$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bfb24ea-a4ab-4219-960d-d69263c98e98.roa File: 8bfb24ea-a4ab-4219-960d-d69263c98e98.roa (raw, json) Hash identifier: Cv5tIhOw2lNkI9i/TxdluSlKIbl+/rJ2PrXENQ1aeDo= Subject key identifier: 84:D8:A1:A2:31:3E:C7:31:A3:F5:C1:5D:29:CB:C4:7F:0A:CC:CC:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FBA8A778EDDE8E254C9E7BD4C9CE419A31430CC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bfb24ea-a4ab-4219-960d-d69263c98e98.roa Signing time: Fri 18 Apr 2025 15:10:55 +0000 ROA not before: Fri 18 Apr 2025 15:10:55 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.145.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ba:8a:77:8e:dd:e8:e2:54:c9:e7:bd:4c:9c:e4:19:a3:14:30:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:10:55 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=af2f864c562398f80a552176034e1edbb772701ad84df5fc44593b48e31536da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:40:7a:f8:63:ab:c6:5f:29:f9:c4:5f:99: 51:d7:cb:59:b5:cf:1b:82:87:86:33:37:5c:e0:b5: ee:4e:28:e4:35:b4:58:52:3b:e2:9c:91:ec:b8:60: e0:8c:6c:2f:04:d2:d3:b3:b3:33:8d:03:85:6e:15: a3:3b:9a:be:34:be:05:61:71:92:25:c2:b3:f0:bd: 90:f4:73:e7:8d:8f:84:77:3b:3b:78:e4:11:42:72: 50:e4:94:c4:92:82:31:b2:9a:a4:6e:51:4f:dd:d3: 14:35:11:e9:04:be:35:49:ff:4c:ae:7f:6f:92:2a: 0f:f0:70:0e:dd:0c:a7:c3:1f:4b:ef:5b:66:70:8c: e2:d0:eb:20:40:b5:fb:bf:02:a2:7f:fa:ef:93:d3: b3:af:74:80:aa:7f:3c:1b:ba:ee:14:40:aa:f6:12: 9f:c1:de:bd:5d:0f:69:31:38:31:81:49:6a:4c:a3: c6:d5:36:15:b4:0d:13:7c:8a:84:a7:10:7d:c3:de: cd:cc:9b:f1:40:be:52:3b:7d:ee:5f:a6:99:ba:d4: f0:84:a8:7d:a6:48:3b:9e:d9:ec:43:95:35:96:02: 79:6f:78:73:de:fa:8c:ec:2e:9b:0e:f8:6e:5c:14: 4b:71:d1:23:36:4a:3a:1c:d5:bb:4e:d8:f0:af:2e: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D8:A1:A2:31:3E:C7:31:A3:F5:C1:5D:29:CB:C4:7F:0A:CC:CC:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bfb24ea-a4ab-4219-960d-d69263c98e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.145.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9f:2e:c3:b0:58:b1:11:76:66:59:f9:cc:f1:4e:ce:50:d5:eb: 8e:62:2e:87:30:96:9d:a5:79:bc:46:58:65:57:7b:94:f2:12: fb:02:75:aa:bc:7b:fd:c0:27:31:cf:63:7f:aa:b8:a9:17:8b: 24:c9:c4:87:34:9f:7a:dd:15:2e:50:67:53:b2:6c:eb:63:60: 34:84:62:99:a4:87:c2:75:8b:fe:91:f1:81:67:51:e8:0d:91: 8a:00:42:5c:47:15:5e:3a:1c:db:61:c5:9b:8a:93:7a:c7:7f: 44:83:a1:80:7b:a1:2c:85:a8:07:9f:92:58:8b:1b:4a:aa:9d: a3:f9:d1:c4:75:f6:a2:36:07:1b:d2:f3:eb:34:4a:4a:ea:b1: 2a:e0:0e:c7:24:9e:2f:f6:a2:02:aa:87:28:98:ec:22:84:69: cf:0b:af:e9:aa:5a:9c:18:d0:6b:81:7c:73:c7:ff:bf:db:fe: e0:da:85:b6:64:be:5c:bd:48:25:73:b8:15:b7:a8:df:f3:3f: 8e:b7:af:3f:ea:c7:22:eb:55:7a:45:63:34:2f:c7:f1:41:1c: 82:4f:97:0f:61:bc:06:e5:de:e7:b5:cd:34:1f:8a:25:ff:4e: 52:8a:27:9c:54:0b:ff:f4:44:ce:b5:a4:33:d9:a0:16:6c:37: cc:57:67:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP7qKd47d6OJUyee9TJzkGaMUMMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUxMDU1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjJmODY0YzU2MjM5OGY4MGE1NTIxNzYwMzRlMWVkYmI3 NzI3MDFhZDg0ZGY1ZmM0NDU5M2I0OGUzMTUzNmRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUg0B6+GOrxl8p+cRfmVHXy1m1zxuCh4YzN1zgte5OKOQ1 tFhSO+Kckey4YOCMbC8E0tOzszONA4VuFaM7mr40vgVhcZIlwrPwvZD0c+eNj4R3 Ozt45BFCclDklMSSgjGymqRuUU/d0xQ1EekEvjVJ/0yuf2+SKg/wcA7dDKfDH0vv W2ZwjOLQ6yBAtfu/AqJ/+u+T07OvdICqfzwbuu4UQKr2Ep/B3r1dD2kxODGBSWpM o8bVNhW0DRN8ioSnEH3D3s3Mm/FAvlI7fe5fppm61PCEqH2mSDue2exDlTWWAnlv eHPe+ozsLpsO+G5cFEtx0SM2Sjoc1btO2PCvLrfNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhNihojE+xzGj9cFdKcvEfwrMzBowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhiZmIyNGVhLWE0YWItNDIxOS05NjBkLWQ2OTI2M2M5OGU5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2kUAwDQYJKoZIhvcNAQELBQADggEBAJ8uw7BYsRF2Zln5zPFOzlDV645i Locwlp2lebxGWGVXe5TyEvsCdaq8e/3AJzHPY3+quKkXiyTJxIc0n3rdFS5QZ1Oy bOtjYDSEYpmkh8J1i/6R8YFnUegNkYoAQlxHFV46HNthxZuKk3rHf0SDoYB7oSyF qAefkliLG0qqnaP50cR19qI2BxvS8+s0SkrqsSrgDsckni/2ogKqhyiY7CKEac8L r+mqWpwY0GuBfHPH/7/b/uDahbZkvly9SCVzuBW3qN/zP463rz/qxyLrVXpFYzQv x/FBHIJPlw9hvAbl3ue1zTQfiiX/TlKKJ5xUC//0RM61pDPZoBZsN8xXZxI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:06 2025 by rpki-client