$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa File: cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa (raw, json) Hash identifier: GJN4i00UUY91GhQ9o1IPAEK3Qp04vfIOwU+tC/ce1Dc= Subject key identifier: 25:AC:93:03:EF:69:D4:80:2B:D9:CA:83:03:04:2C:6F:8F:A5:1C:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 106EE024DB77E18F7BEF1BBD768DE23498883897 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa Signing time: Mon 14 Apr 2025 16:21:00 +0000 ROA not before: Mon 14 Apr 2025 16:21:00 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.13.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6e:e0:24:db:77:e1:8f:7b:ef:1b:bd:76:8d:e2:34:98:88:38:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:21:00 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=7b1e4d748fb89aed1db5ded58075bd0b7b911f7ce85a9b4d899abdc430431614, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:ab:f0:10:d0:7a:70:5c:c9:48:9a:68:10: 09:1d:b1:26:df:e3:61:fe:f5:d0:c9:42:48:b0:b4: c7:36:59:0f:70:da:8a:14:f7:59:6e:02:3f:1f:d3: 69:96:81:10:d5:07:13:88:7c:c9:91:79:af:92:97: 5a:d5:e4:b7:8a:27:0e:e2:27:d1:58:fe:e6:da:c9: e8:17:b1:e8:ef:0d:42:46:ef:cc:1b:a0:77:46:70: b4:eb:f5:64:cb:4e:55:70:ba:50:ce:01:43:3c:b1: 1e:cf:79:57:a4:d1:7f:d5:fe:6b:f2:67:e3:85:94: 76:3f:81:4d:cb:97:fe:90:db:7f:b2:a2:2e:38:2e: 60:c0:ae:52:c3:c2:85:7b:0a:ef:5a:27:19:dd:9d: 10:cf:7f:30:88:07:65:9e:22:1e:1e:a6:d0:f0:00: ea:bf:b0:18:5b:62:37:de:8b:d5:03:63:84:b6:df: ae:d9:7d:93:41:7c:52:4c:52:93:f1:35:df:5b:d4: 6f:8f:17:d5:65:00:f7:1f:6d:2b:9a:0d:74:73:38: fb:5e:2e:e0:47:63:bc:d9:a7:a8:37:b8:16:97:31: dc:3d:ac:85:cd:ff:b1:6d:42:e9:0f:91:a2:eb:7d: 66:42:db:8e:63:8f:b8:9e:51:49:4b:2e:e4:ba:bd: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:93:03:EF:69:D4:80:2B:D9:CA:83:03:04:2C:6F:8F:A5:1C:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc159d3e-cc4a-4d16-a129-ff2bd172215a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.13.255.0/24 Signature Algorithm: sha256WithRSAEncryption 74:90:89:ce:ff:a4:bf:c0:cc:43:9d:03:21:b5:6a:56:66:bc: b4:66:bc:d1:a8:22:be:64:64:a8:26:92:8a:3f:7d:1c:34:50: cc:b5:d0:60:a5:42:c6:e8:bb:ea:b9:75:a2:66:3d:10:8a:2b: e9:62:f9:21:c0:a1:b8:e8:07:ef:97:71:1d:84:34:10:36:53: 07:7a:55:ab:df:72:93:0a:5a:93:a3:9b:ec:0d:60:73:66:e0: e1:22:a1:17:90:e8:53:34:1f:ad:f8:94:1b:a4:76:83:df:ba: a5:5d:9c:be:e8:71:8f:67:29:b4:84:6c:47:c3:df:c2:7a:67: 4d:e4:53:cc:f8:bd:c3:f9:45:5c:33:07:51:17:28:10:b0:15: c4:25:48:4c:31:ab:eb:a7:0c:d6:73:9b:fc:75:f3:ce:39:11: 28:25:dd:9e:ba:ee:06:55:0a:9b:6d:76:74:5f:fe:1b:05:da: 2c:b1:1b:dd:c9:89:46:8e:af:d1:e1:9d:94:25:66:6e:fa:9e: b0:94:95:d7:f6:67:e1:c9:65:23:07:42:ad:d4:17:8e:fe:e8: 5e:c1:78:15:35:c4:21:7c:eb:5e:70:52:fa:49:e2:8c:27:b9: d8:cc:52:c5:58:79:51:b8:e1:07:3f:46:de:18:1e:50:c8:71: b0:b0:07:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEG7gJNt34Y977xu9do3iNJiIOJcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTYyMTAwWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjFlNGQ3NDhmYjg5YWVkMWRiNWRlZDU4MDc1YmQwYjdi OTExZjdjZTg1YTliNGQ4OTlhYmRjNDMwNDMxNjE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWkKvwENB6cFzJSJpoEAkdsSbf42H+9dDJQkiwtMc2WQ9w 2ooU91luAj8f02mWgRDVBxOIfMmRea+Sl1rV5LeKJw7iJ9FY/ubayegXsejvDUJG 78wboHdGcLTr9WTLTlVwulDOAUM8sR7PeVek0X/V/mvyZ+OFlHY/gU3Ll/6Q23+y oi44LmDArlLDwoV7Cu9aJxndnRDPfzCIB2WeIh4eptDwAOq/sBhbYjfei9UDY4S2 367ZfZNBfFJMUpPxNd9b1G+PF9VlAPcfbSuaDXRzOPteLuBHY7zZp6g3uBaXMdw9 rIXN/7FtQukPkaLrfWZC245jj7ieUUlLLuS6vXL5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJayTA+9p1IAr2cqDAwQsb4+lHCMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjMTU5ZDNlLWNjNGEtNGQxNi1hMTI5LWZmMmJkMTcyMjE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0Df8wDQYJKoZIhvcNAQELBQADggEBAHSQic7/pL/AzEOdAyG1alZmvLRm vNGoIr5kZKgmkoo/fRw0UMy10GClQsbou+q5daJmPRCKK+li+SHAobjoB++XcR2E NBA2Uwd6VavfcpMKWpOjm+wNYHNm4OEioReQ6FM0H634lBukdoPfuqVdnL7ocY9n KbSEbEfD38J6Z03kU8z4vcP5RVwzB1EXKBCwFcQlSEwxq+unDNZzm/x18845ESgl 3Z667gZVCpttdnRf/hsF2iyxG93JiUaOr9HhnZQlZm76nrCUldf2Z+HJZSMHQq3U F47+6F7BeBU1xCF8615wUvpJ4ownudjMUsVYeVG44Qc/Rt4YHlDIcbCwB44= -----END CERTIFICATE-----Generated at Sat Apr 26 12:48:26 2025 by rpki-client