$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d26ee8-1818-4b37-b468-2ecf464723d9.roa File: 87d26ee8-1818-4b37-b468-2ecf464723d9.roa (raw, json) Hash identifier: 4JN8ovugGfIIYbe3eFZWlv5dqQY1Y1Jmw2/VxpANG3o= Subject key identifier: 0A:05:AA:CD:FF:BB:B9:B6:22:79:3C:AB:C4:F2:2D:61:1A:CC:55:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EE2CCF44AC67F873E05E3A0D46D542DB475604E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d26ee8-1818-4b37-b468-2ecf464723d9.roa Signing time: Tue 15 Apr 2025 00:50:42 +0000 ROA not before: Tue 15 Apr 2025 00:50:42 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e2:cc:f4:4a:c6:7f:87:3e:05:e3:a0:d4:6d:54:2d:b4:75:60:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 15 00:50:42 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=e27f372f176197b714934e0a21bb43eb6ab165d50db302da2759aa94e0924bec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:0f:b8:41:5a:8c:22:d3:d9:f6:6a:3a:4e: 71:4f:65:9a:f5:26:0b:95:20:02:54:8f:cf:db:3e: 0d:79:48:55:78:60:2d:43:7d:81:17:18:60:83:25: 18:4d:08:8c:90:dc:f3:ba:e1:5a:cf:11:7e:a3:02: 19:64:92:c5:e6:43:09:9e:95:78:1c:fd:3a:de:e9: a5:3b:9d:55:f1:55:13:4c:1e:c8:b3:17:06:9e:e1: 3b:a3:ea:64:45:34:a7:68:46:90:7e:7e:b6:67:78: 39:b7:7b:c7:87:60:02:05:d1:dc:e3:4b:d7:3a:7c: 00:af:f0:fb:83:51:13:76:ae:09:18:c6:3b:bb:79: 20:b2:a3:ee:a5:d3:5e:32:a6:fa:a0:21:cc:b6:e2: ef:51:f7:53:87:55:4c:61:32:ec:32:5f:6b:50:15: 69:9d:18:e4:0b:f6:96:21:24:d9:ea:a8:e6:dc:94: ef:5d:01:5e:7b:85:d8:7e:b4:55:e7:c9:a6:ad:56: 7b:88:b3:62:c2:b8:72:ba:d9:05:87:f9:79:f2:80: ae:a0:0b:f7:ed:82:ac:55:28:ed:e1:05:c0:21:5b: c6:69:c5:1b:16:62:e5:44:27:3d:44:a5:3a:16:ee: a1:99:28:34:a5:bc:9d:87:8a:80:61:f4:8a:8a:aa: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:AA:CD:FF:BB:B9:B6:22:79:3C:AB:C4:F2:2D:61:1A:CC:55:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87d26ee8-1818-4b37-b468-2ecf464723d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.136.0/23 Signature Algorithm: sha256WithRSAEncryption 86:41:7e:70:7f:58:d6:85:a8:db:52:b9:44:19:73:29:9f:75: 95:79:ec:7e:7f:6d:28:e0:fa:cd:c0:8b:46:a8:da:6c:7d:43: 00:55:80:e1:8d:66:00:6e:f7:fe:6e:79:ab:26:6f:41:c7:5a: 85:31:a6:24:c0:27:0e:1a:fb:e6:3c:64:27:44:59:e0:a8:03: 13:6e:35:b7:2e:5a:fd:94:43:69:fc:8f:03:74:72:a0:46:1e: 45:81:c5:1f:b3:8f:43:a0:8f:ea:7b:bb:d2:a1:98:ac:a3:59: a6:aa:20:9e:45:3e:72:27:db:90:b3:61:f5:93:f3:ce:43:da: b6:68:36:99:b5:50:c7:b7:ee:9c:e0:4a:73:2f:bf:c3:96:97: 66:ba:b3:4f:37:e2:ca:6b:44:de:04:73:51:c9:25:29:a2:ee: 44:57:69:29:17:b9:c3:82:30:26:12:36:dd:f7:a6:54:79:8b: ca:52:76:f1:ce:1e:cb:16:22:1a:67:bc:a0:97:fa:79:ed:bc: 9b:87:bc:92:75:2a:ca:85:01:9c:c9:47:66:2f:1e:a4:07:d2: 5d:32:ac:37:10:1c:2f:e4:2d:c0:63:d4:e2:11:05:f5:7f:cf: 48:a7:04:43:72:9b:27:06:71:5e:34:29:f7:1c:d8:f1:7a:e1: 06:f4:b0:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTuLM9ErGf4c+BeOg1G1ULbR1YE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE1MDA1MDQyWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjdmMzcyZjE3NjE5N2I3MTQ5MzRlMGEyMWJiNDNlYjZh YjE2NWQ1MGRiMzAyZGEyNzU5YWE5NGUwOTI0YmVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5hQ+4QVqMItPZ9mo6TnFPZZr1JguVIAJUj8/bPg15SFV4 YC1DfYEXGGCDJRhNCIyQ3PO64VrPEX6jAhlkksXmQwmelXgc/Tre6aU7nVXxVRNM HsizFwae4Tuj6mRFNKdoRpB+frZneDm3e8eHYAIF0dzjS9c6fACv8PuDURN2rgkY xju7eSCyo+6l014ypvqgIcy24u9R91OHVUxhMuwyX2tQFWmdGOQL9pYhJNnqqObc lO9dAV57hdh+tFXnyaatVnuIs2LCuHK62QWH+XnygK6gC/ftgqxVKO3hBcAhW8Zp xRsWYuVEJz1EpToW7qGZKDSlvJ2HioBh9IqKqnjnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCgWqzf+7ubYieTyrxPItYRrMVVUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3ZDI2ZWU4LTE4MTgtNGIzNy1iNDY4LTJlY2Y0NjQ3MjNkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIgwDQYJKoZIhvcNAQELBQADggEBAIZBfnB/WNaFqNtSuUQZcymfdZV5 7H5/bSjg+s3Ai0ao2mx9QwBVgOGNZgBu9/5ueasmb0HHWoUxpiTAJw4a++Y8ZCdE WeCoAxNuNbcuWv2UQ2n8jwN0cqBGHkWBxR+zj0Ogj+p7u9KhmKyjWaaqIJ5FPnIn 25CzYfWT885D2rZoNpm1UMe37pzgSnMvv8OWl2a6s0834sprRN4Ec1HJJSmi7kRX aSkXucOCMCYSNt33plR5i8pSdvHOHssWIhpnvKCX+nntvJuHvJJ1KsqFAZzJR2Yv HqQH0l0yrDcQHC/kLcBj1OIRBfV/z0inBENymycGcV40Kfcc2PF64Qb0sEk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:13 2025 by rpki-client