$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676769b4-85c5-472b-a02c-f8796041f509.roa File: 676769b4-85c5-472b-a02c-f8796041f509.roa (raw, json) Hash identifier: CtNCepW0h4nGiL+SpgAq7pzr9lrdwTPvJSHQklara10= Subject key identifier: 70:0D:06:70:DE:FC:C9:76:44:25:A0:C9:37:FE:FA:98:B8:76:00:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CEEA4233F64189D018913C3A3B4D3733AC53D93 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676769b4-85c5-472b-a02c-f8796041f509.roa Signing time: Fri 18 Apr 2025 15:10:21 +0000 ROA not before: Fri 18 Apr 2025 15:10:21 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.147.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ee:a4:23:3f:64:18:9d:01:89:13:c3:a3:b4:d3:73:3a:c5:3d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:10:21 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=87f6c78b75c688587851322d1959464b3d7ab8fc99418c1d926e6f8be50dd4c4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:3f:1f:1e:2e:09:85:83:cc:a8:77:3c:6b: 8a:58:47:10:a1:6a:45:1d:6b:4f:1a:2d:42:90:63: 26:58:8d:ab:38:f6:a7:1e:63:65:25:0b:5f:91:de: 02:37:19:17:db:50:14:29:d7:f5:7f:9a:71:3c:29: a1:47:fe:c5:49:da:63:82:74:0f:34:d1:fa:29:a2: 47:cb:83:d3:16:c2:b9:63:ac:e3:25:37:8c:e5:1c: f2:20:00:89:e8:15:c7:e7:a2:7e:10:10:b1:e7:c4: bf:b2:23:40:29:7e:f1:a8:be:98:d9:62:c6:8c:eb: 95:c4:0f:5e:15:2c:a8:8c:85:bf:79:1b:97:28:7d: fb:76:df:fb:e7:fe:43:7c:72:d6:95:f0:c8:69:37: e4:d5:64:59:c6:8c:87:fd:db:91:1c:bf:47:46:cb: 22:eb:d7:67:e8:fa:b4:85:22:78:60:bb:5c:9b:e8: 25:4c:d2:af:c2:2a:a9:f2:35:eb:d5:e6:fc:d2:13: 57:31:9b:c1:52:56:97:ad:42:98:3c:5a:6b:66:8a: 9b:1c:2a:74:76:74:13:ac:52:c3:3d:d7:f2:01:33: 06:3e:b4:da:d0:25:c7:47:6a:e3:6a:4a:8c:40:fe: 61:cc:98:b6:c6:e3:8e:19:2d:e6:9a:67:5d:91:de: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:06:70:DE:FC:C9:76:44:25:A0:C9:37:FE:FA:98:B8:76:00:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676769b4-85c5-472b-a02c-f8796041f509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.147.192.0/18 Signature Algorithm: sha256WithRSAEncryption 48:45:d4:dd:e4:b7:0c:c0:6a:79:b2:d6:0a:15:0d:f4:eb:98: a0:d2:4e:2c:64:2f:22:ae:7a:d3:fa:4d:bb:16:f1:15:34:40: 01:b5:25:52:66:40:69:8f:ee:30:21:83:e3:13:e9:c8:b4:27: c8:10:e9:47:a1:ef:43:03:7f:bf:87:38:b6:fe:0d:6e:6b:4a: 4a:74:12:07:3b:8f:95:71:a6:66:72:c7:a6:03:54:98:9f:ff: 86:7d:dc:a1:89:c9:14:c3:fc:3b:ba:c0:40:00:d5:e5:8f:62: 4c:cd:30:60:25:3e:87:f0:39:40:d8:67:02:07:d4:2d:87:4a: 95:a3:73:45:1a:69:6e:12:7a:7f:66:25:31:49:66:1e:0d:1c: ed:b6:e7:e5:34:ea:ea:f4:06:23:61:90:d1:33:80:41:32:ab: d5:9e:2b:8e:00:30:13:dd:50:87:cd:07:fb:15:f9:c0:a7:0b: bd:94:a6:07:0a:d0:54:9a:a5:42:53:64:e4:52:5d:ad:9b:ff: b2:26:f0:90:7d:e0:80:22:ef:52:e2:08:ae:87:e0:0f:61:63: 2f:a2:98:81:55:29:a3:32:16:04:ca:9e:0a:d6:3f:d9:2f:97: 98:8f:d4:20:f0:6d:b8:73:1f:3c:7a:f2:85:98:9c:c3:64:9f: 8c:2d:c3:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPO6kIz9kGJ0BiRPDo7TTczrFPZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUxMDIxWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2Y2Yzc4Yjc1YzY4ODU4Nzg1MTMyMmQxOTU5NDY0YjNk N2FiOGZjOTk0MThjMWQ5MjZlNmY4YmU1MGRkNGM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTcj8fHi4JhYPMqHc8a4pYRxChakUda08aLUKQYyZYjas4 9qceY2UlC1+R3gI3GRfbUBQp1/V/mnE8KaFH/sVJ2mOCdA800fopokfLg9MWwrlj rOMlN4zlHPIgAInoFcfnon4QELHnxL+yI0ApfvGovpjZYsaM65XED14VLKiMhb95 G5cofft23/vn/kN8ctaV8MhpN+TVZFnGjIf925Ecv0dGyyLr12fo+rSFInhgu1yb 6CVM0q/CKqnyNevV5vzSE1cxm8FSVpetQpg8WmtmipscKnR2dBOsUsM91/IBMwY+ tNrQJcdHauNqSoxA/mHMmLbG444ZLeaaZ12R3v4HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcA0GcN78yXZEJaDJN/76mLh2AJwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3Njc2OWI0LTg1YzUtNDcyYi1hMDJjLWY4Nzk2MDQxZjUwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2k8AwDQYJKoZIhvcNAQELBQADggEBAEhF1N3ktwzAanmy1goVDfTrmKDS TixkLyKuetP6TbsW8RU0QAG1JVJmQGmP7jAhg+MT6ci0J8gQ6Ueh70MDf7+HOLb+ DW5rSkp0Egc7j5VxpmZyx6YDVJif/4Z93KGJyRTD/Du6wEAA1eWPYkzNMGAlPofw OUDYZwIH1C2HSpWjc0UaaW4Sen9mJTFJZh4NHO225+U06ur0BiNhkNEzgEEyq9We K44AMBPdUIfNB/sV+cCnC72UpgcK0FSapUJTZORSXa2b/7Im8JB94IAi71LiCK6H 4A9hYy+imIFVKaMyFgTKngrWP9kvl5iP1CDwbbhzHzx68oWYnMNkn4wtw5M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:44 2025 by rpki-client