$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa File: 97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa (raw, json) Hash identifier: z1ccMABLJCNHQJQdbE0LhyxRwJLSpySs0ntjIYxb+JM= Subject key identifier: D0:70:25:DB:AC:1B:8F:DE:4C:65:8D:4B:4B:CB:84:7A:57:DB:83:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56BA04A998786E64613808E4E1906C7E80D8B96C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa Signing time: Sat 26 Apr 2025 00:20:43 +0000 ROA not before: Sat 26 Apr 2025 00:20:43 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 167.149.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ba:04:a9:98:78:6e:64:61:38:08:e4:e1:90:6c:7e:80:d8:b9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 26 00:20:43 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=df3807cceb4653b512a26e4fb72d48404296aa5c9a5cea2a36974f29a8fd2092, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:e9:4c:4e:ca:57:49:b4:94:b6:71:58:52: b6:b5:84:29:c6:63:41:77:c9:b0:56:42:ba:c4:e4: 3b:34:cd:4c:32:da:45:d4:77:7c:b9:52:54:aa:40: 75:a4:ae:c5:92:57:bd:83:79:50:f1:df:09:33:8e: a4:c5:82:8e:ac:d3:61:8d:9c:76:db:7b:4a:a6:7c: 4d:fc:05:73:09:dc:ea:a3:f2:04:8f:cc:11:fc:bf: a8:a5:4f:83:c2:d2:d0:f2:b9:f1:50:f3:b7:e8:bb: ce:80:b7:26:30:87:de:ac:12:9c:18:6b:0e:b5:b6: e5:ba:c9:f9:af:a0:22:fc:ad:63:a6:ff:b0:ed:54: f4:32:f7:b2:1e:8f:1a:ed:cf:11:de:f9:66:fa:dd: fd:1e:69:ca:5a:bc:2a:9b:c7:6f:70:7d:c3:1c:cc: 4c:ff:07:7e:45:de:1f:c6:c3:7f:6d:15:e1:ea:a2: c1:42:03:40:23:07:4c:b3:60:8a:6d:17:00:38:0c: fc:55:0e:22:8a:9c:aa:9f:ff:48:5d:53:d0:2c:6f: 7e:07:2a:a9:41:10:d9:b4:a1:c2:2e:4a:2b:5b:27: ac:89:04:7c:06:21:58:24:af:59:d4:ea:47:5f:8c: a5:a1:bd:7c:94:64:c3:04:83:d1:77:63:56:18:78: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:70:25:DB:AC:1B:8F:DE:4C:65:8D:4B:4B:CB:84:7A:57:DB:83:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.149.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:b8:7a:a8:18:c1:37:da:16:7f:b0:07:d4:c4:36:75:c6:ba: 06:77:1f:80:62:57:d4:a6:a0:66:9a:74:73:86:88:50:ad:02: bc:54:57:b5:95:8a:26:36:7d:8a:0f:0d:ac:e5:3a:ef:53:e3: 9a:22:6e:0c:6a:dd:cf:af:92:0a:e8:8f:02:8f:78:c5:21:18: f3:42:b0:3d:09:ea:4b:9c:50:1c:f0:69:85:1a:af:1c:ed:c8: 12:64:23:a9:74:ac:7e:bd:be:f3:af:2e:b7:7d:5d:cf:1d:a4: 05:4e:b0:58:e5:1c:b6:1c:13:db:bd:12:9d:05:db:89:10:81: 0c:bd:9c:86:7f:6a:86:c0:2c:8d:76:6d:1a:d0:62:f5:26:f7: f2:95:2f:f4:8d:e4:88:69:2a:dc:bb:47:53:6b:55:e6:3c:45: b2:fe:27:ac:3c:41:c5:c3:31:a8:59:f3:87:b2:25:d4:2f:26: a8:14:0d:d6:71:1e:67:62:d9:0e:9e:5f:37:3e:12:31:6f:a5: 5d:34:55:02:75:80:de:55:6b:4f:fe:a3:b9:31:ec:29:58:da: 02:fd:2d:69:62:e9:88:0d:cf:79:68:e5:5a:a8:20:60:d8:44: fe:d4:05:83:1d:2c:1d:9b:06:1a:86:da:7d:a3:04:f9:a0:f1: 6e:10:75:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVroEqZh4bmRhOAjk4ZBsfoDYuWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI2MDAyMDQzWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjM4MDdjY2ViNDY1M2I1MTJhMjZlNGZiNzJkNDg0MDQy OTZhYTVjOWE1Y2VhMmEzNjk3NGYyOWE4ZmQyMDkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDekulMTspXSbSUtnFYUra1hCnGY0F3ybBWQrrE5Ds0zUwy 2kXUd3y5UlSqQHWkrsWSV72DeVDx3wkzjqTFgo6s02GNnHbbe0qmfE38BXMJ3Oqj 8gSPzBH8v6ilT4PC0tDyufFQ87fou86AtyYwh96sEpwYaw61tuW6yfmvoCL8rWOm /7DtVPQy97IejxrtzxHe+Wb63f0eacpavCqbx29wfcMczEz/B35F3h/Gw39tFeHq osFCA0AjB0yzYIptFwA4DPxVDiKKnKqf/0hdU9Asb34HKqlBENm0ocIuSitbJ6yJ BHwGIVgkr1nU6kdfjKWhvXyUZMMEg9F3Y1YYeCzfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0HAl26wbj95MZY1LS8uEelfbg8MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3ZmUwZjM4LWE2YjQtNDQ2Yi1hZjVmLTc5YjM1N2ZmNzhmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCnlTANBgkqhkiG9w0BAQsFAAOCAQEAS7h6qBjBN9oWf7AH1MQ2dca6Bncf gGJX1KagZpp0c4aIUK0CvFRXtZWKJjZ9ig8NrOU671PjmiJuDGrdz6+SCuiPAo94 xSEY80KwPQnqS5xQHPBphRqvHO3IEmQjqXSsfr2+868ut31dzx2kBU6wWOUcthwT 270SnQXbiRCBDL2chn9qhsAsjXZtGtBi9Sb38pUv9I3kiGkq3LtHU2tV5jxFsv4n rDxBxcMxqFnzh7Il1C8mqBQN1nEeZ2LZDp5fNz4SMW+lXTRVAnWA3lVrT/6juTHs KVjaAv0taWLpiA3PeWjlWqggYNhE/tQFgx0sHZsGGobafaME+aDxbhB1Sw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:49:22 2025 by rpki-client