$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc5985f6-9a28-46ec-b06a-acef564fb95f.roa File: dc5985f6-9a28-46ec-b06a-acef564fb95f.roa (raw, json) Hash identifier: Q5WjwIFC2pKt3Jpv81E6xFirqrulC1VQDoo2QV0L8L0= Subject key identifier: 71:2E:82:73:0C:BA:F4:1C:35:7A:5A:B9:83:08:CE:33:2F:40:54:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 476CFDB867A63AC091106FBB87510FE8CF64F88C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc5985f6-9a28-46ec-b06a-acef564fb95f.roa Signing time: Fri 18 Apr 2025 17:01:22 +0000 ROA not before: Fri 18 Apr 2025 17:01:22 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.232.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6c:fd:b8:67:a6:3a:c0:91:10:6f:bb:87:51:0f:e8:cf:64:f8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 17:01:22 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=1629de1ffb414f193dd58863af079479fa38a0d7bb86a94dc1199350316e4ae4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:d9:25:9d:77:57:3d:fc:24:2c:dc:70:f3: f7:d0:6d:f9:92:fe:e3:67:10:c7:ca:4d:7f:49:25: 03:69:fb:6f:51:d8:3f:29:fb:62:43:66:43:7b:a7: 05:e8:4d:e2:43:fb:1f:2d:8f:f7:c0:b1:de:65:bc: 97:be:34:39:47:9f:25:52:6e:f1:23:27:93:7b:c1: 14:1b:87:96:b9:13:01:cb:e2:a9:57:51:8b:cf:5d: e9:c1:c5:8a:db:b7:dd:aa:b2:20:f5:d9:b0:42:92: 75:8a:f2:42:fb:25:dc:b1:eb:44:71:62:2c:c4:b1: df:f8:ef:5f:5c:93:b5:b4:b3:b9:3c:65:9a:01:7b: 6b:9a:1f:f2:3e:9b:67:87:ce:fd:26:cf:33:71:63: 50:73:a9:a5:7b:21:31:34:db:16:f2:76:f9:14:eb: 76:62:59:07:ab:b8:4d:da:58:d3:83:ba:ba:8b:4e: b6:e6:c6:5c:13:a6:1b:f9:3d:e7:a0:a7:c0:be:0e: 58:ba:54:f0:22:5e:a1:8d:7c:78:2c:fb:f9:b2:49: 37:5c:11:c9:00:50:dc:1b:d0:1f:6f:d3:c2:75:cf: ba:89:85:5d:6b:4a:4d:66:ae:7a:2c:b9:88:26:ae: e4:50:89:74:7d:33:84:fe:a5:bd:46:06:74:8e:eb: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:82:73:0C:BA:F4:1C:35:7A:5A:B9:83:08:CE:33:2F:40:54:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc5985f6-9a28-46ec-b06a-acef564fb95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.232.80.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:c9:59:3b:69:5b:99:0c:a7:4a:8a:36:42:b7:ae:67:cf:2e: dc:13:54:0e:ac:9f:b0:e8:2b:7d:8a:1c:4d:df:ad:5a:6f:4c: 38:d8:aa:ed:7b:c6:b5:28:fa:0d:9c:99:e8:fb:1c:b2:75:7b: 76:55:da:5e:f1:0b:15:ab:06:fa:df:06:a2:2b:16:6b:3b:15: d2:53:b4:6d:4c:42:74:85:b8:29:94:29:cf:b9:bf:0b:29:77: 4b:11:f5:84:29:c0:ef:cd:4b:a3:2d:94:d1:b1:49:5f:1d:f8: 60:0f:10:f2:f2:7e:44:d1:79:0f:45:f6:f4:aa:f5:1b:1e:1a: 3d:71:f2:92:ed:a2:44:3e:18:3f:fb:bb:4a:bd:b9:92:ae:60: e9:de:6e:35:bb:90:ac:38:14:0a:30:38:04:4b:45:04:75:c5: e9:07:c6:06:b8:bc:56:c7:01:bb:2e:4f:d3:64:ff:c4:fb:b9: 96:78:29:b2:c6:14:ab:79:2c:dd:d3:24:5c:8e:12:8e:1a:ae: de:8a:59:99:87:8e:2e:70:5b:2b:45:6c:87:1f:4d:a3:e8:0f: c1:17:d5:ad:33:15:34:96:8e:a8:6a:62:32:bb:96:ef:32:43: 0f:1a:19:04:0f:ae:d5:48:3a:ea:c5:e6:92:dc:54:18:45:5e: fd:1f:50:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR2z9uGemOsCREG+7h1EP6M9k+IwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTcwMTIyWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjI5ZGUxZmZiNDE0ZjE5M2RkNTg4NjNhZjA3OTQ3OWZh MzhhMGQ3YmI4NmE5NGRjMTE5OTM1MDMxNmU0YWU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMMdklnXdXPfwkLNxw8/fQbfmS/uNnEMfKTX9JJQNp+29R 2D8p+2JDZkN7pwXoTeJD+x8tj/fAsd5lvJe+NDlHnyVSbvEjJ5N7wRQbh5a5EwHL 4qlXUYvPXenBxYrbt92qsiD12bBCknWK8kL7Jdyx60RxYizEsd/4719ck7W0s7k8 ZZoBe2uaH/I+m2eHzv0mzzNxY1BzqaV7ITE02xbydvkU63ZiWQeruE3aWNODurqL TrbmxlwTphv5Peegp8C+Dli6VPAiXqGNfHgs+/mySTdcEckAUNwb0B9v08J1z7qJ hV1rSk1mrnosuYgmruRQiXR9M4T+pb1GBnSO6569AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcS6Ccwy69Bw1elq5gwjOMy9AVJQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjNTk4NWY2LTlhMjgtNDZlYy1iMDZhLWFjZWY1NjRmYjk1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ26FAwDQYJKoZIhvcNAQELBQADggEBAFzJWTtpW5kMp0qKNkK3rmfPLtwT VA6sn7DoK32KHE3frVpvTDjYqu17xrUo+g2cmej7HLJ1e3ZV2l7xCxWrBvrfBqIr Fms7FdJTtG1MQnSFuCmUKc+5vwspd0sR9YQpwO/NS6MtlNGxSV8d+GAPEPLyfkTR eQ9F9vSq9RseGj1x8pLtokQ+GD/7u0q9uZKuYOnebjW7kKw4FAowOARLRQR1xekH xga4vFbHAbsuT9Nk/8T7uZZ4KbLGFKt5LN3TJFyOEo4art6KWZmHji5wWytFbIcf TaPoD8EX1a0zFTSWjqhqYjK7lu8yQw8aGQQPrtVIOurF5pLcVBhFXv0fUCM= -----END CERTIFICATE-----Generated at Tue May 6 07:22:02 2025 by rpki-client