$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f042e26c-0aff-4b31-840a-b1fa06fb53dd.roa File: f042e26c-0aff-4b31-840a-b1fa06fb53dd.roa (raw, json) Hash identifier: Rp+0Bacjbm2ZyCs0vnWLPlHeRhUNzVzBrH8aynSkR9o= Subject key identifier: 83:71:DC:39:AB:35:74:41:5C:3C:D0:4C:00:7C:13:A4:97:31:C5:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53F3842471DA6BF439EB91C0C0F7A3A4D81B57F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f042e26c-0aff-4b31-840a-b1fa06fb53dd.roa Signing time: Fri 18 Apr 2025 16:21:09 +0000 ROA not before: Fri 18 Apr 2025 16:21:09 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.157.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f3:84:24:71:da:6b:f4:39:eb:91:c0:c0:f7:a3:a4:d8:1b:57:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 16:21:09 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=9b1bd980b7d96ffc71c484b572ec72315c5744893306b7eb1e1ebc7ac2e87e32, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:74:2a:a9:1f:76:fa:b2:ee:ca:c2:9f:ad: 44:cd:1d:61:9a:78:56:b2:b7:9f:2e:fd:51:52:a4: 99:47:e5:35:98:9b:14:8a:00:e1:56:3d:62:3d:54: 6a:3d:85:b8:bb:ac:63:73:ee:6b:1f:71:ae:d8:1c: be:0f:ee:99:ad:45:8b:26:2c:3b:c8:2d:6b:82:73: 57:61:47:b6:f3:d6:bf:21:e4:5c:b2:37:bc:16:36: 7b:d7:89:0b:65:a6:39:f3:b3:87:16:5c:81:1d:08: 56:7b:97:c8:62:1e:3e:da:89:b0:23:d1:6a:c6:9a: 2f:c9:37:c5:f5:e4:4e:49:50:5e:d2:29:4c:56:b2: 68:a0:65:7d:6d:ff:0f:d2:a5:76:b0:a6:ba:53:d6: 2e:fc:8c:26:d7:f1:dc:f0:52:45:19:6b:1d:f9:78: df:74:00:f5:ae:f7:e0:ed:e4:71:c1:15:c9:ce:f0: 38:bf:70:ad:64:c3:c0:f3:de:fe:f1:4e:ea:bd:09: cd:2b:cb:71:07:5f:f3:e3:33:7b:8e:de:7a:ec:3f: f5:e0:71:e8:b9:d6:7e:23:d1:5b:34:f8:dd:42:f9: d4:be:f6:3e:18:d3:ee:aa:4d:37:ba:a9:7f:67:a6: b1:43:d1:aa:ee:8e:46:ea:0e:76:ff:90:67:05:92: 48:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:DC:39:AB:35:74:41:5C:3C:D0:4C:00:7C:13:A4:97:31:C5:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f042e26c-0aff-4b31-840a-b1fa06fb53dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.68.0/22 Signature Algorithm: sha256WithRSAEncryption 92:0b:5b:c2:3d:b8:81:c9:bb:c5:35:0d:0a:53:5d:a7:63:01: 83:f3:ed:03:1d:b3:4a:06:2e:ed:ab:ea:7d:72:7a:46:c0:e3: ab:45:30:ce:9e:66:e1:42:f0:e2:e2:c4:4f:a8:6e:78:c1:51: c3:a2:ed:46:2b:33:2f:81:be:f1:65:aa:db:4e:e1:18:5d:52: fc:87:30:53:62:b8:49:dd:af:e6:56:3d:ab:b3:f2:dc:a2:b8: b0:50:ea:64:c9:e5:37:76:fb:d7:e4:78:b6:2d:53:b9:20:51: 7e:a4:0b:3e:f8:f8:ee:8d:a0:cd:5f:cf:26:16:49:5d:ff:ae: be:ac:77:8f:12:ad:f7:0c:36:90:6f:d8:8f:34:44:e4:c1:8e: 6c:05:11:53:38:e5:e0:53:08:4e:92:f7:e5:8a:70:c9:b2:16: 91:87:9a:66:79:15:99:6d:4a:6c:e8:a1:64:d6:85:2c:61:a7: 33:ab:87:83:d7:c8:42:95:d3:e2:d4:dd:00:7d:bb:db:c6:24: 86:44:85:29:80:da:27:c7:a3:9a:a6:39:ca:03:ae:74:0e:13: 2b:17:12:d2:33:46:3c:59:47:e3:91:a8:47:84:eb:0b:4c:88: 27:a0:d2:b2:b4:6c:e7:a0:c6:25:52:9d:8b:95:f3:91:de:cf: 88:2c:1d:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU/OEJHHaa/Q565HAwPejpNgbV/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTYyMTA5WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjFiZDk4MGI3ZDk2ZmZjNzFjNDg0YjU3MmVjNzIzMTVj NTc0NDg5MzMwNmI3ZWIxZTFlYmM3YWMyZTg3ZTMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ2nQqqR92+rLuysKfrUTNHWGaeFayt58u/VFSpJlH5TWY mxSKAOFWPWI9VGo9hbi7rGNz7msfca7YHL4P7pmtRYsmLDvILWuCc1dhR7bz1r8h 5FyyN7wWNnvXiQtlpjnzs4cWXIEdCFZ7l8hiHj7aibAj0WrGmi/JN8X15E5JUF7S KUxWsmigZX1t/w/SpXawprpT1i78jCbX8dzwUkUZax35eN90APWu9+Dt5HHBFcnO 8Di/cK1kw8Dz3v7xTuq9Cc0ry3EHX/PjM3uO3nrsP/Xgcei51n4j0Vs0+N1C+dS+ 9j4Y0+6qTTe6qX9nprFD0arujkbqDnb/kGcFkkhjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg3HcOas1dEFcPNBMAHwTpJcxxUQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwNDJlMjZjLTBhZmYtNGIzMS04NDBhLWIxZmEwNmZiNTNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2nUQwDQYJKoZIhvcNAQELBQADggEBAJILW8I9uIHJu8U1DQpTXadjAYPz 7QMds0oGLu2r6n1yekbA46tFMM6eZuFC8OLixE+obnjBUcOi7UYrMy+BvvFlqttO 4RhdUvyHMFNiuEndr+ZWPauz8tyiuLBQ6mTJ5Td2+9fkeLYtU7kgUX6kCz74+O6N oM1fzyYWSV3/rr6sd48SrfcMNpBv2I80ROTBjmwFEVM45eBTCE6S9+WKcMmyFpGH mmZ5FZltSmzooWTWhSxhpzOrh4PXyEKV0+LU3QB9u9vGJIZEhSmA2ifHo5qmOcoD rnQOEysXEtIzRjxZR+ORqEeE6wtMiCeg0rK0bOegxiVSnYuV85Hez4gsHXA= -----END CERTIFICATE-----Generated at Sat Apr 26 21:42:23 2025 by rpki-client