$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee6778f0-1730-46ac-bab2-6e5515413d66.roa File: ee6778f0-1730-46ac-bab2-6e5515413d66.roa (raw, json) Hash identifier: NVkFPZ0K4bb6Gh9+hl8HQMEyYy6Hg0f/HVqzjeXLGQc= Subject key identifier: 14:0F:AA:30:2C:E6:E3:18:E3:89:E0:FF:BD:06:C4:77:88:20:88:F3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E8FF512F6237395001BD23B4C8D55F69499B16B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee6778f0-1730-46ac-bab2-6e5515413d66.roa Signing time: Tue 22 Apr 2025 18:01:16 +0000 ROA not before: Tue 22 Apr 2025 18:01:16 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8f:f5:12:f6:23:73:95:00:1b:d2:3b:4c:8d:55:f6:94:99:b1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:01:16 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4ae3684d7b86dca15812650194abfe782898c41c7037b5ba65c7e9f01c4202e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:62:df:c0:e1:8e:04:54:3f:44:e9:36:73: 26:6a:3e:93:b1:dc:e2:f7:90:c7:ff:ba:f7:cc:d8: 42:67:a7:0b:ac:1a:f7:7b:7e:77:e2:b1:c9:d1:8d: e2:f4:f3:7c:08:87:86:18:f7:4b:7c:41:9e:6c:8f: 5b:23:1e:c5:dc:67:06:04:d1:0a:4a:3f:ae:94:28: 16:88:fc:c9:26:46:e0:0f:2c:c1:63:ba:c8:09:c3: 5a:00:5e:af:c8:e7:ad:18:97:d8:ad:c8:99:ed:08: 47:55:e1:62:54:d0:3e:ee:30:27:4b:b4:9d:8a:9a: 23:d8:e8:1f:15:be:0d:34:90:fe:1e:6f:81:f4:bb: b6:99:41:3c:0c:c2:f2:6e:3a:c4:ee:20:5e:f4:19: 35:9a:84:3e:1a:69:81:72:02:15:b7:29:28:8c:6d: 83:59:ca:1e:d6:9e:d0:57:62:cb:7d:38:d7:cc:42: 1f:72:7a:91:4f:73:07:96:8d:09:e0:92:84:24:bb: 3d:a2:7f:4a:11:8f:a7:c8:3d:68:4d:d8:ab:d4:f7: c9:bd:56:44:87:75:a1:f2:44:b3:a0:9f:b9:1f:f9: 7f:cb:26:7d:6d:12:6e:86:a8:5c:b0:09:a5:49:00: 97:dd:77:c0:80:0e:1e:21:e2:3f:04:89:17:7f:9b: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:AA:30:2C:E6:E3:18:E3:89:E0:FF:BD:06:C4:77:88:20:88:F3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee6778f0-1730-46ac-bab2-6e5515413d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.50.0/24 Signature Algorithm: sha256WithRSAEncryption 78:70:d8:04:5b:4b:00:e3:68:bc:bf:05:29:ab:66:29:58:06: 0b:34:47:9e:58:b5:37:6e:34:dc:e1:89:ae:3f:86:86:dc:1f: 8d:b7:e1:18:b9:3c:1a:a7:1b:05:40:4c:3e:7f:03:6d:bf:fa: 08:8d:87:c8:0b:00:a1:b1:36:b5:f6:13:e3:cb:60:81:c9:c6: b9:4e:ee:9d:c4:f7:b2:81:31:a5:62:94:cb:3d:30:1e:d9:a9: d5:32:06:06:d0:b2:ef:4b:53:37:14:6a:8f:e2:78:c0:81:30: 4b:e9:1d:47:b0:53:b1:94:b3:df:9b:f0:26:45:5a:11:4d:f2: 36:1b:06:01:ce:02:82:98:6b:e6:a6:ab:c5:2b:50:95:d1:c4: ff:3c:96:24:69:07:cb:e2:cc:b5:3c:af:1a:89:ef:53:4d:c5: 8d:89:cc:f3:6e:4e:94:38:67:29:99:7e:d5:61:40:17:1d:f0: 85:83:2d:7a:69:95:db:1f:41:0d:2f:03:d8:96:e0:35:02:5c: 76:39:76:0c:fd:9e:e7:57:20:f1:78:f0:f9:49:41:32:f6:ff: e4:19:89:e8:83:4d:ba:11:ee:d7:f5:94:7c:18:2b:7c:38:b8: ae:b8:4c:f7:c0:c1:c1:db:d6:c1:3d:20:40:28:f0:b1:11:3a: 8b:22:8c:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHo/1EvYjc5UAG9I7TI1V9pSZsWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgwMTE2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWUzNjg0ZDdiODZkY2ExNTgxMjY1MDE5NGFiZmU3ODI4 OThjNDFjNzAzN2I1YmE2NWM3ZTlmMDFjNDIwMmU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF12LfwOGOBFQ/ROk2cyZqPpOx3OL3kMf/uvfM2EJnpwus Gvd7fnfiscnRjeL083wIh4YY90t8QZ5sj1sjHsXcZwYE0QpKP66UKBaI/MkmRuAP LMFjusgJw1oAXq/I560Yl9ityJntCEdV4WJU0D7uMCdLtJ2KmiPY6B8Vvg00kP4e b4H0u7aZQTwMwvJuOsTuIF70GTWahD4aaYFyAhW3KSiMbYNZyh7WntBXYst9ONfM Qh9yepFPcweWjQngkoQkuz2if0oRj6fIPWhN2KvU98m9VkSHdaHyRLOgn7kf+X/L Jn1tEm6GqFywCaVJAJfdd8CADh4h4j8EiRd/mzGTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFA+qMCzm4xjjieD/vQbEd4ggiPMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VlNjc3OGYwLTE3MzAtNDZhYy1iYWIyLTZlNTUxNTQxM2Q2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAjIwDQYJKoZIhvcNAQELBQADggEBAHhw2ARbSwDjaLy/BSmrZilYBgs0 R55YtTduNNzhia4/hobcH4234Ri5PBqnGwVATD5/A22/+giNh8gLAKGxNrX2E+PL YIHJxrlO7p3E97KBMaVilMs9MB7ZqdUyBgbQsu9LUzcUao/ieMCBMEvpHUewU7GU s9+b8CZFWhFN8jYbBgHOAoKYa+amq8UrUJXRxP88liRpB8vizLU8rxqJ71NNxY2J zPNuTpQ4ZymZftVhQBcd8IWDLXppldsfQQ0vA9iW4DUCXHY5dgz9nudXIPF48PlJ QTL2/+QZieiDTboR7tf1lHwYK3w4uK64TPfAwcHb1sE9IEAo8LEROosijGA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:26 2025 by rpki-client