$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa File: 5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa (raw, json) Hash identifier: 9Rvaw+v1t2J2EQdeSFzhKBLWCvWqw6w/uFI1hBPwO3E= Subject key identifier: 63:23:E7:0F:89:D9:7F:90:C4:5B:5B:13:E5:EB:F3:CF:02:C4:81:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E469060F35D56AA2932A21DE1894E41E005953F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa Signing time: Mon 14 Apr 2025 17:00:58 +0000 ROA not before: Mon 14 Apr 2025 17:00:58 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.190.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:46:90:60:f3:5d:56:aa:29:32:a2:1d:e1:89:4e:41:e0:05:95:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 17:00:58 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=7f2fc867908e29598ba0ed4c2863871609bd6e29550c6da99c994e2764ecf053, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:1b:82:bd:aa:7f:3c:a9:6e:7e:a4:41:3b: 43:67:bf:a5:91:d5:9d:7c:0b:a1:da:23:5c:4a:16: a1:e0:24:b3:e1:4b:d3:65:17:50:85:cb:f2:fd:74: 6f:76:dc:1e:da:3a:70:67:af:cc:80:3d:1a:40:ff: 97:83:19:ac:57:08:2c:bf:66:a8:08:fa:6e:4e:4a: df:9e:71:6c:8c:1e:a5:35:ea:7b:a7:75:0b:c0:e2: c4:58:ad:6c:42:6d:91:31:29:33:24:d4:ea:9c:9e: 38:e2:97:d2:57:7b:be:28:84:3d:30:31:85:4e:7f: fd:3a:d2:29:90:1b:6c:c2:3d:06:0b:7f:7b:5a:43: c0:0e:6d:65:12:dd:71:d7:d7:7a:24:c4:5b:ef:a0: 4b:f7:b9:a3:2b:b1:8c:a8:05:ff:f8:d2:d0:4c:e2: 78:4f:c0:ce:a7:c8:2a:32:10:8d:08:43:27:15:85: 9c:47:fa:91:c5:39:0d:15:17:16:85:51:80:f2:93: 86:f7:fc:f7:70:1e:11:1c:f2:f8:24:97:43:7c:73: f8:63:45:12:70:54:90:33:e0:32:a1:1c:c1:9e:d5: d1:1c:5a:8a:28:8e:87:96:e1:64:c8:a6:e4:ec:f0: ad:67:cc:02:d7:fd:41:f5:fa:a1:12:74:0e:4c:78: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:23:E7:0F:89:D9:7F:90:C4:5B:5B:13:E5:EB:F3:CF:02:C4:81:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d365ef9-2d62-4299-97fb-6a2bf1aebd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.190.0.0/18 Signature Algorithm: sha256WithRSAEncryption 00:a8:c6:99:ca:df:79:21:ec:85:43:12:71:4e:ed:58:44:43: 1d:a7:30:af:1e:82:b3:65:50:85:07:29:a8:d8:e3:88:bb:1f: 25:2a:5c:13:61:a9:b0:f4:7d:a9:8b:66:a8:9a:4d:69:01:f0: f2:74:7e:80:f4:a5:0c:ad:b5:72:9b:7d:89:7a:aa:0d:b2:65: 20:a7:c1:dc:9e:e4:ed:0b:9c:ce:1f:82:78:3d:9b:95:44:7c: 3c:ae:38:a6:45:5e:d3:ae:26:c7:a0:2d:70:10:e8:5a:4b:88: 9a:f9:27:59:bf:91:bb:2d:6c:f3:1f:f6:32:70:07:67:e8:04: 6b:d5:a6:c7:8f:5f:ae:15:d7:c9:cb:3c:3e:04:6d:1a:08:8f: b2:05:8d:76:5e:23:1f:3b:0e:6b:2c:25:bd:a5:ec:b0:25:03: d2:5b:76:75:8a:4c:7f:11:8e:e8:a1:0f:45:a3:58:da:12:92: 98:97:a8:cd:8f:39:10:68:36:01:4f:18:6e:d6:43:fb:dc:d0: 72:35:7e:46:4b:e6:68:15:cb:e0:b3:3e:4b:b1:e6:29:1b:eb: 26:34:87:27:b8:8d:8c:41:2d:bc:98:2b:7d:de:7c:c0:05:6c: b2:6d:9b:8a:d4:df:fe:f3:8b:88:e5:16:b9:f1:b5:fe:4a:df: ed:ab:68:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPkaQYPNdVqopMqId4YlOQeAFlT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTcwMDU4WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjJmYzg2NzkwOGUyOTU5OGJhMGVkNGMyODYzODcxNjA5 YmQ2ZTI5NTUwYzZkYTk5Yzk5NGUyNzY0ZWNmMDUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClZRuCvap/PKlufqRBO0Nnv6WR1Z18C6HaI1xKFqHgJLPh S9NlF1CFy/L9dG923B7aOnBnr8yAPRpA/5eDGaxXCCy/ZqgI+m5OSt+ecWyMHqU1 6nundQvA4sRYrWxCbZExKTMk1Oqcnjjil9JXe74ohD0wMYVOf/060imQG2zCPQYL f3taQ8AObWUS3XHX13okxFvvoEv3uaMrsYyoBf/40tBM4nhPwM6nyCoyEI0IQycV hZxH+pHFOQ0VFxaFUYDyk4b3/PdwHhEc8vgkl0N8c/hjRRJwVJAz4DKhHMGe1dEc WooojoeW4WTIpuTs8K1nzALX/UH1+qESdA5MeJC1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYyPnD4nZf5DEW1sT5evzzwLEge0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkMzY1ZWY5LTJkNjItNDI5OS05N2ZiLTZhMmJmMWFlYmQ2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2vgAwDQYJKoZIhvcNAQELBQADggEBAACoxpnK33kh7IVDEnFO7VhEQx2n MK8egrNlUIUHKajY44i7HyUqXBNhqbD0famLZqiaTWkB8PJ0foD0pQyttXKbfYl6 qg2yZSCnwdye5O0LnM4fgng9m5VEfDyuOKZFXtOuJsegLXAQ6FpLiJr5J1m/kbst bPMf9jJwB2foBGvVpsePX64V18nLPD4EbRoIj7IFjXZeIx87DmssJb2l7LAlA9Jb dnWKTH8RjuihD0WjWNoSkpiXqM2PORBoNgFPGG7WQ/vc0HI1fkZL5mgVy+CzPkux 5ikb6yY0hye4jYxBLbyYK33efMAFbLJtm4rU3/7zi4jlFrnxtf5K3+2raOk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:47 2025 by rpki-client