$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7455588b-0aa5-40bc-95b4-32de62cba9a8.roa File: 7455588b-0aa5-40bc-95b4-32de62cba9a8.roa (raw, json) Hash identifier: ReypHa/1x4TMiRtP1OLjake5EdvgCdJuWLMqRP3d0M0= Subject key identifier: AA:50:92:08:74:09:73:68:77:AF:8E:63:C9:72:56:C4:10:6B:16:CB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 61DF3DA4B345B60AD580E055B1731B690A95DD45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7455588b-0aa5-40bc-95b4-32de62cba9a8.roa Signing time: Fri 28 Mar 2025 18:10:42 +0000 ROA not before: Fri 28 Mar 2025 18:10:42 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:df:3d:a4:b3:45:b6:0a:d5:80:e0:55:b1:73:1b:69:0a:95:dd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 28 18:10:42 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:82:ff:6f:79:94:b4:da:49:b5:c2:83:12:f0: 69:54:ec:53:ed:7a:5e:d4:e9:57:09:f0:d0:89:b3: 4d:82:df:b9:c8:bb:dd:3b:89:12:02:3d:92:3c:0a: e0:c5:0e:19:e1:e6:15:08:1e:80:1f:b3:7f:0b:81: 96:d9:c0:c0:df:73:f3:c6:e4:3e:85:c5:e3:ae:ec: bd:4d:a3:d0:08:bd:d3:84:7f:b7:bf:61:a5:a1:4c: 26:74:09:c8:eb:9b:d6:bd:bf:58:f3:69:8b:9d:b9: ee:8d:fe:08:4f:de:fd:08:d2:09:82:f7:69:1b:ef: c2:54:86:58:6e:db:a8:ff:2a:f2:45:0a:60:db:a4: 77:b0:d3:26:af:7a:27:5c:d5:4d:dd:5c:6b:79:a7: 09:08:91:5f:44:ea:d2:79:0b:43:a6:c4:60:7a:d3: b5:54:db:8a:a1:02:a6:66:60:53:05:c7:17:3c:94: 5e:d1:d6:5d:f2:72:9c:56:e9:14:d5:0d:3a:e9:7f: ad:bf:59:4b:22:d5:95:ea:2e:2e:89:f0:3b:bc:d7: d5:a9:8b:56:7b:5d:cf:43:dc:a6:09:d2:5a:2a:78: 1f:28:0b:83:69:62:e2:67:7f:2d:30:94:f0:8e:5c: ab:39:fc:9f:0c:b3:66:cd:4c:5a:af:22:d2:ab:74: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:50:92:08:74:09:73:68:77:AF:8E:63:C9:72:56:C4:10:6B:16:CB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7455588b-0aa5-40bc-95b4-32de62cba9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.60.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2d:c0:34:ff:55:ed:a4:a2:24:ac:46:40:fb:d8:4e:f7:70: ab:57:d3:f2:2e:43:66:0c:13:60:72:2f:7c:0b:b2:2e:ee:4b: 12:26:54:da:e6:25:a5:d5:bf:a6:52:fc:ba:1d:d1:89:ca:b8: db:ca:aa:03:d7:20:48:d3:13:9d:d4:29:06:e3:f1:df:ca:c1: b9:dd:88:fa:73:7a:33:5f:28:25:02:37:df:a4:50:6c:4e:c6: 79:91:df:5c:19:a5:28:f9:50:d1:40:d1:f7:cb:9e:7d:8d:d6: 0a:ae:f2:89:36:ff:98:b7:2e:2f:23:19:a6:84:e1:f9:fe:a1: 25:de:53:d7:4a:bf:27:7e:0f:f6:d3:ce:09:55:f2:71:df:41: 35:58:e5:70:76:f2:7b:db:c2:bb:c6:83:ba:ca:cf:fd:3a:02: 11:85:25:3f:d9:bf:38:63:a9:09:cd:35:be:73:cc:b6:89:ae: d5:71:4e:da:bd:71:fc:48:f8:ca:d8:d0:f9:77:b4:46:9a:f1: 7f:a2:e2:3b:d5:b6:b4:74:87:32:1b:47:54:68:15:be:fa:26: 16:98:1d:9b:3b:e5:4d:6b:cf:fb:49:0c:84:0a:36:e5:57:65: 1d:5a:02:99:98:8e:7d:94:3c:7e:04:a9:66:80:48:b5:eb:a7: b4:92:6d:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYd89pLNFtgrVgOBVsXMbaQqV3UUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI4MTgxMDQyWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjdmMTdkODY3NDYwZTdkZTQyZThjYmVhOTY5ZjIwYWQ3 YzU2YjE4ZDg3ZjRiYzgxOThlNGY4MjU3NGVmZDlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1gv9veZS02km1woMS8GlU7FPtel7U6VcJ8NCJs02C37nI u907iRICPZI8CuDFDhnh5hUIHoAfs38LgZbZwMDfc/PG5D6FxeOu7L1No9AIvdOE f7e/YaWhTCZ0Ccjrm9a9v1jzaYudue6N/ghP3v0I0gmC92kb78JUhlhu26j/KvJF CmDbpHew0yaveidc1U3dXGt5pwkIkV9E6tJ5C0OmxGB607VU24qhAqZmYFMFxxc8 lF7R1l3ycpxW6RTVDTrpf62/WUsi1ZXqLi6J8Du819Wpi1Z7Xc9D3KYJ0loqeB8o C4NpYuJnfy0wlPCOXKs5/J8Ms2bNTFqvItKrdK8jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqlCSCHQJc2h3r45jyXJWxBBrFsswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0NTU1ODhiLTBhYTUtNDBiYy05NWI0LTMyZGU2MmNiYTlhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XTwwDQYJKoZIhvcNAQELBQADggEBACctwDT/Ve2koiSsRkD72E73cKtX 0/IuQ2YME2ByL3wLsi7uSxImVNrmJaXVv6ZS/Lod0YnKuNvKqgPXIEjTE53UKQbj 8d/KwbndiPpzejNfKCUCN9+kUGxOxnmR31wZpSj5UNFA0ffLnn2N1gqu8ok2/5i3 Li8jGaaE4fn+oSXeU9dKvyd+D/bTzglV8nHfQTVY5XB28nvbwrvGg7rKz/06AhGF JT/ZvzhjqQnNNb5zzLaJrtVxTtq9cfxI+MrY0Pl3tEaa8X+i4jvVtrR0hzIbR1Ro Fb76JhaYHZs75U1rz/tJDIQKNuVXZR1aApmYjn2UPH4EqWaASLXrp7SSbXA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:09 2025 by rpki-client