$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa File: 9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa (raw, json) Hash identifier: yeHMlNSEIzL1wsKyrYSHO+x960PgInV3fV8lrgJqyuQ= Subject key identifier: DB:20:A2:8A:79:C0:3C:47:FF:3C:51:76:0D:D6:70:70:67:16:DD:A7 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 6FD19724CE5A9257C31A578544233EE3ECDC94BC Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa Signing time: Fri 28 Mar 2025 17:40:03 +0000 ROA not before: Fri 28 Mar 2025 17:40:03 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d1:97:24:ce:5a:92:57:c3:1a:57:85:44:23:3e:e3:ec:dc:94:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Mar 28 17:40:03 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:19:da:6b:0c:00:16:cd:cd:cf:0b:d6:d7: b1:e9:a2:7d:9b:30:76:e0:28:3b:c0:b1:a8:69:3c: 96:09:d8:cb:a5:fb:77:6e:c2:cf:b3:9a:ac:9b:b9: 28:02:db:49:7a:9d:ec:32:59:1d:ac:fa:0f:2c:1d: b8:9b:c2:08:aa:f4:bd:e1:21:15:cb:ce:8b:bd:c5: 2f:9a:50:18:8b:71:ff:85:4c:f0:dd:b5:9b:e9:d6: 33:e1:3e:ba:ee:b4:d8:13:c9:c5:dc:57:e3:c5:c9: fd:01:da:a3:67:1d:3c:cc:d4:d3:f6:d7:a3:c5:24: 1c:16:85:5a:85:ca:7f:4e:b7:00:31:1a:d9:94:4b: 4d:c2:88:3c:48:91:23:f4:fb:00:9c:88:06:0d:83: a6:a4:dd:db:d6:b4:1c:36:30:80:f2:a0:00:92:77: 39:aa:c1:90:e8:d0:17:1a:0d:74:99:7b:a0:80:21: 71:f6:dc:2a:a9:c5:ce:0d:b6:7b:dc:1d:0b:59:d3: 06:36:51:11:55:6f:aa:12:37:06:bd:45:5f:f0:fa: cf:b2:2a:19:58:b9:93:58:0b:64:35:6f:92:24:25: 9e:70:1a:7c:d1:cd:d5:fe:25:84:80:d4:46:38:b1: da:ee:6b:76:01:6b:10:51:9c:80:86:2a:ec:5a:94: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:20:A2:8A:79:C0:3C:47:FF:3C:51:76:0D:D6:70:70:67:16:DD:A7 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 Signature Algorithm: sha256WithRSAEncryption 19:64:77:f6:b2:c1:c6:1f:14:51:07:59:27:4b:2a:ba:a9:3e: bd:fd:7a:6f:7a:6f:c2:38:a9:b7:d2:32:40:37:2d:4c:ed:cb: 18:18:6f:63:f4:89:06:f7:24:3b:f3:19:07:7f:54:cd:fa:ca: 5a:13:29:88:18:e8:d4:07:4b:0e:3b:60:ad:c0:6c:56:9b:d5: 6e:99:ea:05:30:ad:7d:a0:4a:9b:fd:8d:11:89:15:15:ee:68: cb:5f:19:f8:64:73:71:5a:b2:e4:c5:51:d5:35:f3:49:4b:c5: 1b:77:88:3c:92:9b:79:e4:9e:22:45:41:1c:34:34:32:4e:6e: 8d:e4:59:ba:7d:66:6e:6a:27:b8:4f:7a:63:6a:d3:88:3c:4f: ba:7c:42:89:d7:b6:30:0c:69:51:3a:d7:96:40:bd:9a:1a:0e: a7:67:de:ee:4e:33:ba:c1:fd:6a:4f:65:0e:9c:9f:ed:52:82: 1a:40:17:09:80:d3:db:2c:e7:8e:ff:24:02:99:ce:0f:7e:ee: fa:c1:d5:3d:2e:cb:16:88:69:b6:56:cb:3b:66:4a:74:00:3d: 4e:24:2e:2e:2c:74:a5:d1:df:c5:62:b2:73:f7:85:12:e1:50: 76:5a:82:03:fa:74:bd:9e:95:16:5a:0b:11:b5:1f:83:ef:82: ea:3e:fe:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb9GXJM5aklfDGleFRCM+4+zclLwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwMzI4MTc0MDAzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmIyNDM2MzNhOWIzNGJlMjdhOWUxNDA3Y2Q1OTFmZGMx ZDJjN2UyMTA3YzMyZmQ2MjAyMWQ5MjQyOTRjMWYzMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClRhnaawwAFs3NzwvW17Hpon2bMHbgKDvAsahpPJYJ2Mul +3duws+zmqybuSgC20l6newyWR2s+g8sHbibwgiq9L3hIRXLzou9xS+aUBiLcf+F TPDdtZvp1jPhPrrutNgTycXcV+PFyf0B2qNnHTzM1NP216PFJBwWhVqFyn9OtwAx GtmUS03CiDxIkSP0+wCciAYNg6ak3dvWtBw2MIDyoACSdzmqwZDo0BcaDXSZe6CA IXH23Cqpxc4NtnvcHQtZ0wY2URFVb6oSNwa9RV/w+s+yKhlYuZNYC2Q1b5IkJZ5w GnzRzdX+JYSA1EY4sdrua3YBaxBRnICGKuxalO77AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2yCiinnAPEf/PFF2DdZwcGcW3acwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzlkY2EzODkwLWJlZTAtNGNkMC04ZmQ4LTBkZWU3MGIwYmEzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4qYAwDQYJKoZIhvcNAQELBQADggEBABlkd/aywcYfFFEHWSdLKrqpPr39 em96b8I4qbfSMkA3LUztyxgYb2P0iQb3JDvzGQd/VM36yloTKYgY6NQHSw47YK3A bFab1W6Z6gUwrX2gSpv9jRGJFRXuaMtfGfhkc3FasuTFUdU180lLxRt3iDySm3nk niJFQRw0NDJObo3kWbp9Zm5qJ7hPemNq04g8T7p8QonXtjAMaVE615ZAvZoaDqdn 3u5OM7rB/WpPZQ6cn+1SghpAFwmA09ss547/JAKZzg9+7vrB1T0uyxaIabZWyztm SnQAPU4kLi4sdKXR38VisnP3hRLhUHZaggP6dL2elRZaCxG1H4Pvguo+/hc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:08 2025 by rpki-client