$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036a5214-12d9-4cb2-8b4e-a410eedffde6.roa File: 036a5214-12d9-4cb2-8b4e-a410eedffde6.roa (raw, json) Hash identifier: 5NlaG6VdWqogtg9t4QgwG2f/eIcJheCFLeOhmSp/SEo= Subject key identifier: 43:03:DB:2C:CD:A7:47:DF:79:11:CE:42:29:C1:BA:92:E5:FD:2A:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4381E2E070BDC94E27B685D3421667BDABF3F6FC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036a5214-12d9-4cb2-8b4e-a410eedffde6.roa Signing time: Fri 09 May 2025 00:41:09 +0000 ROA not before: Fri 09 May 2025 00:41:09 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.88.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:81:e2:e0:70:bd:c9:4e:27:b6:85:d3:42:16:67:bd:ab:f3:f6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:41:09 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=dfcb53c33955020a39bc39cccbffda8e38ea945b509159c65f730014e781c9da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:fe:ae:fb:e3:eb:d7:b1:75:c5:09:28:c4: 1d:7d:ad:9f:bb:a6:10:f5:00:32:63:52:90:56:85: e1:47:e4:a9:3f:52:ae:5f:d0:84:d7:9a:db:10:58: 43:9f:cb:c1:66:f1:68:a2:5e:ba:58:60:97:3b:52: 84:21:89:0a:43:f2:e1:be:ff:0b:af:de:e7:2a:17: 2d:22:32:b6:c2:05:f8:90:db:4b:49:92:98:57:e9: 92:cf:9a:e5:75:ea:96:97:3a:59:46:a1:3a:64:43: 3c:6c:26:0a:af:0a:32:d4:0d:ae:71:1b:46:cc:5a: 73:05:b1:a5:5c:87:49:30:3a:f3:4d:7e:75:aa:55: a5:68:68:27:db:ba:95:96:d1:ae:36:10:16:25:1b: 0e:c0:df:33:cc:f1:90:00:72:c7:ab:03:0c:c8:c8: b5:24:80:49:d3:e8:1f:72:af:3e:7b:36:43:be:56: 70:58:87:74:1a:80:e4:73:66:63:b8:96:35:13:fc: b3:a6:3a:ed:88:33:0c:8f:fa:ea:34:a8:5a:5b:ba: dd:ca:54:02:1c:c9:4b:6d:aa:7e:fe:c1:ee:e3:ed: 01:e4:5c:aa:9d:12:09:bf:5e:86:69:b5:30:71:21: f1:a7:24:00:3b:22:b7:1f:ea:e7:b8:e4:1f:25:5e: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:DB:2C:CD:A7:47:DF:79:11:CE:42:29:C1:BA:92:E5:FD:2A:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/036a5214-12d9-4cb2-8b4e-a410eedffde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.128.0/18 Signature Algorithm: sha256WithRSAEncryption 36:c0:2a:56:d8:e8:2d:89:10:5a:f1:0a:ce:44:9d:00:19:ce: 02:15:c3:e5:6a:56:9c:fc:db:18:f9:a3:ac:e5:6a:49:ef:3e: b6:44:b5:d6:0b:60:92:05:90:0d:38:67:65:a4:12:11:5d:b0: 65:96:76:c5:5f:0a:95:e0:66:95:a4:fc:fd:a9:9d:4e:41:20: d8:4f:4f:57:29:73:3c:d5:f6:a7:75:1a:73:70:15:3b:53:c9: 99:22:10:6f:ea:39:09:4e:45:69:a5:2c:c2:54:18:0b:01:58: 9e:6f:b5:eb:6b:4b:60:2b:4c:d8:b3:5e:bd:3a:ec:61:91:1b: ab:46:29:90:e9:b1:0d:85:8b:56:79:62:92:c2:db:04:f5:51: 77:50:bb:6d:14:d0:46:16:a1:31:9f:e4:5a:6a:5c:17:20:41: 2b:bb:40:b7:74:22:63:25:51:5f:60:e5:e6:ab:f8:08:45:5b: bc:97:dc:e9:be:15:f3:fd:13:79:c6:07:f0:ee:aa:e8:ec:77: 8b:cb:88:1f:0a:9a:54:53:ef:fa:ee:f1:fb:9b:b7:bf:6f:f1: 3e:db:09:95:f5:0a:a8:5b:23:87:c6:85:55:73:3d:b9:a3:09: 37:7b:22:f8:89:a0:36:ff:bf:d2:a1:c3:9f:36:ee:05:6f:89: 3e:b0:fc:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ4Hi4HC9yU4ntoXTQhZnvavz9vwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MTA5WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmNiNTNjMzM5NTUwMjBhMzliYzM5Y2NjYmZmZGE4ZTM4 ZWE5NDViNTA5MTU5YzY1ZjczMDAxNGU3ODFjOWRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbE/6u++Pr17F1xQkoxB19rZ+7phD1ADJjUpBWheFH5Kk/ Uq5f0ITXmtsQWEOfy8Fm8WiiXrpYYJc7UoQhiQpD8uG+/wuv3ucqFy0iMrbCBfiQ 20tJkphX6ZLPmuV16paXOllGoTpkQzxsJgqvCjLUDa5xG0bMWnMFsaVch0kwOvNN fnWqVaVoaCfbupWW0a42EBYlGw7A3zPM8ZAAcserAwzIyLUkgEnT6B9yrz57NkO+ VnBYh3QagORzZmO4ljUT/LOmOu2IMwyP+uo0qFpbut3KVAIcyUttqn7+we7j7QHk XKqdEgm/XoZptTBxIfGnJAA7Ircf6ue45B8lXgOXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQwPbLM2nR995Ec5CKcG6kuX9KjkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzNmE1MjE0LTEyZDktNGNiMi04YjRlLWE0MTBlZWRmZmRlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSWIAwDQYJKoZIhvcNAQELBQADggEBADbAKlbY6C2JEFrxCs5EnQAZzgIV w+VqVpz82xj5o6zlaknvPrZEtdYLYJIFkA04Z2WkEhFdsGWWdsVfCpXgZpWk/P2p nU5BINhPT1cpczzV9qd1GnNwFTtTyZkiEG/qOQlORWmlLMJUGAsBWJ5vtetrS2Ar TNizXr067GGRG6tGKZDpsQ2Fi1Z5YpLC2wT1UXdQu20U0EYWoTGf5FpqXBcgQSu7 QLd0ImMlUV9g5ear+AhFW7yX3Om+FfP9E3nGB/Duqujsd4vLiB8KmlRT7/ru8fub t79v8T7bCZX1CqhbI4fGhVVzPbmjCTd7IviJoDb/v9Khw5827gVviT6w/NE= -----END CERTIFICATE-----Generated at Fri May 9 16:03:43 2025 by rpki-client