$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa File: ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa (raw, json) Hash identifier: J9HQ5bSDLPXNhK+IdcnrABU0Ws+AWjE6ZxjBpLgpcp0= Subject key identifier: 72:32:EA:86:D1:E9:A8:B4:39:8B:56:B7:5E:03:70:57:48:9E:88:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 159137A3C32FF95FB5A316917B0DA022A8202119 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa Signing time: Tue 22 Apr 2025 18:01:07 +0000 ROA not before: Tue 22 Apr 2025 18:01:07 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:91:37:a3:c3:2f:f9:5f:b5:a3:16:91:7b:0d:a0:22:a8:20:21:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:01:07 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=e5b63b3c03ffeebf765bc31cb7b6723c1fdddaef0e28245a93a396e687bb54ec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:66:83:20:85:27:37:7b:00:32:b3:a8:2b: 5e:ab:6d:52:21:42:24:0f:cd:c2:f9:ec:1c:82:3e: 06:0f:75:b1:f4:f7:43:25:d0:87:14:4d:e7:a0:57: 60:d9:82:90:3f:05:f1:b6:4b:f6:90:b9:55:85:a5: 16:ce:52:65:dc:5e:91:49:9a:3b:30:bb:9a:54:09: 04:52:45:06:75:2a:c9:04:eb:a6:77:c6:c4:73:5c: 6b:a9:a5:66:56:16:34:c7:d8:fa:ac:41:4d:fc:13: 13:89:57:e3:73:d6:a2:03:be:58:a1:c2:be:75:72: da:68:04:65:fb:a9:99:f9:de:c1:06:85:67:e8:b1: 86:76:69:97:73:27:26:01:24:7a:01:c7:e2:04:d1: f4:f3:1f:7a:4a:f7:7c:fd:63:0f:66:5e:5d:d6:85: 16:4f:6c:a7:6b:b7:cd:69:a4:44:dc:e9:aa:c0:91: ad:3a:71:f7:bc:d3:4d:d3:33:a6:90:15:73:a6:88: 9c:1a:96:3a:79:66:86:09:5d:42:36:e9:87:f9:8f: 8b:8e:b2:a9:7b:0e:65:66:9a:04:76:20:13:df:50: 6f:49:6c:48:6d:97:11:43:2b:36:93:d3:ce:9d:cf: f2:da:00:9d:f0:77:af:a5:d4:f7:e4:38:fc:54:20: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:32:EA:86:D1:E9:A8:B4:39:8B:56:B7:5E:03:70:57:48:9E:88:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddf5718c-8cec-4a35-8f4a-d4da56e95801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:5b:ad:3c:d9:ae:fe:cd:9c:1e:d0:50:72:cb:ab:35:bc:42: 2e:be:41:cc:bb:f9:79:be:c3:61:d3:4b:5a:9c:16:e2:87:b0: 42:b1:92:35:b9:c3:d1:27:c0:44:c4:b6:7e:98:b0:6e:56:82: 63:3f:6a:44:06:58:99:9c:3c:9d:2c:85:34:e4:92:a6:b4:26: 85:52:1d:77:3a:3a:b1:ac:27:05:2c:97:71:1a:7b:71:e2:3c: f7:7b:b6:c5:c2:1d:b0:62:19:df:be:40:5d:1c:1a:8a:8b:b9: 60:ef:f3:de:09:62:ab:c0:ca:e2:e2:29:43:01:c4:8b:88:e5: 96:91:07:09:80:b3:35:1f:46:92:e8:3b:77:1e:0d:ff:ed:2d: 49:de:26:d1:cf:d0:1f:29:c8:5e:5b:95:19:dc:06:fc:0d:df: d7:a9:02:10:50:66:7e:bb:a8:c6:7c:78:ef:7a:d3:d4:81:6b: 37:f7:04:0c:c4:00:3d:7a:23:3e:30:87:ed:a0:7e:f9:c4:70: a8:e9:34:9d:10:39:3d:02:e9:00:fc:53:b7:1e:83:6d:20:fa: 79:50:8b:ea:0b:e8:04:6a:75:80:ed:29:b3:14:b9:2a:5a:01: d7:d7:0f:ab:5a:ef:f7:c0:2c:54:ea:b2:34:15:52:ef:7f:05: 32:30:68:5d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFZE3o8Mv+V+1oxaRew2gIqggIRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgwMTA3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWI2M2IzYzAzZmZlZWJmNzY1YmMzMWNiN2I2NzIzYzFm ZGRkYWVmMGUyODI0NWE5M2EzOTZlNjg3YmI1NGVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvGmaDIIUnN3sAMrOoK16rbVIhQiQPzcL57ByCPgYPdbH0 90Ml0IcUTeegV2DZgpA/BfG2S/aQuVWFpRbOUmXcXpFJmjswu5pUCQRSRQZ1KskE 66Z3xsRzXGuppWZWFjTH2PqsQU38ExOJV+Nz1qIDvlihwr51ctpoBGX7qZn53sEG hWfosYZ2aZdzJyYBJHoBx+IE0fTzH3pK93z9Yw9mXl3WhRZPbKdrt81ppETc6arA ka06cfe8003TM6aQFXOmiJwaljp5ZoYJXUI26Yf5j4uOsql7DmVmmgR2IBPfUG9J bEhtlxFDKzaT086dz/LaAJ3wd6+l1PfkOPxUIMMhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcjLqhtHpqLQ5i1a3XgNwV0ieiNkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkZjU3MThjLThjZWMtNGEzNS04ZjRhLWQ0ZGE1NmU5NTgwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASVTANBgkqhkiG9w0BAQsFAAOCAQEAP1utPNmu/s2cHtBQcsurNbxCLr5B zLv5eb7DYdNLWpwW4oewQrGSNbnD0SfARMS2fpiwblaCYz9qRAZYmZw8nSyFNOSS prQmhVIddzo6sawnBSyXcRp7ceI893u2xcIdsGIZ375AXRwaiou5YO/z3gliq8DK 4uIpQwHEi4jllpEHCYCzNR9Gkug7dx4N/+0tSd4m0c/QHynIXluVGdwG/A3f16kC EFBmfruoxnx473rT1IFrN/cEDMQAPXojPjCH7aB++cRwqOk0nRA5PQLpAPxTtx6D bSD6eVCL6gvoBGp1gO0psxS5KloB19cPq1rv98AsVOqyNBVS738FMjBoXQ== -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:25 2025 by rpki-client