$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009712a8-daee-436a-80fc-9eaa7d1b2878.roa File: 009712a8-daee-436a-80fc-9eaa7d1b2878.roa (raw, json) Hash identifier: gQXq7tYKKFSLVALPvyB9cFc3XP9JwCdLUcW+CWfD9Ag= Subject key identifier: 0A:AF:1E:0A:D7:98:F6:38:03:DF:80:6B:29:C5:2D:51:0D:39:C5:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55DCCB70876DB4DFB2B932CC044CD562A17890F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009712a8-daee-436a-80fc-9eaa7d1b2878.roa Signing time: Tue 01 Apr 2025 00:41:43 +0000 ROA not before: Tue 01 Apr 2025 00:41:43 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dc:cb:70:87:6d:b4:df:b2:b9:32:cc:04:4c:d5:62:a1:78:90:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:41:43 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:13:25:ff:cc:a9:ce:18:2c:8a:3c:30:b3: 97:8c:18:cc:f7:8f:b6:22:7d:69:27:0e:11:2e:54: 0c:fc:0f:aa:d4:14:91:a3:82:8f:7b:ac:5e:dc:33: e4:db:a4:d6:d9:d4:b9:d3:8a:20:e8:b4:95:cd:6c: b0:45:7c:85:10:26:1b:43:e0:ca:b0:b7:e9:57:c5: ff:95:0f:72:7c:66:84:b2:a4:53:1f:d8:04:b6:23: cc:3f:71:bb:a9:f9:d8:e2:3b:b7:18:26:a9:55:89: d9:43:62:6e:7d:b4:c4:e5:8e:61:27:cf:50:0a:e3: 67:59:65:84:4f:e1:da:b2:81:cb:7d:62:c7:f0:f7: 42:9b:4d:59:0e:a3:98:7f:18:a7:96:a0:c2:91:c2: c3:c0:60:63:ea:ac:5a:61:08:bf:a5:49:20:2e:0a: 20:a4:f2:37:4a:4d:ea:1a:d4:17:c8:a7:4e:b8:b5: 8d:4f:e8:de:b6:a7:83:06:38:ab:55:f7:e0:3b:e5: 7d:8a:c2:9e:a9:a7:ea:e0:1a:e2:e7:07:88:ae:e4: 92:15:93:41:65:5b:97:28:a4:cb:99:f8:34:6e:6e: 58:cd:77:24:5a:1d:52:ee:44:a0:a6:86:1d:1b:d2: 33:20:21:e6:56:13:0f:cc:89:3b:07:5a:91:db:2b: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AF:1E:0A:D7:98:F6:38:03:DF:80:6B:29:C5:2D:51:0D:39:C5:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009712a8-daee-436a-80fc-9eaa7d1b2878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.106.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:3d:54:06:3c:b3:d8:07:2f:40:24:6d:26:a0:04:ec:68:21: 2e:25:60:1a:f2:81:42:24:dd:f8:75:27:10:5c:25:2e:1d:9a: 77:1d:b7:a7:e3:e9:6b:6c:56:d9:77:2f:c2:f8:7e:80:e1:38: 17:54:c5:a0:07:f5:08:ca:84:84:1f:23:73:1e:b3:3e:87:03: 11:b4:c0:68:4f:dd:52:ee:da:52:49:7e:b5:1f:71:8e:b3:2d: 36:78:ae:39:1a:ef:79:8d:ff:85:02:ab:fa:21:a5:1e:ba:53: 88:c5:5c:ed:6d:4f:f7:91:54:e6:10:58:65:f6:07:69:57:ef: 1a:a3:7a:08:59:94:d2:b3:e1:27:a9:e8:3a:64:57:bb:5e:8b: 23:b1:ad:4e:d3:a6:93:ea:5f:93:86:4b:54:88:0c:fe:4b:d2: 72:fe:27:e7:56:38:e7:48:2c:a3:52:6d:83:6e:47:b7:58:d6: 1f:fa:27:8b:a1:76:a7:bf:ec:31:db:28:d7:f7:bc:a4:01:41: f1:6f:bf:7e:84:bb:5c:da:97:b1:75:c6:0c:06:b6:66:3b:5b: 74:0c:99:35:d7:b9:64:34:38:59:a4:22:e3:7d:4e:db:ad:dc: 26:c6:7a:47:67:9d:ea:05:8e:0b:8b:c0:d4:47:69:2f:d8:e5: 05:aa:6a:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVdzLcIdttN+yuTLMBEzVYqF4kPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDAxMDA0MTQzWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDdjNDRiY2M1OWE1MzAzZjAyZGY3NjBkMzc5YTlkMjhi NDRiNjNkZGI1ODM2MzE4ZGI1OTEwY2UwYjU4NWVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ExMl/8ypzhgsijwws5eMGMz3j7YifWknDhEuVAz8D6rU FJGjgo97rF7cM+TbpNbZ1LnTiiDotJXNbLBFfIUQJhtD4Mqwt+lXxf+VD3J8ZoSy pFMf2AS2I8w/cbup+djiO7cYJqlVidlDYm59tMTljmEnz1AK42dZZYRP4dqygct9 Ysfw90KbTVkOo5h/GKeWoMKRwsPAYGPqrFphCL+lSSAuCiCk8jdKTeoa1BfIp064 tY1P6N62p4MGOKtV9+A75X2Kwp6pp+rgGuLnB4iu5JIVk0FlW5copMuZ+DRubljN dyRaHVLuRKCmhh0b0jMgIeZWEw/MiTsHWpHbK2qZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCq8eCteY9jgD34BrKcUtUQ05xVcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwOTcxMmE4LWRhZWUtNDM2YS04MGZjLTllYWE3ZDFiMjg3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE272owDQYJKoZIhvcNAQELBQADggEBAJ49VAY8s9gHL0AkbSagBOxoIS4l YBrygUIk3fh1JxBcJS4dmncdt6fj6WtsVtl3L8L4foDhOBdUxaAH9QjKhIQfI3Me sz6HAxG0wGhP3VLu2lJJfrUfcY6zLTZ4rjka73mN/4UCq/ohpR66U4jFXO1tT/eR VOYQWGX2B2lX7xqjeghZlNKz4Sep6DpkV7teiyOxrU7TppPqX5OGS1SIDP5L0nL+ J+dWOOdILKNSbYNuR7dY1h/6J4uhdqe/7DHbKNf3vKQBQfFvv36Eu1zal7F1xgwG tmY7W3QMmTXXuWQ0OFmkIuN9Ttut3CbGekdnneoFjguLwNRHaS/Y5QWqagM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:27 2025 by rpki-client