$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde15d85-111b-4cf4-bf07-26adaaa26605.roa File: bde15d85-111b-4cf4-bf07-26adaaa26605.roa (raw, json) Hash identifier: yg4soRboPrW3fQQvEEmFP1jZAVTieVZRzQphW5/H3/E= Subject key identifier: 9E:23:D4:C0:BF:DD:A9:18:D8:0B:42:4C:DF:10:43:E8:F2:BD:2B:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C2F67664B1415B68778DC3F399C3A6008A08E39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde15d85-111b-4cf4-bf07-26adaaa26605.roa Signing time: Fri 28 Mar 2025 18:01:50 +0000 ROA not before: Fri 28 Mar 2025 18:01:50 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2f:67:66:4b:14:15:b6:87:78:dc:3f:39:9c:3a:60:08:a0:8e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 28 18:01:50 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:c1:2e:34:e1:35:5c:d2:26:71:dd:3a:a0: 2a:c4:62:8b:90:0d:3c:d5:7f:22:11:dd:de:81:4e: 44:aa:22:52:77:5c:c4:e7:9c:53:25:45:49:b0:84: be:cf:47:44:90:46:11:d5:82:19:1b:5b:16:15:bd: fb:a9:1d:08:37:b2:b7:bc:6b:ca:59:8b:19:cc:a2: 77:9e:de:8c:fa:d0:b6:d0:15:8f:04:56:bd:e9:a0: ea:3a:06:44:e9:6f:0d:1a:b0:56:58:b7:8a:dd:f1: c8:95:c9:4f:30:72:45:25:6e:58:4e:fb:dc:bd:99: fc:49:26:09:5a:8b:27:6d:34:1b:b6:4b:a5:27:7b: 5d:bf:7f:22:c6:b9:f7:cb:d2:f0:63:35:6e:8c:7e: 0c:eb:99:72:cf:9e:65:32:6c:85:85:12:b5:bb:07: 24:58:e5:a5:da:6b:71:5e:73:be:ae:9a:3a:49:56: 51:fb:0f:7b:d3:71:d5:52:0d:cb:b8:15:36:b8:0a: 56:93:07:71:f3:10:bf:a0:a0:31:07:ec:28:cd:54: 7f:a5:37:2d:36:4a:17:1f:11:55:b7:ae:c1:08:ca: cc:ce:2e:ec:f9:90:ca:39:4c:02:95:7e:f2:fa:19: da:5c:32:19:8b:81:0c:33:11:c5:a3:85:37:fd:0a: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:D4:C0:BF:DD:A9:18:D8:0B:42:4C:DF:10:43:E8:F2:BD:2B:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde15d85-111b-4cf4-bf07-26adaaa26605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption 13:27:a7:dd:d8:95:08:c9:06:a4:42:89:be:be:49:15:db:e3: 5f:89:5c:cd:dc:71:d2:e7:3f:5e:64:b5:69:36:df:06:a4:89: 1a:c8:e2:c1:57:03:fe:3d:69:57:73:8f:40:40:a6:e8:cb:e5: 5e:26:e0:d4:11:6c:e6:46:2f:fe:46:5f:48:f7:03:a8:8f:24: c8:9a:ff:e5:76:50:62:96:a6:66:c9:12:b1:e3:0f:a2:4f:5c: 3f:b8:e3:74:86:5a:bd:87:6d:14:40:88:5e:16:b9:cf:e2:24: 28:a7:06:e0:e7:50:96:bb:45:e5:3d:95:20:4b:4f:a1:77:ee: 34:9e:01:de:cc:66:ce:21:f6:d7:2f:24:79:ee:6e:be:1d:d1: f5:96:9e:64:2b:88:bc:0a:55:23:89:63:5b:a8:27:65:e9:f1: 7b:04:77:0c:2b:1d:f1:b2:15:81:11:6d:dd:3e:18:d9:4c:7c: a5:f1:31:98:69:1f:93:96:17:13:1b:72:2a:b7:26:da:a8:52: 14:af:cd:ef:c5:89:e1:55:95:e9:80:15:39:49:0b:88:6e:20: c1:29:4c:be:3b:05:49:3f:98:68:82:4f:9e:da:1e:34:17:6d: 67:de:07:b8:b7:ea:17:f3:60:17:57:e7:ea:59:25:f7:cd:3c: 85:db:29:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbC9nZksUFbaHeNw/OZw6YAigjjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzI4MTgwMTUwWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGRlM2FmNTM3MTg3M2I3YmI5NTkwNjk2ZGYwYmU0NTQ0 NDYwN2QwNGRjNTI0OGQ2MzM0NDE4YWMxNWQ4YzllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV8cEuNOE1XNImcd06oCrEYouQDTzVfyIR3d6BTkSqIlJ3 XMTnnFMlRUmwhL7PR0SQRhHVghkbWxYVvfupHQg3sre8a8pZixnMonee3oz60LbQ FY8EVr3poOo6BkTpbw0asFZYt4rd8ciVyU8wckUlblhO+9y9mfxJJglaiydtNBu2 S6Une12/fyLGuffL0vBjNW6MfgzrmXLPnmUybIWFErW7ByRY5aXaa3Fec76umjpJ VlH7D3vTcdVSDcu4FTa4ClaTB3HzEL+goDEH7CjNVH+lNy02ShcfEVW3rsEIyszO Luz5kMo5TAKVfvL6GdpcMhmLgQwzEcWjhTf9CmPXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUniPUwL/dqRjYC0JM3xBD6PK9KyMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkZTE1ZDg1LTExMWItNGNmNC1iZjA3LTI2YWRhYWEyNjYwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0LuAwDQYJKoZIhvcNAQELBQADggEBABMnp93YlQjJBqRCib6+SRXb41+J XM3ccdLnP15ktWk23wakiRrI4sFXA/49aVdzj0BApujL5V4m4NQRbOZGL/5GX0j3 A6iPJMia/+V2UGKWpmbJErHjD6JPXD+443SGWr2HbRRAiF4Wuc/iJCinBuDnUJa7 ReU9lSBLT6F37jSeAd7MZs4h9tcvJHnubr4d0fWWnmQriLwKVSOJY1uoJ2Xp8XsE dwwrHfGyFYERbd0+GNlMfKXxMZhpH5OWFxMbciq3JtqoUhSvze/FieFVlemAFTlJ C4huIMEpTL47BUk/mGiCT57aHjQXbWfeB7i36hfzYBdX5+pZJffNPIXbKVA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:11 2025 by rpki-client