$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa File: 28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa (raw, json) Hash identifier: n+CCl3NMeWCKRzVu9AcwoNbMK6p5BeCVKgj3udINq5s= Subject key identifier: 9C:C1:EE:A5:BC:3B:05:62:C5:93:64:73:59:9E:F7:50:F0:86:92:F5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 764762D9667ABDAAAC59AB3F70AAF6FE40304B34 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa Signing time: Fri 09 May 2025 00:51:05 +0000 ROA not before: Fri 09 May 2025 00:51:05 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.239.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:47:62:d9:66:7a:bd:aa:ac:59:ab:3f:70:aa:f6:fe:40:30:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:51:05 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=b2415f49b8d015e39612840c64771758e510bf2b04199a551c45ed1bba8a47aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6b:99:e8:20:a5:5d:7d:80:63:ee:be:b4:50: 28:4b:ea:21:e8:08:7b:7d:a6:78:87:14:26:ac:9b: d5:d3:2a:a0:6a:e0:83:91:f6:ce:b9:0d:6e:9b:18: 06:72:e0:90:2a:a8:93:ea:35:a7:92:fe:d5:0a:ea: 5f:37:00:8a:d6:f3:e7:af:39:31:f2:df:a3:85:3f: b4:21:e6:6b:12:eb:bb:ef:be:b8:31:3c:f3:c8:82: 37:c2:3a:a4:c7:22:50:e0:bf:a8:a9:e7:90:c4:6f: ca:ba:fa:dc:ef:7a:5c:cb:b2:08:1e:91:6e:68:98: 2a:dc:17:00:3a:0e:1d:8e:25:8c:b2:0e:78:75:eb: c3:15:c4:6f:2f:66:bd:94:9e:b7:65:75:33:b6:26: 28:65:b7:ac:e9:21:53:be:9a:9b:77:3c:d4:cd:e2: 06:6d:19:05:bb:c1:03:6d:31:16:78:de:0a:aa:24: 32:fb:c1:fc:1e:a5:51:7b:bc:ca:6b:33:46:b2:08: aa:ed:8c:69:26:16:d3:a5:52:04:56:3f:bd:4a:e9: 8b:6d:ed:34:de:8e:b4:eb:cf:3e:1d:05:8d:94:55: e0:bf:34:74:57:80:82:6b:a0:c9:53:04:f8:d8:c3: 1d:9d:db:06:7f:30:1c:ff:06:9a:f3:f2:a3:24:0f: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:EE:A5:BC:3B:05:62:C5:93:64:73:59:9E:F7:50:F0:86:92:F5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.239.232.0/24 Signature Algorithm: sha256WithRSAEncryption 63:f7:a8:dc:40:a1:38:ca:9c:99:8d:dc:e7:c8:19:ab:b3:a2: 18:8c:19:3d:f0:3f:33:df:a0:69:b0:49:fc:dd:6f:8d:36:36: 88:ee:05:17:bd:a6:28:c8:44:bc:4e:36:48:5a:d9:45:d6:8d: 9c:40:cc:5b:02:34:97:62:c7:3f:0d:89:e2:65:8a:e0:23:36: 07:ec:e9:68:18:49:66:1d:00:17:66:f1:27:2a:22:56:bb:e8: aa:dc:a4:32:f4:77:4f:1a:8f:56:a9:4f:e2:50:51:a9:d3:4c: 60:b5:8c:42:81:12:3c:51:98:07:ab:2d:c9:90:86:0a:78:02: d8:fa:c1:06:4b:5c:af:1a:c4:78:d0:70:b9:e7:98:cf:0a:ca: 2c:7e:75:f5:3a:46:70:ee:b6:21:5d:3e:d7:68:e1:64:c2:e8: 24:db:44:32:ec:a8:2a:e8:2f:c9:da:2c:bf:63:5b:73:f8:e5: 62:b9:56:d8:bc:b1:e3:a8:eb:57:99:21:8d:04:74:d2:59:bb: ad:ec:5c:fd:11:29:f7:05:1e:2a:29:b9:0b:1f:91:b6:4d:da: b9:9d:f9:77:26:b2:ec:a5:e0:31:31:5f:61:be:7c:49:de:05: 98:0f:ff:56:8f:cf:e6:72:73:f5:87:34:a2:0f:ea:89:d3:cc: 43:d6:67:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdkdi2WZ6vaqsWas/cKr2/kAwSzQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA1MTA1WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjQxNWY0OWI4ZDAxNWUzOTYxMjg0MGM2NDc3MTc1OGU1 MTBiZjJiMDQxOTlhNTUxYzQ1ZWQxYmJhOGE0N2FhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXa5noIKVdfYBj7r60UChL6iHoCHt9pniHFCasm9XTKqBq 4IOR9s65DW6bGAZy4JAqqJPqNaeS/tUK6l83AIrW8+evOTHy36OFP7Qh5msS67vv vrgxPPPIgjfCOqTHIlDgv6ip55DEb8q6+tzvelzLsggekW5omCrcFwA6Dh2OJYyy Dnh168MVxG8vZr2UnrdldTO2Jihlt6zpIVO+mpt3PNTN4gZtGQW7wQNtMRZ43gqq JDL7wfwepVF7vMprM0ayCKrtjGkmFtOlUgRWP71K6Ytt7TTejrTrzz4dBY2UVeC/ NHRXgIJroMlTBPjYwx2d2wZ/MBz/Bprz8qMkD4nLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnMHupbw7BWLFk2RzWZ73UPCGkvUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4MzQ4ZGMzLWI3NjYtNGYxMS1hNmEyLWFmM2Y1N2VhNmNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD7+gwDQYJKoZIhvcNAQELBQADggEBAGP3qNxAoTjKnJmN3OfIGauzohiM GT3wPzPfoGmwSfzdb402NojuBRe9pijIRLxONkha2UXWjZxAzFsCNJdixz8NieJl iuAjNgfs6WgYSWYdABdm8ScqIla76KrcpDL0d08aj1apT+JQUanTTGC1jEKBEjxR mAerLcmQhgp4Atj6wQZLXK8axHjQcLnnmM8Kyix+dfU6RnDutiFdPtdo4WTC6CTb RDLsqCroL8naLL9jW3P45WK5Vti8seOo61eZIY0EdNJZu63sXP0RKfcFHiopuQsf kbZN2rmd+Xcmsuyl4DExX2G+fEneBZgP/1aPz+Zyc/WHNKIP6onTzEPWZ44= -----END CERTIFICATE-----Generated at Fri May 9 15:08:12 2025 by rpki-client