$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa File: 5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa (raw, json) Hash identifier: T7oHFy6EcuGQfstyAA03k+20xYKHsM98AwiAHDUciSI= Subject key identifier: 11:D9:EB:85:2F:14:B5:28:61:BF:4F:2F:9A:9A:8C:9F:8E:16:68:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 710C080663346915F4213705CC554D9E9A7460B3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa Signing time: Fri 25 Apr 2025 17:30:45 +0000 ROA not before: Fri 25 Apr 2025 17:30:45 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.84.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0c:08:06:63:34:69:15:f4:21:37:05:cc:55:4d:9e:9a:74:60:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:30:45 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=9f6fb00c2737133ff3870a5be78f7b82fa360c893ef31b88c26a9179ca6508b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:d3:51:f0:79:7e:f9:5e:05:13:c6:ad:6e: 5b:10:a7:f7:da:ee:d2:89:9a:a3:5f:43:5a:14:24: 18:30:7f:cc:5c:c4:50:84:0f:8b:95:20:1d:43:32: 5e:b9:50:79:d2:71:44:45:5b:7b:9c:2d:f0:ad:eb: de:bd:25:10:c8:d4:90:38:9a:3b:ee:4e:36:c1:42: 50:f2:1e:4f:66:b8:83:14:f3:0a:91:8a:9e:8f:2a: 3d:76:4b:63:04:31:8e:26:2d:9f:a2:d3:39:ff:7d: 4c:a0:d5:d0:01:7c:e2:fe:02:62:7d:06:24:7a:62: 9b:eb:82:48:72:93:64:e9:ab:ae:ae:8b:af:98:e2: 38:14:ee:dc:86:ee:1c:5e:2b:de:58:83:dd:8a:0c: f6:f2:d5:d5:45:2c:a9:ee:23:c0:6e:ea:61:7e:8b: aa:ec:22:37:42:09:8e:16:5c:5b:09:ce:c3:0e:f7: 9c:82:5d:dd:4d:98:d6:d6:39:f4:52:f5:4e:78:e7: 0b:1d:82:67:ea:a4:5a:e8:1a:f5:bb:8b:02:95:4f: 3b:16:8f:cc:90:96:b5:7e:93:72:0b:ce:c8:05:e3: c6:1e:ab:4c:89:0e:b0:ec:db:a3:a2:39:c6:82:b7: bf:28:13:7f:8e:cd:23:9b:91:cb:2d:f6:34:29:f9: c5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D9:EB:85:2F:14:B5:28:61:BF:4F:2F:9A:9A:8C:9F:8E:16:68:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cc2ee73-d41c-4c7d-bd82-2ea5b4f9026e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.84.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1f:66:2f:bf:60:34:f1:52:f4:38:35:4d:15:4d:7f:c5:da:b0: ac:3a:67:98:59:9e:be:56:33:39:82:8b:a3:2c:e3:bf:91:b9: 80:05:0b:93:ef:94:c3:82:e2:32:c1:4b:a1:f0:e4:7d:3a:4e: 0f:20:75:42:97:f4:d7:d8:4b:06:aa:a3:dd:9e:ba:e9:37:b7: 93:e9:24:c1:3d:43:32:74:26:b9:30:8d:44:bc:7a:1b:62:bb: 0f:bf:8a:1e:3e:91:84:d0:2e:35:84:82:fa:0c:7d:a8:92:65: 6a:88:0d:7d:40:50:3d:41:e9:fd:48:d7:23:0a:b8:d4:5c:94: 20:47:bd:29:15:7f:30:36:fc:f1:63:86:a3:fd:a5:e5:19:8a: aa:b2:5e:fb:2a:2d:c0:f6:66:52:70:39:bd:f6:92:d4:11:11: 11:f3:c7:9b:54:49:d5:4a:dd:44:53:a4:7d:9e:82:e5:77:c6: de:26:3a:03:e9:a6:11:15:e1:44:02:45:5a:55:0e:bf:72:56: f4:96:92:15:75:18:57:2f:6a:48:b6:f7:c3:a9:e1:30:eb:1c: ea:c8:01:14:e9:1f:89:8a:c4:29:aa:ea:13:be:ac:fe:c9:3e: e4:b2:6b:c4:af:71:17:53:c0:74:d4:c4:50:46:aa:66:8c:7f: 9d:ac:dc:8a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcQwIBmM0aRX0ITcFzFVNnpp0YLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTczMDQ1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjZmYjAwYzI3MzcxMzNmZjM4NzBhNWJlNzhmN2I4MmZh MzYwYzg5M2VmMzFiODhjMjZhOTE3OWNhNjUwOGI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR59NR8Hl++V4FE8atblsQp/fa7tKJmqNfQ1oUJBgwf8xc xFCED4uVIB1DMl65UHnScURFW3ucLfCt6969JRDI1JA4mjvuTjbBQlDyHk9muIMU 8wqRip6PKj12S2MEMY4mLZ+i0zn/fUyg1dABfOL+AmJ9BiR6Ypvrgkhyk2Tpq66u i6+Y4jgU7tyG7hxeK95Yg92KDPby1dVFLKnuI8Bu6mF+i6rsIjdCCY4WXFsJzsMO 95yCXd1NmNbWOfRS9U545wsdgmfqpFroGvW7iwKVTzsWj8yQlrV+k3ILzsgF48Ye q0yJDrDs26OiOcaCt78oE3+OzSObkcst9jQp+cXFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEdnrhS8UtShhv08vmpqMn44WaAEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjYzJlZTczLWQ0MWMtNGM3ZC1iZDgyLTJlYTViNGY5MDI2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2VDANBgkqhkiG9w0BAQsFAAOCAQEAH2Yvv2A08VL0ODVNFU1/xdqwrDpn mFmevlYzOYKLoyzjv5G5gAULk++Uw4LiMsFLofDkfTpODyB1Qpf019hLBqqj3Z66 6Te3k+kkwT1DMnQmuTCNRLx6G2K7D7+KHj6RhNAuNYSC+gx9qJJlaogNfUBQPUHp /UjXIwq41FyUIEe9KRV/MDb88WOGo/2l5RmKqrJe+yotwPZmUnA5vfaS1BEREfPH m1RJ1UrdRFOkfZ6C5XfG3iY6A+mmERXhRAJFWlUOv3JW9JaSFXUYVy9qSLb3w6nh MOsc6sgBFOkfiYrEKarqE76s/sk+5LJrxK9xF1PAdNTEUEaqZox/nazcig== -----END CERTIFICATE-----Generated at Sat Apr 26 12:46:04 2025 by rpki-client