$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa File: c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa (raw, json) Hash identifier: sDUx1WudUQIvmWs8IBKWegauJVxU2vC56FRXNEZm3uM= Subject key identifier: 45:D7:E0:62:10:49:03:EF:1F:BE:32:2E:38:7B:24:0C:90:15:38:D2 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 3E2886C1B438202DAF676C04E54BA30B16DC9844 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa Signing time: Fri 28 Mar 2025 17:40:07 +0000 ROA not before: Fri 28 Mar 2025 17:40:07 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:28:86:c1:b4:38:20:2d:af:67:6c:04:e5:4b:a3:0b:16:dc:98:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Mar 28 17:40:07 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:4d:13:90:3a:83:ad:5a:16:27:7f:7e:bb: c1:5f:f3:f5:c6:b5:59:39:37:85:a2:a3:9f:ec:cf: 50:e5:82:36:f8:d8:3c:8b:69:d6:a8:95:24:10:db: 3f:26:7a:3e:75:f8:3f:b7:07:1e:c7:b4:4f:18:82: 61:63:b3:48:95:27:18:fb:ae:cd:74:fc:5f:34:b7: db:c3:a9:7e:68:0d:f0:54:01:32:1f:fb:a6:e4:59: d6:8d:30:86:b1:9c:cb:6f:da:72:6d:fb:02:6d:cd: e8:46:50:49:71:02:4a:5c:3e:3c:33:f3:9c:96:e9: 6e:c3:69:3c:87:c1:a0:5a:32:20:26:72:79:d3:d6: e3:9b:94:72:1d:d0:f1:38:12:f8:e5:12:8f:8e:00: c1:cf:2d:c0:21:db:af:2b:87:92:4b:8b:12:09:f7: ff:95:a2:57:83:3c:bb:41:a8:69:db:3d:ac:76:b5: 1f:6c:fb:dd:a3:90:fc:f2:db:e1:a2:91:08:b9:ab: 88:3c:02:b5:59:b5:29:db:1f:31:30:cc:e0:b9:9d: f3:d5:28:94:3f:f5:fb:78:3c:62:73:03:37:13:29: cb:9d:ac:4b:b4:c6:40:33:0b:ab:d5:2b:8d:18:bc: 00:33:70:77:fa:dc:91:5f:f0:33:b7:2b:fc:f0:03: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D7:E0:62:10:49:03:EF:1F:BE:32:2E:38:7B:24:0C:90:15:38:D2 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.192.0/18 Signature Algorithm: sha256WithRSAEncryption 28:00:34:01:85:9b:0e:6d:82:94:fb:11:76:c3:e9:b4:bb:ee: f1:01:9d:7c:58:ca:39:99:22:2f:08:83:d9:2a:86:41:2b:03: 04:57:0c:e5:72:42:b5:85:d6:04:9a:6b:a3:11:38:5d:58:ce: ef:c1:d2:23:16:05:e9:77:86:5f:6d:d4:98:1f:e2:04:a4:48: 42:c0:41:bc:14:c3:7b:38:44:63:ab:ec:4a:d8:2e:d4:cf:38: 79:de:d4:95:0a:39:8e:49:d3:9c:b6:be:46:9e:c8:57:0a:fa: 4e:eb:7f:52:1e:85:c0:31:4b:ac:41:f1:d4:96:67:c5:3f:3f: 4e:b8:8c:84:e1:61:1c:18:c0:e4:a4:dd:a5:44:d5:c5:54:0e: ce:58:3d:c9:b0:2b:05:d8:25:45:fb:1c:01:63:aa:d1:32:53: e0:ca:f3:7d:ce:a2:ec:7e:57:f7:d0:dd:b1:ed:ac:68:92:5b: f5:ac:1c:8e:dc:c8:b1:e6:7b:4a:08:6e:ce:41:58:12:83:3f: d6:45:1d:82:b0:1b:9c:ab:e3:38:9d:4d:75:f4:81:84:13:91: 9b:af:e9:c8:6a:85:28:c2:fa:72:b1:4b:03:1f:fe:1c:32:7d: bf:5c:23:bc:61:9d:45:64:d8:2d:91:28:76:18:47:f8:5e:64: 2c:65:48:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPiiGwbQ4IC2vZ2wE5UujCxbcmEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwMzI4MTc0MDA3WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWJiYzJiODk4N2NhODU2NTQ0YzA4MzA0NDgyN2E0YmNi NDg3NzkwZTRlM2VlNTdjZWIxZWZhZGZiZDQyZjg0MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC26U0TkDqDrVoWJ39+u8Ff8/XGtVk5N4Wio5/sz1Dlgjb4 2DyLadaolSQQ2z8mej51+D+3Bx7HtE8YgmFjs0iVJxj7rs10/F80t9vDqX5oDfBU ATIf+6bkWdaNMIaxnMtv2nJt+wJtzehGUElxAkpcPjwz85yW6W7DaTyHwaBaMiAm cnnT1uOblHId0PE4EvjlEo+OAMHPLcAh268rh5JLixIJ9/+VoleDPLtBqGnbPax2 tR9s+92jkPzy2+GikQi5q4g8ArVZtSnbHzEwzOC5nfPVKJQ/9ft4PGJzAzcTKcud rEu0xkAzC6vVK40YvAAzcHf63JFf8DO3K/zwA5BPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURdfgYhBJA+8fvjIuOHskDJAVONIwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2MxM2VmNWZhLTQ2N2EtNGNjZC1iNGY2LWFlNGNmNzFlZTk1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa4qcAwDQYJKoZIhvcNAQELBQADggEBACgANAGFmw5tgpT7EXbD6bS77vEB nXxYyjmZIi8Ig9kqhkErAwRXDOVyQrWF1gSaa6MROF1Yzu/B0iMWBel3hl9t1Jgf 4gSkSELAQbwUw3s4RGOr7ErYLtTPOHne1JUKOY5J05y2vkaeyFcK+k7rf1IehcAx S6xB8dSWZ8U/P064jIThYRwYwOSk3aVE1cVUDs5YPcmwKwXYJUX7HAFjqtEyU+DK 833Ooux+V/fQ3bHtrGiSW/WsHI7cyLHme0oIbs5BWBKDP9ZFHYKwG5yr4zidTXX0 gYQTkZuv6chqhSjC+nKxSwMf/hwyfb9cI7xhnUVk2C2RKHYYR/heZCxlSNk= -----END CERTIFICATE-----Generated at Sat Apr 5 12:07:20 2025 by rpki-client