$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b587ca-7d62-409a-a3ed-1158ea128f89.roa File: 84b587ca-7d62-409a-a3ed-1158ea128f89.roa (raw, json) Hash identifier: AB58k7R2daVjvxyWx4Vlncuwrc9GMkkU6Ua2uIEyDeA= Subject key identifier: FA:CF:25:2B:DC:9C:66:E0:F2:84:92:0E:6E:7E:1B:0F:7D:81:10:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09489E90536C501FD1EF14F445E42A246C083E09 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b587ca-7d62-409a-a3ed-1158ea128f89.roa Signing time: Fri 18 Apr 2025 15:51:13 +0000 ROA not before: Fri 18 Apr 2025 15:51:13 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:48:9e:90:53:6c:50:1f:d1:ef:14:f4:45:e4:2a:24:6c:08:3e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:51:13 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=ac7a4d23157c51a3d7496a6d4df0a0a54fc9501a01daa0cb3d0750fe410ce648, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:df:c1:2e:9c:a4:22:44:ac:d8:a5:6f:3a: ec:c0:f3:3c:e9:a8:c4:b2:e1:93:1c:8f:6b:46:81: 7c:ef:9c:c2:68:aa:0a:3b:0e:19:f1:0c:b3:2c:af: cb:32:a4:78:f0:0c:52:95:62:fd:c2:20:cb:a3:ad: 0b:f5:0a:4b:a0:8d:34:8e:f2:07:90:eb:f0:66:58: 38:2a:29:03:10:4e:ae:70:93:6b:cc:9c:32:7e:ee: 62:64:77:c0:4b:f3:17:8a:62:a5:88:87:6b:b5:31: 78:b4:63:5b:2d:d8:2a:0f:4a:7a:32:6a:75:24:1f: d2:c0:84:2b:d4:74:90:6b:1c:0c:a2:07:c3:40:50: c5:ce:1e:ae:94:8a:fe:01:69:1a:87:b4:4b:cf:28: 09:34:52:4c:9f:70:c9:eb:d3:ec:f7:3d:6e:d9:71: ef:f9:a6:e5:be:3a:af:9a:d5:9c:6d:f4:f2:10:b1: 79:34:f7:2f:17:56:1a:e1:af:86:45:53:19:c6:4c: 5e:dc:f8:6e:b7:62:a0:ed:a3:3d:23:55:88:93:60: eb:1d:48:0e:78:c1:46:fb:58:1c:38:8f:84:c6:0b: e7:b5:b6:bd:81:88:89:19:5a:dc:49:82:c9:e9:01: 1f:2e:ca:77:42:7c:89:cb:3d:38:a9:72:7b:fa:20: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CF:25:2B:DC:9C:66:E0:F2:84:92:0E:6E:7E:1B:0F:7D:81:10:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b587ca-7d62-409a-a3ed-1158ea128f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.40.0/21 Signature Algorithm: sha256WithRSAEncryption 49:54:be:8f:54:12:e1:b0:f1:ae:5a:d3:0b:2d:79:26:a1:c1: fe:db:4e:9a:7d:20:64:a8:fd:42:06:3b:53:49:35:1c:1a:33: dd:fb:f5:2f:75:2b:ae:cd:72:06:39:31:bd:2f:57:f2:b2:c6: 1e:8e:40:3b:ea:57:77:6b:f4:ba:89:73:55:8b:21:39:2b:46: 95:b0:18:d4:11:27:99:1e:1c:59:c6:7d:49:22:6d:3c:ba:af: ed:c3:bf:e0:84:74:a1:e5:84:84:dc:df:c4:39:5d:8d:b5:60: 5b:e6:92:ce:83:f7:80:89:a6:1c:cb:25:13:30:dc:ed:13:67: f7:7e:66:d5:6f:a5:1d:d1:ad:44:ec:8a:8b:1b:cc:33:38:cb: 15:96:96:ea:08:01:13:28:bf:3d:58:00:83:f6:7b:6a:9d:45: 29:ad:47:ce:98:16:04:95:28:19:fb:01:f2:fb:5e:3a:e4:a1: 98:76:14:62:dc:8b:02:d2:8d:65:99:6b:8d:a6:9f:1c:a8:21: 5f:34:3c:2f:0f:e1:88:2b:b9:13:42:84:76:93:09:3c:49:61: dc:52:3d:a3:11:d2:10:31:17:bf:7c:c4:e9:97:8b:a5:33:4f: bc:f2:7a:b7:92:29:e5:5d:d3:f7:e3:b6:ba:59:55:d2:ea:5a: 97:2e:40:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCUiekFNsUB/R7xT0ReQqJGwIPgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTU1MTEzWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzdhNGQyMzE1N2M1MWEzZDc0OTZhNmQ0ZGYwYTBhNTRm Yzk1MDFhMDFkYWEwY2IzZDA3NTBmZTQxMGNlNjQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZsd/BLpykIkSs2KVvOuzA8zzpqMSy4ZMcj2tGgXzvnMJo qgo7DhnxDLMsr8sypHjwDFKVYv3CIMujrQv1CkugjTSO8geQ6/BmWDgqKQMQTq5w k2vMnDJ+7mJkd8BL8xeKYqWIh2u1MXi0Y1st2CoPSnoyanUkH9LAhCvUdJBrHAyi B8NAUMXOHq6Uiv4BaRqHtEvPKAk0UkyfcMnr0+z3PW7Zce/5puW+Oq+a1Zxt9PIQ sXk09y8XVhrhr4ZFUxnGTF7c+G63YqDtoz0jVYiTYOsdSA54wUb7WBw4j4TGC+e1 tr2BiIkZWtxJgsnpAR8uyndCfInLPTipcnv6IL2lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+s8lK9ycZuDyhJIObn4bD32BEEwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YjU4N2NhLTdkNjItNDA5YS1hM2VkLTExNThlYTEyOGY4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2xSgwDQYJKoZIhvcNAQELBQADggEBAElUvo9UEuGw8a5a0wsteSahwf7b Tpp9IGSo/UIGO1NJNRwaM9379S91K67NcgY5Mb0vV/Kyxh6OQDvqV3dr9LqJc1WL ITkrRpWwGNQRJ5keHFnGfUkibTy6r+3Dv+CEdKHlhITc38Q5XY21YFvmks6D94CJ phzLJRMw3O0TZ/d+ZtVvpR3RrUTsiosbzDM4yxWWluoIARMovz1YAIP2e2qdRSmt R86YFgSVKBn7AfL7XjrkoZh2FGLciwLSjWWZa42mnxyoIV80PC8P4YgruRNChHaT CTxJYdxSPaMR0hAxF798xOmXi6UzT7zyereSKeVd0/fjtrpZVdLqWpcuQOY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:14 2025 by rpki-client