$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1b291d9-7026-483a-8ac4-a77017b4312d.roa File: d1b291d9-7026-483a-8ac4-a77017b4312d.roa (raw, json) Hash identifier: fVpWy6mrdvHNCnH2komchNP8AdiVi21EDVRZHPQzjto= Subject key identifier: 91:7B:13:B5:6F:9C:5F:94:79:7B:31:6C:0B:1F:30:43:50:47:58:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20A69952E8B34C556DC85ED812922DD4964E6A95 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1b291d9-7026-483a-8ac4-a77017b4312d.roa Signing time: Fri 25 Apr 2025 15:31:10 +0000 ROA not before: Fri 25 Apr 2025 15:31:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a6:99:52:e8:b3:4c:55:6d:c8:5e:d8:12:92:2d:d4:96:4e:6a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:31:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=1ea2675ea50686b444f4a823aaab0f59502d12ddf71aa104ba23386ad1cb4123, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:a9:3b:40:10:ea:27:10:eb:61:84:79:b5: 7c:5b:c8:a5:10:a1:1b:55:0a:8a:9b:4f:cb:4e:b0: 17:3f:18:bf:19:4c:c5:7b:f8:ca:6c:17:fa:a4:43: fb:c5:70:38:f5:cb:03:a4:6b:e0:7a:6b:a2:73:16: 00:a5:c8:45:dc:b1:81:75:6e:de:37:72:d1:0e:00: cd:af:b8:39:e2:fe:00:e0:f9:17:bd:0a:dd:b4:9f: 47:24:27:6a:b3:80:b5:a0:6e:f1:de:1f:33:66:aa: 57:9f:b9:25:ed:72:1f:cf:f2:70:6f:85:c5:80:17: 67:9f:71:85:cf:d0:2c:75:9f:68:ed:59:f9:70:42: 16:88:8b:18:b1:10:b4:fb:2b:3e:8a:e6:8f:87:a5: 11:88:72:6f:63:3f:3d:c2:50:6c:4a:67:a4:82:5e: d7:15:c8:74:97:d9:e7:d8:35:ad:2c:ea:e6:46:57: 96:4c:c6:08:41:77:cb:f6:b5:b6:82:fb:9e:a4:04: d0:0d:37:3e:95:d2:17:83:c0:c0:43:0c:03:db:2e: 81:b1:60:d2:ae:ad:73:ce:1f:14:08:9a:13:74:6a: e6:19:71:de:1f:ad:11:af:6a:f1:dd:f1:04:9f:4f: 75:81:b4:df:cb:ce:60:1a:e3:c5:68:d5:95:c6:6b: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7B:13:B5:6F:9C:5F:94:79:7B:31:6C:0B:1F:30:43:50:47:58:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1b291d9-7026-483a-8ac4-a77017b4312d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.135.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:b2:66:c4:59:e8:9c:19:27:76:08:33:88:77:be:ff:08:f9: b4:0d:b9:de:59:2b:79:4d:7c:e3:20:ef:2d:52:59:07:8b:c7: 2f:75:1d:0f:64:01:fc:29:42:8a:3a:c5:c6:76:cf:97:ba:52: 78:08:e3:68:2f:66:1d:50:57:40:f3:ac:4c:94:4c:4b:39:50: 95:70:12:70:51:f9:92:8b:78:3e:27:fd:b4:e8:b9:31:89:a6: 20:da:a2:64:4f:01:fa:a0:3d:cf:e2:4a:bc:47:02:d8:81:b8: b2:79:15:a0:2b:46:aa:ac:37:b9:ca:32:87:ee:a7:b0:64:9f: c4:e1:61:b3:96:28:1c:09:71:6c:54:86:ae:2c:0c:e0:da:a1: cd:b0:16:11:38:07:6c:82:8e:32:0c:e6:a1:27:9b:f9:59:65: a1:f9:03:6e:28:3d:08:f9:7b:09:11:cf:a0:6d:0f:b1:1e:58: 4d:4b:8c:d7:a0:59:9a:2e:5f:71:6c:6a:6f:fb:22:fe:3a:20: d4:70:ce:56:57:67:44:ee:88:3a:2b:e2:8b:51:c1:67:b6:f1: 8f:72:27:e3:f1:fd:84:74:7a:41:6c:c6:65:9a:6e:ed:34:a0: 05:2d:8e:a6:29:eb:9d:b3:1a:07:45:1d:94:f0:04:72:7e:fa: b2:ff:bc:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIKaZUuizTFVtyF7YEpIt1JZOapUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTUzMTEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWEyNjc1ZWE1MDY4NmI0NDRmNGE4MjNhYWFiMGY1OTUw MmQxMmRkZjcxYWExMDRiYTIzMzg2YWQxY2I0MTIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPjqk7QBDqJxDrYYR5tXxbyKUQoRtVCoqbT8tOsBc/GL8Z TMV7+MpsF/qkQ/vFcDj1ywOka+B6a6JzFgClyEXcsYF1bt43ctEOAM2vuDni/gDg +Re9Ct20n0ckJ2qzgLWgbvHeHzNmqlefuSXtch/P8nBvhcWAF2efcYXP0Cx1n2jt WflwQhaIixixELT7Kz6K5o+HpRGIcm9jPz3CUGxKZ6SCXtcVyHSX2efYNa0s6uZG V5ZMxghBd8v2tbaC+56kBNANNz6V0heDwMBDDAPbLoGxYNKurXPOHxQImhN0auYZ cd4frRGvavHd8QSfT3WBtN/LzmAa48Vo1ZXGa8sxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkXsTtW+cX5R5ezFsCx8wQ1BHWJAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QxYjI5MWQ5LTcwMjYtNDgzYS04YWM0LWE3NzAxN2I0MzEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIhzANBgkqhkiG9w0BAQsFAAOCAQEAqLJmxFnonBkndggziHe+/wj5tA25 3lkreU184yDvLVJZB4vHL3UdD2QB/ClCijrFxnbPl7pSeAjjaC9mHVBXQPOsTJRM SzlQlXAScFH5kot4Pif9tOi5MYmmINqiZE8B+qA9z+JKvEcC2IG4snkVoCtGqqw3 ucoyh+6nsGSfxOFhs5YoHAlxbFSGriwM4NqhzbAWETgHbIKOMgzmoSeb+VllofkD big9CPl7CRHPoG0PsR5YTUuM16BZmi5fcWxqb/si/jog1HDOVldnRO6IOivii1HB Z7bxj3In4/H9hHR6QWzGZZpu7TSgBS2OpinrnbMaB0UdlPAEcn76sv+8bg== -----END CERTIFICATE-----Generated at Mon May 5 14:00:10 2025 by rpki-client