$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d5a6-e34b-4a81-b0af-0086403a4911.roa File: cef8d5a6-e34b-4a81-b0af-0086403a4911.roa (raw, json) Hash identifier: EYp3NOmNv4nrQUeESohjVbxZzHk6/Nr6LV8HSLOWk8U= Subject key identifier: 16:87:81:E8:AA:FA:98:E4:C4:C1:2A:B3:F1:BA:A3:82:37:02:DB:B0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4775B48E5BF4F046FCF889910B94FEBA0BDB93F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d5a6-e34b-4a81-b0af-0086403a4911.roa Signing time: Fri 25 Apr 2025 16:31:36 +0000 ROA not before: Fri 25 Apr 2025 16:31:36 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.253.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:75:b4:8e:5b:f4:f0:46:fc:f8:89:91:0b:94:fe:ba:0b:db:93:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:31:36 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=fbe4f50af35f888cf2afe70c947791d3cfadaccfbfe141f00926fd289792f09b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:1b:ca:02:8e:b5:56:85:af:35:c8:64:ba: f6:9b:b4:fc:2f:e9:1f:f0:d9:aa:1a:39:b1:a7:98: 5c:06:5e:c6:cd:29:b2:64:30:51:9b:b1:34:0a:29: 0b:0b:20:55:c4:40:eb:22:79:25:74:8a:b5:b6:50: 6a:b2:b7:38:22:87:c6:12:0a:97:d3:23:7d:00:5a: 4f:e4:7c:e0:16:e6:f1:d1:ef:55:8f:46:3f:98:a0: af:dc:10:61:62:6a:a9:df:74:f4:7a:6b:ab:c3:99: 60:8a:be:1b:e6:e4:92:17:25:8c:fa:4b:5e:f4:68: 30:b6:f7:40:ff:16:6e:05:a5:8e:fb:b5:c1:16:c5: 67:39:83:de:8f:a0:c6:5e:b2:0d:c8:75:e0:ef:10: 0e:2f:cc:39:b1:57:de:e0:57:80:69:66:93:b7:28: ac:72:93:c9:19:d0:2d:62:21:3e:62:f9:b6:db:41: a1:3d:c9:7e:d3:18:13:e0:0b:d1:f5:06:95:2e:8e: 8e:e0:7a:73:ec:c9:73:a2:56:6b:31:91:32:e4:77: 1d:f4:1f:9f:8e:7c:44:9c:76:2a:a9:c4:21:64:65: 14:4d:d3:93:8c:56:c7:a1:cb:c6:6f:73:d2:d6:01: 02:e6:e3:56:51:62:38:ab:8c:63:19:68:43:e0:2d: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:87:81:E8:AA:FA:98:E4:C4:C1:2A:B3:F1:BA:A3:82:37:02:DB:B0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d5a6-e34b-4a81-b0af-0086403a4911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.253.1.0/24 Signature Algorithm: sha256WithRSAEncryption 73:8d:70:a1:29:82:e8:6e:e4:a3:24:94:1d:48:10:e0:37:8d: 27:98:6a:28:4f:00:fa:c6:f3:f6:6b:b6:9b:ec:e0:86:e7:b7: 6b:f0:5f:59:94:67:2a:0a:f8:91:9d:3a:6f:01:5d:9e:03:e9: e2:31:5b:cf:5e:85:62:ca:31:7f:4b:34:88:ef:13:20:a5:4d: e3:6b:15:7a:30:80:27:ec:13:2d:e6:0a:8b:43:a1:a0:90:b8: 7f:d2:43:4f:66:9b:eb:f5:6d:f3:03:f2:95:3a:31:b1:45:e1: 15:63:9d:bb:1f:69:ad:23:60:b3:5d:42:83:00:fe:87:e0:47: 9f:37:72:2b:ad:f1:61:f0:3e:99:94:d7:93:a0:ec:2a:ec:e5: 6c:94:50:73:82:a1:84:99:ab:56:16:71:4c:0e:f7:a3:32:62: 85:c6:1f:08:70:bc:fc:ff:f3:96:49:65:2b:1d:d1:cb:ce:0f: 73:de:13:ab:c5:58:36:a2:fb:28:b3:37:6d:1f:90:d0:89:80: f6:23:ed:bb:6d:71:da:27:c9:5d:08:50:01:f3:e9:e6:b8:c7: 1a:bb:d0:75:b6:1c:4a:53:e8:b3:0e:47:7c:5d:75:fd:86:5c: 68:aa:d2:66:c3:be:02:9c:26:50:4a:4e:c2:68:f8:94:d0:5f: 21:51:59:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR3W0jlv08Eb8+ImRC5T+ugvbk/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYzMTM2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmU0ZjUwYWYzNWY4ODhjZjJhZmU3MGM5NDc3OTFkM2Nm YWRhY2NmYmZlMTQxZjAwOTI2ZmQyODk3OTJmMDliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOwBvKAo61VoWvNchkuvabtPwv6R/w2aoaObGnmFwGXsbN KbJkMFGbsTQKKQsLIFXEQOsieSV0irW2UGqytzgih8YSCpfTI30AWk/kfOAW5vHR 71WPRj+YoK/cEGFiaqnfdPR6a6vDmWCKvhvm5JIXJYz6S170aDC290D/Fm4FpY77 tcEWxWc5g96PoMZesg3IdeDvEA4vzDmxV97gV4BpZpO3KKxyk8kZ0C1iIT5i+bbb QaE9yX7TGBPgC9H1BpUujo7genPsyXOiVmsxkTLkdx30H5+OfEScdiqpxCFkZRRN 05OMVsehy8Zvc9LWAQLm41ZRYjirjGMZaEPgLUnLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFoeB6Kr6mOTEwSqz8bqjgjcC27AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlZjhkNWE2LWUzNGItNGE4MS1iMGFmLTAwODY0MDNhNDkxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS/QEwDQYJKoZIhvcNAQELBQADggEBAHONcKEpguhu5KMklB1IEOA3jSeY aihPAPrG8/Zrtpvs4Ibnt2vwX1mUZyoK+JGdOm8BXZ4D6eIxW89ehWLKMX9LNIjv EyClTeNrFXowgCfsEy3mCotDoaCQuH/SQ09mm+v1bfMD8pU6MbFF4RVjnbsfaa0j YLNdQoMA/ofgR583ciut8WHwPpmU15Og7Crs5WyUUHOCoYSZq1YWcUwO96MyYoXG HwhwvPz/85ZJZSsd0cvOD3PeE6vFWDai+yizN20fkNCJgPYj7bttcdonyV0IUAHz 6ea4xxq70HW2HEpT6LMOR3xddf2GXGiq0mbDvgKcJlBKTsJo+JTQXyFRWf0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:00 2025 by rpki-client