$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f73cf43c-1d10-4597-9a6e-47fbef8b0086.roa File: f73cf43c-1d10-4597-9a6e-47fbef8b0086.roa (raw, json) Hash identifier: glgrDFbhxkbX6sDN2yELUPOJBQcITaU7zgRgfR7rfLY= Subject key identifier: EB:91:77:FE:EE:C4:B0:A7:6A:51:83:41:40:71:9E:5A:5D:AF:6A:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4472E3656719F28F4E455B3ECA9133DC04CB919A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f73cf43c-1d10-4597-9a6e-47fbef8b0086.roa Signing time: Wed 12 Mar 2025 14:07:17 +0000 ROA not before: Wed 12 Mar 2025 14:07:17 +0000 ROA not after: Wed 16 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.217.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:72:e3:65:67:19:f2:8f:4e:45:5b:3e:ca:91:33:dc:04:cb:91:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Mar 12 14:07:17 2025 GMT Not After : Apr 16 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:78:c8:cc:3a:33:cb:c5:d6:09:df:c0:95: 1b:00:05:0b:a0:e6:67:0b:a4:25:12:ee:71:64:46: fc:d9:09:06:53:51:a3:8f:25:40:1c:bf:75:00:12: 37:25:09:5f:24:6d:bc:b0:e6:29:a4:1a:69:3b:68: 6c:be:7c:44:8d:44:35:02:1b:41:0d:e5:6c:12:99: d4:08:da:92:fe:16:75:6a:30:b7:a0:2f:fa:ac:1a: 3b:4f:f0:52:36:d5:e3:22:a1:eb:47:7b:6c:4a:00: dd:7f:68:3b:d3:b9:ef:8c:d7:25:c0:63:ed:25:68: 46:fb:fb:af:00:f3:4e:d5:d7:78:72:d1:3b:ea:08: 93:76:c8:1a:2f:1b:4d:18:f5:c6:5c:5e:ed:e0:08: a7:71:a7:78:ad:b7:ad:57:3c:ef:2b:88:83:a7:d8: ea:2f:ae:c2:08:58:df:fe:b5:d3:98:13:9d:91:c1: e8:69:e5:d8:ce:db:da:68:74:03:31:d0:f0:59:0f: 2e:dc:fa:19:f1:83:ed:4e:f1:23:d8:fc:9f:bf:19: 00:cd:73:e4:2e:15:f6:38:a5:17:e4:26:08:36:0d: ea:f9:3d:9a:19:5c:bb:56:28:64:07:b2:51:e7:97: ed:f7:2e:15:90:ea:17:0a:9b:32:5e:4b:ee:c6:75: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:91:77:FE:EE:C4:B0:A7:6A:51:83:41:40:71:9E:5A:5D:AF:6A:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f73cf43c-1d10-4597-9a6e-47fbef8b0086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.217.80.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:16:36:73:6f:1f:25:28:fc:71:f5:61:5d:c2:15:bb:87:e5: 3b:62:e7:8d:99:34:36:55:12:a8:5f:a9:ff:ab:27:95:de:24: b1:e8:39:33:f7:64:64:dd:de:89:17:d4:7b:09:2c:92:d5:87: 83:d4:b0:5f:bb:f2:8d:6c:8e:a2:2a:c4:c0:03:0a:30:e7:e5: 80:ec:15:20:15:f8:9a:00:06:99:f1:ab:7b:ea:0b:f9:15:ea: 0a:70:b7:bb:ed:12:34:34:29:c1:d0:a5:22:92:be:3f:e8:ca: d7:2e:cd:b2:c0:e7:f2:2e:33:19:58:72:19:03:e4:f4:e0:d0: e5:fa:04:c9:a9:04:ea:23:85:df:b4:f4:3d:3f:03:db:19:f1: de:4e:d9:cf:f3:a0:17:a1:af:19:0d:76:c4:5b:a0:d1:d8:ac: 3f:63:14:ad:b9:b0:00:aa:b7:4c:cc:d0:61:d0:b1:7a:20:cc: 0c:fd:7b:bb:d7:6f:07:6f:8d:f2:65:9e:a2:14:da:10:d8:4e: db:3d:25:b1:8f:e3:7e:47:49:7b:02:57:e7:aa:58:ac:a7:7a: 9c:93:7d:1d:cb:40:3e:dd:9d:92:00:7d:9e:b9:73:e8:81:ba: 59:48:9f:eb:3d:35:e3:0e:53:d7:9a:a0:f5:49:f7:23:e6:18: cf:14:44:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURHLjZWcZ8o9ORVs+ypEz3ATLkZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMzEyMTQwNzE3WhcNMjUwNDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTVmNGZlOWM2YjE1ZTE2MGYxOGU3Mjk5Njg3OWM3NGI3 MTdlODlhMWVlYmIyNDc0MTRkY2VjY2I5ZTRmNDAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCrXjIzDozy8XWCd/AlRsABQug5mcLpCUS7nFkRvzZCQZT UaOPJUAcv3UAEjclCV8kbbyw5imkGmk7aGy+fESNRDUCG0EN5WwSmdQI2pL+FnVq MLegL/qsGjtP8FI21eMioetHe2xKAN1/aDvTue+M1yXAY+0laEb7+68A807V13hy 0TvqCJN2yBovG00Y9cZcXu3gCKdxp3itt61XPO8riIOn2OovrsIIWN/+tdOYE52R wehp5djO29podAMx0PBZDy7c+hnxg+1O8SPY/J+/GQDNc+QuFfY4pRfkJgg2Der5 PZoZXLtWKGQHslHnl+33LhWQ6hcKmzJeS+7GdbJfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU65F3/u7EsKdqUYNBQHGeWl2vavgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3M2NmNDNjLTFkMTAtNDU5Ny05YTZlLTQ3ZmJlZjhiMDA4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN2VAwDQYJKoZIhvcNAQELBQADggEBAC8WNnNvHyUo/HH1YV3CFbuH5Tti 542ZNDZVEqhfqf+rJ5XeJLHoOTP3ZGTd3okX1HsJLJLVh4PUsF+78o1sjqIqxMAD CjDn5YDsFSAV+JoABpnxq3vqC/kV6gpwt7vtEjQ0KcHQpSKSvj/oytcuzbLA5/Iu MxlYchkD5PTg0OX6BMmpBOojhd+09D0/A9sZ8d5O2c/zoBehrxkNdsRboNHYrD9j FK25sACqt0zM0GHQsXogzAz9e7vXbwdvjfJlnqIU2hDYTts9JbGP435HSXsCV+eq WKynepyTfR3LQD7dnZIAfZ65c+iBullIn+s9NeMOU9eaoPVJ9yPmGM8UROc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:32 2025 by rpki-client