$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa File: 9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa (raw, json) Hash identifier: 63yvJhYuRsviI3alr01m+xVmyzK+hJsT5Cv6d32mQfs= Subject key identifier: D5:EA:8F:23:B1:CB:1B:50:13:AD:E0:2B:7F:92:C1:41:5B:6C:D9:2D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55890FD02BAAA46BA230709F94211CD14A064FA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa Signing time: Fri 25 Apr 2025 17:11:41 +0000 ROA not before: Fri 25 Apr 2025 17:11:41 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.72.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:89:0f:d0:2b:aa:a4:6b:a2:30:70:9f:94:21:1c:d1:4a:06:4f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:11:41 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=b30fb6e742dc08cb76656e6db0c82e9a6398672bd9ba71ed0e31c29409800610, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:68:d0:9f:ac:00:08:b4:1e:51:87:3b:b2: 8a:23:65:44:a3:20:66:e2:da:fe:3c:69:f8:0c:2e: 08:c2:9b:60:1f:da:d5:26:39:e9:e3:06:2b:11:c4: a6:ca:0e:cb:4f:79:db:00:83:a4:f3:68:aa:7e:38: d9:a3:81:66:e0:4b:1e:1e:a5:53:c7:c5:d5:54:c7: 26:9b:b5:e6:5f:22:1b:b9:bd:0d:3a:97:eb:f1:8b: d4:27:8d:ed:c6:b1:be:db:d1:ce:ea:f3:4b:73:01: 39:5a:a9:76:d8:e2:49:5f:b5:69:9d:43:5c:98:7d: 03:7d:86:7c:31:16:68:2f:18:ba:c6:cf:1f:3d:a0: c3:dc:24:a1:63:08:8a:db:bf:3b:8f:c8:de:33:b5: b9:25:b8:16:fb:5a:af:a0:eb:24:6d:fb:ab:71:d9: 6b:db:10:9e:ec:d1:60:54:ad:77:c4:bf:3f:6e:69: 75:65:7d:ba:18:99:b8:d8:78:48:67:18:07:50:65: 69:2c:7f:93:fd:56:f1:5f:2f:25:42:56:f5:3c:96: b2:d4:6e:94:06:c1:84:5b:7e:89:e6:92:d8:35:e0: 2d:13:51:e5:26:d9:cf:f2:70:38:80:0f:37:cc:6a: e9:e6:2e:5b:cb:d3:40:ed:43:8f:92:c8:32:f4:cb: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:8F:23:B1:CB:1B:50:13:AD:E0:2B:7F:92:C1:41:5B:6C:D9:2D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a77a6d1-7b43-489c-8fb0-fbf9331dca6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.72.0.0/13 Signature Algorithm: sha256WithRSAEncryption 84:c1:48:2e:a9:89:30:7e:19:38:68:49:b0:0a:b5:ca:73:7f: 33:43:7c:51:9d:47:be:70:c8:ae:f8:7e:fa:d9:9a:da:90:a1: 43:7a:5a:f2:21:84:ba:d5:47:57:cf:9d:cb:24:d3:df:ed:60: 2a:61:f4:14:12:72:69:dc:c6:ce:cc:6f:7f:1f:b0:e4:43:04: cc:b0:d2:79:f6:74:2e:c9:90:59:5c:07:be:c2:54:ca:fa:8a: f7:92:b9:ba:a8:53:56:b2:07:7c:f5:96:be:16:e3:a8:99:34: ac:3c:c6:c5:48:49:80:ed:b5:05:a1:5f:84:57:47:c8:92:d9: 09:d4:9f:ee:3a:22:c5:0c:aa:e2:eb:5c:4f:a4:a6:9d:22:0d: ec:bf:08:db:2b:bb:de:2b:92:b1:aa:74:25:a3:1a:1f:85:de: fd:12:e5:cc:ac:b7:8c:71:9d:f2:97:54:2c:1a:5f:d8:f1:dc: 03:11:be:5f:81:0a:e0:ae:4c:d9:87:aa:49:c1:6a:08:93:08: 9b:41:57:df:14:63:f6:23:5a:7f:7e:fe:f6:6b:84:d1:c9:d8: 36:25:1b:ae:88:9d:51:d4:4f:1d:c3:bc:d0:13:bb:2c:35:3e: ff:70:81:04:4d:00:a7:10:ea:3d:d2:5f:d5:f1:32:f3:cc:a1: 26:ed:7d:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVYkP0CuqpGuiMHCflCEc0UoGT6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTcxMTQxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzBmYjZlNzQyZGMwOGNiNzY2NTZlNmRiMGM4MmU5YTYz OTg2NzJiZDliYTcxZWQwZTMxYzI5NDA5ODAwNjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc42jQn6wACLQeUYc7soojZUSjIGbi2v48afgMLgjCm2Af 2tUmOenjBisRxKbKDstPedsAg6TzaKp+ONmjgWbgSx4epVPHxdVUxyabteZfIhu5 vQ06l+vxi9Qnje3Gsb7b0c7q80tzATlaqXbY4klftWmdQ1yYfQN9hnwxFmgvGLrG zx89oMPcJKFjCIrbvzuPyN4ztbkluBb7Wq+g6yRt+6tx2WvbEJ7s0WBUrXfEvz9u aXVlfboYmbjYeEhnGAdQZWksf5P9VvFfLyVCVvU8lrLUbpQGwYRbfonmktg14C0T UeUm2c/ycDiADzfMaunmLlvL00DtQ4+SyDL0y9r/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1eqPI7HLG1ATreArf5LBQVts2S0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhNzdhNmQxLTdiNDMtNDg5Yy04ZmIwLWZiZjkzMzFkY2E2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwM2SDANBgkqhkiG9w0BAQsFAAOCAQEAhMFILqmJMH4ZOGhJsAq1ynN/M0N8 UZ1HvnDIrvh++tma2pChQ3pa8iGEutVHV8+dyyTT3+1gKmH0FBJyadzGzsxvfx+w 5EMEzLDSefZ0LsmQWVwHvsJUyvqK95K5uqhTVrIHfPWWvhbjqJk0rDzGxUhJgO21 BaFfhFdHyJLZCdSf7joixQyq4utcT6SmnSIN7L8I2yu73iuSsap0JaMaH4Xe/RLl zKy3jHGd8pdULBpf2PHcAxG+X4EK4K5M2YeqScFqCJMIm0FX3xRj9iNaf37+9muE 0cnYNiUbroidUdRPHcO80BO7LDU+/3CBBE0ApxDqPdJf1fEy88yhJu19ow== -----END CERTIFICATE-----Generated at Sat Apr 26 12:48:14 2025 by rpki-client