$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdb7fdf0-4a6c-48f2-bfad-90672f48cd89.roa File: cdb7fdf0-4a6c-48f2-bfad-90672f48cd89.roa (raw, json) Hash identifier: Mr3f8GCGEgJoZioqSe5AwjCmUMlMP26bMBHXGfyDBkk= Subject key identifier: F2:A9:2E:86:5B:FC:78:DD:FC:CD:79:38:58:5D:03:5E:1A:AE:85:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42CB96C5B3C95514B17BBA1605AD188C1AE2D0F2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdb7fdf0-4a6c-48f2-bfad-90672f48cd89.roa Signing time: Fri 18 Apr 2025 18:31:05 +0000 ROA not before: Fri 18 Apr 2025 18:31:05 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.93.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cb:96:c5:b3:c9:55:14:b1:7b:ba:16:05:ad:18:8c:1a:e2:d0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 18:31:05 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=7af76c450d336988bf190c74f4fa7b9d2ea01347a227dceaa7bc9cb7a7348902, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:e3:b4:62:e2:9d:63:43:63:0c:fe:2e:d0: ed:2b:7a:58:67:7d:bc:47:7f:26:9e:81:d6:46:d7: 37:0c:97:37:49:3a:2d:54:f9:07:d7:54:c6:57:bb: 0e:63:86:61:fb:29:0f:84:d2:0b:a2:a2:c8:f4:56: 6d:ed:bf:4a:f5:38:6d:4b:1b:07:26:ba:67:76:ce: de:46:11:5a:86:dc:a8:67:8d:a9:c0:fd:26:b6:09: 00:c1:78:33:f9:63:89:22:04:b9:45:c8:de:df:9c: 44:0f:59:98:36:27:84:4e:08:bf:7d:1d:3d:15:88: 8a:f5:54:d9:77:9b:d0:60:71:50:a6:ad:dc:1f:ee: de:77:8c:6b:11:ff:e2:ef:35:e1:09:5c:42:37:47: 47:12:3d:ab:b3:d6:98:62:0f:b5:44:81:30:25:93: 9d:fa:cf:af:aa:7d:4d:ff:0c:78:35:ae:13:17:56: f4:cd:c5:e6:1c:2e:36:8d:3e:41:ca:a7:8a:3f:07: bb:8d:61:76:9f:4e:76:b9:6a:03:96:82:26:56:1c: 8d:bb:9d:05:d4:ee:fc:18:c0:78:b7:cd:6c:0e:7b: 5a:56:22:db:3e:ca:a0:6b:0c:60:fd:27:c5:34:73: c1:b0:2f:c3:9d:1e:1b:3b:9e:da:69:96:db:d0:fd: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:2E:86:5B:FC:78:DD:FC:CD:79:38:58:5D:03:5E:1A:AE:85:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdb7fdf0-4a6c-48f2-bfad-90672f48cd89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.93.0.0/19 Signature Algorithm: sha256WithRSAEncryption 20:9e:e6:6f:0f:56:5d:2e:74:04:27:b4:14:58:2d:d1:54:33: 77:2b:63:b4:a7:f8:6a:a7:5a:55:76:b5:58:87:eb:ab:a6:fd: a5:2a:e8:02:3f:0f:fa:22:8d:06:f8:a4:6c:5d:92:8c:9c:c8: c6:56:02:cc:55:a6:d3:f7:dc:1d:5d:11:7f:33:d3:96:9f:99: 0b:cb:96:3c:57:20:de:98:48:60:3c:e4:1f:0c:f5:ac:fa:57: 3f:c0:40:dc:67:03:55:39:4f:d3:92:50:d4:13:84:8a:95:22: 5b:bd:00:8d:78:6b:8b:db:a7:37:24:6b:31:de:8a:17:31:3b: 6f:b6:32:32:27:09:57:f8:97:0a:86:0c:b1:12:00:dc:b0:89: e2:f8:69:52:2f:55:83:23:be:9a:92:56:5b:78:ed:2b:34:53: 0e:9e:91:a7:1f:8e:7e:04:72:d2:ea:5c:30:30:a9:51:3b:79: 58:a3:d0:0b:a8:62:01:54:a9:f7:8a:2f:23:1a:71:6a:e0:0d: 0f:6c:e8:72:2c:f4:e7:a2:55:bf:c9:b4:1f:d7:4f:3a:ac:82: 03:30:c8:04:26:a1:e0:b0:25:01:50:99:60:77:b9:39:06:4e: ad:41:55:22:17:75:e5:8e:98:20:df:a7:06:16:94:50:13:09: 12:41:98:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQsuWxbPJVRSxe7oWBa0YjBri0PIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTgzMTA1WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWY3NmM0NTBkMzM2OTg4YmYxOTBjNzRmNGZhN2I5ZDJl YTAxMzQ3YTIyN2RjZWFhN2JjOWNiN2E3MzQ4OTAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb/OO0YuKdY0NjDP4u0O0relhnfbxHfyaegdZG1zcMlzdJ Oi1U+QfXVMZXuw5jhmH7KQ+E0guiosj0Vm3tv0r1OG1LGwcmumd2zt5GEVqG3Khn janA/Sa2CQDBeDP5Y4kiBLlFyN7fnEQPWZg2J4ROCL99HT0ViIr1VNl3m9BgcVCm rdwf7t53jGsR/+LvNeEJXEI3R0cSPauz1phiD7VEgTAlk536z6+qfU3/DHg1rhMX VvTNxeYcLjaNPkHKp4o/B7uNYXafTna5agOWgiZWHI27nQXU7vwYwHi3zWwOe1pW Its+yqBrDGD9J8U0c8GwL8OdHhs7ntppltvQ/ZoBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8qkuhlv8eN38zXk4WF0DXhquhSowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkYjdmZGYwLTRhNmMtNDhmMi1iZmFkLTkwNjcyZjQ4Y2Q4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2XQAwDQYJKoZIhvcNAQELBQADggEBACCe5m8PVl0udAQntBRYLdFUM3cr Y7Sn+GqnWlV2tViH66um/aUq6AI/D/oijQb4pGxdkoycyMZWAsxVptP33B1dEX8z 05afmQvLljxXIN6YSGA85B8M9az6Vz/AQNxnA1U5T9OSUNQThIqVIlu9AI14a4vb pzckazHeihcxO2+2MjInCVf4lwqGDLESANywieL4aVIvVYMjvpqSVlt47Ss0Uw6e kacfjn4EctLqXDAwqVE7eVij0AuoYgFUqfeKLyMacWrgDQ9s6HIs9OeiVb/JtB/X TzqsggMwyAQmoeCwJQFQmWB3uTkGTq1BVSIXdeWOmCDfpwYWlFATCRJBmJM= -----END CERTIFICATE-----Generated at Mon May 5 21:21:59 2025 by rpki-client