$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8ff6652-a8a9-40dd-8f1f-68cef44b91b3.roa File: b8ff6652-a8a9-40dd-8f1f-68cef44b91b3.roa (raw, json) Hash identifier: SHmUQ9HsFqiS1/NtikRma+ASDqn+CA0HQGaA9Tkftfk= Subject key identifier: A0:8A:FD:18:30:02:F4:03:2D:0E:92:68:C9:26:69:12:E3:F3:FB:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70C8DE0513B986EAAB42F82C13A5531400A89023 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8ff6652-a8a9-40dd-8f1f-68cef44b91b3.roa Signing time: Fri 25 Apr 2025 17:30:44 +0000 ROA not before: Fri 25 Apr 2025 17:30:44 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.84.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c8:de:05:13:b9:86:ea:ab:42:f8:2c:13:a5:53:14:00:a8:90:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 17:30:44 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=913d871836e92a9599047737030d826c2b592f54ef74d7da6e8f480dd4afcfe2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:67:12:57:db:64:c1:30:a3:58:3c:f7:3d: a3:d1:4c:09:b2:d5:d0:5f:d0:f7:f9:b8:32:c8:46: 2d:bd:d6:0f:a3:ae:ff:a5:5a:1b:1d:c4:82:5a:0b: ad:f2:b2:df:95:c1:ed:2b:d4:dd:f9:42:e7:6b:7a: 19:72:b8:a8:37:2a:01:71:2a:c3:32:d3:59:fe:73: 0c:71:76:9f:ca:cb:ee:25:a2:52:da:07:f1:98:fd: 90:dd:9a:4c:c6:03:ea:ad:c8:de:8c:a3:71:d2:e3: 49:76:2b:cf:3b:fc:1d:39:77:63:45:f0:a5:15:14: c1:9a:ca:64:2a:4e:66:1d:e8:89:f6:2f:51:2d:8f: 62:f7:0e:da:a7:c3:89:e3:19:ae:d6:34:27:35:45: f3:b4:d0:12:a7:d9:2c:84:7a:c6:24:8a:ce:c0:15: be:1e:e6:11:f6:b4:ae:3b:bf:50:74:6e:d0:77:43: 64:4f:5b:e5:bd:47:17:9b:b7:6d:a5:dd:7f:c7:a3: c5:9b:d6:3c:1a:7d:91:a7:75:5a:e1:ab:be:5a:ba: 35:59:e8:29:d3:d1:a3:0c:a8:58:79:da:89:55:97: 34:da:7a:fb:41:6e:a2:35:40:3a:c8:b6:2c:9c:48: 22:86:39:49:7e:be:0d:16:99:f1:ac:5f:23:67:9f: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8A:FD:18:30:02:F4:03:2D:0E:92:68:C9:26:69:12:E3:F3:FB:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8ff6652-a8a9-40dd-8f1f-68cef44b91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.84.0.0/15 Signature Algorithm: sha256WithRSAEncryption 28:c0:c0:0e:ad:8b:f9:5f:29:b0:fa:f1:27:b4:c0:29:7d:dd: 85:43:ac:17:c9:24:25:0c:f4:84:c0:bd:90:76:69:2e:09:0e: 21:55:6f:d3:c0:23:17:ab:ce:f8:51:0e:5d:cb:96:15:3f:61: 14:18:6d:6c:f3:26:00:ae:72:ef:0c:75:68:a1:2e:ff:c7:07: 2f:ad:36:b5:76:62:dd:40:29:77:36:cc:cc:cb:60:01:7b:54: f5:f8:e2:09:44:0d:3f:6b:14:0a:15:14:3d:fc:bb:67:2e:b3: fc:ec:dd:95:51:f0:e2:bd:f2:d5:06:a0:f6:f0:6e:5a:3a:af: a6:3b:a8:6a:74:42:2c:77:dc:91:c6:ad:8e:35:14:f0:d5:94: 79:93:96:81:1e:8d:dc:ac:e4:33:b0:77:75:c3:ba:23:75:7e: 9e:1a:87:5c:93:05:32:8a:09:55:22:ce:a8:30:bf:8c:4c:11: d8:af:b5:10:81:5c:f2:f6:72:c1:f2:c7:7a:2c:10:81:60:6a: 2a:dc:67:c3:cc:fa:e1:c3:95:2f:c9:c2:6e:40:67:d0:f9:85: 2c:72:b3:e2:49:6d:08:ff:8e:ab:2e:b9:76:20:6a:bd:9d:ae: cd:94:47:27:a9:76:03:bb:ef:51:28:99:51:bb:9b:70:88:8a: 8c:73:ed:94 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcMjeBRO5huqrQvgsE6VTFACokCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTczMDQ0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTNkODcxODM2ZTkyYTk1OTkwNDc3MzcwMzBkODI2YzJi NTkyZjU0ZWY3NGQ3ZGE2ZThmNDgwZGQ0YWZjZmUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk9WcSV9tkwTCjWDz3PaPRTAmy1dBf0Pf5uDLIRi291g+j rv+lWhsdxIJaC63yst+Vwe0r1N35QudrehlyuKg3KgFxKsMy01n+cwxxdp/Ky+4l olLaB/GY/ZDdmkzGA+qtyN6Mo3HS40l2K887/B05d2NF8KUVFMGaymQqTmYd6In2 L1Etj2L3Dtqnw4njGa7WNCc1RfO00BKn2SyEesYkis7AFb4e5hH2tK47v1B0btB3 Q2RPW+W9Rxebt22l3X/Ho8Wb1jwafZGndVrhq75aujVZ6CnT0aMMqFh52olVlzTa evtBbqI1QDrItiycSCKGOUl+vg0WmfGsXyNnn1sHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoIr9GDAC9AMtDpJoySZpEuPz+34wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4ZmY2NjUyLWE4YTktNDBkZC04ZjFmLTY4Y2VmNDRiOTFiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2VDANBgkqhkiG9w0BAQsFAAOCAQEAKMDADq2L+V8psPrxJ7TAKX3dhUOs F8kkJQz0hMC9kHZpLgkOIVVv08AjF6vO+FEOXcuWFT9hFBhtbPMmAK5y7wx1aKEu /8cHL602tXZi3UApdzbMzMtgAXtU9fjiCUQNP2sUChUUPfy7Zy6z/OzdlVHw4r3y 1Qag9vBuWjqvpjuoanRCLHfckcatjjUU8NWUeZOWgR6N3KzkM7B3dcO6I3V+nhqH XJMFMooJVSLOqDC/jEwR2K+1EIFc8vZywfLHeiwQgWBqKtxnw8z64cOVL8nCbkBn 0PmFLHKz4kltCP+Oqy65diBqvZ2uzZRHJ6l2A7vvUSiZUbubcIiKjHPtlA== -----END CERTIFICATE-----Generated at Sat Apr 26 17:36:18 2025 by rpki-client