$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e48e4b5e-7bb0-4d15-a774-364c129141e9.roa File: e48e4b5e-7bb0-4d15-a774-364c129141e9.roa (raw, json) Hash identifier: FnyGPUdUWRcBTY6qMo2tYn2dcx4Cit/sFUxLSSi30lE= Subject key identifier: 83:3A:BC:1D:0C:D8:BF:59:C8:ED:FB:09:02:D8:27:70:B1:F4:B0:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 612334CEF87E52866741631F644959C8020188B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e48e4b5e-7bb0-4d15-a774-364c129141e9.roa Signing time: Mon 14 Apr 2025 16:51:10 +0000 ROA not before: Mon 14 Apr 2025 16:51:10 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.162.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:23:34:ce:f8:7e:52:86:67:41:63:1f:64:49:59:c8:02:01:88:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 16:51:10 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=234de464ffcf97345e19356e9fe95fbc29794dfbaa91d58cf6d8b38cfbd19aae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8e:fb:89:0a:a9:5c:7a:1a:58:02:3c:62:22: c9:18:a5:23:7f:7e:2a:3a:d5:ad:76:ba:cd:07:c5: 41:cb:4b:8f:5f:b4:2f:07:c1:7f:dd:3c:3a:aa:5b: 5d:ba:d6:a0:15:3d:cf:59:7d:21:c3:1a:bc:23:78: 0f:b4:05:fa:02:1c:ac:a3:86:fb:a3:32:7a:14:3e: a9:2a:e6:32:93:5c:40:b1:05:b2:4a:88:44:64:d7: d4:18:f4:67:ca:7e:ef:b5:85:2f:86:d2:bc:7b:e0: 0b:0a:ce:d2:31:96:fc:3a:b6:50:a5:96:b5:54:2f: d2:ea:78:45:dd:f0:b1:28:cc:c5:57:48:e5:98:87: 86:e6:66:cf:15:48:9c:4a:0d:40:c8:07:19:66:cc: 3a:45:9b:7a:34:50:5d:32:dc:04:11:68:cc:40:7b: 9c:70:6c:62:2e:ab:de:c2:22:bc:00:c4:35:9a:26: d6:f2:ee:59:c1:ae:44:37:a9:4b:df:ae:92:95:cf: bc:42:f7:1c:a4:a0:7e:4f:38:07:d4:12:24:69:61: 99:4f:30:a7:65:aa:8e:d3:60:af:66:39:5c:e7:4e: d4:8a:b6:a4:39:3e:65:65:26:f8:da:75:c3:40:c7: fa:92:ac:14:c3:7c:e7:50:49:09:df:15:88:eb:cf: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3A:BC:1D:0C:D8:BF:59:C8:ED:FB:09:02:D8:27:70:B1:F4:B0:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e48e4b5e-7bb0-4d15-a774-364c129141e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:38:23:7f:de:6b:18:65:79:4b:ed:8b:25:52:e4:29:d2:8d: 50:47:14:f9:8b:4b:56:2a:27:28:96:f6:9f:d8:97:f5:2d:0e: 56:2f:c6:8d:3e:05:02:79:60:73:3e:74:34:59:e5:36:b3:6c: 8d:c5:10:3f:f7:76:ad:e0:b8:c7:3e:d8:c1:8d:24:d7:97:11: 8b:1d:d1:69:9d:f4:89:8a:43:af:a1:ad:05:a4:49:b8:d0:02: 97:b3:d1:2c:d3:30:fe:0a:79:af:3d:8d:4e:96:ff:af:0b:8f: 4e:9c:cc:7d:49:37:4a:ac:99:d9:69:c9:d9:6d:a1:53:81:20: 88:43:63:bf:eb:1e:5c:a5:e3:33:9a:01:3f:11:ea:52:bb:9c: 7e:95:bb:c7:49:2a:fc:fe:33:4a:21:f5:fd:fd:99:b4:8d:2a: 49:2c:ee:c9:f5:2d:f1:61:c5:e3:20:36:e7:a2:af:32:77:b3: 00:0a:8d:d3:a0:dd:9f:11:b7:40:33:db:b7:ea:de:3d:73:79: 6c:e9:52:dc:67:35:51:fb:59:b5:f2:cf:8a:b0:81:a2:cc:ff: 6d:da:96:5b:4f:28:40:2a:e1:72:20:ea:0d:c7:59:d9:64:f7: 43:3f:f2:59:b6:56:c8:7e:e9:5e:2c:42:f2:06:fd:32:9c:e1: d0:7d:ca:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYSM0zvh+UoZnQWMfZElZyAIBiLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTY1MTEwWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzRkZTQ2NGZmY2Y5NzM0NWUxOTM1NmU5ZmU5NWZiYzI5 Nzk0ZGZiYWE5MWQ1OGNmNmQ4YjM4Y2ZiZDE5YWFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjjvuJCqlcehpYAjxiIskYpSN/fio61a12us0HxUHLS49f tC8HwX/dPDqqW1261qAVPc9ZfSHDGrwjeA+0BfoCHKyjhvujMnoUPqkq5jKTXECx BbJKiERk19QY9GfKfu+1hS+G0rx74AsKztIxlvw6tlCllrVUL9LqeEXd8LEozMVX SOWYh4bmZs8VSJxKDUDIBxlmzDpFm3o0UF0y3AQRaMxAe5xwbGIuq97CIrwAxDWa Jtby7lnBrkQ3qUvfrpKVz7xC9xykoH5POAfUEiRpYZlPMKdlqo7TYK9mOVznTtSK tqQ5PmVlJvjadcNAx/qSrBTDfOdQSQnfFYjrz+FdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgzq8HQzYv1nI7fsJAtgncLH0sF0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0OGU0YjVlLTdiYjAtNGQxNS1hNzc0LTM2NGMxMjkxNDFlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2ojANBgkqhkiG9w0BAQsFAAOCAQEApjgjf95rGGV5S+2LJVLkKdKNUEcU +YtLVionKJb2n9iX9S0OVi/GjT4FAnlgcz50NFnlNrNsjcUQP/d2reC4xz7YwY0k 15cRix3RaZ30iYpDr6GtBaRJuNACl7PRLNMw/gp5rz2NTpb/rwuPTpzMfUk3SqyZ 2WnJ2W2hU4EgiENjv+seXKXjM5oBPxHqUrucfpW7x0kq/P4zSiH1/f2ZtI0qSSzu yfUt8WHF4yA256KvMnezAAqN06DdnxG3QDPbt+rePXN5bOlS3Gc1UftZtfLPirCB osz/bdqWW08oQCrhciDqDcdZ2WT3Qz/yWbZWyH7pXixC8gb9Mpzh0H3Kcw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:29 2025 by rpki-client