$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eff0176c-8399-40fe-b1d0-bd09ab08a67c.roa File: eff0176c-8399-40fe-b1d0-bd09ab08a67c.roa (raw, json) Hash identifier: lUudhcum0wt2BwiLfR935fTxxjXwTRp0j329CSRBTdQ= Subject key identifier: FC:92:B2:74:9B:5A:D4:46:91:FC:AA:D9:F3:2B:7F:ED:FB:9D:7A:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DECFB1DF3C029B13420EA02B1A0C4FC86799983 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eff0176c-8399-40fe-b1d0-bd09ab08a67c.roa Signing time: Fri 18 Apr 2025 17:00:55 +0000 ROA not before: Fri 18 Apr 2025 17:00:55 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.232.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ec:fb:1d:f3:c0:29:b1:34:20:ea:02:b1:a0:c4:fc:86:79:99:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:00:55 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=592bbb1ae1b60e1e635540e878dc8f42acaa3064c688c55899992bec7cdb1ac6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:12:64:01:4f:ad:93:36:6d:e9:b1:2e:ea: cb:9e:a0:a7:c3:fd:ad:5e:a3:06:78:8d:f1:55:f3: 88:22:5d:1a:24:cb:ff:93:d0:4e:cf:bf:21:1a:22: 51:85:62:d9:83:ff:69:6c:74:c8:a3:78:43:48:5c: 7e:e4:31:3f:95:94:d2:f2:65:65:7a:18:29:51:03: 5b:16:38:7a:84:8d:fe:2a:7f:53:1d:dd:6d:f9:e5: e4:55:11:08:36:f7:a2:20:4f:ba:d5:84:4b:4a:cf: 1c:65:3d:0a:2e:b3:aa:21:d0:63:2e:86:02:7f:1f: 97:8c:b2:5a:d7:35:25:ce:08:ca:1c:98:15:f7:a5: 3d:00:8a:ac:d3:45:46:54:12:1c:f1:2d:e4:9c:b7: 18:05:af:db:23:34:7c:f7:14:e6:58:c5:fb:46:e1: 96:fb:82:29:82:61:b9:75:c3:43:32:0c:2a:84:8a: 5b:33:3e:18:f0:7b:1c:cf:73:08:a8:61:6c:8a:ca: 93:e0:dd:49:db:e7:71:a5:dd:6e:32:47:64:11:b4: c0:9a:ca:f6:c1:5f:ad:06:e3:b0:ae:5a:0e:48:4e: a9:c0:a1:35:9c:d3:09:c5:63:19:b8:12:d8:97:9a: 3d:e6:14:b2:05:d4:ca:f7:31:00:2d:cd:86:cb:ac: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:92:B2:74:9B:5A:D4:46:91:FC:AA:D9:F3:2B:7F:ED:FB:9D:7A:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eff0176c-8399-40fe-b1d0-bd09ab08a67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.232.128.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:11:24:9b:fb:b9:4b:a4:08:d0:2b:32:39:40:3a:7d:91:fb: 53:52:0d:e1:64:54:3c:40:93:7b:63:12:1a:d2:15:22:f9:63: 30:15:5d:5e:14:5f:35:89:8b:56:52:2f:07:eb:8f:e5:cb:59: b2:1f:5d:70:24:06:ca:a2:b1:f6:70:6c:f4:b3:b1:a4:ed:c7: 8c:44:af:48:1a:ae:0a:aa:1f:e3:3b:23:54:87:a6:a0:bf:fd: 5b:9e:31:00:18:f7:66:7a:a6:ee:b1:01:7b:e3:0f:03:d0:e4: 03:3a:5e:e4:cb:d4:4c:e8:12:b9:8e:a3:87:b4:1d:6c:a0:2d: 60:06:bd:72:33:87:84:73:19:48:2d:04:36:90:74:c8:d7:39: d4:4d:a2:f1:d0:f5:01:7c:69:45:e2:db:a3:b0:13:27:e1:25: 4f:07:d0:fb:de:81:56:00:a4:79:9c:d9:14:78:7b:cf:90:00: 18:b2:52:5d:a2:19:e5:87:c5:02:01:38:4f:06:65:3e:24:2a: 7b:38:a8:ab:28:5f:44:95:a4:dd:3e:95:c7:cf:fd:a9:81:ae: 65:30:2d:92:66:b4:50:9c:f7:64:bf:c6:23:bd:67:8c:50:34: 58:42:5d:5d:7e:9f:81:1f:64:38:44:8d:75:b6:2b:4e:d0:76: e7:e6:f9:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULez7HfPAKbE0IOoCsaDE/IZ5mYMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTcwMDU1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTJiYmIxYWUxYjYwZTFlNjM1NTQwZTg3OGRjOGY0MmFj YWEzMDY0YzY4OGM1NTg5OTk5MmJlYzdjZGIxYWM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLyxJkAU+tkzZt6bEu6sueoKfD/a1eowZ4jfFV84giXRok y/+T0E7PvyEaIlGFYtmD/2lsdMijeENIXH7kMT+VlNLyZWV6GClRA1sWOHqEjf4q f1Md3W355eRVEQg296IgT7rVhEtKzxxlPQous6oh0GMuhgJ/H5eMslrXNSXOCMoc mBX3pT0AiqzTRUZUEhzxLeSctxgFr9sjNHz3FOZYxftG4Zb7gimCYbl1w0MyDCqE ilszPhjwexzPcwioYWyKypPg3Unb53Gl3W4yR2QRtMCayvbBX60G47CuWg5ITqnA oTWc0wnFYxm4EtiXmj3mFLIF1Mr3MQAtzYbLrNuXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/JKydJta1EaR/KrZ8yt/7fudevswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmZjAxNzZjLTgzOTktNDBmZS1iMWQwLWJkMDlhYjA4YTY3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU26IAwDQYJKoZIhvcNAQELBQADggEBACwRJJv7uUukCNArMjlAOn2R+1NS DeFkVDxAk3tjEhrSFSL5YzAVXV4UXzWJi1ZSLwfrj+XLWbIfXXAkBsqisfZwbPSz saTtx4xEr0gargqqH+M7I1SHpqC//VueMQAY92Z6pu6xAXvjDwPQ5AM6XuTL1Ezo ErmOo4e0HWygLWAGvXIzh4RzGUgtBDaQdMjXOdRNovHQ9QF8aUXi26OwEyfhJU8H 0PvegVYApHmc2RR4e8+QABiyUl2iGeWHxQIBOE8GZT4kKns4qKsoX0SVpN0+lcfP /amBrmUwLZJmtFCc92S/xiO9Z4xQNFhCXV1+n4EfZDhEjXW2K07Qdufm+fA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:44:15 2025 by rpki-client