$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa File: 7103788d-660f-45af-bb1a-9f73a3d9bd83.roa (raw, json) Hash identifier: CeevHymeexfii/63movmQv6zUA0kJV912hTACP8noTs= Subject key identifier: 63:E0:43:AD:47:28:04:4B:FA:A0:AE:1D:A5:96:DA:66:59:18:40:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A7265E1ADE818DF3D59FA6ADD72D00C14E3D77D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa Signing time: Fri 18 Apr 2025 15:40:05 +0000 ROA not before: Fri 18 Apr 2025 15:40:05 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:72:65:e1:ad:e8:18:df:3d:59:fa:6a:dd:72:d0:0c:14:e3:d7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:40:05 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=db95fcef6de599bcdd344ecdae0b282f41c6388711e53e98a4cc08f511ee7067, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:dd:91:5c:00:cb:bb:e2:27:37:a1:9e:8d: f1:85:ff:07:b4:4a:07:f8:14:8d:0f:b0:0c:b8:ec: cc:a1:ed:d2:44:4c:a9:5a:24:81:fc:cb:e7:39:53: 28:52:9d:f9:62:1c:72:e2:af:4f:1f:f8:17:62:c3: 5d:99:ab:8f:3e:42:a7:ab:e1:03:f3:e8:0e:d3:92: 14:6f:a1:f5:a8:91:cd:5f:c7:83:6f:40:5a:55:9f: 01:06:c2:ed:32:25:2a:1e:19:9d:7b:d3:fd:8f:34: 79:67:6f:4f:74:43:bb:25:8e:f6:c1:e7:4f:69:9c: 98:fa:af:13:8d:43:d5:e3:73:38:fc:52:9f:a6:53: 89:be:e1:43:7e:f2:51:7f:f2:18:28:c4:d8:73:32: 7b:9e:21:89:a6:78:f5:af:64:e1:80:6b:b0:41:24: d3:47:ce:7e:9b:06:85:e9:19:33:b4:50:ec:34:47: 3c:8f:d4:a4:e1:33:90:ab:e2:c8:02:c8:47:aa:79: 2a:a1:a8:37:a4:2e:4c:85:6c:47:62:99:ad:b1:c5: d4:9c:79:6b:36:35:f2:f2:69:a4:2a:cb:06:07:60: f1:22:b0:f1:ff:12:21:45:9e:65:7e:4a:3f:7d:b0: 20:88:f4:c2:6e:50:32:32:6b:13:e5:30:53:ab:66: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:43:AD:47:28:04:4B:FA:A0:AE:1D:A5:96:DA:66:59:18:40:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.32.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:7c:04:44:4f:9d:c5:71:ce:b8:f7:b0:e2:b2:07:e8:a4:af: da:00:47:fb:f6:b1:e2:ff:41:7d:ea:6b:7d:2b:5d:c3:82:5f: 80:bc:44:39:8b:92:4c:c3:65:e4:af:75:c2:a5:be:3d:fb:e3: 88:f6:14:a3:12:f5:28:f6:54:39:45:b4:9c:50:c2:27:b6:b3: 50:e8:96:7a:57:5c:f7:0e:28:fd:ac:f7:1b:87:bd:e8:d8:b6: a5:ca:c0:eb:f6:38:a7:db:52:13:f6:39:18:d6:1c:e6:f8:0c: d7:7b:19:58:1d:65:4c:39:68:e9:ee:21:31:b1:e9:68:a4:b3: 36:ca:69:db:0d:ea:3b:4f:e9:0e:9e:0f:a5:16:99:f2:a0:cd: e9:fc:e9:0c:11:1f:70:be:91:a5:d7:23:82:0c:0d:65:aa:cd: ea:f8:75:12:5b:f9:49:7c:37:a2:56:9a:4d:e0:2d:97:0a:4a: 12:da:dc:d4:b6:ba:60:4f:4b:63:9b:5e:be:06:50:83:f9:51: 3e:56:f1:cc:96:0a:c3:cb:be:de:1a:f4:6e:fa:6e:de:99:0e: 01:c7:da:37:fb:15:64:8b:ca:4b:02:ec:7d:fb:55:13:5a:44: e0:cc:f3:97:68:e3:4e:ef:bb:b8:2e:4e:10:cc:fe:75:bd:c6: 0c:ed:74:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWnJl4a3oGN89Wfpq3XLQDBTj130wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTU0MDA1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjk1ZmNlZjZkZTU5OWJjZGQzNDRlY2RhZTBiMjgyZjQx YzYzODg3MTFlNTNlOThhNGNjMDhmNTExZWU3MDY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM592RXADLu+InN6GejfGF/we0Sgf4FI0PsAy47Myh7dJE TKlaJIH8y+c5UyhSnfliHHLir08f+Bdiw12Zq48+Qqer4QPz6A7TkhRvofWokc1f x4NvQFpVnwEGwu0yJSoeGZ170/2PNHlnb090Q7sljvbB509pnJj6rxONQ9Xjczj8 Up+mU4m+4UN+8lF/8hgoxNhzMnueIYmmePWvZOGAa7BBJNNHzn6bBoXpGTO0UOw0 RzyP1KThM5Cr4sgCyEeqeSqhqDekLkyFbEdima2xxdSceWs2NfLyaaQqywYHYPEi sPH/EiFFnmV+Sj99sCCI9MJuUDIyaxPlMFOrZi7HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY+BDrUcoBEv6oK4dpZbaZlkYQMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxMDM3ODhkLTY2MGYtNDVhZi1iYjFhLTlmNzNhM2Q5YmQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADISAwDQYJKoZIhvcNAQELBQADggEBAGt8BERPncVxzrj3sOKyB+ikr9oA R/v2seL/QX3qa30rXcOCX4C8RDmLkkzDZeSvdcKlvj3744j2FKMS9Sj2VDlFtJxQ wie2s1DolnpXXPcOKP2s9xuHvejYtqXKwOv2OKfbUhP2ORjWHOb4DNd7GVgdZUw5 aOnuITGx6WikszbKadsN6jtP6Q6eD6UWmfKgzen86QwRH3C+kaXXI4IMDWWqzer4 dRJb+Ul8N6JWmk3gLZcKShLa3NS2umBPS2ObXr4GUIP5UT5W8cyWCsPLvt4a9G76 bt6ZDgHH2jf7FWSLyksC7H37VRNaRODM85do407vu7guThDM/nW9xgztdBo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:07 2025 by rpki-client