$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa File: 55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa (raw, json) Hash identifier: tJrzYdcW0lz6vvYC4cOAGuQDQa6YgxmIUDwReDet2IM= Subject key identifier: 99:26:88:1A:B3:DC:34:EC:4B:BB:DC:83:2F:E5:BA:C7:99:45:26:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28916CFE09AAE3B1279156CAAE143A3F02160C5F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa Signing time: Wed 16 Apr 2025 00:41:11 +0000 ROA not before: Wed 16 Apr 2025 00:41:11 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:6c:fe:09:aa:e3:b1:27:91:56:ca:ae:14:3a:3f:02:16:0c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 16 00:41:11 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=9313425391b070c61aff242284aa3575a0a7e3a20e3c99ec6ecde58c875a74f2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:98:b7:00:4b:db:50:1a:6e:b2:ae:34:a1: 9d:d9:75:a3:c7:50:dd:49:d5:5d:55:a2:2f:8b:50: 40:fb:51:72:74:4e:38:9e:f2:7b:53:48:5b:6d:d7: ec:ab:4c:d6:16:fc:62:88:9c:2d:3f:96:ef:a1:16: a8:b3:77:d5:81:7b:41:16:a0:7f:66:4b:3b:db:07: 3f:a4:82:33:69:4a:fc:b8:e6:2a:21:b0:28:d0:39: 7a:b4:19:9e:42:8f:bc:38:cf:aa:98:62:90:03:11: e3:6a:20:a9:94:a2:73:d0:9b:6f:3c:d8:53:16:63: 91:fb:0e:47:8c:b7:95:de:a0:7d:a4:43:c1:df:95: c8:4e:01:b6:42:f4:23:41:12:41:38:48:aa:a7:6a: 3f:f3:77:e1:86:b9:7f:ce:a8:78:ac:88:5b:34:df: dc:60:f1:18:9b:96:6b:d9:07:bb:5c:89:9a:63:b3: fb:22:25:a0:9a:ba:97:da:18:46:c9:30:74:79:44: b4:0b:0a:a3:fb:b8:83:4d:6b:3e:ad:83:8c:f3:54: c5:fb:5f:1c:46:90:c8:74:3b:d9:ae:fe:69:10:3a: e7:83:82:12:b9:60:3c:85:eb:bd:37:d5:22:5d:e5: 0a:3c:be:eb:f0:16:ce:a1:45:cd:5b:f6:94:4a:6b: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:26:88:1A:B3:DC:34:EC:4B:BB:DC:83:2F:E5:BA:C7:99:45:26:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.40.0/22 Signature Algorithm: sha256WithRSAEncryption ab:d7:c5:a8:b2:72:9b:4d:76:76:da:05:3b:82:fa:88:42:f0: 89:9d:77:1c:e0:46:c2:c5:f3:01:ae:3b:ac:65:30:20:37:9b: 7f:67:3a:ab:8c:12:c7:dc:6b:88:64:ad:86:b1:27:5a:b1:de: 1f:3d:07:bc:2e:f7:52:bd:34:10:0b:6b:d1:5f:15:8e:1c:36: 5f:f6:88:3c:ff:88:21:28:ee:ce:70:ad:1a:84:9d:73:ca:d5: e7:8b:53:ec:68:db:05:ba:2b:f9:3b:7c:f9:b9:7f:26:0c:86: b6:e8:95:0e:2d:79:f4:bb:7f:5c:6d:90:7e:67:97:0f:89:94: 82:7e:77:a7:6c:8c:7f:0d:6d:f9:57:8e:8d:f9:0c:cd:cb:cf: 48:83:55:0b:59:45:51:e7:15:8b:ea:cf:a8:c5:d8:ee:45:7a: 67:3f:4b:4a:30:d8:12:3b:f7:74:15:2b:e0:23:0b:c1:a9:97: bb:62:b0:5f:fa:81:d2:28:41:30:33:77:a5:dd:39:3f:83:bb: 4c:3b:8d:e4:8f:a4:e0:9c:c0:06:31:eb:0e:4e:14:68:e9:e4: 80:0a:81:dc:4b:00:e8:48:31:ec:db:e5:2d:93:56:35:f7:44: a1:d5:ea:26:b6:0b:92:aa:3d:a8:d3:5e:00:55:50:22:70:bb: ba:d9:33:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKJFs/gmq47EnkVbKrhQ6PwIWDF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE2MDA0MTExWhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzEzNDI1MzkxYjA3MGM2MWFmZjI0MjI4NGFhMzU3NWEw YTdlM2EyMGUzYzk5ZWM2ZWNkZTU4Yzg3NWE3NGYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDML5i3AEvbUBpusq40oZ3ZdaPHUN1J1V1Voi+LUED7UXJ0 Tjie8ntTSFtt1+yrTNYW/GKInC0/lu+hFqizd9WBe0EWoH9mSzvbBz+kgjNpSvy4 5iohsCjQOXq0GZ5Cj7w4z6qYYpADEeNqIKmUonPQm2882FMWY5H7DkeMt5XeoH2k Q8HflchOAbZC9CNBEkE4SKqnaj/zd+GGuX/OqHisiFs039xg8RiblmvZB7tciZpj s/siJaCaupfaGEbJMHR5RLQLCqP7uINNaz6tg4zzVMX7XxxGkMh0O9mu/mkQOueD ghK5YDyF67031SJd5Qo8vuvwFs6hRc1b9pRKa/3vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmSaIGrPcNOxLu9yDL+W6x5lFJucwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1NjE0YzMyLTJhMTctNGI3OC04MGY1LTE1YmE3ZjU3ZmMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDISgwDQYJKoZIhvcNAQELBQADggEBAKvXxaiycptNdnbaBTuC+ohC8Imd dxzgRsLF8wGuO6xlMCA3m39nOquMEsfca4hkrYaxJ1qx3h89B7wu91K9NBALa9Ff FY4cNl/2iDz/iCEo7s5wrRqEnXPK1eeLU+xo2wW6K/k7fPm5fyYMhrbolQ4tefS7 f1xtkH5nlw+JlIJ+d6dsjH8NbflXjo35DM3Lz0iDVQtZRVHnFYvqz6jF2O5Femc/ S0ow2BI793QVK+AjC8Gpl7tisF/6gdIoQTAzd6XdOT+Du0w7jeSPpOCcwAYx6w5O FGjp5IAKgdxLAOhIMezb5S2TVjX3RKHV6ia2C5KqPajTXgBVUCJwu7rZM5Y= -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:09 2025 by rpki-client