$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9eba3164-0586-4a62-9f3c-3991ccdba5c2.roa File: 9eba3164-0586-4a62-9f3c-3991ccdba5c2.roa (raw, json) Hash identifier: Q3Cpe/YfDE5ebzDNmHeERsbHPCH6NLYxbrNX5id2fYo= Subject key identifier: 12:1A:D6:AA:BC:32:BB:1F:0C:A9:D0:E7:E7:4B:2E:30:D6:F8:52:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78CA111230C80BF35DB41DDBB1E7FD23045BD956 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9eba3164-0586-4a62-9f3c-3991ccdba5c2.roa Signing time: Fri 18 Apr 2025 17:40:14 +0000 ROA not before: Fri 18 Apr 2025 17:40:14 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.248.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ca:11:12:30:c8:0b:f3:5d:b4:1d:db:b1:e7:fd:23:04:5b:d9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:40:14 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=8dbf5727bd8ed0f0b7fbd1d1c379ca983b8f71c93fe4b1bad8ded3bb065e54b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:7f:95:fc:69:c2:06:06:ce:ae:0f:53:8d: 7b:df:68:5f:6b:e6:32:c2:80:65:cf:4c:eb:1c:24: 24:e4:30:be:f8:09:76:6a:3c:89:96:32:e5:26:15: 12:6e:0e:c9:9b:0c:be:80:79:13:b4:42:51:ef:27: ea:02:12:f7:eb:86:a7:f6:e1:fb:e9:4d:9c:37:0e: f4:ca:82:0b:42:65:d9:0e:94:23:96:6a:69:90:2e: 41:f4:a2:df:c0:3e:41:21:92:45:cb:78:75:4f:76: 4f:01:ac:18:21:8e:54:ba:4d:6b:b6:ae:b2:b7:3f: 9d:64:84:6a:42:4b:49:cf:45:03:80:50:21:a4:58: 1f:cd:d2:e6:f6:45:5a:cb:7c:3f:e8:e2:0a:7a:48: af:e9:04:46:38:2d:80:26:ba:9f:3f:d1:b5:f9:51: 48:7c:e2:9c:fa:e8:b7:05:d7:31:d2:f2:34:48:72: 9d:e0:c6:87:a2:c5:01:17:bd:b2:9b:11:96:61:8b: bc:fa:89:67:87:39:d2:9f:a7:b7:c7:ab:ef:1c:e8: 00:eb:41:b5:87:e6:2d:10:0f:5e:71:da:63:c1:4b: 4f:13:4b:f4:64:81:86:4d:65:36:72:7d:33:70:5b: e6:60:67:c4:e9:0b:a6:e4:fd:ad:62:eb:89:1d:3d: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:D6:AA:BC:32:BB:1F:0C:A9:D0:E7:E7:4B:2E:30:D6:F8:52:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9eba3164-0586-4a62-9f3c-3991ccdba5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.248.216.0/22 Signature Algorithm: sha256WithRSAEncryption 15:81:53:cf:bd:1f:f8:57:09:92:22:e3:df:e4:87:8b:e9:79: 5a:ad:bc:7a:6a:a8:ad:ab:d5:36:a7:77:99:f9:4c:50:2d:98: 39:fd:f8:62:49:56:e4:ed:61:28:51:95:ab:4b:f2:6e:a7:a2: 0f:cc:9d:df:03:72:47:57:6b:69:f1:82:ce:25:ba:d5:4b:b2: 65:2f:c6:d0:cb:d6:b8:f7:ab:89:06:90:67:74:12:92:73:ca: 68:6a:6d:95:8d:88:32:28:f8:7f:22:51:be:84:02:5e:1c:a7: 43:96:28:8d:04:f4:da:d5:ac:d3:75:1c:51:f1:0e:b1:80:65: 76:f2:3f:7d:c6:89:15:42:9b:b2:e1:17:52:e5:4b:0a:4a:15: 8d:c8:24:ea:d1:91:73:89:d2:ce:48:26:97:1a:84:e9:6b:72: d8:51:bd:a2:79:2a:88:e9:8e:27:cf:49:08:ee:77:e2:fa:6e: f0:d1:6e:07:75:22:19:96:89:a6:6a:09:2b:b7:10:b9:98:25: b2:2e:cc:ef:01:ec:41:94:e2:bf:4d:f8:b9:cb:f6:eb:03:a5: bc:c0:67:62:5e:d7:b7:56:7b:0a:48:d8:f9:52:5e:71:0d:f7: 2c:4f:dc:68:bb:97:62:99:dd:57:66:fe:96:d0:1b:5c:c9:1a: c9:2a:6e:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeMoREjDIC/NdtB3bsef9IwRb2VYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTc0MDE0WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGJmNTcyN2JkOGVkMGYwYjdmYmQxZDFjMzc5Y2E5ODNi OGY3MWM5M2ZlNGIxYmFkOGRlZDNiYjA2NWU1NGI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBl3+V/GnCBgbOrg9TjXvfaF9r5jLCgGXPTOscJCTkML74 CXZqPImWMuUmFRJuDsmbDL6AeRO0QlHvJ+oCEvfrhqf24fvpTZw3DvTKggtCZdkO lCOWammQLkH0ot/APkEhkkXLeHVPdk8BrBghjlS6TWu2rrK3P51khGpCS0nPRQOA UCGkWB/N0ub2RVrLfD/o4gp6SK/pBEY4LYAmup8/0bX5UUh84pz66LcF1zHS8jRI cp3gxoeixQEXvbKbEZZhi7z6iWeHOdKfp7fHq+8c6ADrQbWH5i0QD15x2mPBS08T S/RkgYZNZTZyfTNwW+ZgZ8TpC6bk/a1i64kdPdDJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEhrWqrwyux8MqdDn50suMNb4UsIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllYmEzMTY0LTA1ODYtNGE2Mi05ZjNjLTM5OTFjY2RiYTVjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2+NgwDQYJKoZIhvcNAQELBQADggEBABWBU8+9H/hXCZIi49/kh4vpeVqt vHpqqK2r1Tand5n5TFAtmDn9+GJJVuTtYShRlatL8m6nog/Mnd8DckdXa2nxgs4l utVLsmUvxtDL1rj3q4kGkGd0EpJzymhqbZWNiDIo+H8iUb6EAl4cp0OWKI0E9NrV rNN1HFHxDrGAZXbyP33GiRVCm7LhF1LlSwpKFY3IJOrRkXOJ0s5IJpcahOlrcthR vaJ5KojpjifPSQjud+L6bvDRbgd1IhmWiaZqCSu3ELmYJbIuzO8B7EGU4r9N+LnL 9usDpbzAZ2Je17dWewpI2PlSXnEN9yxP3Gi7l2KZ3Vdm/pbQG1zJGskqbtM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:22 2025 by rpki-client