$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa File: c23cc3c2-e83d-490c-955a-29d56b95286e.roa (raw, json) Hash identifier: MK7xPVHFgnRP3Map3+wQ7nmDbyKzS1vRaESrQYZgw88= Subject key identifier: E5:D3:34:FF:EC:01:90:8F:CB:69:6A:8C:6E:C4:C9:B2:3E:0B:8E:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42538D598CC1B892D394DC787B9E71FEF61DCBC4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa Signing time: Fri 18 Apr 2025 15:00:26 +0000 ROA not before: Fri 18 Apr 2025 15:00:26 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.156.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:53:8d:59:8c:c1:b8:92:d3:94:dc:78:7b:9e:71:fe:f6:1d:cb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:00:26 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=4473256e5e53d27e5790e56e84439644e36f0a9a45a90ceca913d1503caaa072, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:f6:e1:14:f3:a3:69:05:4b:1a:1b:2f:1b: e3:ad:9b:2c:a6:fd:14:4d:bd:40:10:67:14:0d:46: e2:12:30:4c:42:81:eb:4d:03:30:2b:37:f6:27:21: f2:d5:da:ab:22:f5:6d:e7:ba:2c:20:05:e5:6b:61: 5e:51:4e:d1:51:55:ee:3a:0e:67:e0:0c:60:10:01: 2a:10:8a:e4:bd:60:d7:f5:42:b7:15:a8:87:f9:ce: 73:1c:33:f3:94:f7:78:6b:f2:82:f0:ff:a2:c5:c4: b2:ee:fe:73:d3:82:a2:a6:03:dc:51:7e:ae:80:72: 2b:35:a7:c2:b4:bc:59:a3:b8:7b:76:3b:f4:cb:42: 23:96:ab:b5:dc:59:09:bc:9a:57:07:94:b4:ff:41: f8:21:de:a2:da:fb:06:fc:be:bb:55:ef:f8:db:02: 77:fe:2f:1d:b3:24:05:ec:cf:39:8c:c1:c5:62:71: 79:da:bc:a6:b9:ec:74:5b:89:d9:a9:83:f7:66:23: 89:4a:0f:82:a9:d4:ad:4f:3f:91:ca:e5:0f:71:63: e9:cc:60:03:92:79:f5:9f:bd:f2:bd:72:31:51:2e: ea:4e:7b:84:68:32:01:cf:74:a5:b3:93:69:8a:1d: 79:dd:74:06:fa:27:95:c4:32:e5:05:39:f2:af:6f: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D3:34:FF:EC:01:90:8F:CB:69:6A:8C:6E:C4:C9:B2:3E:0B:8E:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.0.0/24 Signature Algorithm: sha256WithRSAEncryption 77:d9:fe:40:49:c5:31:f4:74:bb:56:0a:00:d2:9a:75:82:3a: 6a:97:ef:0e:39:2e:39:9f:8f:bc:38:b0:0e:7e:07:fe:94:41: e2:8f:ec:e7:40:23:f4:ce:ad:85:2c:59:9d:60:75:f8:af:f6: 2a:94:1a:16:f7:1a:e1:6b:46:6d:28:a4:0d:89:f0:55:3b:54: f5:aa:93:85:37:63:fd:be:2d:97:ef:cc:8f:7c:86:7a:30:a0: 19:5f:6b:c7:5f:9a:3a:7a:9d:f6:f2:ab:12:08:c5:02:2b:97: 74:e5:be:2d:e4:49:fe:af:71:dd:79:11:e3:88:10:26:bb:e1: 56:d8:f1:55:fe:5c:40:e7:73:fe:fe:32:a4:42:b6:54:1c:eb: 87:54:fc:48:9e:ea:d0:c8:a4:05:4a:40:4f:6b:11:58:4b:bc: e9:87:f5:f1:07:d1:45:86:73:2c:c6:e3:48:20:7b:bd:bf:65: 21:fd:e8:f7:a6:23:33:c9:19:c2:ae:a3:b2:6f:94:ad:eb:77: 33:3f:9b:ea:2a:62:f9:cc:70:4a:40:76:30:6c:84:73:88:d7: 6f:1d:22:a9:97:70:07:ed:7a:bd:05:29:39:35:a9:56:13:ce: 7e:0e:22:8f:9d:8e:5d:09:5f:dc:29:11:eb:72:0f:09:56:6e: 44:3a:03:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQlONWYzBuJLTlNx4e55x/vYdy8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUwMDI2WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDczMjU2ZTVlNTNkMjdlNTc5MGU1NmU4NDQzOTY0NGUz NmYwYTlhNDVhOTBjZWNhOTEzZDE1MDNjYWFhMDcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8qPbhFPOjaQVLGhsvG+Otmyym/RRNvUAQZxQNRuISMExC getNAzArN/YnIfLV2qsi9W3nuiwgBeVrYV5RTtFRVe46DmfgDGAQASoQiuS9YNf1 QrcVqIf5znMcM/OU93hr8oLw/6LFxLLu/nPTgqKmA9xRfq6Acis1p8K0vFmjuHt2 O/TLQiOWq7XcWQm8mlcHlLT/Qfgh3qLa+wb8vrtV7/jbAnf+Lx2zJAXszzmMwcVi cXnavKa57HRbidmpg/dmI4lKD4Kp1K1PP5HK5Q9xY+nMYAOSefWfvfK9cjFRLupO e4RoMgHPdKWzk2mKHXnddAb6J5XEMuUFOfKvb4qrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5dM0/+wBkI/LaWqMbsTJsj4Ljv0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyM2NjM2MyLWU4M2QtNDkwYy05NTVhLTI5ZDU2Yjk1Mjg2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2nAAwDQYJKoZIhvcNAQELBQADggEBAHfZ/kBJxTH0dLtWCgDSmnWCOmqX 7w45Ljmfj7w4sA5+B/6UQeKP7OdAI/TOrYUsWZ1gdfiv9iqUGhb3GuFrRm0opA2J 8FU7VPWqk4U3Y/2+LZfvzI98hnowoBlfa8dfmjp6nfbyqxIIxQIrl3Tlvi3kSf6v cd15EeOIECa74VbY8VX+XEDnc/7+MqRCtlQc64dU/Eie6tDIpAVKQE9rEVhLvOmH 9fEH0UWGcyzG40gge72/ZSH96PemIzPJGcKuo7JvlK3rdzM/m+oqYvnMcEpAdjBs hHOI128dIqmXcAfter0FKTk1qVYTzn4OIo+djl0JX9wpEetyDwlWbkQ6A7E= -----END CERTIFICATE-----Generated at Sat Apr 26 18:27:08 2025 by rpki-client