$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88e2bb42-20eb-4a90-8bfc-0cc2ac2afe78.roa File: 88e2bb42-20eb-4a90-8bfc-0cc2ac2afe78.roa (raw, json) Hash identifier: lKY5hKcplg+GgBBT3bjcsd2R+UropgEpyfdN5IL6M5s= Subject key identifier: 60:19:E5:B8:8C:C5:0D:3E:20:38:2E:69:0B:26:61:F6:51:4F:F9:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 105AE9C0CEA1E045B153EB8FC60A71AA8E48655B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88e2bb42-20eb-4a90-8bfc-0cc2ac2afe78.roa Signing time: Tue 01 Apr 2025 00:20:23 +0000 ROA not before: Tue 01 Apr 2025 00:20:23 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5a:e9:c0:ce:a1:e0:45:b1:53:eb:8f:c6:0a:71:aa:8e:48:65:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:20:23 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:0d:6f:d7:76:fe:85:7c:01:72:7f:2e:c3: 8a:f4:4f:41:19:63:65:92:1d:54:68:b4:58:f9:95: 03:e9:12:4b:1b:cf:c0:ee:13:5a:c2:99:d4:05:b9: 76:f0:c4:88:ed:61:93:47:27:7d:e8:0e:f8:95:8d: 97:c6:36:23:1a:dd:b6:3e:4f:9c:78:e0:65:14:1b: d3:f0:6d:50:8f:0d:c2:68:d9:c7:68:ea:33:66:9d: ff:32:94:e7:68:21:2e:c0:f9:a5:62:ae:3a:10:8a: 31:d7:b3:af:15:02:d6:e2:27:99:d0:21:11:c8:7c: e4:6f:d1:3c:b8:38:dc:2e:22:42:f9:45:85:d2:e6: a4:09:7b:15:18:d9:01:2d:96:0c:43:43:ac:2d:72: a2:79:0a:ca:2b:09:2a:42:61:ed:c2:7d:4a:1b:a2: bd:43:f2:7c:78:ec:8a:84:37:7f:0c:e1:a5:7e:da: af:d0:5f:7c:b5:bd:ff:0d:90:3c:82:96:f7:32:8b: 05:eb:67:c2:de:0f:bc:89:9a:c1:59:ef:8d:fb:52: e5:c0:92:2f:07:95:6d:6d:df:a9:d0:51:7a:83:d3: 5a:4e:49:0f:f2:0d:dc:42:f9:38:92:98:ac:63:8b: ca:45:b5:0b:9f:3e:9f:0a:92:07:ac:61:93:27:55: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:E5:B8:8C:C5:0D:3E:20:38:2E:69:0B:26:61:F6:51:4F:F9:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88e2bb42-20eb-4a90-8bfc-0cc2ac2afe78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:12:af:36:67:38:52:84:e6:27:8e:55:9c:8a:9d:f3:18:50: da:3d:20:8e:94:fe:d0:66:b2:a8:69:b9:25:0b:74:9d:1e:8a: 8d:6b:0b:e3:e0:ae:17:87:ae:d5:3d:40:ab:2e:13:41:ce:50: 5b:ee:48:49:c6:af:c6:fa:0b:be:3b:16:c7:4f:80:91:05:d4: d5:1b:07:e2:68:08:bc:97:36:fe:e4:d5:31:bb:b4:14:31:7f: a7:6c:35:d7:a0:75:8c:c1:f4:98:35:ed:ac:2d:50:b1:1e:21: 42:50:c2:bd:cd:52:d1:9d:53:a4:14:1b:08:19:65:4a:b8:f5: 52:49:41:2a:d9:9d:ff:76:6e:1c:5e:ed:b9:a0:55:66:78:0b: c4:62:1d:cb:25:1e:58:82:89:39:15:27:6c:ce:8c:a2:3a:ab: b8:d4:2f:e0:bd:b7:44:e2:77:7b:d4:b9:3f:bf:3e:ff:1e:de: a8:72:4e:87:34:c6:30:8d:9f:03:9f:e5:43:08:d8:14:17:8f: d6:40:32:89:06:83:a7:0b:cc:7a:1e:f6:f2:ff:d0:fc:69:07: 29:a9:77:e4:db:5b:4a:c1:e1:d5:9e:f1:0c:c0:e2:6e:d2:1b: 0b:63:30:a2:cd:91:99:58:6e:4c:ba:b2:a7:5c:f2:ea:c8:82: e4:06:49:77 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEFrpwM6h4EWxU+uPxgpxqo5IZVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDAxMDAyMDIzWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWE3ZTEyN2U4ZTE3ODc0YjdiYTc2MGYxNjg0OTU1OTc0 MThhMGI5MDhlNTU5MGY2MGZiYmI1N2RjNDQzZjVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo9Q1v13b+hXwBcn8uw4r0T0EZY2WSHVRotFj5lQPpEksb z8DuE1rCmdQFuXbwxIjtYZNHJ33oDviVjZfGNiMa3bY+T5x44GUUG9PwbVCPDcJo 2cdo6jNmnf8ylOdoIS7A+aVirjoQijHXs68VAtbiJ5nQIRHIfORv0Ty4ONwuIkL5 RYXS5qQJexUY2QEtlgxDQ6wtcqJ5CsorCSpCYe3CfUobor1D8nx47IqEN38M4aV+ 2q/QX3y1vf8NkDyClvcyiwXrZ8LeD7yJmsFZ7437UuXAki8HlW1t36nQUXqD01pO SQ/yDdxC+TiSmKxji8pFtQufPp8KkgesYZMnVa47AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYBnluIzFDT4gOC5pCyZh9lFP+YMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4ZTJiYjQyLTIwZWItNGE5MC04YmZjLTBjYzJhYzJhZmU3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCiiTANBgkqhkiG9w0BAQsFAAOCAQEAgBKvNmc4UoTmJ45VnIqd8xhQ2j0g jpT+0GayqGm5JQt0nR6KjWsL4+CuF4eu1T1Aqy4TQc5QW+5IScavxvoLvjsWx0+A kQXU1RsH4mgIvJc2/uTVMbu0FDF/p2w116B1jMH0mDXtrC1QsR4hQlDCvc1S0Z1T pBQbCBllSrj1UklBKtmd/3ZuHF7tuaBVZngLxGIdyyUeWIKJORUnbM6MojqruNQv 4L23ROJ3e9S5P78+/x7eqHJOhzTGMI2fA5/lQwjYFBeP1kAyiQaDpwvMeh728v/Q /GkHKal35NtbSsHh1Z7xDMDibtIbC2Mwos2RmVhuTLqyp1zy6siC5AZJdw== -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:09 2025 by rpki-client