$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f99299c6-900d-4c9d-8a91-9ca114b4efe5.roa File: f99299c6-900d-4c9d-8a91-9ca114b4efe5.roa (raw, json) Hash identifier: 9tPSZpcwf8VqJxNePifxMdEmne0BHflfXPEOhWmLnds= Subject key identifier: 1C:E8:60:53:9A:58:41:76:44:8E:EC:B8:18:A8:F9:13:71:41:B2:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CCBCB332AA69A74CA3D53942292B012BE63451D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f99299c6-900d-4c9d-8a91-9ca114b4efe5.roa Signing time: Fri 25 Apr 2025 16:51:17 +0000 ROA not before: Fri 25 Apr 2025 16:51:17 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:cb:33:2a:a6:9a:74:ca:3d:53:94:22:92:b0:12:be:63:45:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:51:17 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=0fedcddafb205c4a61ecf5bdfab4920a61f002dc8d0449336546d9a9dd6eca7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:0f:c3:ee:d3:65:80:f8:35:06:07:48:33: eb:a5:33:02:d8:83:f0:46:8f:80:ca:4f:42:09:ce: d9:cb:df:a9:33:05:f6:6a:47:52:6e:9b:f0:4a:cf: 78:c1:bd:c0:ce:74:1a:9d:da:ae:70:6d:54:7b:bf: 63:d8:13:2e:65:f9:93:f8:69:5a:67:84:04:22:f5: fd:ec:0d:39:61:72:8b:6d:e5:e0:9b:eb:e6:26:c7: b5:82:b3:e9:01:00:4c:49:f9:81:8a:4d:16:ab:ed: e8:64:ab:c3:2e:e3:3d:be:d3:ac:0b:1d:c0:c2:c1: d7:bb:60:23:14:ef:e8:81:22:65:b5:0e:7a:b7:d8: a4:c9:e0:0d:80:c0:74:0e:89:83:82:d2:74:15:e9: 9d:aa:ba:2e:f6:2d:c5:b6:93:53:a5:64:42:e0:47: 4b:65:b3:7a:56:7c:11:c6:c8:06:d5:70:ed:fc:29: bd:69:cf:cf:40:70:ef:83:9e:4f:c8:ba:a3:2e:2d: ee:cb:34:1d:d5:53:2c:4f:eb:24:cd:21:79:43:31: 4d:b2:26:2e:b1:bd:97:06:a0:25:14:56:12:0c:be: 59:57:80:4c:a4:3e:72:cc:7b:8d:f2:0c:c7:d4:35: 51:3f:26:09:06:fa:dd:d5:a5:30:54:e5:66:bf:7c: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E8:60:53:9A:58:41:76:44:8E:EC:B8:18:A8:F9:13:71:41:B2:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f99299c6-900d-4c9d-8a91-9ca114b4efe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.166.0/23 Signature Algorithm: sha256WithRSAEncryption 25:b8:0f:27:82:39:d3:04:7f:da:db:a7:1c:2e:d7:67:35:ef: 47:bb:71:f3:b0:89:cc:27:57:4c:64:03:16:01:8d:b5:6d:80: a1:22:26:3b:9f:cd:15:f9:40:8d:a5:ac:35:2a:f9:45:a6:a1: 52:a7:f9:03:4c:69:71:2f:87:2b:19:bd:b9:a4:06:37:14:42: 2e:34:47:a8:70:b1:85:07:9d:40:24:6a:1c:4a:65:cf:3e:3b: f0:53:7a:91:18:ab:e5:05:ae:f0:a4:27:42:1d:67:2f:2b:7e: 7d:1e:8c:69:e9:3a:b6:6e:88:7e:09:38:66:13:71:bd:e4:ab: 54:ed:d4:a2:29:a2:ba:49:e3:39:ac:27:22:3d:fb:df:44:2a: 09:25:b4:6c:81:90:d4:1b:eb:f4:42:3d:fd:51:b8:4e:37:05: 7b:da:41:ce:d8:93:53:d1:a6:18:8e:59:c1:d1:a1:a4:ac:36: 3f:94:2e:57:0e:80:a4:44:a7:6e:13:29:20:d0:9f:6f:68:5b: bb:2b:5a:de:ef:40:e8:41:39:cb:f0:83:ca:1b:ae:c3:f6:af: 18:1f:68:71:48:1e:d7:40:dd:12:ff:66:73:5c:d2:fd:35:31: ee:64:3a:ae:ee:27:49:29:f5:f0:36:14:46:75:33:cf:a4:e7: 04:c7:67:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDMvLMyqmmnTKPVOUIpKwEr5jRR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY1MTE3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmVkY2RkYWZiMjA1YzRhNjFlY2Y1YmRmYWI0OTIwYTYx ZjAwMmRjOGQwNDQ5MzM2NTQ2ZDlhOWRkNmVjYTdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZFw/D7tNlgPg1BgdIM+ulMwLYg/BGj4DKT0IJztnL36kz BfZqR1Jum/BKz3jBvcDOdBqd2q5wbVR7v2PYEy5l+ZP4aVpnhAQi9f3sDTlhcott 5eCb6+Ymx7WCs+kBAExJ+YGKTRar7ehkq8Mu4z2+06wLHcDCwde7YCMU7+iBImW1 Dnq32KTJ4A2AwHQOiYOC0nQV6Z2qui72LcW2k1OlZELgR0tls3pWfBHGyAbVcO38 Kb1pz89AcO+Dnk/IuqMuLe7LNB3VUyxP6yTNIXlDMU2yJi6xvZcGoCUUVhIMvllX gEykPnLMe43yDMfUNVE/JgkG+t3VpTBU5Wa/fKU/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHOhgU5pYQXZEjuy4GKj5E3FBskAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y5OTI5OWM2LTkwMGQtNGM5ZC04YTkxLTljYTExNGI0ZWZlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0LqYwDQYJKoZIhvcNAQELBQADggEBACW4DyeCOdMEf9rbpxwu12c170e7 cfOwicwnV0xkAxYBjbVtgKEiJjufzRX5QI2lrDUq+UWmoVKn+QNMaXEvhysZvbmk BjcUQi40R6hwsYUHnUAkahxKZc8+O/BTepEYq+UFrvCkJ0IdZy8rfn0ejGnpOrZu iH4JOGYTcb3kq1Tt1KIporpJ4zmsJyI9+99EKgkltGyBkNQb6/RCPf1RuE43BXva Qc7Yk1PRphiOWcHRoaSsNj+ULlcOgKREp24TKSDQn29oW7srWt7vQOhBOcvwg8ob rsP2rxgfaHFIHtdA3RL/ZnNc0v01Me5kOq7uJ0kp9fA2FEZ1M8+k5wTHZ4w= -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:19 2025 by rpki-client