$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a533c758-1644-43aa-8574-7a5f3bfae68e.roa File: a533c758-1644-43aa-8574-7a5f3bfae68e.roa (raw, json) Hash identifier: bI6tsVD8aOhntpjp9YgV27ZnqXFsUl3LJDjsY3z07fo= Subject key identifier: 4E:89:10:1A:DC:D0:97:FA:BF:8B:20:59:12:AA:D3:4D:5D:0E:53:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 090F9034559FB46E7838D944927AD4F8F123D189 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a533c758-1644-43aa-8574-7a5f3bfae68e.roa Signing time: Fri 18 Apr 2025 17:41:46 +0000 ROA not before: Fri 18 Apr 2025 17:41:46 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.241.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0f:90:34:55:9f:b4:6e:78:38:d9:44:92:7a:d4:f8:f1:23:d1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:41:46 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=685396840ca018858ec2e51a355dc7c4875e6954b4c43e949cda6ad4ceb625ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:bd:41:52:63:2c:65:27:a3:60:05:e1:ed: 53:17:d4:32:d8:50:72:a7:d2:65:02:2d:23:90:3c: 15:a3:7a:4d:4d:f8:04:c3:95:d0:8d:28:81:23:9a: 24:eb:04:a9:e6:11:fb:6b:41:39:45:f2:6b:e5:87: a1:23:dc:b8:ee:86:5c:c5:30:a9:18:53:ef:5d:c0: 2f:d7:6c:99:d7:18:63:2a:c4:f1:1e:21:f7:1a:c8: f5:c6:20:98:0d:90:6e:9b:a8:97:92:35:4b:09:ed: 44:38:a5:83:8c:cc:1c:4d:a9:b4:65:59:92:eb:1c: 8b:3d:cf:fb:48:1c:2c:b5:3f:ac:4f:9c:00:9e:83: 0d:43:93:fc:2b:71:3c:51:03:7d:b2:a0:fc:66:83: 9c:b6:b3:d6:79:ce:8a:50:9f:a2:be:c5:bb:45:a3: 01:00:c1:e7:4a:48:6b:2d:9f:53:44:33:b6:35:41: ad:75:cc:76:0e:17:91:5b:13:3b:62:c5:1e:b9:28: 30:b6:0a:d6:4b:a5:81:7d:53:79:2c:cf:e9:04:2a: 82:50:f2:0e:7d:b6:6b:0a:70:93:25:ea:46:2f:94: 8f:1c:4f:cc:91:a9:42:62:e1:22:82:4a:0b:9b:11: 01:37:e9:8a:9b:42:7e:fb:21:9a:04:4c:f3:51:70: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:10:1A:DC:D0:97:FA:BF:8B:20:59:12:AA:D3:4D:5D:0E:53:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a533c758-1644-43aa-8574-7a5f3bfae68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.241.32.0/21 Signature Algorithm: sha256WithRSAEncryption 3f:d3:b9:ed:cc:15:ce:26:63:7e:d1:35:99:d1:9a:6f:8a:a9: d4:79:3e:8d:a5:b1:ed:68:7c:1c:fe:99:59:59:a6:1e:e3:4a: a4:87:93:0d:c6:61:6c:b8:11:b9:bb:f1:7d:cc:3c:32:c6:4e: 59:8c:7c:33:5b:90:73:e4:ae:e2:5b:f7:66:06:5f:9c:e7:01: f0:89:8e:19:92:d3:ff:43:bb:8c:0f:48:75:6d:bc:78:ba:b8: e1:c8:4f:a0:32:f4:b5:84:7b:80:7b:0c:3b:a5:f2:7d:6e:b8: b3:48:9c:5d:57:34:75:3a:77:a0:6b:c3:47:43:b6:d0:c2:72: 82:38:6d:31:c6:8f:c6:98:10:e3:7e:20:22:34:73:68:ca:54: 4b:a9:af:cf:34:17:58:7d:31:24:13:8d:2a:fb:fb:16:91:c3: 45:f5:77:64:00:e3:8f:0d:35:fa:44:fe:6a:01:a0:93:66:e6: 25:de:bb:fc:42:20:73:e4:23:d2:62:51:fe:7c:5d:2e:cc:cb: d0:e5:5a:f1:a3:90:68:7b:ac:42:8a:8c:e3:c0:88:72:7b:05: d9:be:94:a4:00:17:a9:90:96:37:9b:e9:03:4f:20:04:4a:8b: 39:49:89:7f:ae:59:c7:c0:2a:55:ca:6c:5a:4c:7a:19:2b:0d: 84:b2:b3:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCQ+QNFWftG54ONlEknrU+PEj0YkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTc0MTQ2WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODUzOTY4NDBjYTAxODg1OGVjMmU1MWEzNTVkYzdjNDg3 NWU2OTU0YjRjNDNlOTQ5Y2RhNmFkNGNlYjYyNWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Kr1BUmMsZSejYAXh7VMX1DLYUHKn0mUCLSOQPBWjek1N +ATDldCNKIEjmiTrBKnmEftrQTlF8mvlh6Ej3LjuhlzFMKkYU+9dwC/XbJnXGGMq xPEeIfcayPXGIJgNkG6bqJeSNUsJ7UQ4pYOMzBxNqbRlWZLrHIs9z/tIHCy1P6xP nACegw1Dk/wrcTxRA32yoPxmg5y2s9Z5zopQn6K+xbtFowEAwedKSGstn1NEM7Y1 Qa11zHYOF5FbEztixR65KDC2CtZLpYF9U3ksz+kEKoJQ8g59tmsKcJMl6kYvlI8c T8yRqUJi4SKCSgubEQE36YqbQn77IZoETPNRcNAlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTokQGtzQl/q/iyBZEqrTTV0OU+4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1MzNjNzU4LTE2NDQtNDNhYS04NTc0LTdhNWYzYmZhZTY4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM28SAwDQYJKoZIhvcNAQELBQADggEBAD/Tue3MFc4mY37RNZnRmm+KqdR5 Po2lse1ofBz+mVlZph7jSqSHkw3GYWy4Ebm78X3MPDLGTlmMfDNbkHPkruJb92YG X5znAfCJjhmS0/9Du4wPSHVtvHi6uOHIT6Ay9LWEe4B7DDul8n1uuLNInF1XNHU6 d6Brw0dDttDCcoI4bTHGj8aYEON+ICI0c2jKVEupr880F1h9MSQTjSr7+xaRw0X1 d2QA448NNfpE/moBoJNm5iXeu/xCIHPkI9JiUf58XS7My9DlWvGjkGh7rEKKjOPA iHJ7Bdm+lKQAF6mQljeb6QNPIARKizlJiX+uWcfAKlXKbFpMehkrDYSys6g= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:33 2025 by rpki-client