$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4daf3b6-f3f8-4eec-846d-2679a3ce3c93.roa File: b4daf3b6-f3f8-4eec-846d-2679a3ce3c93.roa (raw, json) Hash identifier: WV+YGDr83wimkuYMxFB5RHD6jZX3kU+2A8AhLDjaOfI= Subject key identifier: 5B:A8:DA:2B:77:A0:54:8D:B8:E5:A0:59:07:CD:B2:DE:A3:4A:CB:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D34EBB9CCC8222A7AE05D56005168C05C995C04 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4daf3b6-f3f8-4eec-846d-2679a3ce3c93.roa Signing time: Fri 18 Apr 2025 18:21:10 +0000 ROA not before: Fri 18 Apr 2025 18:21:10 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.244.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:34:eb:b9:cc:c8:22:2a:7a:e0:5d:56:00:51:68:c0:5c:99:5c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 18:21:10 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=0aef7ebccd07ba2694f2e66957010b89162125f52407f10bca5205c2f96a44ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:a1:ef:d7:8d:b6:6f:16:17:83:5e:d9:19: 10:3e:14:57:47:e4:e8:7e:51:c9:09:92:a9:e3:2f: fd:f3:04:6c:82:a0:b2:4c:13:65:ff:ae:1e:57:83: 59:4d:5d:c7:0b:4f:a9:1d:b6:29:b3:10:6b:55:e3: 40:17:e0:5b:e2:39:12:ed:84:9b:8f:78:a6:96:6a: 7a:a9:0b:fb:29:f2:b5:d3:47:32:ae:1f:04:cf:80: c6:2e:d1:83:48:f4:91:6c:d0:2a:26:c9:6b:fc:86: 23:14:56:8f:1b:87:d8:80:a0:b3:39:a0:87:6f:7a: ae:4e:b9:d2:dc:54:51:f0:98:ad:8f:4a:dd:97:ff: 37:d7:b9:26:29:fd:61:8f:bf:51:67:5f:5e:f9:0a: 88:0f:fc:59:9b:56:6a:4c:c8:87:35:26:55:e5:0d: 68:41:a9:88:36:c1:be:d7:c2:8a:de:86:d7:82:3f: 84:15:1c:cd:d4:30:16:78:3c:5b:2a:17:a6:4d:2c: 5d:8c:82:12:a2:27:2b:b0:c1:26:a6:66:43:8b:fd: c4:c4:d4:68:f2:56:1f:b4:f0:96:3c:fa:2a:b7:63: 43:79:9f:e3:70:d2:b5:a8:5a:78:4b:f7:06:63:fd: ee:91:eb:3f:53:ed:e0:8d:e8:2d:43:63:bf:37:a9: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A8:DA:2B:77:A0:54:8D:B8:E5:A0:59:07:CD:B2:DE:A3:4A:CB:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4daf3b6-f3f8-4eec-846d-2679a3ce3c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.244.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:dd:4b:3a:be:bf:34:8f:cf:37:7a:68:08:60:26:2f:3d:60: 7c:f4:b2:be:c9:2b:ee:53:5a:47:50:92:ad:1e:ea:ba:9b:e8: 26:05:d1:a4:cd:d1:ed:e5:16:4b:e7:2b:09:d0:bf:2a:88:83: 4a:38:59:f2:57:df:e4:34:b4:ed:63:86:68:1d:0a:e3:94:d3: 86:51:91:e8:be:d0:19:83:0a:5a:6a:49:2a:8c:46:21:74:18: 1f:bd:9e:90:35:7f:fc:6c:f7:57:4c:42:5c:08:57:e9:2e:f7: 88:ea:90:a4:74:d5:87:90:a8:10:84:60:9f:d7:25:12:9f:f0: 6f:7f:69:a8:4d:7e:a4:69:3c:ca:8b:1b:01:bc:0a:ec:5e:ec: 45:00:58:a8:d4:b3:8d:db:2b:82:84:09:6c:f7:a2:b7:ea:19: 2b:72:68:cf:a0:4c:11:ca:dc:9a:3d:cf:e9:39:ed:a4:3a:b6: f5:fe:eb:77:90:ba:5c:64:32:54:7a:ad:ea:56:2c:e9:c0:70: 22:86:f9:d9:11:d8:60:9e:0d:75:e8:c7:ef:47:e2:ea:c7:38: 11:1a:0c:b9:94:56:e8:02:8c:bc:27:32:e2:8e:c6:1b:8e:a8: 1a:90:59:fc:85:4a:3d:10:76:cb:14:1e:37:f3:62:8c:51:39: 08:08:93:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXTTruczIIip64F1WAFFowFyZXAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTgyMTEwWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWVmN2ViY2NkMDdiYTI2OTRmMmU2Njk1NzAxMGI4OTE2 MjEyNWY1MjQwN2YxMGJjYTUyMDVjMmY5NmE0NGJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnwaHv1422bxYXg17ZGRA+FFdH5Oh+UckJkqnjL/3zBGyC oLJME2X/rh5Xg1lNXccLT6kdtimzEGtV40AX4FviORLthJuPeKaWanqpC/sp8rXT RzKuHwTPgMYu0YNI9JFs0ComyWv8hiMUVo8bh9iAoLM5oIdveq5OudLcVFHwmK2P St2X/zfXuSYp/WGPv1FnX175CogP/FmbVmpMyIc1JlXlDWhBqYg2wb7XworehteC P4QVHM3UMBZ4PFsqF6ZNLF2MghKiJyuwwSamZkOL/cTE1GjyVh+08JY8+iq3Y0N5 n+Nw0rWoWnhL9wZj/e6R6z9T7eCN6C1DY783qTYhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW6jaK3egVI245aBZB82y3qNKy5wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0ZGFmM2I2LWYzZjgtNGVlYy04NDZkLTI2NzlhM2NlM2M5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc29IAwDQYJKoZIhvcNAQELBQADggEBAE3dSzq+vzSPzzd6aAhgJi89YHz0 sr7JK+5TWkdQkq0e6rqb6CYF0aTN0e3lFkvnKwnQvyqIg0o4WfJX3+Q0tO1jhmgd CuOU04ZRkei+0BmDClpqSSqMRiF0GB+9npA1f/xs91dMQlwIV+ku94jqkKR01YeQ qBCEYJ/XJRKf8G9/aahNfqRpPMqLGwG8Cuxe7EUAWKjUs43bK4KECWz3orfqGSty aM+gTBHK3Jo9z+k57aQ6tvX+63eQulxkMlR6repWLOnAcCKG+dkR2GCeDXXox+9H 4urHOBEaDLmUVugCjLwnMuKOxhuOqBqQWfyFSj0QdssUHjfzYoxROQgIk8A= -----END CERTIFICATE-----Generated at Mon May 5 08:28:44 2025 by rpki-client