$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f346f48-3513-4de0-b8dc-9e9e34d02fbc.roa File: 5f346f48-3513-4de0-b8dc-9e9e34d02fbc.roa (raw, json) Hash identifier: Dr1k5+zgRvgwQN5dNOdQf1fw4129LXN9E+mCw2tt8hs= Subject key identifier: 52:5C:45:09:72:05:5D:09:E2:82:31:BE:4D:E2:98:0D:8D:F7:E8:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E0B7C0F22FF95FFFA4B29EBE35740F124D5683D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f346f48-3513-4de0-b8dc-9e9e34d02fbc.roa Signing time: Tue 22 Apr 2025 18:00:12 +0000 ROA not before: Tue 22 Apr 2025 18:00:12 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0b:7c:0f:22:ff:95:ff:fa:4b:29:eb:e3:57:40:f1:24:d5:68:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:00:12 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=124bb9a0c19fb61ab4b6e0ae88c8d5d3815478adbdad274684495c0e71f28351, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:b3:3b:0a:d8:d9:25:ea:4a:16:e8:31:3d: b8:a4:1f:85:75:5b:e2:87:7e:e5:8f:0b:69:3e:b2: 40:e7:ec:81:17:df:6a:26:34:ac:58:c2:3a:1b:1c: b2:80:a8:18:14:5d:53:39:c3:7e:c3:52:0d:af:bd: a3:b1:95:d3:00:97:af:52:15:d7:c6:23:f2:18:71: 0b:9e:70:21:0f:e2:88:06:52:e2:88:32:7a:95:ad: dd:7d:42:58:a2:df:da:62:39:a5:50:b2:d3:19:74: 39:8f:2c:d6:2c:9a:02:77:35:33:24:de:76:e8:c8: 7f:b0:a5:cf:53:da:52:97:f7:64:9f:72:a0:23:0b: e9:5d:40:9e:3e:c0:c5:2e:9e:42:83:77:72:66:70: 80:08:19:0f:70:b8:1a:26:6f:80:70:f4:7d:8d:44: 21:2b:d0:c9:26:ec:7e:ef:d8:c7:12:18:0c:b8:16: fa:8f:f4:a7:c3:40:5b:30:35:10:dc:55:bc:04:63: 00:ad:f4:d1:d8:8d:79:02:36:e8:c3:ec:85:e7:81: ba:63:b6:39:bc:3b:78:c8:e4:66:d3:69:81:f2:50: b2:dd:f0:f1:1e:1e:0c:27:8a:9d:86:74:35:67:ed: 28:c2:58:99:56:5d:1b:31:0a:e4:89:49:31:4f:07: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:45:09:72:05:5D:09:E2:82:31:BE:4D:E2:98:0D:8D:F7:E8:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f346f48-3513-4de0-b8dc-9e9e34d02fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.0.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:2b:5b:01:c4:41:04:7a:72:b9:4d:bd:70:93:06:d8:08:88: b1:76:de:78:4c:21:aa:3f:5a:0c:a9:97:1a:ee:2e:30:6d:0a: a5:58:a3:7b:e9:1b:20:03:d6:f9:62:1f:27:d4:49:6c:e4:ef: c1:02:16:55:d3:d0:9e:25:30:c5:4f:7e:e6:b3:4d:de:da:a5: cc:a7:1a:98:4f:6f:d2:70:6b:ec:7b:3e:a9:b3:8e:46:72:46: 3e:61:76:26:04:8d:21:1d:52:0c:dd:a2:7b:dd:ed:88:89:fc: 3c:79:a2:57:3a:45:9e:61:b6:dc:88:80:a8:e9:92:98:a2:cf: 32:1f:5e:a0:21:94:74:69:a3:e1:6e:62:76:31:6d:ec:02:13: 07:06:ae:09:c0:e6:c9:9e:9d:50:2a:d0:c6:dd:1d:1e:94:f6: be:ee:84:c2:a1:a8:ee:d2:01:0f:2f:92:9c:a7:2f:ce:20:8d: b2:67:af:18:fd:c3:78:e1:5d:04:54:09:61:bf:e9:81:eb:18: a3:3d:ff:87:31:ed:45:5b:a0:4c:71:2c:0f:1b:98:e3:52:6f: ff:08:39:97:90:43:a8:db:97:b9:12:2e:c5:ce:e2:d0:ac:df: 6b:71:67:63:9f:e1:19:b3:5b:db:05:a3:0b:84:ed:92:5e:56: 60:88:6b:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULgt8DyL/lf/6Synr41dA8STVaD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgwMDEyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjRiYjlhMGMxOWZiNjFhYjRiNmUwYWU4OGM4ZDVkMzgx NTQ3OGFkYmRhZDI3NDY4NDQ5NWMwZTcxZjI4MzUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClzrM7CtjZJepKFugxPbikH4V1W+KHfuWPC2k+skDn7IEX 32omNKxYwjobHLKAqBgUXVM5w37DUg2vvaOxldMAl69SFdfGI/IYcQuecCEP4ogG UuKIMnqVrd19Qlii39piOaVQstMZdDmPLNYsmgJ3NTMk3nboyH+wpc9T2lKX92Sf cqAjC+ldQJ4+wMUunkKDd3JmcIAIGQ9wuBomb4Bw9H2NRCEr0Mkm7H7v2McSGAy4 FvqP9KfDQFswNRDcVbwEYwCt9NHYjXkCNujD7IXngbpjtjm8O3jI5GbTaYHyULLd 8PEeHgwnip2GdDVn7SjCWJlWXRsxCuSJSTFPBz3vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUlxFCXIFXQnigjG+TeKYDY336DYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVmMzQ2ZjQ4LTM1MTMtNGRlMC1iOGRjLTllOWUzNGQwMmZiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAgAwDQYJKoZIhvcNAQELBQADggEBAC8rWwHEQQR6crlNvXCTBtgIiLF2 3nhMIao/WgyplxruLjBtCqVYo3vpGyAD1vliHyfUSWzk78ECFlXT0J4lMMVPfuaz Td7apcynGphPb9Jwa+x7PqmzjkZyRj5hdiYEjSEdUgzdonvd7YiJ/Dx5olc6RZ5h ttyIgKjpkpiizzIfXqAhlHRpo+FuYnYxbewCEwcGrgnA5smenVAq0MbdHR6U9r7u hMKhqO7SAQ8vkpynL84gjbJnrxj9w3jhXQRUCWG/6YHrGKM9/4cx7UVboExxLA8b mONSb/8IOZeQQ6jbl7kSLsXO4tCs32txZ2Of4RmzW9sFowuE7ZJeVmCIa2w= -----END CERTIFICATE-----Generated at Sat Apr 26 12:49:09 2025 by rpki-client