$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/706605b1-d013-4cfc-8d02-b36908000843.roa File: 706605b1-d013-4cfc-8d02-b36908000843.roa (raw, json) Hash identifier: CbouhX4+4vucK2oyQp4DP3C4WU6evzy+FHOo3eGV7lo= Subject key identifier: 07:6F:2A:32:50:25:F9:61:F6:08:93:32:94:63:00:F2:38:EC:32:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A3221FD8BC75B5C91ECDAB0DFC5A0A35B8CA3CE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/706605b1-d013-4cfc-8d02-b36908000843.roa Signing time: Fri 25 Apr 2025 17:30:41 +0000 ROA not before: Fri 25 Apr 2025 17:30:41 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:32:21:fd:8b:c7:5b:5c:91:ec:da:b0:df:c5:a0:a3:5b:8c:a3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:30:41 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=67815081066976c25b78ce8ce79b082cbee6733c39b015e6223603ffb2a20677, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:58:e7:8b:41:73:88:32:20:68:0c:70:bb: d4:72:72:20:54:d3:67:ef:b7:6e:ad:03:94:46:e7: 7d:cf:d3:d6:2a:c9:bb:fd:c5:b3:a0:11:3c:25:f3: 27:1c:6d:d4:b2:98:39:c5:39:e5:82:d4:20:c9:ea: 65:0c:ca:a4:a1:29:c0:46:d8:a0:61:a9:45:58:1e: 5a:2b:2b:32:1c:0e:38:8b:20:19:82:09:ab:ad:4b: c6:ae:91:ff:c3:62:08:56:84:f5:9f:45:d3:92:62: 9b:dc:16:d0:b5:44:05:11:d8:8c:12:5f:c7:87:60: 4b:90:26:0b:fe:4c:3d:29:37:1d:2e:ec:fd:e6:43: 22:d4:5c:0c:8b:93:d2:9f:0a:08:6d:01:70:ee:33: 96:c6:0c:91:26:82:48:40:63:2c:a8:0b:15:9d:0a: 7d:a5:0f:78:1b:cb:f8:f4:6e:f4:e0:fb:a6:f7:78: 13:5e:59:24:03:13:6a:d0:c2:00:e0:bb:ea:ed:bb: cc:ee:1c:7c:4a:dd:8f:d6:60:79:36:8f:c5:69:fa: 7f:61:fc:7e:d3:ba:41:ba:2e:15:2d:85:25:12:94: 1d:bd:28:50:9d:e0:8d:33:98:86:90:98:30:db:62: de:37:e1:30:d0:18:48:04:ee:09:1c:f2:a4:45:05: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6F:2A:32:50:25:F9:61:F6:08:93:32:94:63:00:F2:38:EC:32:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/706605b1-d013-4cfc-8d02-b36908000843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.89.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7b:98:5a:c8:bc:eb:ca:18:f4:15:5a:c2:ce:58:f4:4a:fb:68: a4:7d:26:64:8e:ef:1a:47:d3:d3:3a:eb:10:d0:49:26:44:d2: 35:2d:23:3e:fe:44:6d:76:eb:f4:d5:6b:d8:d1:7a:17:c6:22: 60:b6:ba:5d:ac:6d:73:3e:26:f5:0a:19:83:47:94:82:01:87: 66:c0:80:88:a4:e6:ea:ab:37:14:2a:82:29:36:88:60:ce:b4: 5c:66:de:0c:33:16:e5:88:59:16:4c:81:15:c6:6e:58:4a:0b: 7a:7c:f3:c2:77:de:6d:ee:c1:b9:f3:7b:e4:d0:b0:f6:d6:7a: 07:83:dc:3c:35:46:c8:94:1e:db:25:78:b8:9c:96:12:79:0b: 02:dc:c8:93:a4:39:3f:be:6e:93:c5:01:89:b9:2d:67:de:6c: 01:a2:25:9d:a9:cc:01:3e:f4:c1:c4:ec:4b:a9:6e:e1:41:65: 58:08:61:e1:18:31:b1:e6:f6:22:84:b7:23:db:e0:3c:dd:e3: f9:a6:be:a7:c5:b9:3c:1c:3c:64:64:25:e4:d5:12:5b:ce:ce: d9:34:9e:6d:a5:24:a5:3b:e8:1c:e2:05:33:2d:1f:64:3b:c6: 19:c8:ff:68:b7:14:6e:6e:f4:c3:c3:a4:60:d6:c7:f4:11:a1: 4d:36:82:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUajIh/YvHW1yR7Nqw38Wgo1uMo84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTczMDQxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzgxNTA4MTA2Njk3NmMyNWI3OGNlOGNlNzliMDgyY2Jl ZTY3MzNjMzliMDE1ZTYyMjM2MDNmZmIyYTIwNjc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4a1jni0FziDIgaAxwu9RyciBU02fvt26tA5RG533P09Yq ybv9xbOgETwl8yccbdSymDnFOeWC1CDJ6mUMyqShKcBG2KBhqUVYHlorKzIcDjiL IBmCCautS8aukf/DYghWhPWfRdOSYpvcFtC1RAUR2IwSX8eHYEuQJgv+TD0pNx0u 7P3mQyLUXAyLk9KfCghtAXDuM5bGDJEmgkhAYyyoCxWdCn2lD3gby/j0bvTg+6b3 eBNeWSQDE2rQwgDgu+rtu8zuHHxK3Y/WYHk2j8Vp+n9h/H7TukG6LhUthSUSlB29 KFCd4I0zmIaQmDDbYt434TDQGEgE7gkc8qRFBccVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUB28qMlAl+WH2CJMylGMA8jjsMnwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwNjYwNWIxLWQwMTMtNGNmYy04ZDAyLWIzNjkwODAwMDg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2WTANBgkqhkiG9w0BAQsFAAOCAQEAe5hayLzryhj0FVrCzlj0SvtopH0m ZI7vGkfT0zrrENBJJkTSNS0jPv5EbXbr9NVr2NF6F8YiYLa6Xaxtcz4m9QoZg0eU ggGHZsCAiKTm6qs3FCqCKTaIYM60XGbeDDMW5YhZFkyBFcZuWEoLenzzwnfebe7B ufN75NCw9tZ6B4PcPDVGyJQe2yV4uJyWEnkLAtzIk6Q5P75uk8UBibktZ95sAaIl nanMAT70wcTsS6lu4UFlWAhh4Rgxseb2IoS3I9vgPN3j+aa+p8W5PBw8ZGQl5NUS W87O2TSebaUkpTvoHOIFMy0fZDvGGcj/aLcUbm70w8OkYNbH9BGhTTaCRQ== -----END CERTIFICATE-----Generated at Sun Apr 27 03:16:27 2025 by rpki-client