$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96336c26-3c72-4960-a7e3-2a96f0157e60.roa File: 96336c26-3c72-4960-a7e3-2a96f0157e60.roa (raw, json) Hash identifier: vADlff9LV8MGsSmyu7jBmzIWXFzn2gUcJpiqjfXpZGU= Subject key identifier: 67:C5:29:17:8E:A8:7E:11:0E:62:F0:0C:DA:C5:7B:5F:27:0B:28:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A81B4060A8C788847780D60BDF83F34548C8F27 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96336c26-3c72-4960-a7e3-2a96f0157e60.roa Signing time: Fri 18 Apr 2025 16:51:19 +0000 ROA not before: Fri 18 Apr 2025 16:51:19 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.227.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:81:b4:06:0a:8c:78:88:47:78:0d:60:bd:f8:3f:34:54:8c:8f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 16:51:19 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=9aec99ec72954a8b4ce957bd6b58ad0772f394fc42d0a33bd79f6125e34bd00e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:c5:39:c4:15:25:ce:8c:66:f9:49:f7:44: d4:b1:cd:24:4f:46:d2:65:2b:55:6b:cb:4c:f6:37: 05:de:34:7b:3e:b5:81:9d:68:a8:92:77:c8:8d:7b: 03:a6:fe:a8:ea:88:8b:a0:e2:e3:78:d0:d2:b2:63: 76:11:93:ca:ab:e5:42:c0:27:e8:8a:bf:c2:e0:53: fa:62:45:f7:c0:f5:fe:a2:4c:5a:be:e5:7c:81:73: c4:63:4e:0f:2c:51:3f:47:de:4d:ac:6f:6e:ee:06: 2f:3d:1f:4e:e1:a3:27:bf:e2:8f:1b:94:fd:f9:1c: 63:ae:6e:79:e1:b4:05:24:58:8f:f0:1a:aa:1c:f7: a8:33:1e:43:6f:9a:5b:9d:5c:fb:a9:c3:5b:06:0d: b3:0b:66:c0:0b:1a:eb:74:cb:3c:86:68:b3:30:18: cd:f1:61:d1:ff:2d:d7:72:e8:ac:64:df:f7:d5:83: d2:33:21:73:ea:64:d0:bf:14:e6:15:76:e7:13:f1: 58:9d:c8:91:7a:12:10:5b:8a:e9:3b:c9:56:1a:9e: f6:5d:a3:88:3f:af:11:16:8b:37:4d:6c:92:80:c9: e2:2f:e8:d6:90:58:8f:57:9e:dd:46:c0:25:b7:9c: 4b:04:94:1f:37:04:3b:cd:f8:88:7b:4e:9b:7a:e0: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C5:29:17:8E:A8:7E:11:0E:62:F0:0C:DA:C5:7B:5F:27:0B:28:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96336c26-3c72-4960-a7e3-2a96f0157e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.227.240.0/20 Signature Algorithm: sha256WithRSAEncryption 68:78:9b:cb:0d:35:a4:bc:cd:dc:25:d4:df:84:7e:98:81:52: 83:46:91:f4:c5:b1:4c:45:93:19:b3:b8:6a:4c:49:db:37:5d: 93:14:f8:49:a4:c8:60:36:b6:88:2e:65:70:bc:41:84:f6:cd: c7:67:13:f9:0e:fa:78:28:d2:c6:b9:28:af:92:ae:39:75:be: ab:ce:3d:8c:15:63:2f:62:30:cb:cf:2b:b2:f4:6a:34:27:d4: 7f:89:c4:bd:7d:95:3b:4d:53:e2:42:f8:6b:bd:f3:e5:d0:ac: 5e:bc:bd:f7:b6:40:0e:16:d7:34:59:80:64:fc:19:16:c2:20: 7b:b7:82:49:9e:eb:7d:e8:37:e3:48:67:71:03:33:8c:25:3d: 9a:0c:06:02:5f:6d:b3:43:c8:25:4c:d4:95:94:f6:3f:cb:8a: e8:d8:98:e0:a7:b0:21:dd:47:18:fa:4c:2e:32:c8:46:2c:71: 85:48:7d:5a:ac:d7:c5:1a:ea:7a:85:da:f0:5a:b2:55:57:9c: 41:84:67:33:78:ae:2d:ef:09:a7:ef:70:56:6d:32:98:4b:39: 52:be:6d:dc:89:71:c7:51:60:b6:40:b6:57:1c:b2:4c:5f:8c: 7c:5d:a4:7f:96:76:cb:2c:fe:cd:60:15:e4:5d:3a:e5:43:8a: df:05:95:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSoG0BgqMeIhHeA1gvfg/NFSMjycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTY1MTE5WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWVjOTllYzcyOTU0YThiNGNlOTU3YmQ2YjU4YWQwNzcy ZjM5NGZjNDJkMGEzM2JkNzlmNjEyNWUzNGJkMDBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiKMU5xBUlzoxm+Un3RNSxzSRPRtJlK1Vry0z2NwXeNHs+ tYGdaKiSd8iNewOm/qjqiIug4uN40NKyY3YRk8qr5ULAJ+iKv8LgU/piRffA9f6i TFq+5XyBc8RjTg8sUT9H3k2sb27uBi89H07hoye/4o8blP35HGOubnnhtAUkWI/w Gqoc96gzHkNvmludXPupw1sGDbMLZsALGut0yzyGaLMwGM3xYdH/Lddy6Kxk3/fV g9IzIXPqZNC/FOYVducT8VidyJF6EhBbiuk7yVYanvZdo4g/rxEWizdNbJKAyeIv 6NaQWI9Xnt1GwCW3nEsElB83BDvN+Ih7Tpt64OVnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ8UpF46ofhEOYvAM2sV7XycLKG4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2MzM2YzI2LTNjNzItNDk2MC1hN2UzLTJhOTZmMDE1N2U2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ24/AwDQYJKoZIhvcNAQELBQADggEBAGh4m8sNNaS8zdwl1N+EfpiBUoNG kfTFsUxFkxmzuGpMSds3XZMU+EmkyGA2toguZXC8QYT2zcdnE/kO+ngo0sa5KK+S rjl1vqvOPYwVYy9iMMvPK7L0ajQn1H+JxL19lTtNU+JC+Gu98+XQrF68vfe2QA4W 1zRZgGT8GRbCIHu3gkme633oN+NIZ3EDM4wlPZoMBgJfbbNDyCVM1JWU9j/LiujY mOCnsCHdRxj6TC4yyEYscYVIfVqs18Ua6nqF2vBaslVXnEGEZzN4ri3vCafvcFZt MphLOVK+bdyJccdRYLZAtlccskxfjHxdpH+Wdsss/s1gFeRdOuVDit8FlR4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:47:00 2025 by rpki-client