$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbf767d0-75af-450b-9ff3-d4b2b7f9941d.roa File: cbf767d0-75af-450b-9ff3-d4b2b7f9941d.roa (raw, json) Hash identifier: +QzmIPqmsC7sTTUUC+5UJzvGPvIIhDpg9e4VcSnRD4w= Subject key identifier: 96:BF:18:3A:41:32:B8:15:2B:4C:7A:C8:02:29:74:1B:61:A3:47:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3946AEF6D1AC91514C0558FA763C640C754B7F1B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbf767d0-75af-450b-9ff3-d4b2b7f9941d.roa Signing time: Mon 14 Apr 2025 16:50:19 +0000 ROA not before: Mon 14 Apr 2025 16:50:19 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.161.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:46:ae:f6:d1:ac:91:51:4c:05:58:fa:76:3c:64:0c:75:4b:7f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:50:19 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=c58a09cf89dc3a058916e5399fed126758fe568e48bb7953e03b054919a6b044, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:51:0d:e0:56:fa:78:45:59:cc:3e:1d:af: 1b:8e:79:ae:87:7a:b7:a0:59:1c:6f:93:e2:45:8b: d6:3a:6f:db:4a:38:e9:e4:44:25:ec:7b:97:40:6e: f8:7c:13:7c:bd:e0:8f:2b:41:ec:77:b2:b6:b3:ee: 94:6d:93:b5:aa:6d:23:01:b3:cf:16:a0:8f:4d:be: eb:bf:2e:a1:80:74:79:a9:6a:59:19:e8:a1:1e:37: 31:c5:b3:2f:62:3d:c6:cf:71:d1:3e:a2:6d:69:d6: f8:bb:7c:f5:f7:03:5f:5c:30:8b:c2:ac:58:24:46: f7:40:a4:47:ac:8d:b2:cf:6b:8d:d1:92:73:08:bd: c1:24:8f:cc:07:2f:86:7b:eb:ae:95:45:d0:a8:6f: 91:f4:5a:f8:00:28:09:9e:92:35:16:75:a0:c1:52: 7e:97:88:ba:c8:76:00:2f:ff:ff:3a:f1:83:df:08: 08:17:e9:21:9a:b0:2b:5d:eb:3d:82:1b:07:eb:3a: 01:9f:ed:5d:de:4c:2e:47:5a:6d:b3:d3:6b:ea:63: de:ef:dc:5e:23:8f:b1:fa:c4:7b:61:71:9a:83:bb: 7f:f5:bf:82:43:06:35:03:fd:7d:e8:1d:2c:e3:03: 97:2f:ca:29:7f:fc:72:43:19:27:3c:06:2a:c1:b3: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:18:3A:41:32:B8:15:2B:4C:7A:C8:02:29:74:1B:61:A3:47:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbf767d0-75af-450b-9ff3-d4b2b7f9941d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.161.128.0/17 Signature Algorithm: sha256WithRSAEncryption a2:ad:7b:86:5b:b7:52:36:65:95:43:9b:a2:01:88:86:18:23: 87:e4:ae:ab:33:d2:2d:0b:0a:f4:fa:8f:bb:d1:a9:df:9f:98: 2d:75:51:a2:28:de:ce:23:ea:7e:e6:1a:5f:fc:8c:39:bb:8d: a3:73:33:15:7c:38:66:21:4e:ce:93:96:6e:10:97:38:58:40: 5f:3a:13:b6:71:35:de:c9:ca:db:47:a9:9d:db:49:69:12:61: 4c:0a:8a:c7:26:8c:6e:6e:15:da:ff:8f:94:62:67:9c:68:66: 3f:f9:f0:eb:0a:8c:d6:aa:39:54:86:50:c1:cc:47:7a:40:9d: ff:93:bf:55:c3:f0:d5:85:75:cd:7d:5f:86:b1:a7:c4:40:68: de:26:e3:15:06:e5:b3:81:7b:e7:7e:46:2a:6e:9d:7f:0f:65: e1:44:93:ba:30:bb:6c:16:46:14:c9:15:5f:36:19:fb:43:fb: 7e:4c:37:ed:04:a0:30:dd:7d:09:7e:f5:12:a2:2f:56:bd:67: 66:17:24:b0:22:b9:7b:dc:c6:d7:22:bd:38:0c:e8:25:6a:a4: 64:d1:ee:53:59:7b:ce:6e:47:b6:d1:ea:bc:bf:c7:22:09:1d: f3:74:26:2c:ae:1e:3f:94:80:10:25:c9:78:40:1f:3e:27:b9: e7:8d:8f:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOUau9tGskVFMBVj6djxkDHVLfxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTY1MDE5WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNThhMDljZjg5ZGMzYTA1ODkxNmU1Mzk5ZmVkMTI2NzU4 ZmU1NjhlNDhiYjc5NTNlMDNiMDU0OTE5YTZiMDQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnkFEN4Fb6eEVZzD4drxuOea6HeregWRxvk+JFi9Y6b9tK OOnkRCXse5dAbvh8E3y94I8rQex3sraz7pRtk7WqbSMBs88WoI9Nvuu/LqGAdHmp alkZ6KEeNzHFsy9iPcbPcdE+om1p1vi7fPX3A19cMIvCrFgkRvdApEesjbLPa43R knMIvcEkj8wHL4Z7666VRdCob5H0WvgAKAmekjUWdaDBUn6XiLrIdgAv//868YPf CAgX6SGasCtd6z2CGwfrOgGf7V3eTC5HWm2z02vqY97v3F4jj7H6xHthcZqDu3/1 v4JDBjUD/X3oHSzjA5cvyil//HJDGSc8BirBswShAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlr8YOkEyuBUrTHrIAil0G2GjR4MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiZjc2N2QwLTc1YWYtNDUwYi05ZmYzLWQ0YjJiN2Y5OTQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2oYAwDQYJKoZIhvcNAQELBQADggEBAKKte4Zbt1I2ZZVDm6IBiIYYI4fk rqsz0i0LCvT6j7vRqd+fmC11UaIo3s4j6n7mGl/8jDm7jaNzMxV8OGYhTs6Tlm4Q lzhYQF86E7ZxNd7JyttHqZ3bSWkSYUwKiscmjG5uFdr/j5RiZ5xoZj/58OsKjNaq OVSGUMHMR3pAnf+Tv1XD8NWFdc19X4axp8RAaN4m4xUG5bOBe+d+RipunX8PZeFE k7owu2wWRhTJFV82GftD+35MN+0EoDDdfQl+9RKiL1a9Z2YXJLAiuXvcxtcivTgM 6CVqpGTR7lNZe85uR7bR6ry/xyIJHfN0JiyuHj+UgBAlyXhAHz4nueeNj6M= -----END CERTIFICATE-----Generated at Sat Apr 26 17:37:57 2025 by rpki-client