$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b9ab535-4671-41fc-8374-d554bd9b6205.roa File: 4b9ab535-4671-41fc-8374-d554bd9b6205.roa (raw, json) Hash identifier: MWxUVh+/N4Sd5b/fbQ8M9xbXxlzY2fjjLJ1Q1unIves= Subject key identifier: 75:1D:90:52:72:21:53:0D:2C:F3:5F:11:2D:96:62:57:C5:20:7E:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 77A1B4C632C22B947E3222FAF8CE74BA1A8F2420 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b9ab535-4671-41fc-8374-d554bd9b6205.roa Signing time: Sat 26 Apr 2025 00:20:20 +0000 ROA not before: Sat 26 Apr 2025 00:20:20 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 3356 IP address blocks: 161.188.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a1:b4:c6:32:c2:2b:94:7e:32:22:fa:f8:ce:74:ba:1a:8f:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 26 00:20:20 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=7b7fcb627c01b543b985bf2951fb37c430306164e76d1069a761f4d8252ae381, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:16:9d:3a:c5:46:e9:55:74:90:83:83:3c:35: a6:1b:5d:b3:51:43:2c:40:bd:59:3a:35:d6:3f:58: 50:9e:b8:6c:5e:90:01:ce:1d:ed:6f:58:2c:50:15: 01:28:6b:bb:87:e6:db:78:b9:f4:b3:9e:5a:9c:02: e4:88:20:e5:31:b9:b5:ea:2f:c6:d6:48:30:23:53: 59:2c:41:87:7d:e6:10:cf:e6:cd:e2:61:f8:1d:55: 97:77:24:ad:a7:89:42:76:57:f9:fa:9a:cb:a6:7e: d1:6d:7d:bf:53:eb:ce:be:cb:3b:11:22:8a:67:23: 2f:ee:de:2b:84:91:3f:38:33:f5:03:b4:03:3a:ad: b3:b8:e2:34:fd:e4:8f:be:c8:3d:db:f2:9e:02:b3: 70:dd:43:e3:5c:a7:eb:62:dd:cc:26:7e:86:f9:0e: 5a:b6:c1:a7:e9:23:9f:ca:a7:20:26:14:07:ee:b3: bf:be:6b:73:1b:b2:51:9c:55:12:de:0b:1c:b3:4f: d7:9e:a0:da:41:5a:fd:91:d1:76:e6:43:04:fd:38: 44:54:1b:73:8f:2a:34:1e:80:ed:46:d9:15:df:2b: c3:fe:71:5a:7b:8c:0d:92:88:43:de:e9:49:74:04: 85:71:6b:cb:a0:ce:c9:11:18:48:c7:48:72:12:5a: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1D:90:52:72:21:53:0D:2C:F3:5F:11:2D:96:62:57:C5:20:7E:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b9ab535-4671-41fc-8374-d554bd9b6205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.216.0/21 Signature Algorithm: sha256WithRSAEncryption b2:e2:12:2b:dc:be:3a:85:7e:28:25:77:ee:36:de:48:3a:f9: e1:d9:c9:e1:cf:3a:f8:1d:41:da:2c:32:1a:99:db:df:c4:c1: cb:ef:ec:d7:eb:0d:67:d6:4d:ea:e8:9c:4a:d8:1f:17:0d:64: 2e:fb:97:25:95:06:0b:66:d9:c5:91:5f:50:b1:ec:02:c7:96: 67:e6:34:a1:d3:87:f8:40:e6:23:8b:64:b8:8c:85:c8:1e:2c: ec:ee:c4:b9:53:f5:4f:48:27:8b:6a:df:4d:59:87:9b:fc:1e: 4f:e9:1a:5e:99:75:ff:8b:f7:0d:a1:d6:c6:3b:60:f6:64:2d: 5b:75:e8:47:b6:7f:a3:78:c9:44:76:6a:90:d5:a8:bd:51:42: 83:a2:d9:7d:dd:33:2f:0e:3c:c6:bf:86:40:b0:35:39:6e:e3: 20:f9:d0:3d:6b:68:2c:9c:34:cc:a5:fe:50:ef:7c:36:cb:b0: 4b:c9:2c:ed:e1:2f:27:aa:c1:11:d3:19:9c:d9:20:ba:da:36: 5b:9e:6f:df:b3:1f:ee:35:dc:86:e3:b5:72:d4:42:f9:19:16: 40:3a:af:c6:e2:12:d4:c8:5b:0b:b7:54:5b:11:2e:3d:8d:c0: 49:ef:6e:1d:bc:ff:ed:9b:9f:30:b0:97:99:d5:92:82:78:d7: 65:3b:36:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd6G0xjLCK5R+MiL6+M50uhqPJCAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI2MDAyMDIwWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjdmY2I2MjdjMDFiNTQzYjk4NWJmMjk1MWZiMzdjNDMw MzA2MTY0ZTc2ZDEwNjlhNzYxZjRkODI1MmFlMzgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPFp06xUbpVXSQg4M8NaYbXbNRQyxAvVk6NdY/WFCeuGxe kAHOHe1vWCxQFQEoa7uH5tt4ufSznlqcAuSIIOUxubXqL8bWSDAjU1ksQYd95hDP 5s3iYfgdVZd3JK2niUJ2V/n6msumftFtfb9T686+yzsRIopnIy/u3iuEkT84M/UD tAM6rbO44jT95I++yD3b8p4Cs3DdQ+Ncp+ti3cwmfob5Dlq2wafpI5/KpyAmFAfu s7++a3MbslGcVRLeCxyzT9eeoNpBWv2R0XbmQwT9OERUG3OPKjQegO1G2RXfK8P+ cVp7jA2SiEPe6Ul0BIVxa8ugzskRGEjHSHISWttVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdR2QUnIhUw0s818RLZZiV8UgfikwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiOWFiNTM1LTQ2NzEtNDFmYy04Mzc0LWQ1NTRiZDliNjIwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOhvNgwDQYJKoZIhvcNAQELBQADggEBALLiEivcvjqFfigld+423kg6+eHZ yeHPOvgdQdosMhqZ29/Ewcvv7NfrDWfWTeronErYHxcNZC77lyWVBgtm2cWRX1Cx 7ALHlmfmNKHTh/hA5iOLZLiMhcgeLOzuxLlT9U9IJ4tq301Zh5v8Hk/pGl6Zdf+L 9w2h1sY7YPZkLVt16Ee2f6N4yUR2apDVqL1RQoOi2X3dMy8OPMa/hkCwNTlu4yD5 0D1raCycNMyl/lDvfDbLsEvJLO3hLyeqwRHTGZzZILraNlueb9+zH+413IbjtXLU QvkZFkA6r8biEtTIWwu3VFsRLj2NwEnvbh28/+2bnzCwl5nVkoJ412U7NmQ= -----END CERTIFICATE-----Generated at Mon May 5 16:26:08 2025 by rpki-client