$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae5210c-d469-43b7-8e47-3e4190af8c57.roa File: 5ae5210c-d469-43b7-8e47-3e4190af8c57.roa (raw, json) Hash identifier: YgJslWo8EYxoBUpOYjsIDLSgn0rt78hN8Nou7xzNaJQ= Subject key identifier: 01:FC:B9:CD:C1:6A:1A:FC:F3:D0:6A:74:17:F9:82:5B:F4:5F:CA:BB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71A81FC910677DB8F4103C94076DD78327898436 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae5210c-d469-43b7-8e47-3e4190af8c57.roa Signing time: Fri 18 Apr 2025 15:31:42 +0000 ROA not before: Fri 18 Apr 2025 15:31:42 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a8:1f:c9:10:67:7d:b8:f4:10:3c:94:07:6d:d7:83:27:89:84:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:31:42 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=461a83fae9a73a4e8a56ec4ff70ebcbf5a230368d1924d8b4669c0430b83af21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:03:e4:5b:04:02:21:43:ed:2a:25:68:a0: c2:73:a3:fd:43:cf:fb:49:47:17:59:8a:27:eb:47: 77:ab:b7:b1:61:7e:24:15:7d:84:0b:1f:4e:0a:53: b3:61:6d:a8:10:9a:b7:f7:99:55:d5:93:dc:ea:c6: 7e:6f:5e:d5:36:4c:92:9e:c1:01:e0:2e:15:ff:d9: 64:be:b1:fd:9b:5e:b7:46:25:a1:a3:27:59:3a:33: e1:b5:33:ce:24:c9:5d:a6:22:a6:59:90:14:98:bc: 6a:27:36:08:80:a8:3d:82:f1:d1:f6:73:be:b1:98: 86:4c:40:1d:01:70:cf:c3:de:e4:10:d8:e5:d7:8b: 7f:44:f0:d5:6b:7b:b5:04:d1:2a:ff:c9:1a:7f:2c: 77:56:38:c9:d1:0b:fc:41:6e:19:c3:f7:54:09:41: ab:49:15:e7:0d:9a:3a:fe:76:38:74:b3:f6:61:14: b9:37:c3:31:26:66:ef:03:4f:8a:3e:81:2b:c8:40: b7:dd:39:cb:70:35:0c:a9:3c:45:f9:74:03:ad:0b: 45:6e:b2:19:ff:e8:ba:2a:cd:e3:a0:42:65:68:ae: 4f:78:08:e8:56:b2:41:14:eb:5e:1d:38:4e:5b:64: 1d:f2:49:31:75:4c:f8:80:6f:bd:51:cf:36:8b:64: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:B9:CD:C1:6A:1A:FC:F3:D0:6A:74:17:F9:82:5B:F4:5F:CA:BB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae5210c-d469-43b7-8e47-3e4190af8c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.193.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5b:5c:f7:b9:bc:90:9f:17:14:9c:aa:9c:26:b0:d1:30:a8: c6:f5:0c:ac:b2:2e:89:5f:e6:ff:8e:09:5e:93:11:ea:7b:32: c7:11:d9:53:3d:cb:1a:3a:03:f4:57:df:f9:65:c7:22:ab:17: f8:4c:ef:fa:1b:f2:8f:a5:dd:52:e7:08:2c:f8:63:fb:23:95: 88:b0:77:7b:fd:63:91:00:fe:88:fa:8a:40:c6:8b:43:89:62: 87:ac:52:bc:09:2a:97:f1:fb:7b:f0:5f:87:36:1b:5e:ef:73: fe:0b:bf:ad:02:c1:0d:c5:12:41:8f:c3:b9:10:d2:f8:49:8b: 8d:5e:c2:54:f9:b5:ed:fb:4d:ed:ff:6c:ad:ae:b4:0c:cd:c8: 3f:a8:87:f7:33:f0:f2:cb:b4:ea:3f:5c:ab:00:d7:86:9a:db: d7:5e:10:93:fc:91:16:43:f1:7d:99:48:59:db:3c:b6:8f:d3: e7:28:34:23:5f:ae:59:22:73:3b:b5:3c:1c:6d:35:f8:6e:2d: cc:3d:9d:98:bc:98:09:b8:b1:dd:c1:29:a0:31:53:13:de:45: d2:46:c9:00:06:2d:18:30:00:4f:2d:81:d0:0f:48:7b:ce:4c: 20:07:f6:41:d5:89:ac:13:6e:4b:1d:81:29:dc:c6:c6:a7:2e: 7d:96:a5:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcagfyRBnfbj0EDyUB23XgyeJhDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUzMTQyWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjFhODNmYWU5YTczYTRlOGE1NmVjNGZmNzBlYmNiZjVh MjMwMzY4ZDE5MjRkOGI0NjY5YzA0MzBiODNhZjIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCflwPkWwQCIUPtKiVooMJzo/1Dz/tJRxdZiifrR3ert7Fh fiQVfYQLH04KU7NhbagQmrf3mVXVk9zqxn5vXtU2TJKewQHgLhX/2WS+sf2bXrdG JaGjJ1k6M+G1M84kyV2mIqZZkBSYvGonNgiAqD2C8dH2c76xmIZMQB0BcM/D3uQQ 2OXXi39E8NVre7UE0Sr/yRp/LHdWOMnRC/xBbhnD91QJQatJFecNmjr+djh0s/Zh FLk3wzEmZu8DT4o+gSvIQLfdOctwNQypPEX5dAOtC0Vushn/6LoqzeOgQmVork94 COhWskEU614dOE5bZB3ySTF1TPiAb71RzzaLZPnfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAfy5zcFqGvzz0Gp0F/mCW/RfyrswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhZTUyMTBjLWQ0NjktNDNiNy04ZTQ3LTNlNDE5MGFmOGM1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2xcEwDQYJKoZIhvcNAQELBQADggEBACBbXPe5vJCfFxScqpwmsNEwqMb1 DKyyLolf5v+OCV6TEep7MscR2VM9yxo6A/RX3/llxyKrF/hM7/ob8o+l3VLnCCz4 Y/sjlYiwd3v9Y5EA/oj6ikDGi0OJYoesUrwJKpfx+3vwX4c2G17vc/4Lv60CwQ3F EkGPw7kQ0vhJi41ewlT5te37Te3/bK2utAzNyD+oh/cz8PLLtOo/XKsA14aa29de EJP8kRZD8X2ZSFnbPLaP0+coNCNfrlkiczu1PBxtNfhuLcw9nZi8mAm4sd3BKaAx UxPeRdJGyQAGLRgwAE8tgdAPSHvOTCAH9kHViawTbksdgSncxsanLn2Wpcc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:47 2025 by rpki-client