$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa File: 9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa (raw, json) Hash identifier: w5u4EJvF4GlrZ4g6ReHXvK35hE2vG36kEOcy2hq0Bb8= Subject key identifier: 92:72:02:68:7A:81:88:E6:27:9B:6C:8F:A6:FB:11:DD:BB:2E:3C:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 129E2270DE9FB7286178F2F2E5859182E4ED20D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa Signing time: Fri 18 Apr 2025 15:22:07 +0000 ROA not before: Fri 18 Apr 2025 15:22:07 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.157.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9e:22:70:de:9f:b7:28:61:78:f2:f2:e5:85:91:82:e4:ed:20:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:22:07 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=64b5fc284231df3dfe322346320df387030ed12249e9f74e6d291ba7e74c2022, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:4c:af:26:64:43:64:d7:c4:77:5d:51:fd: 70:44:fb:5d:ec:20:88:85:20:35:32:e8:03:0f:3b: 2b:81:93:8e:83:08:6e:17:31:4c:0b:eb:e3:77:79: c4:3e:f6:d7:94:89:40:ad:21:8b:da:e1:7a:c1:bb: 72:c0:59:06:65:31:9c:a8:ab:69:c5:68:77:3d:c0: e3:c8:17:4c:c7:01:17:8d:c3:1c:a2:1a:a0:2b:72: 28:e2:2b:a1:fe:70:f9:bc:02:a1:35:3d:23:fa:ed: f9:b1:d3:80:25:62:cc:80:98:67:c6:e6:51:b6:44: 45:fa:02:e2:f1:8f:79:c9:92:52:37:0d:71:e9:90: ca:f2:7b:9c:a4:02:84:2c:c8:a9:3a:b8:14:fe:e1: 9b:e4:19:1e:90:0d:1d:fa:64:92:50:da:0c:c5:49: db:53:97:f8:b2:46:f0:fc:0c:01:7a:f0:df:ec:88: 0b:e6:3d:c0:e2:8d:52:f1:7d:44:ec:0f:56:12:8d: 01:c9:7e:ee:08:cc:e6:b8:41:22:ca:e1:f1:b3:ca: ea:b1:9f:fc:e0:e4:d1:c4:cb:7c:8d:2a:4b:7a:e2: 60:4d:4e:5e:80:21:87:07:f4:44:41:7f:8a:98:a8: ca:ff:d6:80:c6:56:a9:bd:2f:6b:5f:7b:64:92:0d: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:72:02:68:7A:81:88:E6:27:9B:6C:8F:A6:FB:11:DD:BB:2E:3C:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9eba0-b2ba-4340-9e95-cadc0ec6c378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5a:ca:db:b7:75:7d:5c:10:d9:f8:c4:f0:b5:69:f4:f9:0f:20: ad:00:bd:09:88:48:51:06:3d:45:db:75:fe:24:c5:be:9d:ac: e8:26:9d:70:75:4f:26:ea:38:cc:c5:2b:8c:93:26:d4:d5:20: 26:82:ba:77:68:e6:57:09:8b:c9:2d:5d:c7:63:45:dd:18:c3: fe:88:a2:c3:4f:60:a4:4d:25:92:62:9f:98:a5:f8:b4:da:da: 2d:86:92:5e:61:36:25:bd:dd:cd:33:40:9f:1a:2b:e6:65:0c: b6:71:ba:f3:b1:ef:fc:8e:02:ef:7a:ae:17:d1:21:ca:27:b0: d4:47:b1:c9:07:85:e5:10:8f:82:83:ed:f5:00:f9:1b:60:9f: 61:00:a8:f0:c0:1f:9b:69:69:5d:20:84:9c:9a:f2:68:5a:0c: 35:47:fc:3d:7c:9c:16:03:e1:a5:6f:b0:4f:40:92:ce:3a:55: 90:dc:4f:3f:ca:f8:75:de:e9:4e:0c:c2:7c:b8:06:d5:86:10: 11:bf:24:9a:05:04:62:68:ed:44:67:92:5b:f3:1a:6c:98:8d: ea:01:73:4d:b4:02:df:f4:5b:d5:b0:59:8f:5c:5e:a4:a3:7c: 7d:63:6e:49:77:06:4f:71:d1:30:67:0c:77:c1:ed:a0:c9:d7: 96:e3:be:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEp4icN6ftyhhePLy5YWRguTtINQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUyMjA3WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGI1ZmMyODQyMzFkZjNkZmUzMjIzNDYzMjBkZjM4NzAz MGVkMTIyNDllOWY3NGU2ZDI5MWJhN2U3NGMyMDIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrSEyvJmRDZNfEd11R/XBE+13sIIiFIDUy6AMPOyuBk46D CG4XMUwL6+N3ecQ+9teUiUCtIYva4XrBu3LAWQZlMZyoq2nFaHc9wOPIF0zHAReN wxyiGqArcijiK6H+cPm8AqE1PSP67fmx04AlYsyAmGfG5lG2REX6AuLxj3nJklI3 DXHpkMrye5ykAoQsyKk6uBT+4ZvkGR6QDR36ZJJQ2gzFSdtTl/iyRvD8DAF68N/s iAvmPcDijVLxfUTsD1YSjQHJfu4IzOa4QSLK4fGzyuqxn/zg5NHEy3yNKkt64mBN Tl6AIYcH9ERBf4qYqMr/1oDGVqm9L2tfe2SSDW5BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUknICaHqBiOYnm2yPpvsR3bsuPDwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZDllYmEwLWIyYmEtNDM0MC05ZTk1LWNhZGMwZWM2YzM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2nQAwDQYJKoZIhvcNAQELBQADggEBAFrK27d1fVwQ2fjE8LVp9PkPIK0A vQmISFEGPUXbdf4kxb6drOgmnXB1TybqOMzFK4yTJtTVICaCundo5lcJi8ktXcdj Rd0Yw/6IosNPYKRNJZJin5il+LTa2i2Gkl5hNiW93c0zQJ8aK+ZlDLZxuvOx7/yO Au96rhfRIconsNRHsckHheUQj4KD7fUA+Rtgn2EAqPDAH5tpaV0ghJya8mhaDDVH /D18nBYD4aVvsE9Aks46VZDcTz/K+HXe6U4Mwny4BtWGEBG/JJoFBGJo7URnklvz GmyYjeoBc020At/0W9WwWY9cXqSjfH1jbkl3Bk9x0TBnDHfB7aDJ15bjvok= -----END CERTIFICATE-----Generated at Mon May 5 13:45:31 2025 by rpki-client