$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac375c11-41df-41c2-bb0c-56bf05e9e40d.roa File: ac375c11-41df-41c2-bb0c-56bf05e9e40d.roa (raw, json) Hash identifier: ZEYXGwasyI4v6Hp1PCIrXFbV9xm+r+HifOEUzV2pm+E= Subject key identifier: E5:E7:44:5C:AE:66:B3:23:4E:16:65:3C:A8:B2:01:1C:57:2A:B0:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 560F8035B6E8438A27701E831A81F7A14ECDA24C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac375c11-41df-41c2-bb0c-56bf05e9e40d.roa Signing time: Fri 25 Apr 2025 16:40:18 +0000 ROA not before: Fri 25 Apr 2025 16:40:18 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.152.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0f:80:35:b6:e8:43:8a:27:70:1e:83:1a:81:f7:a1:4e:cd:a2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:40:18 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=9287989f9c2dc3c86ec944509b133c132dda0f9d04bd9fafe2781a858e732154, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:69:ca:d3:04:48:a1:b8:36:9f:79:70:b6:60: 6d:4c:24:5f:e5:a4:dd:25:63:c4:f0:69:a7:15:7c: 5a:52:2d:98:b6:8b:1e:a9:bb:16:09:e3:30:7f:5b: c2:b3:08:eb:1b:b4:37:48:53:a4:1d:8e:f6:26:10: ba:cb:49:b6:15:26:2a:6d:8e:c4:e8:1f:0f:e7:9f: 92:a8:ad:13:68:80:3f:82:7c:b3:53:7a:2a:2d:68: a0:b8:39:17:d9:ce:6f:61:89:15:0d:23:e1:54:ee: 2a:0d:03:54:f3:b9:49:7c:9a:2a:aa:e7:26:a7:0d: 9c:ae:8f:d3:cf:c3:c5:39:8c:6e:9a:5d:46:32:44: 09:25:fb:05:9a:ca:fc:c7:f7:e3:30:88:aa:5f:a3: ad:20:10:50:8e:2e:f4:58:14:7f:32:31:1f:91:f4: a3:11:a3:d5:59:49:93:0a:e0:f7:96:6b:00:6b:54: be:d1:06:46:39:09:36:2e:90:23:ae:86:7b:73:ec: 81:88:40:e6:99:0d:23:ee:bc:f9:ad:13:c8:b6:1c: 53:d6:c4:d6:88:16:51:ee:9d:c6:15:74:4b:ba:a6: ed:2a:8c:38:ed:8a:de:6d:e5:74:7b:ba:db:8c:21: 5f:f7:34:c0:32:c1:78:f8:15:5c:37:9a:c1:c4:f4: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E7:44:5C:AE:66:B3:23:4E:16:65:3C:A8:B2:01:1C:57:2A:B0:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac375c11-41df-41c2-bb0c-56bf05e9e40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.152.0.0/24 Signature Algorithm: sha256WithRSAEncryption 77:66:6e:8b:c1:ad:6a:85:57:fa:51:76:0d:a3:8e:cf:cd:58: cf:7c:04:c4:4f:49:42:79:49:36:db:d1:06:c6:b6:e9:e0:e2: b4:0d:83:42:95:ff:7a:1a:12:4f:e8:29:eb:a8:0d:77:b1:23: 3c:47:5e:7e:d5:09:7e:31:27:4f:34:f4:e9:70:bd:cf:38:ce: 60:8a:38:f0:21:29:d5:7e:90:0b:86:bd:01:f6:ac:4d:7a:dc: 02:e4:26:26:fa:31:24:b0:d3:37:8f:9c:8d:00:32:87:bd:ba: a8:49:37:ab:58:7c:90:9b:0d:19:e1:d4:c1:db:fa:c1:1a:7a: f9:ed:87:ee:61:17:12:3d:a5:d6:07:6d:6e:fe:4f:7c:e2:c1: ea:4b:ce:df:55:1d:ea:3d:f9:22:40:0d:58:4d:53:fc:71:50: c3:55:72:59:38:ce:b7:dc:ad:ca:95:66:88:7e:f5:09:4b:30: 5e:58:13:02:b0:30:90:58:e8:ed:a4:6d:1a:f2:5b:b1:52:3f: 38:a0:fe:fd:9a:3c:fa:a1:27:32:a2:5b:8e:35:c6:a2:85:0e: 69:f4:5f:8f:8e:a9:91:63:2d:29:8d:69:a9:95:85:0d:62:ea: c0:1a:cf:14:98:47:c4:0d:4b:2e:25:fe:a3:d1:18:84:79:d7: 22:47:bb:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVg+ANbboQ4oncB6DGoH3oU7NokwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY0MDE4WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Mjg3OTg5ZjljMmRjM2M4NmVjOTQ0NTA5YjEzM2MxMzJk ZGEwZjlkMDRiZDlmYWZlMjc4MWE4NThlNzMyMTU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNacrTBEihuDafeXC2YG1MJF/lpN0lY8TwaacVfFpSLZi2 ix6puxYJ4zB/W8KzCOsbtDdIU6QdjvYmELrLSbYVJiptjsToHw/nn5KorRNogD+C fLNTeiotaKC4ORfZzm9hiRUNI+FU7ioNA1TzuUl8miqq5yanDZyuj9PPw8U5jG6a XUYyRAkl+wWayvzH9+MwiKpfo60gEFCOLvRYFH8yMR+R9KMRo9VZSZMK4PeWawBr VL7RBkY5CTYukCOuhntz7IGIQOaZDSPuvPmtE8i2HFPWxNaIFlHuncYVdEu6pu0q jDjtit5t5XR7utuMIV/3NMAywXj4FVw3msHE9G2LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5edEXK5msyNOFmU8qLIBHFcqsGowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjMzc1YzExLTQxZGYtNDFjMi1iYjBjLTU2YmYwNWU5ZTQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjmAAwDQYJKoZIhvcNAQELBQADggEBAHdmbovBrWqFV/pRdg2jjs/NWM98 BMRPSUJ5STbb0QbGtung4rQNg0KV/3oaEk/oKeuoDXexIzxHXn7VCX4xJ0809Olw vc84zmCKOPAhKdV+kAuGvQH2rE163ALkJib6MSSw0zePnI0AMoe9uqhJN6tYfJCb DRnh1MHb+sEaevnth+5hFxI9pdYHbW7+T3ziwepLzt9VHeo9+SJADVhNU/xxUMNV clk4zrfcrcqVZoh+9QlLMF5YEwKwMJBY6O2kbRryW7FSPzig/v2aPPqhJzKiW441 xqKFDmn0X4+OqZFjLSmNaamVhQ1i6sAazxSYR8QNSy4l/qPRGIR51yJHu3Y= -----END CERTIFICATE-----Generated at Sat Apr 26 15:49:13 2025 by rpki-client