$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa File: 5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa (raw, json) Hash identifier: ZfPIcnnmbftdBkPVOl3mTtpntWzDXmkbxyuiDYrHewM= Subject key identifier: 75:27:91:03:E5:BC:C9:FC:E4:36:AB:E6:40:BD:35:F8:EC:79:30:03 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0DA0DA399BEB656CFB7C64EB2FB9EA8E8B8F0FFA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa Signing time: Tue 15 Apr 2025 00:40:41 +0000 ROA not before: Tue 15 Apr 2025 00:40:41 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.251.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a0:da:39:9b:eb:65:6c:fb:7c:64:eb:2f:b9:ea:8e:8b:8f:0f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 15 00:40:41 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=c75d5287d99f493c63448147c6cfb056dd0b8bbff4fe567a0e60070cb7344364, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:66:3a:00:46:70:8d:8b:d9:a1:be:2b:9c: db:27:c3:19:b0:22:01:7c:39:37:ad:0b:bd:65:23: d8:61:7b:4a:7f:bc:eb:1e:1b:30:69:69:c3:67:7a: 42:b1:eb:c7:15:3e:4b:95:11:3d:5e:88:e8:c2:75: ad:6c:9d:91:88:a2:24:76:a6:79:71:34:99:21:f8: 5f:14:7b:bc:46:13:4b:77:70:96:1e:f4:4d:b3:49: 36:eb:7e:8c:f2:51:bd:6c:39:ce:8f:db:4b:2c:93: aa:96:6d:13:9c:34:13:d2:2a:86:c5:af:b8:f9:10: f9:6e:90:83:e9:91:57:9c:03:1f:45:33:10:fa:d2: 8c:c1:53:80:08:01:98:b6:96:47:35:b7:83:43:05: 02:49:9c:fa:2e:fa:4c:ff:45:2e:4e:b2:1b:49:65: eb:6f:6b:61:22:75:51:59:66:ed:97:af:27:48:ee: 31:00:c5:42:38:74:b0:da:9f:8d:4c:54:32:49:f1: 53:ce:e1:ea:a5:0f:1a:d2:f9:d7:7c:da:b5:f0:78: e4:84:a2:d6:7a:62:48:49:2c:c0:dd:70:8e:ef:4e: cf:dc:6d:6e:49:c3:26:04:c6:a3:5e:62:3d:18:6a: ad:42:a3:a2:9e:33:07:0b:79:af:70:fd:07:a3:dc: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:27:91:03:E5:BC:C9:FC:E4:36:AB:E6:40:BD:35:F8:EC:79:30:03 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.251.192.0/18 Signature Algorithm: sha256WithRSAEncryption 04:bd:71:eb:b5:06:36:ce:f4:4b:e8:15:ca:17:b2:65:5d:ea: ca:f4:00:8c:b3:e5:a8:ad:45:bd:be:68:c5:34:5b:9e:04:58: 3c:bd:bf:0b:d9:03:01:ac:c7:4f:3a:15:33:87:df:86:c0:9e: 19:79:4c:27:f1:a6:eb:b6:40:be:44:bd:af:15:fc:70:de:84: 98:78:11:38:25:89:fc:1c:22:d6:7e:78:e2:c5:42:4f:79:97: d4:40:5d:4d:75:9f:19:a0:95:66:45:8d:8e:03:2a:a7:56:c0: 88:c4:1b:41:86:d8:a4:5e:1e:34:fb:06:97:e2:ff:2e:c3:d3: be:cc:64:2c:07:7b:46:fc:3c:13:89:fd:da:7b:4c:d3:cc:f9: 34:2c:d3:99:2d:f0:2e:5a:35:0a:c3:11:52:9f:f2:8c:78:b1: 5a:2f:42:b3:45:1d:30:8f:f0:12:9b:0f:a7:38:c2:d7:64:44: e8:60:5c:56:2b:1c:04:0e:2a:20:4a:f2:65:6b:19:a0:2c:27: 85:43:66:5e:dd:a6:6b:65:ae:50:de:7a:c8:a9:8d:ef:ce:10: ff:9f:e7:7e:b3:96:89:1f:c8:02:f9:f1:23:94:4a:ea:d8:bc: 4e:99:23:b2:c5:86:33:74:e4:53:1c:ba:ce:a5:a6:89:b5:66: 7e:d4:92:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDaDaOZvrZWz7fGTrL7nqjouPD/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNDE1MDA0MDQxWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzVkNTI4N2Q5OWY0OTNjNjM0NDgxNDdjNmNmYjA1NmRk MGI4YmJmZjRmZTU2N2EwZTYwMDcwY2I3MzQ0MzY0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFP2Y6AEZwjYvZob4rnNsnwxmwIgF8OTetC71lI9hhe0p/ vOseGzBpacNnekKx68cVPkuVET1eiOjCda1snZGIoiR2pnlxNJkh+F8Ue7xGE0t3 cJYe9E2zSTbrfozyUb1sOc6P20ssk6qWbROcNBPSKobFr7j5EPlukIPpkVecAx9F MxD60ozBU4AIAZi2lkc1t4NDBQJJnPou+kz/RS5OshtJZetva2EidVFZZu2XrydI 7jEAxUI4dLDan41MVDJJ8VPO4eqlDxrS+dd82rXweOSEotZ6YkhJLMDdcI7vTs/c bW5JwyYExqNeYj0Yaq1Co6KeMwcLea9w/Qej3ErrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdSeRA+W8yfzkNqvmQL01+Ox5MAMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzViNGMyYTQ4LWNhZTMtNDkyMi05NGNiLThhNDJkZWNiM2FkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbN+8AwDQYJKoZIhvcNAQELBQADggEBAAS9ceu1BjbO9EvoFcoXsmVd6sr0 AIyz5aitRb2+aMU0W54EWDy9vwvZAwGsx086FTOH34bAnhl5TCfxpuu2QL5Eva8V /HDehJh4ETglifwcItZ+eOLFQk95l9RAXU11nxmglWZFjY4DKqdWwIjEG0GG2KRe HjT7Bpfi/y7D077MZCwHe0b8PBOJ/dp7TNPM+TQs05kt8C5aNQrDEVKf8ox4sVov QrNFHTCP8BKbD6c4wtdkROhgXFYrHAQOKiBK8mVrGaAsJ4VDZl7dpmtlrlDeesip je/OEP+f536zlokfyAL58SOUSurYvE6ZI7LFhjN05FMcus6lpom1Zn7Ukog= -----END CERTIFICATE-----Generated at Fri May 9 10:15:00 2025 by rpki-client