$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a367228-f31a-48de-af6c-039ddb95657c.roa File: 8a367228-f31a-48de-af6c-039ddb95657c.roa (raw, json) Hash identifier: xSuRjVP9qlDj3DCOLOVLqMfY7Wsjur+UVIUjaUEuOiA= Subject key identifier: 96:8C:D9:11:E6:3B:C8:8C:B0:32:A6:85:AF:32:4D:D9:ED:A6:F7:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 579C951F9353121C94BD066E15107B237882DDD3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a367228-f31a-48de-af6c-039ddb95657c.roa Signing time: Fri 18 Apr 2025 18:21:05 +0000 ROA not before: Fri 18 Apr 2025 18:21:05 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.248.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9c:95:1f:93:53:12:1c:94:bd:06:6e:15:10:7b:23:78:82:dd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 18:21:05 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=96722672a011c2fe3555e0aacfa53d015317b1148142680d72af512671a9953d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:0b:f4:aa:21:53:11:f4:64:10:ea:e1:4d: 99:a8:61:55:e7:0d:52:55:83:bc:0f:2c:c7:15:af: eb:c5:5d:bd:1e:c9:85:f5:03:0b:60:3c:dd:5f:58: fe:bf:55:6f:77:95:ae:c2:f2:a2:88:50:01:23:ff: ba:6b:77:4f:d5:6b:3d:a1:7c:4f:9e:61:23:9a:a1: 98:bf:8c:6c:11:06:aa:91:45:e2:87:22:e1:d2:15: 7a:62:f8:13:15:6f:2e:48:36:f6:74:46:d4:45:d7: 62:67:cf:c1:d6:a3:2e:5b:09:88:c5:2f:b4:b8:3a: c8:f0:77:b4:97:21:35:69:86:ae:14:3e:8b:a0:71: 81:23:03:fb:4c:ce:a7:4c:dc:b0:6e:b8:46:62:51: 79:e6:7c:70:46:bd:5e:4b:d9:64:92:51:f9:23:32: 69:7d:37:ea:fc:fa:63:3e:bd:e9:34:f1:39:a9:e2: 0f:80:af:84:b1:b2:eb:bb:c4:db:13:22:54:44:38: ca:f1:92:ee:a9:2b:0c:d0:30:ff:a5:8d:cf:f4:f2: 17:7b:2f:66:68:48:30:b2:ce:e0:9e:ed:00:4a:41: c4:24:ca:b8:39:05:b4:1b:0f:1a:34:02:bb:6e:41: 2f:68:d9:75:e3:fb:53:de:6e:11:36:2a:6b:73:80: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:D9:11:E6:3B:C8:8C:B0:32:A6:85:AF:32:4D:D9:ED:A6:F7:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a367228-f31a-48de-af6c-039ddb95657c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.248.128.0/17 Signature Algorithm: sha256WithRSAEncryption 28:05:7e:1f:2c:58:59:ac:53:fa:b0:7a:6a:e5:b0:c6:bd:f3: a9:4a:b0:7c:25:2e:0b:da:85:a1:e2:00:91:01:81:c9:08:68: dd:a2:d2:51:bd:c8:ac:0a:25:ae:59:fd:f5:28:46:d9:7e:e2: 46:82:31:98:b9:2b:a9:0c:e6:93:fd:5d:ef:75:5c:5a:04:da: 40:b2:8f:6c:40:62:be:8b:9e:e5:25:c7:44:09:43:a2:46:bb: f6:d3:e4:87:a0:9d:5f:69:e2:74:59:ba:82:50:26:a4:b3:6e: e2:ae:43:82:5c:45:47:a8:d2:4b:30:90:56:7e:e6:44:b6:0f: 74:86:ce:07:16:e2:36:4b:16:10:3b:7f:05:41:9a:1e:f4:59: 73:cb:53:ca:26:f6:48:81:90:e3:1a:0c:ac:6c:b3:6f:5a:89: 74:3e:fb:a1:e8:37:e4:ce:ba:ab:22:41:34:2d:f1:4e:77:c6: 45:08:f2:76:53:ef:00:55:bd:0d:70:52:1c:e5:99:6c:32:59: 63:b4:34:4e:b7:36:e3:5d:27:28:80:be:03:13:d5:ed:7e:77: 22:09:4b:24:76:8f:ec:e8:eb:75:66:4e:e4:bd:82:f7:b4:12: 31:0f:f0:6b:15:de:df:7d:05:1f:2b:b0:37:44:02:b8:48:b8: 95:02:b8:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV5yVH5NTEhyUvQZuFRB7I3iC3dMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTgyMTA1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjcyMjY3MmEwMTFjMmZlMzU1NWUwYWFjZmE1M2QwMTUz MTdiMTE0ODE0MjY4MGQ3MmFmNTEyNjcxYTk5NTNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh6gv0qiFTEfRkEOrhTZmoYVXnDVJVg7wPLMcVr+vFXb0e yYX1AwtgPN1fWP6/VW93la7C8qKIUAEj/7prd0/Vaz2hfE+eYSOaoZi/jGwRBqqR ReKHIuHSFXpi+BMVby5INvZ0RtRF12Jnz8HWoy5bCYjFL7S4Osjwd7SXITVphq4U PougcYEjA/tMzqdM3LBuuEZiUXnmfHBGvV5L2WSSUfkjMml9N+r8+mM+vek08Tmp 4g+Ar4Sxsuu7xNsTIlREOMrxku6pKwzQMP+ljc/08hd7L2ZoSDCyzuCe7QBKQcQk yrg5BbQbDxo0ArtuQS9o2XXj+1PebhE2KmtzgO9hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlozZEeY7yIywMqaFrzJN2e2m9zUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhMzY3MjI4LWYzMWEtNDhkZS1hZjZjLTAzOWRkYjk1NjU3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2+IAwDQYJKoZIhvcNAQELBQADggEBACgFfh8sWFmsU/qwemrlsMa986lK sHwlLgvahaHiAJEBgckIaN2i0lG9yKwKJa5Z/fUoRtl+4kaCMZi5K6kM5pP9Xe91 XFoE2kCyj2xAYr6LnuUlx0QJQ6JGu/bT5IegnV9p4nRZuoJQJqSzbuKuQ4JcRUeo 0kswkFZ+5kS2D3SGzgcW4jZLFhA7fwVBmh70WXPLU8om9kiBkOMaDKxss29aiXQ+ +6HoN+TOuqsiQTQt8U53xkUI8nZT7wBVvQ1wUhzlmWwyWWO0NE63NuNdJyiAvgMT 1e1+dyIJSyR2j+zo63VmTuS9gve0EjEP8GsV3t99BR8rsDdEArhIuJUCuKA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:26:55 2025 by rpki-client