdTjoxcQvLETaXwWtoH tkpA7SLhY99yhz96VCVGT//QH9uY86C21GlviRzxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUW30dJZuc3g1Zb9h2sCnPSbNaEygwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyYWFhODc0LWQ2MjktNDUyYi1iM2UwLTljZjQ5NGUyNGE2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwES7DANBgkqhkiG9w0BAQsFAAOCAQEAkoXyAVoOZwTpNHpdoRs7QoX7wnBo Sj3jl5YItrbOmJsFQs5MS6YoBClkALf7dFdNC6LE8zgKaXo6zJ9skssoZQsZGLIG zyK5nQVBaZuDbUuIieI+MtfpfCds83VdqW5EnGyrKmtnjZuH8eU46Awu1CdeO4Zv u3Zi/7zkWdC2fE0A2jgDS2400MJJxNmT2SSfhVsv4ttF4FSr08FNmUY6SzKfuhTa K7zsCA/LmcHTo3AtNGrqzA3U3p2vY2d8+38MZCE105F29qDWalwrx2JuGMyEQgw+ mDJS1i84q3rGBSY0e8u3AK4D29mrmw+NRSc0H2dYvih4Tio27eSYME/gtQ== -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:33 2025 by rpki-client