$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdfc88b5-8e79-48c9-ad1e-e985a75d5956.roa File: bdfc88b5-8e79-48c9-ad1e-e985a75d5956.roa (raw, json) Hash identifier: SXrLsRxKkbMuhHXAyjvGu+i4f0UJKzDT+nTa0Tt2ykM= Subject key identifier: 6B:6E:08:ED:3C:40:1F:D8:08:72:56:05:35:E8:58:4D:8A:47:C9:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F64EEB89675F3FFCD0212CF04773EF24EC7F185 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdfc88b5-8e79-48c9-ad1e-e985a75d5956.roa Signing time: Fri 18 Apr 2025 15:02:07 +0000 ROA not before: Fri 18 Apr 2025 15:02:07 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.146.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:64:ee:b8:96:75:f3:ff:cd:02:12:cf:04:77:3e:f2:4e:c7:f1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:02:07 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=ef95d9436c0c1f283bd2116e847fbb2c1243ac9d413217b32a0c17e10f697722, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:36:5f:ca:19:6f:08:65:83:8c:e4:4b:b4: ed:ea:a5:aa:8f:5d:83:62:23:7f:49:2e:b0:b2:56: 2b:d0:ba:66:32:71:be:e8:15:e0:e0:f3:cd:a4:76: d0:13:a4:09:36:51:fd:05:48:07:cc:cc:41:c4:05: 62:ab:74:4a:64:5b:9d:16:c0:7b:12:a9:37:a0:97: 62:44:ce:07:ff:08:15:06:71:81:f4:21:7a:38:ca: 85:b4:bc:d2:12:b2:51:0d:c0:28:ab:29:7a:0b:65: 6f:bc:f3:9a:de:99:3d:db:17:f8:db:fd:9c:e8:18: 7f:1b:58:e8:0c:cb:cd:f9:a2:8c:b2:6d:da:63:1f: 15:62:90:2d:3d:ac:a3:5c:f7:d1:35:b7:dc:23:45: 85:b8:65:9d:49:90:81:e6:32:c6:5f:53:c1:d4:d3: 97:da:9d:34:0b:53:a8:a4:cc:43:6c:80:85:c6:07: 8b:4e:4b:03:ae:96:32:2b:97:4c:07:82:f8:3b:59: f4:40:f8:bc:b8:09:82:fd:f0:6f:47:1a:ca:2f:b5: 02:3d:e0:b7:a4:79:b9:70:0c:80:72:96:13:5a:04: 2f:03:09:29:a7:bd:2b:5e:95:70:dc:57:2d:7c:c7: af:e1:3f:bd:e7:22:33:e9:f5:2f:b2:7e:4e:3c:de: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:08:ED:3C:40:1F:D8:08:72:56:05:35:E8:58:4D:8A:47:C9:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdfc88b5-8e79-48c9-ad1e-e985a75d5956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.146.64.0/19 Signature Algorithm: sha256WithRSAEncryption 88:a4:2d:0e:82:76:de:e9:57:33:6b:88:e0:c9:4c:fe:78:b5: 4d:67:bd:1a:06:0b:89:81:e5:bd:1a:13:3f:56:53:f0:0c:80: 0c:94:54:a7:3b:9b:a1:34:0e:de:fe:2a:e2:22:6c:5b:9e:d2: f1:6b:06:45:88:db:2b:b1:78:22:11:c7:f6:31:d2:31:c2:e1: d4:e1:db:ef:b5:98:c1:bc:e7:ba:67:82:d9:81:9d:81:05:df: 02:d1:3d:05:75:7f:24:28:b9:d2:6d:8a:98:18:43:b1:ef:ad: ce:a9:57:a9:f0:50:48:8a:ce:bc:8a:1e:e2:bc:02:fa:9c:00: 5f:67:6c:c8:e2:7e:72:64:2b:4e:67:b6:d9:39:1c:05:3e:99: 5b:93:2c:5f:7a:03:a6:74:77:4d:f7:8e:ef:a9:f5:6d:fc:de: 0c:a6:59:3c:88:28:aa:cf:bc:7f:8d:56:d9:56:41:a9:b5:ab: 0d:60:37:c2:71:f8:3a:26:02:d6:4e:74:7e:74:f2:7d:e1:00: ef:67:73:a9:13:27:91:ac:fa:d4:19:aa:bf:f9:26:81:a0:dc: 73:5f:b0:cf:e5:48:d1:25:3b:e6:90:bc:91:31:f1:78:92:cc: f4:8c:d2:90:5f:ff:b4:7c:02:90:3f:55:4f:3d:83:eb:cb:50: 15:11:f2:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD2TuuJZ18//NAhLPBHc+8k7H8YUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUwMjA3WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjk1ZDk0MzZjMGMxZjI4M2JkMjExNmU4NDdmYmIyYzEy NDNhYzlkNDEzMjE3YjMyYTBjMTdlMTBmNjk3NzIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJBTZfyhlvCGWDjORLtO3qpaqPXYNiI39JLrCyVivQumYy cb7oFeDg882kdtATpAk2Uf0FSAfMzEHEBWKrdEpkW50WwHsSqTegl2JEzgf/CBUG cYH0IXo4yoW0vNISslENwCirKXoLZW+885remT3bF/jb/ZzoGH8bWOgMy835ooyy bdpjHxVikC09rKNc99E1t9wjRYW4ZZ1JkIHmMsZfU8HU05fanTQLU6ikzENsgIXG B4tOSwOuljIrl0wHgvg7WfRA+Ly4CYL98G9HGsovtQI94LekeblwDIBylhNaBC8D CSmnvStelXDcVy18x6/hP73nIjPp9S+yfk483r5vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa24I7TxAH9gIclYFNehYTYpHydUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkZmM4OGI1LThlNzktNDhjOS1hZDFlLWU5ODVhNzVkNTk1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2kkAwDQYJKoZIhvcNAQELBQADggEBAIikLQ6Cdt7pVzNriODJTP54tU1n vRoGC4mB5b0aEz9WU/AMgAyUVKc7m6E0Dt7+KuIibFue0vFrBkWI2yuxeCIRx/Yx 0jHC4dTh2++1mMG857pngtmBnYEF3wLRPQV1fyQoudJtipgYQ7Hvrc6pV6nwUEiK zryKHuK8AvqcAF9nbMjifnJkK05nttk5HAU+mVuTLF96A6Z0d033ju+p9W383gym WTyIKKrPvH+NVtlWQam1qw1gN8Jx+DomAtZOdH508n3hAO9nc6kTJ5Gs+tQZqr/5 JoGg3HNfsM/lSNElO+aQvJEx8XiSzPSM0pBf/7R8ApA/VU89g+vLUBUR8t0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:11 2025 by rpki-client