$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2ca5e0c-b0a7-4f5f-8862-6095b976ffa4.roa File: d2ca5e0c-b0a7-4f5f-8862-6095b976ffa4.roa (raw, json) Hash identifier: CsoMxxk7yWQcjUMK98KY/Oeo8rClFtDkI9Z6PjUuNqA= Subject key identifier: 4E:85:D2:25:9E:4C:4E:47:98:46:C7:70:E7:CB:D4:25:57:C4:B0:DB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2E99993B6E7D468518284A4E16F4C47FBF38E2ED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2ca5e0c-b0a7-4f5f-8862-6095b976ffa4.roa Signing time: Fri 18 Apr 2025 15:10:20 +0000 ROA not before: Fri 18 Apr 2025 15:10:20 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.155.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:99:99:3b:6e:7d:46:85:18:28:4a:4e:16:f4:c4:7f:bf:38:e2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:10:20 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=434112aa3ab26907b1a6b85e410f288c871526d98ee67b61800c099d4dedfc02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:d8:f5:a2:7d:0d:79:d0:f8:f9:28:70:e1: ec:73:59:14:bd:45:fd:28:41:72:f9:cd:ac:29:e3: e1:4c:32:bc:a7:4b:b1:04:f0:0a:a1:48:10:e3:a0: d1:7a:8a:21:ac:7e:06:15:87:dc:f5:12:6d:bb:ea: c9:86:5b:0c:76:cd:c3:b5:6f:04:be:5e:d3:64:43: 7e:98:e7:89:fe:a3:b9:2e:e9:7f:69:d8:9f:9f:9f: 6d:c6:73:61:3f:28:8f:9e:c3:a8:f2:f1:17:0c:d8: a4:47:c7:29:99:6f:97:3f:6c:cc:a4:45:2b:44:f5: cc:2b:62:f9:9e:dd:e4:89:67:c3:c8:af:fa:a6:34: d8:07:2e:a7:5a:62:67:2f:97:6d:9c:9e:a4:57:a7: f0:96:72:c9:59:18:20:83:89:7d:ce:62:d8:67:0d: c9:06:86:fd:71:2c:78:60:00:c5:20:97:df:a4:0d: 13:b4:b4:d9:b6:6d:ab:c4:fe:0a:97:89:98:2b:a6: a9:84:dd:f1:93:d4:b9:c6:80:aa:43:e2:96:be:b9: dd:f2:30:73:fc:31:92:b3:01:a8:f3:82:39:91:8e: d1:1e:25:de:15:27:50:6f:2d:94:f2:f5:51:72:ff: 8c:d6:40:28:fa:0c:fc:4e:f0:ad:e2:07:35:c8:88: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:D2:25:9E:4C:4E:47:98:46:C7:70:E7:CB:D4:25:57:C4:B0:DB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2ca5e0c-b0a7-4f5f-8862-6095b976ffa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.155.192.0/18 Signature Algorithm: sha256WithRSAEncryption 5f:c1:8a:81:c0:4c:90:67:55:36:db:f2:84:75:87:52:49:fc: 92:39:8a:a2:28:65:2b:fc:ca:e7:a1:63:fa:cf:3e:14:63:75: 01:03:96:84:51:78:ac:51:95:ad:d6:5a:cd:66:11:1e:97:00: 57:00:81:b0:3f:19:7d:56:57:c2:12:d0:bc:f8:0b:2f:07:32: 0a:b7:ae:df:dc:d3:4f:2a:0a:25:ba:26:49:40:c7:33:a4:2e: aa:28:8a:f0:67:fc:a7:17:96:26:4f:af:37:36:e0:f3:49:96: a8:cf:9a:4c:07:c0:4d:1b:e1:1f:72:6b:d0:7d:b4:c5:89:2d: 73:3c:01:83:dc:8b:ae:c6:f9:b5:57:ff:d0:4c:fe:dd:09:41: 09:7d:4d:9f:50:d2:78:97:ae:3c:53:38:8c:ed:ec:c7:c0:55: b7:76:6c:ad:dc:dd:0c:08:d9:67:10:05:41:c1:74:eb:92:81: 66:f1:3a:3e:81:e8:b7:27:4e:4a:76:33:c0:af:4c:f6:3b:95: 08:d2:27:3e:9a:94:c8:c8:62:0d:cd:a2:7c:6e:bd:bd:bf:0b: 68:6b:03:dd:8d:4f:53:62:6e:00:0b:a4:f4:af:6c:23:42:81: eb:a3:61:fb:1e:0d:23:19:b7:41:3b:47:86:2a:e1:54:98:aa: 28:ae:54:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULpmZO259RoUYKEpOFvTEf7844u0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUxMDIwWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzQxMTJhYTNhYjI2OTA3YjFhNmI4NWU0MTBmMjg4Yzg3 MTUyNmQ5OGVlNjdiNjE4MDBjMDk5ZDRkZWRmYzAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHb9j1on0NedD4+Shw4exzWRS9Rf0oQXL5zawp4+FMMryn S7EE8AqhSBDjoNF6iiGsfgYVh9z1Em276smGWwx2zcO1bwS+XtNkQ36Y54n+o7ku 6X9p2J+fn23Gc2E/KI+ew6jy8RcM2KRHxymZb5c/bMykRStE9cwrYvme3eSJZ8PI r/qmNNgHLqdaYmcvl22cnqRXp/CWcslZGCCDiX3OYthnDckGhv1xLHhgAMUgl9+k DRO0tNm2bavE/gqXiZgrpqmE3fGT1LnGgKpD4pa+ud3yMHP8MZKzAajzgjmRjtEe Jd4VJ1BvLZTy9VFy/4zWQCj6DPxO8K3iBzXIiMXPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUToXSJZ5MTkeYRsdw58vUJVfEsNswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyY2E1ZTBjLWIwYTctNGY1Zi04ODYyLTYwOTViOTc2ZmZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2m8AwDQYJKoZIhvcNAQELBQADggEBAF/BioHATJBnVTbb8oR1h1JJ/JI5 iqIoZSv8yuehY/rPPhRjdQEDloRReKxRla3WWs1mER6XAFcAgbA/GX1WV8IS0Lz4 Cy8HMgq3rt/c008qCiW6JklAxzOkLqooivBn/KcXliZPrzc24PNJlqjPmkwHwE0b 4R9ya9B9tMWJLXM8AYPci67G+bVX/9BM/t0JQQl9TZ9Q0niXrjxTOIzt7MfAVbd2 bK3c3QwI2WcQBUHBdOuSgWbxOj6B6LcnTkp2M8CvTPY7lQjSJz6alMjIYg3Nonxu vb2/C2hrA92NT1NibgALpPSvbCNCgeujYfseDSMZt0E7R4Yq4VSYqiiuVAQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:50 2025 by rpki-client