$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa File: b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa (raw, json) Hash identifier: KK6aKg3I83MaMoepBqr1Vam5MpfiXOVG+CXf7QibyQs= Subject key identifier: D1:97:FE:DF:E0:6A:09:9B:9F:F8:5B:6C:32:B1:A4:D0:DB:F7:B1:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48C360C7D587C49F534B554B0CD7715372542872 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa Signing time: Fri 25 Apr 2025 16:11:28 +0000 ROA not before: Fri 25 Apr 2025 16:11:28 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 398378 IP address blocks: 161.188.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c3:60:c7:d5:87:c4:9f:53:4b:55:4b:0c:d7:71:53:72:54:28:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:11:28 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=56d3224d353dd48283e2dd4df45def6fe02ceca978b3ef1b8455b4d2e1a3981c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:cc:9d:3c:4e:68:81:93:20:02:78:bd:1b: 68:83:0d:00:02:6b:0e:e3:3a:9c:1e:03:ce:44:09: d6:48:68:9a:5f:3b:b0:fe:54:42:4f:90:a4:7b:24: ad:18:9a:ca:91:b8:c7:f3:ba:42:a4:ba:03:19:3c: 1a:0a:8e:c5:1e:3e:53:ea:29:23:8a:61:47:38:c2: 95:a1:9a:ec:08:e1:25:c9:d7:ef:b2:29:73:1b:68: ae:78:2f:05:33:38:23:1a:ea:5c:c0:06:08:e0:f5: 71:23:54:97:82:63:23:1f:c2:ef:d5:66:44:7e:36: b4:13:c9:e0:ae:cd:d5:e1:af:5e:dd:c0:2b:3d:d6: 9e:c6:c3:78:d8:39:ef:7b:8a:be:f3:78:b3:e5:d3: e2:6c:0c:f4:b2:3d:3d:1a:fe:30:8c:23:0d:a3:29: a0:ab:0d:6c:05:63:4e:8c:af:38:17:de:c0:ba:13: 9d:df:f8:a7:e3:f7:24:51:24:cd:96:1c:01:09:93: 68:42:fa:e3:fe:27:3d:89:65:97:b4:02:c3:87:57: 4d:62:fe:77:fb:24:10:db:e8:e5:9b:ca:a5:84:4e: 92:62:31:49:dc:28:f8:0c:8f:e3:38:8f:97:d3:57: 2e:80:e5:3a:95:4d:16:b4:2e:dc:34:d6:e6:0a:e6: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:FE:DF:E0:6A:09:9B:9F:F8:5B:6C:32:B1:A4:D0:DB:F7:B1:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.138.0/23 Signature Algorithm: sha256WithRSAEncryption 62:99:23:0b:df:d6:d9:ef:36:f8:09:80:8d:90:87:0c:5b:f6: cd:ea:08:54:93:50:b4:46:fd:f4:05:76:5f:ef:cc:17:d3:7c: 16:e4:df:d1:95:d2:d3:0f:d1:7c:97:82:e8:cf:11:1a:89:85: 92:e9:d7:3c:d3:c5:76:3d:a5:17:89:9a:d0:a4:0d:1a:20:f6: 30:f6:e2:99:bc:8e:38:d2:5e:59:ae:93:6c:a5:fb:81:0b:d2: 0c:27:02:9f:b2:0c:44:49:a0:d0:c8:95:9b:06:bb:83:15:46: 45:3b:08:87:e1:d2:64:02:00:a1:78:20:f5:63:55:4c:a1:81: ff:17:56:79:1d:bc:c7:c1:37:e7:8b:59:61:92:50:19:e1:41: 01:d8:70:4c:57:b4:52:50:53:04:61:dd:fc:7e:75:09:a3:3b: a6:91:81:19:be:ac:94:e5:54:5c:2c:a8:38:ac:5f:7b:38:14: 48:e4:f0:fb:47:4f:5e:4c:41:d6:04:5f:83:6f:29:fb:35:b8: 4b:15:e7:f1:08:8f:11:ee:a1:ec:e6:7c:b9:be:96:7f:53:ef: fb:48:d4:24:a5:79:01:0f:cd:c6:ab:85:fa:66:43:3d:19:50: d7:1b:b0:e3:03:94:3d:fa:2e:2b:de:59:b0:de:ca:f0:e5:c3: c3:60:34:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSMNgx9WHxJ9TS1VLDNdxU3JUKHIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYxMTI4WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmQzMjI0ZDM1M2RkNDgyODNlMmRkNGRmNDVkZWY2ZmUw MmNlY2E5NzhiM2VmMWI4NDU1YjRkMmUxYTM5ODFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8scydPE5ogZMgAni9G2iDDQACaw7jOpweA85ECdZIaJpf O7D+VEJPkKR7JK0YmsqRuMfzukKkugMZPBoKjsUePlPqKSOKYUc4wpWhmuwI4SXJ 1++yKXMbaK54LwUzOCMa6lzABgjg9XEjVJeCYyMfwu/VZkR+NrQTyeCuzdXhr17d wCs91p7Gw3jYOe97ir7zeLPl0+JsDPSyPT0a/jCMIw2jKaCrDWwFY06MrzgX3sC6 E53f+Kfj9yRRJM2WHAEJk2hC+uP+Jz2JZZe0AsOHV01i/nf7JBDb6OWbyqWETpJi MUncKPgMj+M4j5fTVy6A5TqVTRa0Ltw01uYK5vRzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0Zf+3+BqCZuf+FtsMrGk0Nv3sacwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2ZTc5ZjJlLTE3Y2YtNDRkYS1iNmQzLTNhNTBkOTQ1NzFmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIowDQYJKoZIhvcNAQELBQADggEBAGKZIwvf1tnvNvgJgI2Qhwxb9s3q CFSTULRG/fQFdl/vzBfTfBbk39GV0tMP0XyXgujPERqJhZLp1zzTxXY9pReJmtCk DRog9jD24pm8jjjSXlmuk2yl+4EL0gwnAp+yDERJoNDIlZsGu4MVRkU7CIfh0mQC AKF4IPVjVUyhgf8XVnkdvMfBN+eLWWGSUBnhQQHYcExXtFJQUwRh3fx+dQmjO6aR gRm+rJTlVFwsqDisX3s4FEjk8PtHT15MQdYEX4NvKfs1uEsV5/EIjxHuoezmfLm+ ln9T7/tI1CSleQEPzcarhfpmQz0ZUNcbsOMDlD36LiveWbDeyvDlw8NgNHo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:28:57 2025 by rpki-client