$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/808b7860-e332-4ea6-8889-0b76b8e827aa.roa File: 808b7860-e332-4ea6-8889-0b76b8e827aa.roa (raw, json) Hash identifier: LqEhE1Z32Dr7HUjEopGxtp5EcX75epuwUfcEU4msMX4= Subject key identifier: 4C:F7:AF:85:F9:75:0C:5F:74:31:E1:E5:44:40:C2:AC:90:01:3D:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C9E59BF6CAB795E8156EA422297E4FA687B4565 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/808b7860-e332-4ea6-8889-0b76b8e827aa.roa Signing time: Tue 22 Apr 2025 17:51:09 +0000 ROA not before: Tue 22 Apr 2025 17:51:09 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9e:59:bf:6c:ab:79:5e:81:56:ea:42:22:97:e4:fa:68:7b:45:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 17:51:09 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=fa94fe82c7be57df13e0b565c565bb0d44409dc8683f30fec1e9a22ab7fec740, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:6e:df:7a:4f:e7:42:86:e5:fc:63:1b:a6: 18:61:75:c6:1d:02:b2:fc:7f:5c:ef:0b:6e:30:b9: 62:a0:e7:90:ee:97:04:0d:33:24:bd:6f:17:eb:2a: 3a:0b:41:0c:b6:e1:be:d8:39:0d:4f:df:99:5a:94: ea:23:c4:aa:9c:42:a7:a5:9c:5d:2f:b5:b9:01:17: ca:4f:2d:78:9c:12:52:76:f8:b6:79:46:dd:08:84: 7d:06:94:20:17:b5:4e:6a:03:e8:75:ad:a1:8e:94: 7e:2f:50:85:98:2d:b4:1f:a4:d4:a6:f4:3a:3b:d0: 57:2e:2a:04:60:6a:3b:ad:c1:12:e2:11:08:c7:14: c7:87:20:35:34:8c:b1:55:c0:5a:19:f5:d8:96:98: e6:43:4d:a9:fd:b8:03:32:60:b5:2a:f8:fb:31:6a: 34:70:a2:e8:8e:a8:69:df:17:37:15:ff:5b:68:d9: 8a:80:a2:62:f9:db:fe:28:dc:d3:bc:01:50:d2:fc: d1:93:69:2b:1e:94:36:e8:2c:4b:5f:17:91:c2:bf: 0d:94:f2:74:2a:6e:b5:e9:20:12:9d:93:01:d3:13: 68:94:7d:00:ed:e3:95:88:b0:34:a5:e3:97:16:e1: b5:b8:d5:b8:62:db:94:72:e1:b8:89:14:1c:d1:a4: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F7:AF:85:F9:75:0C:5F:74:31:E1:E5:44:40:C2:AC:90:01:3D:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/808b7860-e332-4ea6-8889-0b76b8e827aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.184.0/23 Signature Algorithm: sha256WithRSAEncryption 04:a3:2f:4b:7d:eb:61:00:ac:bc:b0:b7:07:ab:4d:24:96:93: ea:aa:e6:26:ff:6f:41:7f:86:41:e3:2d:37:32:a5:8e:80:a7: c4:fc:42:d3:32:e1:b9:4c:e7:7e:a1:79:e1:0d:a1:cc:20:f4: 96:44:2b:6e:64:c6:fc:99:2c:34:16:2e:e0:b3:fd:34:e2:12: 79:83:9d:2a:8c:d8:ba:32:ec:3d:44:5a:c6:5a:d9:ae:bc:50: b7:75:d5:8f:82:01:bb:ac:9e:a7:8e:f2:65:bf:c2:2a:13:67: 3a:c3:fd:ad:b9:5f:e3:59:25:5f:96:80:94:7c:77:23:11:9e: ca:c7:29:72:77:2e:12:f0:d2:4d:e8:be:d6:6a:cb:f3:6f:95: 08:98:5f:90:34:57:ad:ca:6e:be:63:b9:70:7b:d7:c3:42:57: af:76:4e:bc:35:21:27:e0:97:0c:18:e0:e0:e9:93:37:de:4d: 59:cc:d2:b6:e9:5c:b3:4d:3a:2c:6e:a7:37:02:a4:4a:e0:0d: f7:3c:ae:5b:fe:04:99:e2:1a:36:aa:76:26:e4:b1:0e:a2:27: 49:f8:83:55:82:03:43:12:68:37:8a:f4:3d:7c:21:70:d3:5a: b6:09:a6:1f:0e:21:cc:b5:9d:fd:d9:bb:b4:3b:54:13:aa:79: 82:b0:fa:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPJ5Zv2yreV6BVupCIpfk+mh7RWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTc1MTA5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTk0ZmU4MmM3YmU1N2RmMTNlMGI1NjVjNTY1YmIwZDQ0 NDA5ZGM4NjgzZjMwZmVjMWU5YTIyYWI3ZmVjNzQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnl27fek/nQobl/GMbphhhdcYdArL8f1zvC24wuWKg55Du lwQNMyS9bxfrKjoLQQy24b7YOQ1P35lalOojxKqcQqelnF0vtbkBF8pPLXicElJ2 +LZ5Rt0IhH0GlCAXtU5qA+h1raGOlH4vUIWYLbQfpNSm9Do70FcuKgRgajutwRLi EQjHFMeHIDU0jLFVwFoZ9diWmOZDTan9uAMyYLUq+PsxajRwouiOqGnfFzcV/1to 2YqAomL52/4o3NO8AVDS/NGTaSselDboLEtfF5HCvw2U8nQqbrXpIBKdkwHTE2iU fQDt45WIsDSl45cW4bW41bhi25Ry4biJFBzRpHM3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTPevhfl1DF90MeHlREDCrJABPdkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwOGI3ODYwLWUzMzItNGVhNi04ODg5LTBiNzZiOGU4MjdhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvLgwDQYJKoZIhvcNAQELBQADggEBAASjL0t962EArLywtwerTSSWk+qq 5ib/b0F/hkHjLTcypY6Ap8T8QtMy4blM536heeENocwg9JZEK25kxvyZLDQWLuCz /TTiEnmDnSqM2Loy7D1EWsZa2a68ULd11Y+CAbusnqeO8mW/wioTZzrD/a25X+NZ JV+WgJR8dyMRnsrHKXJ3LhLw0k3ovtZqy/NvlQiYX5A0V63Kbr5juXB718NCV692 Trw1ISfglwwY4ODpkzfeTVnM0rbpXLNNOixupzcCpErgDfc8rlv+BJniGjaqdibk sQ6iJ0n4g1WCA0MSaDeK9D18IXDTWrYJph8OIcy1nf3Zu7Q7VBOqeYKw+is= -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:01 2025 by rpki-client