$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa File: a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa (raw, json) Hash identifier: 3uwW/ZQxI6wdl939A5QOU8jEBlS9aTBgVBAhVVgzS+k= Subject key identifier: 72:55:43:B5:16:43:0D:E5:E9:88:A8:48:F3:80:40:E5:B7:C2:DE:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A5E15F4909DA74A89610FB45D28ED3B179D7682 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa Signing time: Fri 25 Apr 2025 17:30:31 +0000 ROA not before: Fri 25 Apr 2025 17:30:31 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.88.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5e:15:f4:90:9d:a7:4a:89:61:0f:b4:5d:28:ed:3b:17:9d:76:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:30:31 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2e546f26a20e1c1ad06360b03d4301fa8a9b8341412e65685b8c0a55cb6b7f23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:4e:1f:e7:61:7d:38:ec:9b:3c:6d:c0:f9: f1:5a:35:b8:6a:36:08:10:cb:61:9f:2c:92:f5:d5: 30:5f:47:c5:1d:30:78:9a:70:ae:36:50:a2:13:c8: 31:17:9b:c0:72:93:ad:ea:c6:e2:3b:76:bd:f8:a4: 7c:bb:24:1b:89:19:8d:d4:c2:29:00:3d:2f:c1:48: c4:32:4f:fa:ca:58:4c:35:35:3f:85:70:f7:13:83: 0b:f0:ab:28:c5:4a:fc:15:25:cc:79:ac:6f:15:5f: 27:fc:b7:05:ed:6d:bd:a6:a4:d8:b4:ac:9f:91:01: 79:c4:92:13:93:24:0d:93:d5:fe:9d:92:a2:9c:a4: 09:54:e5:4c:fe:3e:9d:c9:51:5c:0b:f4:00:e9:fa: f8:01:19:c4:5c:e1:73:69:45:58:1c:d5:92:6f:9c: 95:62:97:99:87:7c:57:d2:9b:03:e2:7c:70:5b:85: ae:a0:f4:a6:6f:77:6d:d2:06:6e:0c:29:5d:8a:bc: 21:a4:5d:46:2f:c1:7b:8a:50:1c:a8:0a:f9:c1:86: 63:29:63:6b:4d:32:8f:1f:8c:8b:4c:0d:d0:ca:1a: 46:60:e8:49:06:60:dd:a2:6d:f8:ab:5a:9e:49:31: f4:e5:64:f9:6d:1f:e9:df:69:38:63:9e:e8:4c:9c: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:43:B5:16:43:0D:E5:E9:88:A8:48:F3:80:40:E5:B7:C2:DE:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8f8b12a-8b49-4c15-9c74-a6f69e4d0491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.88.0.0/14 Signature Algorithm: sha256WithRSAEncryption 2d:28:94:5b:27:ad:50:ee:26:44:3a:73:31:f1:af:b2:4e:3f: 0d:28:f9:cf:ac:1d:da:3a:ff:88:8a:02:48:3e:3d:df:48:9c: 91:7f:f7:dc:39:75:37:fc:ea:7f:44:8c:0a:cf:b0:5d:75:2b: a9:ff:fc:49:be:c2:55:76:dc:4a:41:1b:6e:fa:f0:33:4a:2c: 51:ba:b4:44:13:35:33:74:7d:65:e0:3e:ae:4e:02:de:15:22: 9d:44:d4:fe:7a:b1:6a:7a:c0:12:94:8f:68:04:2a:0e:97:d9: ec:45:a6:33:e7:b0:03:9f:73:f2:85:d8:25:5f:de:1d:da:02: 5a:a8:af:08:92:6d:23:d8:42:8a:ca:6e:33:2c:09:46:91:05: 3e:a0:af:ab:0b:4f:82:6d:b4:60:14:0f:a9:d1:fc:e1:c8:c2: 95:82:bf:05:85:86:78:c4:67:fd:7b:95:49:60:6c:3f:fe:66: 86:3a:46:2c:db:98:ae:16:fd:1d:b6:72:15:cb:45:d4:96:58: 62:38:3e:d0:67:75:75:d1:fd:bf:61:81:a6:52:f7:c0:58:43: f5:3b:28:56:e3:d9:05:99:a6:99:09:c5:af:de:57:83:18:d9: 7f:9a:43:2e:64:1c:b3:b0:bd:2d:50:f3:5f:55:67:64:1e:f9: 07:2a:ef:12 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGl4V9JCdp0qJYQ+0XSjtOxeddoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTczMDMxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTU0NmYyNmEyMGUxYzFhZDA2MzYwYjAzZDQzMDFmYThh OWI4MzQxNDEyZTY1Njg1YjhjMGE1NWNiNmI3ZjIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfOE4f52F9OOybPG3A+fFaNbhqNggQy2GfLJL11TBfR8Ud MHiacK42UKITyDEXm8Byk63qxuI7dr34pHy7JBuJGY3UwikAPS/BSMQyT/rKWEw1 NT+FcPcTgwvwqyjFSvwVJcx5rG8VXyf8twXtbb2mpNi0rJ+RAXnEkhOTJA2T1f6d kqKcpAlU5Uz+Pp3JUVwL9ADp+vgBGcRc4XNpRVgc1ZJvnJVil5mHfFfSmwPifHBb ha6g9KZvd23SBm4MKV2KvCGkXUYvwXuKUByoCvnBhmMpY2tNMo8fjItMDdDKGkZg 6EkGYN2ibfirWp5JMfTlZPltH+nfaThjnuhMnMELAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUclVDtRZDDeXpiKhI84BA5bfC3sEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4ZjhiMTJhLThiNDktNGMxNS05Yzc0LWE2ZjY5ZTRkMDQ5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI2WDANBgkqhkiG9w0BAQsFAAOCAQEALSiUWyetUO4mRDpzMfGvsk4/DSj5 z6wd2jr/iIoCSD4930ickX/33Dl1N/zqf0SMCs+wXXUrqf/8Sb7CVXbcSkEbbvrw M0osUbq0RBM1M3R9ZeA+rk4C3hUinUTU/nqxanrAEpSPaAQqDpfZ7EWmM+ewA59z 8oXYJV/eHdoCWqivCJJtI9hCispuMywJRpEFPqCvqwtPgm20YBQPqdH84cjClYK/ BYWGeMRn/XuVSWBsP/5mhjpGLNuYrhb9HbZyFctF1JZYYjg+0Gd1ddH9v2GBplL3 wFhD9TsoVuPZBZmmmQnFr95XgxjZf5pDLmQcs7C9LVDzX1VnZB75ByrvEg== -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:03 2025 by rpki-client