$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5964b936-ae47-48f8-9740-4ab02663adfe.roa File: 5964b936-ae47-48f8-9740-4ab02663adfe.roa (raw, json) Hash identifier: EyZkARlLkuN6w6jyr7y4+d2iCyNNgxQkbg+5GYgd3uk= Subject key identifier: 41:3A:88:E8:3C:DB:E3:ED:87:CB:A5:2C:7B:51:50:22:95:86:6B:B7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0ABBC4CE18A9E786DE0632B1C4B5E4921FEC47B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5964b936-ae47-48f8-9740-4ab02663adfe.roa Signing time: Fri 25 Apr 2025 16:50:44 +0000 ROA not before: Fri 25 Apr 2025 16:50:44 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.71.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bb:c4:ce:18:a9:e7:86:de:06:32:b1:c4:b5:e4:92:1f:ec:47:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:50:44 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=b2ee922e0db9523527836512b45caa329e5f9c0a6d56f6ef62f0ec4a3cbfba5a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:f0:71:d2:a5:58:b2:ed:2d:7e:e6:09:79: b7:29:63:b4:e7:49:fa:dc:bb:dd:a9:c0:35:44:93: eb:0e:55:ea:0f:b3:79:e1:98:bc:e7:a0:25:06:0e: 45:4e:b6:9f:e4:49:8a:2c:85:34:07:b7:ef:1a:79: b1:8e:dc:25:30:c2:b7:8f:bf:e0:3c:27:f6:da:fb: ec:fe:53:ad:24:13:23:d8:ea:69:30:34:58:e3:8e: 44:13:bb:8c:04:6c:bc:6d:c5:8e:0b:79:32:72:4c: 2e:77:5c:f8:75:e3:f8:94:c9:0c:8a:f5:e1:10:3d: c5:cb:64:2b:5a:f4:45:59:e5:71:55:b5:36:62:de: 79:79:b6:5e:99:49:f4:79:f4:9c:47:ef:d0:12:26: b4:99:17:ae:e8:3c:fe:d0:99:83:10:8e:27:91:04: a7:97:b6:d3:dd:b7:93:14:fc:85:72:1b:57:a2:44: 9c:0a:9e:0a:fc:ae:e5:f1:5f:0d:8b:04:47:7a:a0: 38:fe:38:a5:ca:06:fd:59:58:a8:f0:95:c3:81:99: 77:c7:99:37:90:1e:0d:18:84:c4:85:49:c2:46:0f: be:46:4d:49:a2:61:29:3e:09:87:ec:d7:af:27:cb: 36:0c:fb:9f:34:55:85:b0:a0:c3:af:da:30:b0:60: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:88:E8:3C:DB:E3:ED:87:CB:A5:2C:7B:51:50:22:95:86:6B:B7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5964b936-ae47-48f8-9740-4ab02663adfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.71.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:fa:3e:a8:28:81:c7:90:c2:c9:37:01:42:2c:da:c0:2f:f9: 31:a6:e8:36:99:52:a4:6f:00:46:f9:69:76:b2:72:4d:af:7a: 3d:78:46:cb:68:df:28:13:43:e5:3f:e4:24:89:4d:3c:cb:5d: cf:7c:97:52:ac:0e:c0:86:f8:08:ad:0c:9f:b6:d3:fc:fc:44: 88:69:6e:fb:d1:74:78:f6:fd:78:25:f1:a4:c7:c5:a8:17:ae: 6a:14:e5:74:5c:11:d5:39:32:fd:89:47:0d:6b:4e:82:7a:b8: d8:2c:0f:8a:2e:6d:39:a7:e8:95:c7:f1:df:57:45:0c:44:c7: 46:f0:bc:bf:ff:fd:fe:e6:d0:03:df:09:e3:5f:43:ec:d4:fe: b7:f8:6a:0c:ba:e9:66:65:a9:b7:35:54:fa:f6:b6:4c:dd:46: 24:ba:28:09:21:2e:78:e0:ae:5d:d4:d8:34:e0:c8:05:97:5a: 07:1b:55:dc:7a:22:33:fa:84:00:dd:6f:85:e8:2e:06:b9:d2: 48:97:77:03:a6:b3:b9:4a:16:33:50:e7:ec:ae:2e:fb:67:12: 8e:85:37:5f:b1:af:89:63:b1:ca:5c:38:7c:33:85:af:29:5b: b0:db:f0:23:4f:cc:18:fd:2f:ea:6b:ad:01:e9:16:56:15:53: e8:be:9e:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCrvEzhip54beBjKxxLXkkh/sR7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY1MDQ0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmVlOTIyZTBkYjk1MjM1Mjc4MzY1MTJiNDVjYWEzMjll NWY5YzBhNmQ1NmY2ZWY2MmYwZWM0YTNjYmZiYTVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX6fBx0qVYsu0tfuYJebcpY7TnSfrcu92pwDVEk+sOVeoP s3nhmLznoCUGDkVOtp/kSYoshTQHt+8aebGO3CUwwrePv+A8J/ba++z+U60kEyPY 6mkwNFjjjkQTu4wEbLxtxY4LeTJyTC53XPh14/iUyQyK9eEQPcXLZCta9EVZ5XFV tTZi3nl5tl6ZSfR59JxH79ASJrSZF67oPP7QmYMQjieRBKeXttPdt5MU/IVyG1ei RJwKngr8ruXxXw2LBEd6oDj+OKXKBv1ZWKjwlcOBmXfHmTeQHg0YhMSFScJGD75G TUmiYSk+CYfs168nyzYM+580VYWwoMOv2jCwYNgjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQTqI6Dzb4+2Hy6Use1FQIpWGa7cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5NjRiOTM2LWFlNDctNDhmOC05NzQwLTRhYjAyNjYzYWRmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYjR0AwDQYJKoZIhvcNAQELBQADggEBAHr6PqgogceQwsk3AUIs2sAv+TGm 6DaZUqRvAEb5aXayck2vej14Rsto3ygTQ+U/5CSJTTzLXc98l1KsDsCG+AitDJ+2 0/z8RIhpbvvRdHj2/Xgl8aTHxagXrmoU5XRcEdU5Mv2JRw1rToJ6uNgsD4oubTmn 6JXH8d9XRQxEx0bwvL///f7m0APfCeNfQ+zU/rf4agy66WZlqbc1VPr2tkzdRiS6 KAkhLnjgrl3U2DTgyAWXWgcbVdx6IjP6hADdb4XoLga50kiXdwOms7lKFjNQ5+yu LvtnEo6FN1+xr4ljscpcOHwzha8pW7Db8CNPzBj9L+prrQHpFlYVU+i+nnI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:03 2025 by rpki-client