$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc5f4fc5-08ab-4c07-88a3-25cf75c72179.roa File: bc5f4fc5-08ab-4c07-88a3-25cf75c72179.roa (raw, json) Hash identifier: NCDLgeUXZ1T2Cslo5ShdaeJvsV+JJm4taIjcGkrlATo= Subject key identifier: 2A:39:95:2B:D1:C2:CC:AE:4D:7A:F8:06:FA:32:D3:51:1C:EF:A0:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F9DF6E7B6E56DDA20E1DE41490FA8003BC5DD85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc5f4fc5-08ab-4c07-88a3-25cf75c72179.roa Signing time: Fri 18 Apr 2025 17:31:37 +0000 ROA not before: Fri 18 Apr 2025 17:31:37 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.243.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9d:f6:e7:b6:e5:6d:da:20:e1:de:41:49:0f:a8:00:3b:c5:dd:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:31:37 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=c07a4ba2e82baed8b0b2e0c4f9676132b860f10e5ffe6d9fe70f8d4da6829b08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:86:c4:0b:dd:06:e8:c8:36:d6:2c:55:2b: 11:76:c3:8c:cf:7e:1c:69:b8:37:1e:4d:ea:5d:57: 0a:d4:b9:4b:7a:50:15:75:6d:d9:9e:9d:b3:a1:b4: f7:28:99:e1:63:f1:2d:89:c5:2b:ea:ce:38:d3:b6: 63:91:6f:4f:d0:66:4a:1a:24:da:4f:5b:7d:4f:eb: 9e:c0:48:37:b0:cb:a0:56:70:14:b2:38:92:fa:05: 3e:0f:4c:f6:a8:87:64:c1:87:7b:ce:31:e7:65:16: 9a:0f:7a:27:e5:ce:f4:23:eb:48:a3:68:15:85:41: f8:ea:68:cd:75:38:ff:9a:24:ab:8e:78:2a:a8:4d: da:da:bc:bf:b5:78:1b:94:75:72:de:57:fa:cd:f5: ce:96:bf:3b:06:bb:0d:07:87:fc:0b:67:b5:74:9d: 16:92:55:e3:39:13:31:14:10:27:8b:bf:46:a8:38: 0b:e0:83:eb:b5:ab:36:a9:85:74:a4:f7:17:7e:61: 20:f3:e5:21:41:9c:40:a1:58:91:e9:f8:bd:fa:bc: b7:1c:14:ac:60:31:02:f0:c4:49:61:47:a9:ae:be: 39:bd:65:cf:1e:3a:56:2d:0a:ab:da:bc:a1:65:38: 8c:1e:d4:cc:e9:60:16:15:47:c2:6c:9f:cc:16:77: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:95:2B:D1:C2:CC:AE:4D:7A:F8:06:FA:32:D3:51:1C:EF:A0:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc5f4fc5-08ab-4c07-88a3-25cf75c72179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.243.28.0/22 Signature Algorithm: sha256WithRSAEncryption 03:40:d7:77:36:06:b1:8d:42:1d:66:ac:99:77:79:6f:f0:a6: 1c:af:39:d5:f1:43:26:aa:95:73:c1:f6:01:6a:d0:47:8e:a5: be:7a:c0:b9:bf:f1:f4:e4:8f:91:80:c5:b6:62:86:4d:ee:9f: d7:19:a7:72:4e:c8:11:3a:26:66:e8:46:64:00:b9:55:fe:dc: 87:ce:af:73:e3:cf:9f:25:a6:9d:1e:8a:e8:30:fc:20:0c:79: aa:f5:82:4b:db:62:4a:a1:c1:cb:75:69:2e:01:d4:d1:3c:55: 54:49:5b:f2:54:e3:af:5c:f5:db:67:c0:5f:bd:fa:12:44:2f: 05:49:42:95:17:36:bd:49:e2:d3:f3:68:46:5a:f6:7e:12:1f: e0:7e:37:02:bf:ee:ee:b7:f2:36:28:d3:6b:ae:7f:6b:12:d4: c2:35:10:aa:63:3f:1d:e1:30:bf:1a:f9:fd:11:47:85:d3:77: c0:27:7a:5d:2b:00:56:6d:2a:e7:b1:e8:64:34:6e:da:a3:b4: 50:99:6d:d8:a8:6b:f8:c3:4e:33:40:13:82:d9:f1:50:a0:1d: 80:6b:e1:37:a1:aa:78:ef:02:81:95:69:ea:97:3a:fa:cc:b0: cc:e4:70:04:1f:fe:9f:9e:cf:11:59:d5:9c:fd:f9:1f:39:8e: 0e:92:04:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb53257blbdog4d5BSQ+oADvF3YUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTczMTM3WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDdhNGJhMmU4MmJhZWQ4YjBiMmUwYzRmOTY3NjEzMmI4 NjBmMTBlNWZmZTZkOWZlNzBmOGQ0ZGE2ODI5YjA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8eobEC90G6Mg21ixVKxF2w4zPfhxpuDceTepdVwrUuUt6 UBV1bdmenbOhtPcomeFj8S2JxSvqzjjTtmORb0/QZkoaJNpPW31P657ASDewy6BW cBSyOJL6BT4PTPaoh2TBh3vOMedlFpoPeiflzvQj60ijaBWFQfjqaM11OP+aJKuO eCqoTdravL+1eBuUdXLeV/rN9c6WvzsGuw0Hh/wLZ7V0nRaSVeM5EzEUECeLv0ao OAvgg+u1qzaphXSk9xd+YSDz5SFBnEChWJHp+L36vLccFKxgMQLwxElhR6muvjm9 Zc8eOlYtCqvavKFlOIwe1MzpYBYVR8Jsn8wWd+LzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKjmVK9HCzK5NevgG+jLTURzvoMcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JjNWY0ZmM1LTA4YWItNGMwNy04OGEzLTI1Y2Y3NWM3MjE3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28xwwDQYJKoZIhvcNAQELBQADggEBAANA13c2BrGNQh1mrJl3eW/wphyv OdXxQyaqlXPB9gFq0EeOpb56wLm/8fTkj5GAxbZihk3un9cZp3JOyBE6JmboRmQA uVX+3IfOr3Pjz58lpp0eiugw/CAMear1gkvbYkqhwct1aS4B1NE8VVRJW/JU469c 9dtnwF+9+hJELwVJQpUXNr1J4tPzaEZa9n4SH+B+NwK/7u638jYo02uuf2sS1MI1 EKpjPx3hML8a+f0RR4XTd8Anel0rAFZtKuex6GQ0btqjtFCZbdioa/jDTjNAE4LZ 8VCgHYBr4TehqnjvAoGVaeqXOvrMsMzkcAQf/p+ezxFZ1Zz9+R85jg6SBC0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:49:04 2025 by rpki-client