$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6b268ea-3758-4d73-a482-a11b7cfba687.roa File: e6b268ea-3758-4d73-a482-a11b7cfba687.roa (raw, json) Hash identifier: aU1aDXDuVXZa51Fgm4v35/iKj5hYd6DkpigR/4R6APw= Subject key identifier: 76:10:24:55:0F:F5:FB:45:2A:EF:8D:D6:BB:CB:FD:4A:1F:6B:87:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E5BE7E0EF329854C9934E559605A18E9B99316F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6b268ea-3758-4d73-a482-a11b7cfba687.roa Signing time: Fri 18 Apr 2025 17:00:58 +0000 ROA not before: Fri 18 Apr 2025 17:00:58 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.236.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5b:e7:e0:ef:32:98:54:c9:93:4e:55:96:05:a1:8e:9b:99:31:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:00:58 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=1f8f5657aadd8707bbaf879619838613171315ec76a6d8ad9d6e82bd3e806aac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:42:07:3c:20:9a:a6:43:f2:9c:0a:de:35: a2:d5:3f:0f:e5:c7:67:1e:f4:e6:7f:b7:87:2d:bf: 9e:df:70:fa:85:f8:4e:5c:69:e9:c1:bf:6f:6f:01: 38:c4:b0:f1:9a:65:fd:65:81:30:4d:10:ed:db:e0: 8e:6c:08:f2:d7:ba:9c:86:25:39:a0:d6:bb:77:1a: 1e:ee:17:df:40:ca:a9:1b:2b:4c:1e:91:56:d6:a1: 12:ac:74:0f:51:23:9a:84:50:64:d8:3e:b8:a9:9a: 71:99:95:24:61:71:48:20:f0:6f:cc:1b:13:ff:75: eb:1b:18:b3:2a:fc:2a:4e:6e:2e:f1:9c:f5:55:43: 2b:a5:00:d3:cd:d7:60:9d:00:88:ec:43:0c:34:ea: 14:c0:52:72:bf:e5:d9:0c:29:2d:4b:cd:b2:ae:b1: 81:e3:35:15:ba:58:66:bb:fd:c5:fe:b5:75:33:91: 5f:0f:41:75:7b:53:ea:fb:99:ee:20:93:cc:fc:e5: d2:a3:b1:a3:70:33:c5:c6:c4:5a:7c:c8:20:6d:32: 4e:65:43:4f:89:91:c7:bb:6f:c9:25:9d:b6:3c:2d: 13:e2:15:f8:7d:b0:10:d0:71:2e:c4:95:d6:15:40: d7:1c:83:9f:94:94:8f:40:6e:e6:51:4e:75:ff:2f: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:24:55:0F:F5:FB:45:2A:EF:8D:D6:BB:CB:FD:4A:1F:6B:87:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e6b268ea-3758-4d73-a482-a11b7cfba687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.236.64.0/18 Signature Algorithm: sha256WithRSAEncryption 90:c2:3b:c2:45:ed:72:af:f0:6f:4e:34:9c:76:8b:6e:00:9a: 64:4a:a5:a1:c6:1d:13:5c:dd:03:d0:66:c4:f2:4e:27:76:66: 34:c0:c6:94:d1:54:d0:94:da:0e:b0:27:32:64:e6:47:c9:9a: 28:00:7f:ff:90:4a:d8:15:76:85:55:56:61:e1:0f:58:95:92: e6:a0:48:5d:40:d5:10:46:75:f0:f8:a7:78:14:5f:f0:2a:57: e7:4c:d6:bd:00:f4:60:ad:37:f9:4b:10:aa:4b:f3:82:4d:a4: 70:a3:84:6c:12:f6:fd:55:81:21:67:56:c0:be:16:64:51:e7: 4e:dd:4a:c8:77:e5:98:85:bc:71:0b:39:6a:3f:6b:35:b7:bc: a2:e5:c6:2e:c0:2f:34:76:01:e0:d1:71:8e:dd:c0:7c:f2:a1: 71:2b:fb:e5:a6:a7:25:f8:3f:c1:cd:ed:31:e0:25:d0:fc:79: 31:e8:92:8b:b8:90:bb:fd:86:ca:48:cd:6c:08:3b:c5:10:1f: 0c:b2:8b:f3:5b:fe:90:81:25:d0:29:e6:81:5f:30:a0:05:7e: a7:2b:64:07:71:9a:b3:15:9e:0a:ee:d1:b9:11:12:77:bf:de: 40:7f:e4:c5:b0:ce:fe:3a:c6:d5:b5:87:a2:d0:9a:95:1a:c5: db:b7:f6:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUflvn4O8ymFTJk05VlgWhjpuZMW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTcwMDU4WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjhmNTY1N2FhZGQ4NzA3YmJhZjg3OTYxOTgzODYxMzE3 MTMxNWVjNzZhNmQ4YWQ5ZDZlODJiZDNlODA2YWFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCde0IHPCCapkPynAreNaLVPw/lx2ce9OZ/t4ctv57fcPqF +E5caenBv29vATjEsPGaZf1lgTBNEO3b4I5sCPLXupyGJTmg1rt3Gh7uF99Ayqkb K0wekVbWoRKsdA9RI5qEUGTYPripmnGZlSRhcUgg8G/MGxP/desbGLMq/CpObi7x nPVVQyulANPN12CdAIjsQww06hTAUnK/5dkMKS1LzbKusYHjNRW6WGa7/cX+tXUz kV8PQXV7U+r7me4gk8z85dKjsaNwM8XGxFp8yCBtMk5lQ0+Jkce7b8klnbY8LRPi Ffh9sBDQcS7EldYVQNccg5+UlI9AbuZRTnX/L0ghAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdhAkVQ/1+0Uq743Wu8v9Sh9rh2UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2YjI2OGVhLTM3NTgtNGQ3My1hNDgyLWExMWI3Y2ZiYTY4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY27EAwDQYJKoZIhvcNAQELBQADggEBAJDCO8JF7XKv8G9ONJx2i24AmmRK paHGHRNc3QPQZsTyTid2ZjTAxpTRVNCU2g6wJzJk5kfJmigAf/+QStgVdoVVVmHh D1iVkuagSF1A1RBGdfD4p3gUX/AqV+dM1r0A9GCtN/lLEKpL84JNpHCjhGwS9v1V gSFnVsC+FmRR507dSsh35ZiFvHELOWo/azW3vKLlxi7ALzR2AeDRcY7dwHzyoXEr ++WmpyX4P8HN7THgJdD8eTHokou4kLv9hspIzWwIO8UQHwyyi/Nb/pCBJdAp5oFf MKAFfqcrZAdxmrMVngru0bkREne/3kB/5MWwzv46xtW1h6LQmpUaxdu39hk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:30:35 2025 by rpki-client