$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126006e1-904a-46df-987d-99a21ff08c88.roa File: 126006e1-904a-46df-987d-99a21ff08c88.roa (raw, json) Hash identifier: 0ALERTmrV0VjWokWT8E4pgNfI6Jzda4v/oMy5QIDYsg= Subject key identifier: 5A:54:C0:0A:17:B7:2E:10:2A:23:09:61:C5:2F:52:61:41:42:6E:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C602C6EDAC5593F5F94CB4C40395DA160F91630 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126006e1-904a-46df-987d-99a21ff08c88.roa Signing time: Fri 09 May 2025 15:31:46 +0000 ROA not before: Fri 09 May 2025 15:31:46 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.15.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:60:2c:6e:da:c5:59:3f:5f:94:cb:4c:40:39:5d:a1:60:f9:16:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 15:31:46 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=b811daf0510243fff17cc80cd1f0479907a695b94ab559250bde5ed289018dc2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:0c:67:dc:45:3c:36:2a:f1:55:aa:66:36: f1:17:2f:0a:76:69:7b:fb:42:56:f3:00:11:a6:f8: bc:81:46:5e:ac:06:d1:dc:ce:7b:71:89:96:a9:16: 06:c5:95:ff:6c:b7:d9:63:b3:a5:d0:3a:73:00:95: 3c:89:15:50:a6:59:4b:6e:24:f9:13:cd:8c:65:2d: 0f:1f:bb:2d:3d:f3:61:86:0d:71:4b:59:3d:9d:62: 3e:9d:ff:4f:ca:ad:ca:7b:f4:c5:15:65:6e:08:1c: b5:f2:55:ae:36:f3:44:bf:35:d6:ea:b8:ed:37:2b: 65:77:4b:3b:68:9a:22:68:f8:79:23:be:f4:12:b4: 52:0e:d8:99:6a:82:d8:4b:b2:78:64:21:65:b6:00: a4:f3:f1:7e:be:93:c3:64:b3:04:21:62:fd:fc:a0: ca:f0:ed:ed:91:ec:10:52:4c:90:ce:91:0a:c6:ad: e6:7c:76:a5:b8:df:70:1a:b9:5d:98:8a:a5:e4:3b: 03:96:6b:42:ff:1d:f7:78:dd:c6:00:bf:4a:30:b7: 9f:91:41:09:d6:96:d8:71:5a:d5:0a:fe:d1:65:4a: ac:86:09:94:35:4c:db:af:73:21:dc:73:c3:2f:0e: a5:45:e1:54:67:bd:7e:a6:8f:5e:04:6c:b8:54:6e: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:54:C0:0A:17:B7:2E:10:2A:23:09:61:C5:2F:52:61:41:42:6E:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/126006e1-904a-46df-987d-99a21ff08c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.15.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3e:d3:c0:fb:93:d3:a1:cf:e3:87:81:ac:6c:52:b0:da:04:24: 46:69:6c:f3:94:6e:fd:cc:43:f7:bf:68:a5:26:82:61:9d:8c: e9:8d:5f:1c:ef:0d:fb:7d:8e:7a:9d:8e:11:28:a5:ca:c9:4e: 46:b0:39:fa:f3:7b:5a:a7:cb:76:89:54:8e:0f:ce:e3:47:09: fc:da:87:59:58:d6:25:6e:13:53:f8:e4:64:e6:43:6e:4a:d5: 54:8b:08:a9:45:d9:d5:30:c1:22:a1:79:8f:51:1c:6b:29:ba: 58:5b:dc:5b:d1:7c:19:6f:4b:bb:fb:0f:8c:e6:1a:e4:b6:d9: 4b:ba:71:d9:94:90:5f:38:fa:ad:93:42:3e:b8:c8:43:d2:93: d5:42:df:cf:c8:9c:e0:93:51:3d:b8:d3:08:d3:53:0d:08:9e: 37:13:2b:31:29:c3:48:f8:2b:b4:57:8b:10:45:d5:0e:2d:96: 5a:49:07:24:e2:fa:f5:46:a3:2a:75:10:b6:45:05:fe:a6:f7: a4:0f:e7:5d:4c:0b:c0:37:c6:34:97:d0:71:7d:5c:12:16:0b: c8:4a:fb:86:00:04:10:59:be:10:25:a2:d2:cd:25:b8:6c:0f: b9:c4:8f:67:0a:cc:56:49:49:4e:d2:89:9c:21:03:25:17:07: b3:d5:ad:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTGAsbtrFWT9flMtMQDldoWD5FjAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MTUzMTQ2WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODExZGFmMDUxMDI0M2ZmZjE3Y2M4MGNkMWYwNDc5OTA3 YTY5NWI5NGFiNTU5MjUwYmRlNWVkMjg5MDE4ZGMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWRgxn3EU8NirxVapmNvEXLwp2aXv7QlbzABGm+LyBRl6s BtHczntxiZapFgbFlf9st9ljs6XQOnMAlTyJFVCmWUtuJPkTzYxlLQ8fuy0982GG DXFLWT2dYj6d/0/Krcp79MUVZW4IHLXyVa4280S/NdbquO03K2V3SztomiJo+Hkj vvQStFIO2JlqgthLsnhkIWW2AKTz8X6+k8NkswQhYv38oMrw7e2R7BBSTJDOkQrG reZ8dqW433AauV2YiqXkOwOWa0L/Hfd43cYAv0owt5+RQQnWlthxWtUK/tFlSqyG CZQ1TNuvcyHcc8MvDqVF4VRnvX6mj14EbLhUbnMBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWlTAChe3LhAqIwlhxS9SYUFCbnUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNjAwNmUxLTkwNGEtNDZkZi05ODdkLTk5YTIxZmYwOGM4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0D4AwDQYJKoZIhvcNAQELBQADggEBAD7TwPuT06HP44eBrGxSsNoEJEZp bPOUbv3MQ/e/aKUmgmGdjOmNXxzvDft9jnqdjhEopcrJTkawOfrze1qny3aJVI4P zuNHCfzah1lY1iVuE1P45GTmQ25K1VSLCKlF2dUwwSKheY9RHGspulhb3FvRfBlv S7v7D4zmGuS22Uu6cdmUkF84+q2TQj64yEPSk9VC38/InOCTUT240wjTUw0InjcT KzEpw0j4K7RXixBF1Q4tllpJByTi+vVGoyp1ELZFBf6m96QP511MC8A3xjSX0HF9 XBIWC8hK+4YABBBZvhAlotLNJbhsD7nEj2cKzFZJSU7SiZwhAyUXB7PVrVI= -----END CERTIFICATE-----Generated at Fri May 9 16:55:06 2025 by rpki-client