$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f81a235c-7dfd-4b5e-a6a4-c912f8c160e3.roa File: f81a235c-7dfd-4b5e-a6a4-c912f8c160e3.roa (raw, json) Hash identifier: C93C/QdJlcU7j5y1CiqBVkM8V54TXrO8QjNZWoyRTJ8= Subject key identifier: 8F:3A:B2:73:72:DF:BF:9C:C7:0D:DB:FB:23:01:2D:5D:ED:4E:8C:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AD8D796260FA7D0AEE3280DFCFA66923D54120C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f81a235c-7dfd-4b5e-a6a4-c912f8c160e3.roa Signing time: Fri 18 Apr 2025 15:01:20 +0000 ROA not before: Fri 18 Apr 2025 15:01:20 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.156.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d8:d7:96:26:0f:a7:d0:ae:e3:28:0d:fc:fa:66:92:3d:54:12:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:01:20 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=5bda0cddca8d43d42224c315caea9bdeaf7ef1f053d36de377db4bbc7f2c8917, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:1f:57:30:0c:64:ff:e1:83:66:86:cd:cc: 84:ae:e9:01:9d:3d:40:20:56:93:72:2b:94:b0:f9: 83:70:ee:83:06:9a:f6:a8:db:52:11:dd:37:cd:7d: 4e:57:e3:ec:6e:50:c1:e9:ac:09:08:b3:f6:0e:45: d6:d0:4d:6f:59:a1:a3:6c:25:dd:e5:1d:cc:89:f7: e4:f4:e4:1d:6e:2d:32:40:28:c6:f7:d7:94:9a:89: bf:4f:49:62:cd:30:ef:86:25:d8:fb:94:32:2a:4d: 42:63:c5:1b:f5:0f:e2:b9:1c:b0:95:3e:d8:96:9a: 55:33:8f:23:65:92:70:cf:06:7f:8e:04:e6:76:ea: 97:cb:32:3f:99:f7:5d:ea:78:58:d6:16:06:19:19: 02:ee:2c:de:62:b0:e9:be:39:2e:3b:fe:f6:6c:7d: 06:e2:ce:32:bc:a5:f4:ee:9d:27:ae:8a:9b:d2:a4: ca:ef:7d:5a:7a:3d:29:50:2f:d4:25:e7:64:d1:cf: ff:be:65:af:38:44:69:f4:d0:cc:0f:61:f8:f2:f3: 03:a4:a6:dd:87:bf:5f:38:bf:e8:fc:03:d8:7d:d4: fb:e2:3f:9a:a2:55:48:20:bc:85:dd:53:d3:d9:ce: a7:a5:d7:d1:2e:dc:9e:b9:2c:1b:90:5d:7f:bf:67: 8e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3A:B2:73:72:DF:BF:9C:C7:0D:DB:FB:23:01:2D:5D:ED:4E:8C:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f81a235c-7dfd-4b5e-a6a4-c912f8c160e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.2.0/23 Signature Algorithm: sha256WithRSAEncryption 97:f7:bc:d6:52:62:43:b5:0e:30:c6:d5:af:46:fa:ac:65:44: 7c:7a:d3:1f:da:65:02:7b:be:30:78:f0:6d:8c:e2:ac:58:a7: 9a:d2:d4:cb:53:f5:03:74:26:29:74:40:2d:63:88:c0:a2:7e: dd:ad:82:45:d8:a3:ec:58:5e:ef:58:11:dd:ee:45:cc:bb:11: a1:1a:ea:a5:ce:1b:90:3d:b5:0a:b3:10:09:de:ff:2e:52:c9: 35:08:c4:1e:29:52:bb:f6:88:65:6a:94:e6:b4:cd:10:f6:36: 7c:94:90:a8:5a:79:9e:e2:68:9f:d9:a7:2f:3a:8c:4d:d6:cf: 4a:60:4a:98:b4:7d:a9:cc:9d:35:ce:01:e1:ba:68:b0:e8:40: 01:6d:bb:36:55:b4:c6:8e:07:45:fb:60:86:b8:34:1f:97:f6: 6a:17:2f:17:0d:29:02:44:10:a0:03:c6:59:9c:ba:53:c0:02: f3:bd:6b:0d:c7:4c:26:6a:36:16:37:c5:e5:e4:44:17:0e:77: e2:2e:51:f2:6d:37:0e:b5:e1:2f:7e:1f:1f:21:54:11:3c:a2: 0c:cd:81:e7:39:48:03:82:6d:db:15:22:86:60:34:b8:44:5d: 93:19:f8:32:11:0d:6d:9b:db:fc:21:d5:96:b2:86:ce:e3:60: 51:c8:32:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCtjXliYPp9Cu4ygN/Ppmkj1UEgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUwMTIwWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmRhMGNkZGNhOGQ0M2Q0MjIyNGMzMTVjYWVhOWJkZWFm N2VmMWYwNTNkMzZkZTM3N2RiNGJiYzdmMmM4OTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7rx9XMAxk/+GDZobNzISu6QGdPUAgVpNyK5Sw+YNw7oMG mvao21IR3TfNfU5X4+xuUMHprAkIs/YORdbQTW9ZoaNsJd3lHcyJ9+T05B1uLTJA KMb315Saib9PSWLNMO+GJdj7lDIqTUJjxRv1D+K5HLCVPtiWmlUzjyNlknDPBn+O BOZ26pfLMj+Z913qeFjWFgYZGQLuLN5isOm+OS47/vZsfQbizjK8pfTunSeuipvS pMrvfVp6PSlQL9Ql52TRz/++Za84RGn00MwPYfjy8wOkpt2Hv184v+j8A9h91Pvi P5qiVUggvIXdU9PZzqel19Eu3J65LBuQXX+/Z453AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjzqyc3Lfv5zHDdv7IwEtXe1OjCswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4MWEyMzVjLTdkZmQtNGI1ZS1hNmE0LWM5MTJmOGMxNjBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2nAIwDQYJKoZIhvcNAQELBQADggEBAJf3vNZSYkO1DjDG1a9G+qxlRHx6 0x/aZQJ7vjB48G2M4qxYp5rS1MtT9QN0Jil0QC1jiMCift2tgkXYo+xYXu9YEd3u Rcy7EaEa6qXOG5A9tQqzEAne/y5SyTUIxB4pUrv2iGVqlOa0zRD2NnyUkKhaeZ7i aJ/Zpy86jE3Wz0pgSpi0fanMnTXOAeG6aLDoQAFtuzZVtMaOB0X7YIa4NB+X9moX LxcNKQJEEKADxlmculPAAvO9aw3HTCZqNhY3xeXkRBcOd+IuUfJtNw614S9+Hx8h VBE8ogzNgec5SAOCbdsVIoZgNLhEXZMZ+DIRDW2b2/wh1Zayhs7jYFHIMjU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:35:41 2025 by rpki-client