$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa File: de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa (raw, json) Hash identifier: WFJlw6gfpzAn4QDYD2zJJ3ncZCIpIg0tocfxUUgs/lU= Subject key identifier: DD:E1:40:C1:53:1B:6D:26:B1:36:E3:E8:6A:EB:F0:D5:1B:77:47:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E30FCF8C9C7B72FF60E1B6BCF7EFF7846FBBA3D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa Signing time: Mon 14 Apr 2025 17:11:48 +0000 ROA not before: Mon 14 Apr 2025 17:11:48 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:30:fc:f8:c9:c7:b7:2f:f6:0e:1b:6b:cf:7e:ff:78:46:fb:ba:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 17:11:48 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=bb232c889c64002215e3dda4207f2f63015d743f9d4fc603ce9820834b413731, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:93:7a:d9:a0:94:7f:af:00:4b:c1:95:ff: 5b:93:5e:c8:e4:66:f2:22:ed:97:b3:d1:62:d9:4e: b2:fe:a5:8f:df:29:bd:0a:89:63:d8:44:ca:8c:9f: 3f:d5:95:71:97:ab:be:ba:b4:7f:1b:2d:96:94:bf: 7f:90:19:52:eb:a5:57:c7:64:6e:17:7e:0b:c5:6c: 02:cc:0f:e8:b8:e4:8d:6d:d6:41:89:38:7b:3b:da: 7d:16:ab:5c:53:80:8d:c5:72:03:d1:d0:fb:3e:f2: 2a:a2:64:9b:89:d6:41:bf:c5:37:fc:0c:8b:37:62: 91:2f:09:23:35:1e:e0:73:01:1a:d7:36:a7:70:8c: 9a:ac:a1:d1:06:a9:ff:d8:fd:5e:75:c9:9f:c8:e6: 7e:6e:59:a1:97:4c:fc:db:c8:46:6a:29:43:53:99: b8:2b:66:54:9c:b9:63:ba:a0:ac:64:2d:09:1f:ee: 65:6b:e8:b3:dd:61:62:0b:34:12:b6:d6:95:32:6b: c8:68:b0:00:ba:59:35:e0:04:67:a0:50:1f:85:be: f7:b3:58:3f:de:5c:21:8d:27:4c:95:ae:ff:40:3c: 38:98:02:fb:92:82:31:38:aa:c6:a1:e1:b3:d5:09: a7:7c:3a:14:0e:5b:74:f9:64:a5:49:82:2c:bb:2e: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:40:C1:53:1B:6D:26:B1:36:E3:E8:6A:EB:F0:D5:1B:77:47:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de13ded7-a56f-4ebd-aa3e-0b9909441ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.16.0/21 Signature Algorithm: sha256WithRSAEncryption 73:05:cc:5f:17:94:4b:63:cd:b3:8f:a5:f7:52:96:76:fa:f0: 30:8c:97:47:af:86:58:69:1d:d0:88:73:1c:fd:b0:12:0a:d8: 4e:b5:8d:ae:bf:55:44:9b:25:4e:3d:0c:61:05:ca:78:37:86: ba:8c:ca:66:53:db:40:28:5f:11:69:02:ff:7c:85:f3:21:84: fd:47:06:23:24:05:7b:80:46:0f:17:55:28:fe:e6:cf:91:87: c8:6e:f4:1f:00:0d:4c:b7:2e:4d:b5:b5:88:86:d5:b1:d3:1c: 63:c7:f0:bb:d1:12:46:09:4f:2f:61:d9:4a:62:a9:91:bc:54: 9b:d3:a8:52:a4:f4:9f:3d:58:ce:9e:39:4b:ac:28:ac:e5:ca: 03:84:b9:a7:19:18:a3:2b:84:a5:2b:eb:49:03:5c:67:92:d2: c6:bf:68:6f:4e:d8:e0:c6:31:fe:91:c4:e2:3b:82:1a:73:02: ba:fe:cb:0c:1d:b4:44:84:47:bf:3b:ab:52:63:f3:b8:35:3e: 76:0b:20:bc:22:8d:46:39:ee:d2:f7:75:3f:6c:3c:73:55:c7: a2:77:df:fb:5f:c6:7f:f7:d0:90:81:77:85:e4:49:2f:20:f8: 03:eb:2f:9c:bd:24:f6:e9:8c:53:fa:f2:59:73:9f:9f:b0:01: fc:6a:6d:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfjD8+MnHty/2Dhtrz37/eEb7uj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTcxMTQ4WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjIzMmM4ODljNjQwMDIyMTVlM2RkYTQyMDdmMmY2MzAx NWQ3NDNmOWQ0ZmM2MDNjZTk4MjA4MzRiNDEzNzMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC04JN62aCUf68AS8GV/1uTXsjkZvIi7Zez0WLZTrL+pY/f Kb0KiWPYRMqMnz/VlXGXq766tH8bLZaUv3+QGVLrpVfHZG4XfgvFbALMD+i45I1t 1kGJOHs72n0Wq1xTgI3FcgPR0Ps+8iqiZJuJ1kG/xTf8DIs3YpEvCSM1HuBzARrX NqdwjJqsodEGqf/Y/V51yZ/I5n5uWaGXTPzbyEZqKUNTmbgrZlScuWO6oKxkLQkf 7mVr6LPdYWILNBK21pUya8hosAC6WTXgBGegUB+FvvezWD/eXCGNJ0yVrv9APDiY AvuSgjE4qsah4bPVCad8OhQOW3T5ZKVJgiy7Lso/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3eFAwVMbbSaxNuPoauvw1Rt3R40wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlMTNkZWQ3LWE1NmYtNGViZC1hYTNlLTBiOTkwOTQ0MWJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM21xAwDQYJKoZIhvcNAQELBQADggEBAHMFzF8XlEtjzbOPpfdSlnb68DCM l0evhlhpHdCIcxz9sBIK2E61ja6/VUSbJU49DGEFyng3hrqMymZT20AoXxFpAv98 hfMhhP1HBiMkBXuARg8XVSj+5s+Rh8hu9B8ADUy3Lk21tYiG1bHTHGPH8LvREkYJ Ty9h2UpiqZG8VJvTqFKk9J89WM6eOUusKKzlygOEuacZGKMrhKUr60kDXGeS0sa/ aG9O2ODGMf6RxOI7ghpzArr+ywwdtESER787q1Jj87g1PnYLILwijUY57tL3dT9s PHNVx6J33/tfxn/30JCBd4XkSS8g+APrL5y9JPbpjFP68llzn5+wAfxqbf4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:31 2025 by rpki-client