$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8909cac8-15b9-4344-9abc-048662d1c65f.roa File: 8909cac8-15b9-4344-9abc-048662d1c65f.roa (raw, json) Hash identifier: /PYDnLt6bCLb+4YQ7Bvz7q/9EIQariRp1kXyiq6OaYk= Subject key identifier: 0B:9F:4F:CB:8E:A3:DF:53:C9:7D:41:B2:81:57:F4:E2:CC:2F:9F:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F1892D87C718E79FD95F8F1583655391A387078 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8909cac8-15b9-4344-9abc-048662d1c65f.roa Signing time: Fri 25 Apr 2025 15:41:49 +0000 ROA not before: Fri 25 Apr 2025 15:41:49 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.244.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:18:92:d8:7c:71:8e:79:fd:95:f8:f1:58:36:55:39:1a:38:70:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:41:49 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=dfa723a9b8fb622141897a599d8629ecc615cc14341be8dca1ecd94745f30c13, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:10:81:42:75:1d:da:e6:23:85:e4:0f:b1: 83:9f:04:ad:61:49:23:75:7d:0a:f7:64:f0:48:19: ce:ae:c3:5d:cd:b8:4a:09:45:a1:af:45:6d:1f:2f: 85:6d:7d:98:9b:89:73:e8:05:36:60:2d:6e:d8:0d: 09:28:85:37:49:d7:79:cc:a7:41:a5:88:1b:49:08: 20:a2:4a:70:c1:82:eb:36:c2:6f:3e:6a:ad:e3:d5: c8:90:e8:99:87:08:81:a9:aa:ac:5d:74:84:a0:9b: 3e:fd:cd:61:1d:85:40:1e:81:5c:70:f5:a0:13:b4: 08:f5:42:56:7d:63:9a:fd:57:ee:09:28:9d:d8:71: 7b:5c:ae:05:32:95:7d:14:f5:0c:06:5a:c4:ab:55: f0:a1:cb:57:fe:e7:af:05:6f:0b:68:d4:bf:9d:b9: 61:e0:9d:f6:86:3d:65:c6:77:78:7e:af:01:87:87: 12:f3:c0:29:8a:9c:9d:72:6c:22:da:e2:bb:62:dc: bb:9b:69:8d:e8:a5:a3:76:8c:67:89:25:24:58:09: 6b:2e:2a:4c:b6:b1:ba:1b:5a:8a:17:1a:07:fd:45: 34:0b:ca:69:45:b3:1f:5d:1f:de:c2:96:51:18:f8: d4:f0:00:36:88:db:fa:ff:39:ba:3e:fe:77:bb:c6: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9F:4F:CB:8E:A3:DF:53:C9:7D:41:B2:81:57:F4:E2:CC:2F:9F:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8909cac8-15b9-4344-9abc-048662d1c65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.244.64.0/18 Signature Algorithm: sha256WithRSAEncryption 5f:85:d0:f4:9a:cf:12:b8:ca:fa:60:74:50:9f:66:c6:4e:0a: ff:e6:2e:cb:0a:71:8a:72:63:bc:e3:e5:90:32:52:a6:4d:a4: 7f:06:50:c0:91:be:5f:fa:7c:e3:e6:3d:08:5c:a5:cb:24:89: c0:dd:ac:23:7e:51:76:49:52:61:fb:42:a7:ab:89:2f:f4:a9: 8e:45:00:dc:34:b4:42:78:d4:58:f5:49:c5:77:29:1b:a3:15: 2b:0a:8b:64:b2:33:4f:0e:81:8f:47:b5:f5:5e:0c:ef:3b:c9: 52:a6:58:b4:ae:af:9d:6c:98:fa:ce:a1:db:6e:72:40:10:38: f4:f1:d7:53:57:cc:8d:06:23:bf:80:fe:d0:02:a9:37:82:af: d0:88:fe:35:83:51:f5:89:65:65:93:02:dd:f7:f9:c6:52:ca: d5:42:f7:b4:68:dc:1e:f2:0f:bc:e9:65:3a:94:bd:cd:18:bb: d9:30:cc:af:21:08:0f:45:c5:52:24:6f:62:1a:64:13:63:f9: 19:07:6b:27:1b:c8:7f:bb:e5:09:bb:19:4e:1e:6b:1d:e7:79: 6c:a1:62:c9:28:52:93:ef:64:c8:7b:12:ab:f8:3c:ee:a3:42: c1:7c:67:bd:a6:a3:07:9d:de:f0:32:2d:b0:c8:f5:8e:46:b8: ed:43:e9:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHxiS2Hxxjnn9lfjxWDZVORo4cHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTU0MTQ5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmE3MjNhOWI4ZmI2MjIxNDE4OTdhNTk5ZDg2MjllY2M2 MTVjYzE0MzQxYmU4ZGNhMWVjZDk0NzQ1ZjMwYzEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMQRCBQnUd2uYjheQPsYOfBK1hSSN1fQr3ZPBIGc6uw13N uEoJRaGvRW0fL4VtfZibiXPoBTZgLW7YDQkohTdJ13nMp0GliBtJCCCiSnDBgus2 wm8+aq3j1ciQ6JmHCIGpqqxddISgmz79zWEdhUAegVxw9aATtAj1QlZ9Y5r9V+4J KJ3YcXtcrgUylX0U9QwGWsSrVfChy1f+568Fbwto1L+duWHgnfaGPWXGd3h+rwGH hxLzwCmKnJ1ybCLa4rti3LubaY3opaN2jGeJJSRYCWsuKky2sbobWooXGgf9RTQL ymlFsx9dH97CllEY+NTwADaI2/r/Obo+/ne7xs6LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC59Py46j31PJfUGygVf04swvn2IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5MDljYWM4LTE1YjktNDM0NC05YWJjLTA0ODY2MmQxYzY1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYN9EAwDQYJKoZIhvcNAQELBQADggEBAF+F0PSazxK4yvpgdFCfZsZOCv/m LssKcYpyY7zj5ZAyUqZNpH8GUMCRvl/6fOPmPQhcpcskicDdrCN+UXZJUmH7Qqer iS/0qY5FANw0tEJ41Fj1ScV3KRujFSsKi2SyM08OgY9HtfVeDO87yVKmWLSur51s mPrOodtuckAQOPTx11NXzI0GI7+A/tACqTeCr9CI/jWDUfWJZWWTAt33+cZSytVC 97Ro3B7yD7zpZTqUvc0Yu9kwzK8hCA9FxVIkb2IaZBNj+RkHaycbyH+75Qm7GU4e ax3neWyhYskoUpPvZMh7Eqv4PO6jQsF8Z72mowed3vAyLbDI9Y5GuO1D6Vg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:52 2025 by rpki-client