$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5803c362-1ddd-481f-865e-9fadb90ef8b8.roa File: 5803c362-1ddd-481f-865e-9fadb90ef8b8.roa (raw, json) Hash identifier: 2XgVRiNtIgInbn3U0pfl7CksGN3HoecVIq78ZKWnxAs= Subject key identifier: 6E:F5:2C:62:4B:F1:54:B3:B3:A2:93:E2:5E:AD:A8:E0:F6:5B:EA:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46B3FE0B20DFC1405D9E1E3C7E9103958EFECC8F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5803c362-1ddd-481f-865e-9fadb90ef8b8.roa Signing time: Fri 25 Apr 2025 16:51:20 +0000 ROA not before: Fri 25 Apr 2025 16:51:20 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b3:fe:0b:20:df:c1:40:5d:9e:1e:3c:7e:91:03:95:8e:fe:cc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:51:20 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8e0305394a46cc2ea17ae78d5470e1a8b4481f0266b166c6c82b620ac5519f69, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:fc:3b:f6:69:3d:3c:6a:41:39:fd:5f:cb: b5:6a:50:64:d6:57:e0:63:43:24:70:01:0c:46:92: ee:87:15:b1:dd:b1:d5:a4:85:32:f7:9c:0d:11:1e: 9b:86:1a:ad:36:6e:f3:e2:5f:15:b6:79:bd:4e:d8: 93:0d:e7:0a:fa:73:23:4a:44:4c:74:7b:50:8d:ae: 3f:5f:f4:61:88:d1:19:b6:d5:a3:ad:7c:f1:c6:fc: d1:bf:9a:ef:ac:1f:3e:21:8c:c2:07:34:ce:4c:6f: bf:35:c7:8c:41:b7:a1:f9:be:e4:63:64:0e:e0:d4: cd:ef:a0:52:f7:3a:35:4d:77:66:a3:20:82:89:16: da:32:5b:74:5d:0d:1b:2f:0f:f6:24:3f:81:c7:b8: eb:89:0f:86:dc:82:be:f6:ad:5d:66:5a:7a:6b:43: 27:dc:b7:fd:0f:13:37:5c:16:58:4d:f4:ce:d2:9d: e7:17:86:40:52:a2:28:97:f7:ff:03:7a:ca:6f:82: 37:87:42:83:83:06:14:6f:cb:f2:4e:39:82:d9:23: e4:b6:6a:69:0a:12:e3:0d:00:b7:0d:3b:63:88:d7: 8b:b2:70:7b:66:ec:57:3e:c1:68:75:f1:d0:66:ea: d7:82:91:b3:88:75:d4:89:c9:2e:a1:7b:02:30:d7: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F5:2C:62:4B:F1:54:B3:B3:A2:93:E2:5E:AD:A8:E0:F6:5B:EA:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5803c362-1ddd-481f-865e-9fadb90ef8b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.92.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:39:66:d4:fe:66:31:9e:87:1b:fd:8a:51:ba:d9:a6:af:45: d3:92:35:01:68:37:67:22:ed:45:b4:ee:91:e9:ab:70:bb:d3: 02:a6:84:d1:24:a0:13:00:9b:63:fd:65:c2:86:3d:94:18:47: df:6b:0a:e6:34:d5:83:22:87:ed:3f:b5:6a:53:d2:20:e1:ae: 79:d6:95:d2:21:01:9f:76:64:eb:05:57:1c:0d:d0:8a:57:4d: 52:78:dc:af:32:a9:0d:6d:6e:f2:0a:39:6b:9d:23:ea:d5:ca: ff:1b:a2:0b:93:8d:59:bc:f7:33:51:24:ab:14:f4:88:28:4d: bc:69:34:84:e1:00:04:09:9b:58:49:a7:9c:38:07:22:4a:3d: 19:41:05:50:04:cb:27:a4:9e:09:16:d8:26:ed:c6:13:cc:45: 3d:d2:07:f1:34:6e:c2:ed:c0:50:fe:22:d2:09:da:24:3e:63: ff:1b:55:f5:b2:51:1b:ca:65:a1:c2:c8:a2:3a:c4:ae:6c:25: 63:2d:d6:07:91:3f:b4:05:ef:c1:ba:01:b2:9b:e4:d9:00:19: 26:d7:a9:4e:28:f6:13:67:ab:6d:92:17:ab:4e:b9:c6:50:15: 17:b0:81:f0:43:ea:2a:e4:b4:d3:b6:18:bc:42:d5:3e:5a:44: d7:68:25:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURrP+CyDfwUBdnh48fpEDlY7+zI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY1MTIwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTAzMDUzOTRhNDZjYzJlYTE3YWU3OGQ1NDcwZTFhOGI0 NDgxZjAyNjZiMTY2YzZjODJiNjIwYWM1NTE5ZjY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8+vw79mk9PGpBOf1fy7VqUGTWV+BjQyRwAQxGku6HFbHd sdWkhTL3nA0RHpuGGq02bvPiXxW2eb1O2JMN5wr6cyNKREx0e1CNrj9f9GGI0Rm2 1aOtfPHG/NG/mu+sHz4hjMIHNM5Mb781x4xBt6H5vuRjZA7g1M3voFL3OjVNd2aj IIKJFtoyW3RdDRsvD/YkP4HHuOuJD4bcgr72rV1mWnprQyfct/0PEzdcFlhN9M7S necXhkBSoiiX9/8DespvgjeHQoODBhRvy/JOOYLZI+S2amkKEuMNALcNO2OI14uy cHtm7Fc+wWh18dBm6teCkbOIddSJyS6hewIw19i/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbvUsYkvxVLOzopPiXq2o4PZb6vwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4MDNjMzYyLTFkZGQtNDgxZi04NjVlLTlmYWRiOTBlZjhiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0LlwwDQYJKoZIhvcNAQELBQADggEBAA85ZtT+ZjGehxv9ilG62aavRdOS NQFoN2ci7UW07pHpq3C70wKmhNEkoBMAm2P9ZcKGPZQYR99rCuY01YMih+0/tWpT 0iDhrnnWldIhAZ92ZOsFVxwN0IpXTVJ43K8yqQ1tbvIKOWudI+rVyv8boguTjVm8 9zNRJKsU9IgoTbxpNIThAAQJm1hJp5w4ByJKPRlBBVAEyyekngkW2CbtxhPMRT3S B/E0bsLtwFD+ItIJ2iQ+Y/8bVfWyURvKZaHCyKI6xK5sJWMt1geRP7QF78G6AbKb 5NkAGSbXqU4o9hNnq22SF6tOucZQFRewgfBD6irktNO2GLxC1T5aRNdoJfM= -----END CERTIFICATE-----Generated at Sat Apr 26 12:49:24 2025 by rpki-client