$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ecc54f-4435-475b-81e9-0c3601cefce7.roa File: 99ecc54f-4435-475b-81e9-0c3601cefce7.roa (raw, json) Hash identifier: WdPMZEcmAwxNGjyEWgC37+UQUHt2lecU2gRQzbGHpNI= Subject key identifier: 09:3E:15:3D:0D:3D:B6:EC:87:79:81:34:1E:BC:50:FB:1B:80:1E:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F3CFA280589B0A0A88FCC922A92208FD1C25B82 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ecc54f-4435-475b-81e9-0c3601cefce7.roa Signing time: Fri 25 Apr 2025 17:30:12 +0000 ROA not before: Fri 25 Apr 2025 17:30:12 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.80.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3c:fa:28:05:89:b0:a0:a8:8f:cc:92:2a:92:20:8f:d1:c2:5b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:30:12 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f1919b624ece4c84af998c73142e3fbc598b46f585f38e2262c7216a9d433ebd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:a3:bd:0a:52:7a:e5:a8:62:51:8d:d3:e4: f4:5d:95:4f:c4:c6:c2:9a:92:ba:39:06:42:a5:0f: 89:07:66:aa:eb:8e:e2:d2:77:5f:a1:8d:7d:80:3f: 55:61:b1:17:6b:47:dd:60:6e:32:1f:0d:46:a0:a0: 0e:76:7c:29:d3:e7:ae:0d:60:1d:0d:43:4d:42:ea: 35:77:3e:c8:31:92:37:5a:10:b6:6c:5c:31:3e:b6: b7:88:83:ca:22:7a:b1:df:da:7f:8b:9d:2b:b0:ca: d7:14:a9:be:bb:b7:03:89:d6:b4:c0:1b:d3:98:c3: 13:22:19:da:a0:45:26:0d:6f:fa:e1:5f:f0:49:d3: de:eb:b5:eb:bd:c4:e8:af:5f:df:b5:ec:48:17:22: 91:9c:db:92:92:bb:dd:a4:6b:62:fa:e0:e2:ac:3a: c2:a3:9b:c7:4f:e5:cf:8b:fa:03:40:36:e2:24:88: 29:98:a8:53:84:b8:fd:16:b9:b6:79:8c:43:26:03: 6c:ca:f8:2a:11:ea:8e:63:12:47:60:0d:da:0b:ff: ca:e2:50:23:bf:90:2c:01:15:34:e0:3a:b5:5a:f1: b0:33:ad:22:85:59:00:68:65:a4:06:b0:1a:0e:aa: 01:83:3f:94:3f:18:61:18:2d:77:ff:94:dd:cc:b1: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:15:3D:0D:3D:B6:EC:87:79:81:34:1E:BC:50:FB:1B:80:1E:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ecc54f-4435-475b-81e9-0c3601cefce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.80.0.0/14 Signature Algorithm: sha256WithRSAEncryption 9d:ad:2a:ba:1e:a4:c2:f8:75:45:1b:5b:08:57:c7:90:9b:5c: f8:19:10:f4:60:58:b2:53:93:ea:d9:86:11:75:35:58:76:7b: fe:70:e9:69:90:d0:da:d4:22:9c:2a:89:86:e9:44:e8:24:8f: eb:e0:ca:f0:96:73:cf:fc:d8:3c:98:39:d1:9d:45:20:b0:8a: 3c:e0:49:61:a5:fa:77:c5:2c:f0:72:1e:40:c3:5d:84:d7:8d: d9:81:75:d5:a3:1b:2b:e2:b1:c2:1c:cf:ba:48:28:32:33:05: b9:fd:56:94:63:ca:82:fc:d7:18:db:ed:26:1f:7d:9d:1f:c4: 89:37:8d:6a:8e:78:37:98:b6:65:77:b8:49:6e:0b:f7:a0:2d: 00:ec:75:42:08:1c:46:37:11:cf:c5:bf:a3:e4:2d:41:9e:b9: 1c:37:ad:e0:ce:66:84:cd:10:45:d7:d9:48:b4:f6:be:2e:57: 92:32:5b:9e:35:89:3d:23:04:51:67:0a:19:fc:db:72:d6:5c: e3:e7:c7:bd:d6:d4:3d:e0:13:7c:99:94:b5:9a:f1:70:33:4d: cc:67:58:9b:fa:03:40:d0:ce:29:8c:f8:c7:0a:97:df:e0:6e: cb:96:d6:2b:e2:df:54:14:7b:b3:11:a7:6d:e9:58:c6:34:32: da:d1:e8:be -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXzz6KAWJsKCoj8ySKpIgj9HCW4IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTczMDEyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTkxOWI2MjRlY2U0Yzg0YWY5OThjNzMxNDJlM2ZiYzU5 OGI0NmY1ODVmMzhlMjI2MmM3MjE2YTlkNDMzZWJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDtqO9ClJ65ahiUY3T5PRdlU/ExsKakro5BkKlD4kHZqrr juLSd1+hjX2AP1VhsRdrR91gbjIfDUagoA52fCnT564NYB0NQ01C6jV3Psgxkjda ELZsXDE+treIg8oierHf2n+LnSuwytcUqb67twOJ1rTAG9OYwxMiGdqgRSYNb/rh X/BJ097rteu9xOivX9+17EgXIpGc25KSu92ka2L64OKsOsKjm8dP5c+L+gNANuIk iCmYqFOEuP0WubZ5jEMmA2zK+CoR6o5jEkdgDdoL/8riUCO/kCwBFTTgOrVa8bAz rSKFWQBoZaQGsBoOqgGDP5Q/GGEYLXf/lN3MsUjpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCT4VPQ09tuyHeYE0HrxQ+xuAHm4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5ZWNjNTRmLTQ0MzUtNDc1Yi04MWU5LTBjMzYwMWNlZmNlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI2UDANBgkqhkiG9w0BAQsFAAOCAQEAna0quh6kwvh1RRtbCFfHkJtc+BkQ 9GBYslOT6tmGEXU1WHZ7/nDpaZDQ2tQinCqJhulE6CSP6+DK8JZzz/zYPJg50Z1F ILCKPOBJYaX6d8Us8HIeQMNdhNeN2YF11aMbK+KxwhzPukgoMjMFuf1WlGPKgvzX GNvtJh99nR/EiTeNao54N5i2ZXe4SW4L96AtAOx1QggcRjcRz8W/o+QtQZ65HDet 4M5mhM0QRdfZSLT2vi5XkjJbnjWJPSMEUWcKGfzbctZc4+fHvdbUPeATfJmUtZrx cDNNzGdYm/oDQNDOKYz4xwqX3+Buy5bWK+LfVBR7sxGnbelYxjQy2tHovg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:41:35 2025 by rpki-client