$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b88a91dd-515f-4266-821b-b14645dd88f8.roa File: b88a91dd-515f-4266-821b-b14645dd88f8.roa (raw, json) Hash identifier: 3Jm7BHkddeSIgIPVywCPwSR+vb1tUPGbSo1VzzqiqVg= Subject key identifier: E3:B9:67:A7:7B:A1:E2:1B:79:D4:9D:17:FE:F9:28:FD:98:FE:82:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B3E94C4C12A29BA3B98FDD969884586FF0928AF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b88a91dd-515f-4266-821b-b14645dd88f8.roa Signing time: Fri 28 Mar 2025 18:01:36 +0000 ROA not before: Fri 28 Mar 2025 18:01:36 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.119.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3e:94:c4:c1:2a:29:ba:3b:98:fd:d9:69:88:45:86:ff:09:28:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 28 18:01:36 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:c5:fa:66:c2:90:42:cb:a7:fa:62:bc:d6: 7e:55:e4:71:24:b6:f8:0c:5b:61:1c:6b:4f:11:5e: d9:e1:d4:81:fb:15:f5:41:7d:67:13:47:c6:46:7d: 05:28:5c:05:41:04:54:a1:ca:19:83:32:c1:8f:47: 6d:f9:d6:79:40:34:70:e8:01:48:9d:e4:83:24:05: be:05:e9:ef:92:a7:7f:a4:c8:7f:03:4a:6d:6a:5c: 6d:6c:cf:8a:c3:22:e6:be:0d:93:f0:5c:75:4f:21: cf:8b:af:9a:56:3f:b6:c1:a6:60:aa:fc:db:39:84: f8:cb:63:65:05:34:db:db:69:07:eb:e8:55:7f:42: 7e:16:87:15:09:ce:02:c9:5f:0c:22:0b:0a:9f:90: fb:97:ba:0e:73:37:2a:f5:97:67:af:5b:2f:9e:9e: d9:8f:e6:84:64:c4:64:f7:4e:16:29:39:eb:89:55: 87:bb:d5:38:8c:09:f5:62:44:1a:f9:cc:0b:e0:7c: 35:ff:02:c4:d3:c1:0f:c6:79:37:7c:e1:51:3e:a8: b1:61:5a:86:b3:65:fd:af:36:49:5b:db:ad:9b:46: 57:fa:a3:a5:bd:c5:1f:6e:96:f9:45:20:75:ef:67: 88:81:7e:f1:a7:b7:e4:b1:58:a6:92:4b:56:42:fc: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B9:67:A7:7B:A1:E2:1B:79:D4:9D:17:FE:F9:28:FD:98:FE:82:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b88a91dd-515f-4266-821b-b14645dd88f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.152.0/22 Signature Algorithm: sha256WithRSAEncryption 33:ec:5f:50:4a:50:fa:5a:29:fd:a5:25:b8:6c:ae:40:d3:b0: c4:4f:64:3e:42:90:96:44:6c:03:ec:85:36:8d:e8:68:03:cf: ba:9e:6b:9e:e7:bc:72:fd:25:c9:30:90:35:dc:73:7a:77:c4: 7c:b8:69:1d:39:55:77:47:1e:05:a0:9c:4e:d0:53:8f:9c:bd: 5f:f5:34:d8:89:4b:89:93:be:37:50:52:69:00:47:1f:22:bb: a6:8c:a3:f8:19:db:66:75:c6:86:64:f4:ea:cd:61:6e:5a:c0: 1c:c4:d5:b4:5e:38:22:a7:1f:6e:ad:1c:a8:3d:d2:04:61:3f: c6:b8:cd:57:c9:64:55:d8:02:5d:1f:c6:3d:cb:af:a3:1b:c1: d3:e0:4d:25:ce:e3:e5:ea:16:f0:20:b4:ce:47:fd:09:8e:66: f7:eb:f4:93:ec:ac:4a:60:81:42:73:84:83:76:af:76:22:39: 7b:1a:53:7f:e9:90:51:12:ed:5e:86:ad:f7:b3:e5:f0:7c:17: 1f:54:7e:8c:20:85:1d:b4:6e:97:88:a3:b4:37:16:70:eb:c2: 52:d7:96:7d:9c:b3:5f:6c:d0:e0:68:f1:0b:1a:78:f1:83:b2: 87:6d:34:6d:84:bb:7e:fb:67:f7:53:cb:97:ff:5d:35:11:84: 7b:fd:8f:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKz6UxMEqKbo7mP3ZaYhFhv8JKK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI4MTgwMTM2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjIzMDFlYzk2NjdjMzA0YjhjN2FlNGFkMDZlOTYyZDQy ODkyYzY4NGVlZGY0YmMxNWNkMmFkNzA1ODhmODc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCts8X6ZsKQQsun+mK81n5V5HEktvgMW2Eca08RXtnh1IH7 FfVBfWcTR8ZGfQUoXAVBBFShyhmDMsGPR2351nlANHDoAUid5IMkBb4F6e+Sp3+k yH8DSm1qXG1sz4rDIua+DZPwXHVPIc+Lr5pWP7bBpmCq/Ns5hPjLY2UFNNvbaQfr 6FV/Qn4WhxUJzgLJXwwiCwqfkPuXug5zNyr1l2evWy+entmP5oRkxGT3ThYpOeuJ VYe71TiMCfViRBr5zAvgfDX/AsTTwQ/GeTd84VE+qLFhWoazZf2vNklb262bRlf6 o6W9xR9ulvlFIHXvZ4iBfvGnt+SxWKaSS1ZC/ID/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU47lnp3uh4ht51J0X/vko/Zj+giUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4OGE5MWRkLTUxNWYtNDI2Ni04MjFiLWIxNDY0NWRkODhmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0d5gwDQYJKoZIhvcNAQELBQADggEBADPsX1BKUPpaKf2lJbhsrkDTsMRP ZD5CkJZEbAPshTaN6GgDz7qea57nvHL9JckwkDXcc3p3xHy4aR05VXdHHgWgnE7Q U4+cvV/1NNiJS4mTvjdQUmkARx8iu6aMo/gZ22Z1xoZk9OrNYW5awBzE1bReOCKn H26tHKg90gRhP8a4zVfJZFXYAl0fxj3Lr6MbwdPgTSXO4+XqFvAgtM5H/QmOZvfr 9JPsrEpggUJzhIN2r3YiOXsaU3/pkFES7V6Grfez5fB8Fx9UfowghR20bpeIo7Q3 FnDrwlLXln2cs19s0OBo8QsaePGDsodtNG2Eu377Z/dTy5f/XTURhHv9j+c= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:11 2025 by rpki-client