$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa File: 4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa (raw, json) Hash identifier: poRGA53OFfeElg9OdBoVzUy6WecJ2GOKD7d7i2qwUOE= Subject key identifier: E3:F0:0E:1B:6A:9B:C7:81:AB:1C:94:57:6F:9E:B9:9D:3D:BF:07:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 530FE79CCBDEA287DFFBF50623049B2FE91FC906 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa Signing time: Tue 22 Apr 2025 18:20:04 +0000 ROA not before: Tue 22 Apr 2025 18:20:04 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0f:e7:9c:cb:de:a2:87:df:fb:f5:06:23:04:9b:2f:e9:1f:c9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:20:04 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=ff0de810cf7a689e75f376a64fce01222b26ab41ab2fe48a9ab25a745bf821eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:8d:2c:fb:d6:52:4a:67:45:32:8a:df:7f: 26:3d:ef:ce:80:f6:61:c3:8e:7b:8d:2f:6a:54:43: 45:fd:93:74:16:25:9e:eb:ad:20:e2:e0:f6:37:98: e9:01:6e:ab:3e:a9:39:0a:36:11:ee:d1:07:72:9a: 59:68:a4:fa:ff:d8:0c:7b:6e:82:21:e6:c2:d8:d8: de:25:c5:82:31:d9:90:b9:56:44:2a:8d:64:21:ea: 67:46:73:a5:cf:94:ec:6a:ee:d8:86:ac:82:67:7e: 88:f7:19:34:3f:26:38:c8:79:c8:82:75:6e:a5:34: 91:fb:27:b8:33:fe:06:60:41:8d:21:20:33:4d:a3: 63:70:ee:ee:b1:81:c8:63:8b:fd:61:1d:84:f1:26: e8:5a:e4:85:b1:77:08:52:19:e8:9b:21:64:94:58: ed:f0:b1:c2:f3:54:e4:ba:32:27:b9:8e:69:82:3e: de:fe:25:0a:bf:3e:ab:89:b7:2b:7f:39:a3:5c:9e: 7c:58:a0:b0:fa:2b:a0:f4:7b:01:1d:a5:fa:42:48: f4:fd:48:07:a9:58:44:51:3d:6a:6b:42:c7:62:cb: 29:7f:93:90:78:34:8c:52:84:d0:82:cf:1c:9a:31: b2:7f:ab:34:c4:c7:c2:f8:54:b8:8a:ff:cf:85:34: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F0:0E:1B:6A:9B:C7:81:AB:1C:94:57:6F:9E:B9:9D:3D:BF:07:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfd46d3-a9d2-47a1-9cd8-40eface2ba3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.111.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:c3:95:79:fc:be:b5:5b:fb:80:43:92:eb:34:39:3f:aa:02: dc:ce:53:ae:8d:4a:18:a5:b4:6a:b0:b7:ba:a4:b4:e9:12:00: f1:e3:09:a7:32:8c:c7:09:e4:1a:91:14:96:d6:0b:28:66:54: 5e:c3:4a:d8:ad:a3:7f:84:03:7b:12:65:57:e0:68:da:73:04: e4:49:b7:d8:9e:be:67:f3:b6:21:81:55:33:2c:b4:62:6a:df: a2:8c:09:c0:35:c4:63:2f:40:a0:bc:11:e9:f8:7f:dd:66:dc: df:4a:9f:d6:11:2e:5e:9d:82:61:b0:d1:a5:c1:99:a1:3a:d1: 3d:6f:62:98:ea:dd:78:8a:6e:67:65:70:61:c3:e8:0e:e9:22: 36:45:bc:4e:74:85:9f:44:4b:c2:35:02:0d:db:b6:7c:b7:bb: 8f:5e:7e:29:a5:24:72:fb:9a:4b:f6:7b:6a:49:f3:5e:a3:66: 4d:c1:74:b8:84:ec:a8:33:82:8b:ab:6c:31:d3:1a:88:5f:d4: 18:8d:33:f1:97:64:36:40:78:f6:a4:ae:f6:5f:37:ce:67:09: 08:51:c0:bc:14:92:d5:25:23:e4:c9:73:d8:a4:e7:80:38:2a: d3:1c:23:c2:5b:0e:48:19:27:2c:4d:7e:43:9f:c8:21:e2:3d: 57:6d:ed:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUw/nnMveooff+/UGIwSbL+kfyQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgyMDA0WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjBkZTgxMGNmN2E2ODllNzVmMzc2YTY0ZmNlMDEyMjJi MjZhYjQxYWIyZmU0OGE5YWIyNWE3NDViZjgyMWViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9ZI0s+9ZSSmdFMorffyY9786A9mHDjnuNL2pUQ0X9k3QW JZ7rrSDi4PY3mOkBbqs+qTkKNhHu0QdymllopPr/2Ax7boIh5sLY2N4lxYIx2ZC5 VkQqjWQh6mdGc6XPlOxq7tiGrIJnfoj3GTQ/JjjIeciCdW6lNJH7J7gz/gZgQY0h IDNNo2Nw7u6xgchji/1hHYTxJuha5IWxdwhSGeibIWSUWO3wscLzVOS6Mie5jmmC Pt7+JQq/PquJtyt/OaNcnnxYoLD6K6D0ewEdpfpCSPT9SAepWERRPWprQsdiyyl/ k5B4NIxShNCCzxyaMbJ/qzTEx8L4VLiK/8+FNLv/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4/AOG2qbx4GrHJRXb565nT2/B2swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjZmQ0NmQzLWE5ZDItNDdhMS05Y2Q4LTQwZWZhY2UyYmEzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28G8wDQYJKoZIhvcNAQELBQADggEBAA3DlXn8vrVb+4BDkus0OT+qAtzO U66NShiltGqwt7qktOkSAPHjCacyjMcJ5BqRFJbWCyhmVF7DStito3+EA3sSZVfg aNpzBORJt9ievmfztiGBVTMstGJq36KMCcA1xGMvQKC8Een4f91m3N9Kn9YRLl6d gmGw0aXBmaE60T1vYpjq3XiKbmdlcGHD6A7pIjZFvE50hZ9ES8I1Ag3btny3u49e fimlJHL7mkv2e2pJ816jZk3BdLiE7KgzgourbDHTGohf1BiNM/GXZDZAePakrvZf N85nCQhRwLwUktUlI+TJc9ik54A4KtMcI8JbDkgZJyxNfkOfyCHiPVdt7XE= -----END CERTIFICATE-----Generated at Mon May 5 05:54:38 2025 by rpki-client