$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/689e79f9-deb8-46af-9b58-242ce38e3c84.roa File: 689e79f9-deb8-46af-9b58-242ce38e3c84.roa (raw, json) Hash identifier: qqhYWxuaP6ujMJaLLEwVgKagAPtRlZPcc5HZXvaIuew= Subject key identifier: B6:35:49:FC:F5:52:ED:60:5E:38:62:8B:BC:32:99:0F:9A:70:79:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EB5BFBB9852B5E5DBEE4371241772AE1ACF9F54 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/689e79f9-deb8-46af-9b58-242ce38e3c84.roa Signing time: Mon 14 Apr 2025 16:01:29 +0000 ROA not before: Mon 14 Apr 2025 16:01:29 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.253.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b5:bf:bb:98:52:b5:e5:db:ee:43:71:24:17:72:ae:1a:cf:9f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:01:29 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=721da8c601dd00f62e54f0954062bf770727afa623363f68f874c8716bd2dc94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:f9:03:18:36:26:28:ea:90:33:5b:2e:f4: 1d:87:84:57:46:e0:77:f1:9a:54:20:b7:de:90:a1: 6c:bc:b0:01:00:45:3a:f6:d3:46:12:f8:ec:0d:52: e0:5b:be:8e:33:7d:46:01:df:65:ca:30:00:c3:1a: 50:e5:3b:53:fb:ff:c9:0d:07:c7:54:4c:35:a4:c1: d3:4b:0f:5d:a5:05:a8:0a:af:d8:86:ef:5c:12:03: 63:33:1f:05:5b:f4:57:de:53:1a:06:60:4f:cd:fa: db:36:ab:ae:e2:bc:72:fa:4f:6f:09:28:cf:05:25: fa:5b:bd:5d:f1:24:7c:1f:f7:0e:73:4e:a3:2b:4f: 87:98:4e:b3:a7:a9:df:d1:9e:bb:16:27:05:86:26: 5e:ae:33:28:7c:92:77:ff:ce:90:1e:9b:5d:10:be: 24:4c:94:5c:4c:15:bf:b8:ab:69:e8:a3:71:ad:c9: 57:70:62:60:c4:f7:8a:af:ec:fd:2b:24:59:11:b0: 46:14:0f:02:34:49:89:47:ff:f5:19:67:60:d0:68: 15:7c:87:b8:a7:07:6e:0d:bf:c8:6d:41:cf:d1:00: db:8e:52:1a:6a:bf:d7:b3:e7:7e:ee:da:88:4d:a8: 4e:a3:cf:df:5f:af:5e:5f:d3:4f:1f:89:e6:6f:ce: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:35:49:FC:F5:52:ED:60:5E:38:62:8B:BC:32:99:0F:9A:70:79:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/689e79f9-deb8-46af-9b58-242ce38e3c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.253.228.0/22 Signature Algorithm: sha256WithRSAEncryption 01:11:f5:a3:fd:ef:50:0a:af:ee:53:78:a4:78:af:d4:4e:6a: 6d:cd:ac:42:6a:f6:9b:29:47:d5:05:9e:a0:55:6a:a8:91:ba: 86:4f:77:d2:0b:52:b5:58:96:67:cd:1e:9e:19:a1:b7:b4:1e: d7:bb:ac:e9:95:23:8c:c8:66:38:8b:61:bf:68:be:83:2a:d1: 2f:2e:c5:da:9f:b7:fd:54:9b:19:52:e8:27:a0:95:86:fd:80: 99:55:7d:e1:73:f2:53:5b:4d:04:9e:56:62:be:82:33:a5:47: ac:99:4e:09:bd:1f:b3:fb:e8:5a:d9:8c:d7:46:4b:9d:16:1b: e5:d2:89:50:f9:6f:fe:9a:1b:b6:8c:67:c8:ba:d6:b6:87:c5: 6d:d4:87:78:8c:e1:af:fb:89:c7:89:15:72:c1:5e:5b:f7:5f: 0d:12:d1:ee:59:c1:e7:aa:9d:d2:47:09:34:f9:52:13:39:96: e7:42:98:b3:4d:a2:f8:6f:29:79:be:0a:b5:4a:a5:0f:ef:b6: 8f:be:32:f8:32:82:21:01:b1:05:db:c2:b2:3e:69:26:3f:25: 29:c3:ed:37:8e:22:c7:f6:60:91:c0:30:80:7a:61:bc:58:b2: 99:b8:e0:9f:2f:c3:b7:e1:ca:88:79:e8:43:9f:63:fd:49:75: 7c:f2:53:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPrW/u5hSteXb7kNxJBdyrhrPn1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTYwMTI5WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjFkYThjNjAxZGQwMGY2MmU1NGYwOTU0MDYyYmY3NzA3 MjdhZmE2MjMzNjNmNjhmODc0Yzg3MTZiZDJkYzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCuvkDGDYmKOqQM1su9B2HhFdG4HfxmlQgt96QoWy8sAEA RTr200YS+OwNUuBbvo4zfUYB32XKMADDGlDlO1P7/8kNB8dUTDWkwdNLD12lBagK r9iG71wSA2MzHwVb9FfeUxoGYE/N+ts2q67ivHL6T28JKM8FJfpbvV3xJHwf9w5z TqMrT4eYTrOnqd/RnrsWJwWGJl6uMyh8knf/zpAem10QviRMlFxMFb+4q2noo3Gt yVdwYmDE94qv7P0rJFkRsEYUDwI0SYlH//UZZ2DQaBV8h7inB24Nv8htQc/RANuO Uhpqv9ez537u2ohNqE6jz99fr15f008fieZvzhQZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtjVJ/PVS7WBeOGKLvDKZD5pweawwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4OWU3OWY5LWRlYjgtNDZhZi05YjU4LTI0MmNlMzhlM2M4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAID/eQwDQYJKoZIhvcNAQELBQADggEBAAER9aP971AKr+5TeKR4r9ROam3N rEJq9pspR9UFnqBVaqiRuoZPd9ILUrVYlmfNHp4Zobe0Hte7rOmVI4zIZjiLYb9o voMq0S8uxdqft/1UmxlS6CeglYb9gJlVfeFz8lNbTQSeVmK+gjOlR6yZTgm9H7P7 6FrZjNdGS50WG+XSiVD5b/6aG7aMZ8i61raHxW3Uh3iM4a/7iceJFXLBXlv3Xw0S 0e5ZweeqndJHCTT5UhM5ludCmLNNovhvKXm+CrVKpQ/vto++MvgygiEBsQXbwrI+ aSY/JSnD7TeOIsf2YJHAMIB6YbxYspm44J8vw7fhyoh56EOfY/1JdXzyU8A= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:57 2025 by rpki-client