$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f74e97f5-aa47-44e3-a39d-52b1d674051c.roa File: f74e97f5-aa47-44e3-a39d-52b1d674051c.roa (raw, json) Hash identifier: STg4N4sWf2vPLzTSXrMhivEVbiQ1s8posbBR9XXsLDE= Subject key identifier: 56:B8:36:C5:69:59:EA:9B:73:4B:FD:6E:31:D7:B2:8F:8A:8B:D0:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EE2B2A4D4DE2BCC76F4561434CC99EE298D80B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f74e97f5-aa47-44e3-a39d-52b1d674051c.roa Signing time: Fri 25 Apr 2025 16:51:16 +0000 ROA not before: Fri 25 Apr 2025 16:51:16 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e2:b2:a4:d4:de:2b:cc:76:f4:56:14:34:cc:99:ee:29:8d:80:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:51:16 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=b59bad8ae5f3215c32414f0c84cea655daaab5dbcc0da9a712b99b6809c338f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:16:bc:ac:83:ea:4b:61:6b:53:16:fa:72: 32:d9:14:05:1b:ed:3f:2f:1f:c6:c0:27:59:b7:e5: 93:c9:52:bc:ca:d2:83:6f:8d:2e:a1:3f:a2:2f:a6: 34:50:3c:02:9c:f7:b4:88:61:72:46:c3:4f:70:3f: 3e:ee:58:02:fd:8e:3b:30:f8:aa:b0:91:4a:e3:5d: 18:04:10:1e:62:59:2d:7e:34:1e:1a:fc:d8:19:77: 0b:e1:ca:50:61:87:a6:0a:70:62:aa:99:70:90:cb: 48:ab:e0:aa:53:1c:13:30:fe:f7:16:f9:45:be:44: e1:e9:0a:f0:58:fa:03:87:ee:d0:a5:86:5d:25:9c: f5:35:b7:52:c0:a5:96:da:65:d1:dc:29:5a:ad:cf: 98:a1:9e:7e:54:71:e0:ad:18:9e:96:28:4c:4e:d2: 9c:f1:2d:07:ec:90:c8:54:de:f1:11:bd:21:ab:6b: b7:f5:90:ce:eb:d1:12:0f:57:f4:4f:91:06:c0:ee: 69:67:5c:ac:3e:2e:2f:48:70:52:4d:af:80:36:bb: 1e:cb:17:ef:5e:d4:5b:09:cd:04:92:e4:dd:5e:65: f2:9f:d1:de:8f:69:f4:08:91:a2:3d:b3:f8:fc:11: c6:6d:5c:73:85:f9:a8:6a:28:bc:55:46:ad:98:8c: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B8:36:C5:69:59:EA:9B:73:4B:FD:6E:31:D7:B2:8F:8A:8B:D0:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f74e97f5-aa47-44e3-a39d-52b1d674051c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.250.0/23 Signature Algorithm: sha256WithRSAEncryption 71:d0:1a:ca:48:92:5b:32:48:1d:2f:cb:fc:64:18:34:2b:cf: d6:56:10:20:bd:d5:bf:9b:f8:fc:01:3d:2d:93:72:08:c2:ce: 81:69:09:c3:c4:a5:18:7b:56:41:85:65:ec:39:3c:6f:60:24: a5:22:ca:8e:45:9b:66:91:e8:11:e3:f2:ec:04:b4:2b:b1:16: 19:9d:2e:d7:76:a2:7b:b3:83:0c:70:5a:71:32:2d:f0:06:4b: 75:71:16:f6:e5:c7:48:7d:ce:d7:a9:04:ba:3d:39:05:d2:25: 9a:a4:49:25:4b:a6:1d:6e:2b:d9:3f:be:df:9b:14:fd:28:41: cb:bb:4b:dd:8e:a1:a6:0a:1c:28:8e:b1:c0:c4:01:cc:58:63: 9a:98:a9:01:87:2d:de:70:c9:bb:8a:0b:ed:5c:12:e0:d1:11: f9:b1:8c:24:14:f4:b5:30:34:20:41:72:ab:97:5b:c2:f9:e6: 06:4f:ec:dd:d2:91:f0:20:98:f3:7b:f1:56:af:c1:2c:3a:28: 40:e3:3f:18:b0:7d:f8:2c:e1:1a:a0:60:89:19:e1:39:fa:aa: 62:74:c9:f7:7c:5e:25:3e:c4:67:49:e9:92:2c:0b:84:b8:ea: f1:26:57:58:9f:11:fe:f6:26:ce:28:40:d9:47:53:51:a3:30: b7:90:f5:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbuKypNTeK8x29FYUNMyZ7imNgLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY1MTE2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTliYWQ4YWU1ZjMyMTVjMzI0MTRmMGM4NGNlYTY1NWRh YWFiNWRiY2MwZGE5YTcxMmI5OWI2ODA5YzMzOGYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqvha8rIPqS2FrUxb6cjLZFAUb7T8vH8bAJ1m35ZPJUrzK 0oNvjS6hP6IvpjRQPAKc97SIYXJGw09wPz7uWAL9jjsw+KqwkUrjXRgEEB5iWS1+ NB4a/NgZdwvhylBhh6YKcGKqmXCQy0ir4KpTHBMw/vcW+UW+ROHpCvBY+gOH7tCl hl0lnPU1t1LApZbaZdHcKVqtz5ihnn5UceCtGJ6WKExO0pzxLQfskMhU3vERvSGr a7f1kM7r0RIPV/RPkQbA7mlnXKw+Li9IcFJNr4A2ux7LF+9e1FsJzQSS5N1eZfKf 0d6PafQIkaI9s/j8EcZtXHOF+ahqKLxVRq2YjD6nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVrg2xWlZ6ptzS/1uMdeyj4qL0LwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3NGU5N2Y1LWFhNDctNDRlMy1hMzlkLTUyYjFkNjc0MDUxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0LvowDQYJKoZIhvcNAQELBQADggEBAHHQGspIklsySB0vy/xkGDQrz9ZW ECC91b+b+PwBPS2TcgjCzoFpCcPEpRh7VkGFZew5PG9gJKUiyo5Fm2aR6BHj8uwE tCuxFhmdLtd2onuzgwxwWnEyLfAGS3VxFvblx0h9ztepBLo9OQXSJZqkSSVLph1u K9k/vt+bFP0oQcu7S92OoaYKHCiOscDEAcxYY5qYqQGHLd5wybuKC+1cEuDREfmx jCQU9LUwNCBBcquXW8L55gZP7N3SkfAgmPN78VavwSw6KEDjPxiwffgs4RqgYIkZ 4Tn6qmJ0yfd8XiU+xGdJ6ZIsC4S46vEmV1ifEf72Js4oQNlHU1GjMLeQ9bA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:09 2025 by rpki-client