$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa File: 84c300e0-b200-441e-8084-8448b3947e9a.roa (raw, json) Hash identifier: k5LacBdPrlbyXJXM4YCyBKygYC12wy/+AMszRphGcxU= Subject key identifier: 56:7A:28:22:52:29:6C:B3:31:EA:10:ED:AC:38:D4:FB:2E:D2:1A:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BFFF2A997D43921397C44A1326ECA7A1474858C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa Signing time: Fri 18 Apr 2025 16:41:05 +0000 ROA not before: Fri 18 Apr 2025 16:41:05 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.56.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ff:f2:a9:97:d4:39:21:39:7c:44:a1:32:6e:ca:7a:14:74:85:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 16:41:05 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=aacaa37b3adf853393f4e06580d35c803319d1b0ff4abf6f69126e1d41863044, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:cd:ff:b4:16:82:eb:33:fe:38:54:20:58: 28:c0:48:17:94:92:19:07:b5:af:13:84:6c:82:cc: 40:a9:2d:af:b3:a1:5f:99:9e:8c:02:e2:57:ef:46: 0a:5a:49:ea:16:fe:66:b1:0e:26:84:08:cb:d4:a5: b9:ea:2c:12:b2:95:43:26:e6:37:3c:e3:6a:11:2a: 2c:a2:f6:bc:04:1b:21:9f:21:4c:37:b5:ce:b1:73: f0:e9:40:c1:6e:3e:42:2b:e8:75:ac:52:0c:a9:b5: cb:03:dd:09:b1:1b:7a:57:cf:94:63:26:09:32:04: f0:5f:67:5c:29:7a:ac:0c:8d:0e:5e:3b:2a:6f:cd: 66:d1:5e:0a:09:d4:76:ac:29:bb:ef:f5:fa:e8:cb: 73:a0:47:74:8f:e4:cf:33:16:19:bb:bb:6d:cc:7d: 7d:79:3e:ec:65:3a:6f:8c:db:51:19:af:18:43:65: e5:42:11:8f:8a:de:c8:54:0e:af:fb:0d:d9:32:94: ef:6a:ad:58:01:cf:88:ab:e3:de:df:be:41:b4:9e: c3:e8:5a:50:03:02:fd:82:c0:2d:ea:9f:18:79:e3: 86:51:8a:53:7d:dd:cd:6f:65:c6:8f:93:9e:c4:38: dd:c7:cd:66:f8:02:8d:a7:97:6d:92:d5:74:d8:c6: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7A:28:22:52:29:6C:B3:31:EA:10:ED:AC:38:D4:FB:2E:D2:1A:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 14:14:35:7a:c0:45:03:b6:c7:75:1d:fb:53:18:e2:bc:dd:0b: 33:b6:79:23:f5:a2:11:64:9a:2c:7d:a4:d7:8d:9e:45:41:c1: ef:f9:ae:06:7e:93:4b:f7:81:df:26:2b:0f:d3:34:c3:b1:63: 85:25:32:1c:6c:8c:98:29:d7:9c:f1:9f:06:ac:b9:42:70:b4: 52:2f:fe:08:04:07:fc:71:80:d7:7c:26:45:53:b1:ad:52:93: 6e:5e:9a:94:bb:77:69:3c:36:c8:b8:a0:ac:16:51:52:e9:9f: 9c:08:92:05:c3:25:cd:c4:8b:37:34:86:36:8b:c5:bb:8f:ad: 49:16:72:f6:bc:a6:70:ac:9e:f8:ad:0c:0e:60:c2:b7:af:a1: 4d:f8:b6:8a:e2:b5:ed:83:a0:d9:26:56:8c:ed:9f:85:42:62: 68:17:91:c3:95:6f:8c:dd:58:3c:3e:75:a2:23:2f:59:91:a1: 28:b7:05:40:cd:05:cb:3b:ec:62:b9:23:75:bf:37:d9:55:d3: c4:28:0c:8d:b5:c9:27:d3:75:1c:88:b1:15:40:f3:b7:a4:44: 00:bb:24:72:81:66:ce:06:33:0e:54:84:58:38:e6:41:cd:10: da:d8:da:3d:03:20:5a:b7:3e:87:1c:e7:e9:47:12:3f:53:f8: d0:99:dc:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS//yqZfUOSE5fEShMm7KehR0hYwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTY0MTA1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWNhYTM3YjNhZGY4NTMzOTNmNGUwNjU4MGQzNWM4MDMz MTlkMWIwZmY0YWJmNmY2OTEyNmUxZDQxODYzMDQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Oc3/tBaC6zP+OFQgWCjASBeUkhkHta8ThGyCzECpLa+z oV+ZnowC4lfvRgpaSeoW/maxDiaECMvUpbnqLBKylUMm5jc842oRKiyi9rwEGyGf IUw3tc6xc/DpQMFuPkIr6HWsUgyptcsD3QmxG3pXz5RjJgkyBPBfZ1wpeqwMjQ5e OypvzWbRXgoJ1HasKbvv9froy3OgR3SP5M8zFhm7u23MfX15PuxlOm+M21EZrxhD ZeVCEY+K3shUDq/7DdkylO9qrVgBz4ir497fvkG0nsPoWlADAv2CwC3qnxh544ZR ilN93c1vZcaPk57EON3HzWb4Ao2nl22S1XTYxoBlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVnooIlIpbLMx6hDtrDjU+y7SGnIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YzMwMGUwLWIyMDAtNDQxZS04MDg0LTg0NDhiMzk0N2U5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA0ODANBgkqhkiG9w0BAQsFAAOCAQEAFBQ1esBFA7bHdR37UxjivN0LM7Z5 I/WiEWSaLH2k142eRUHB7/muBn6TS/eB3yYrD9M0w7FjhSUyHGyMmCnXnPGfBqy5 QnC0Ui/+CAQH/HGA13wmRVOxrVKTbl6alLt3aTw2yLigrBZRUumfnAiSBcMlzcSL NzSGNovFu4+tSRZy9rymcKye+K0MDmDCt6+hTfi2iuK17YOg2SZWjO2fhUJiaBeR w5VvjN1YPD51oiMvWZGhKLcFQM0FyzvsYrkjdb832VXTxCgMjbXJJ9N1HIixFUDz t6REALskcoFmzgYzDlSEWDjmQc0Q2tjaPQMgWrc+hxzn6UcSP1P40JncGQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:50:12 2025 by rpki-client