$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa File: 33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa (raw, json) Hash identifier: nJoCeFkce0WOb6oIf/sgADBOCPjc5pGGKxADKI1nm34= Subject key identifier: 01:61:61:5A:58:D7:56:D2:F4:11:D8:83:4E:17:A5:AA:75:C9:1B:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22A9745757DEDE549AE8FF10E87F144745D355F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa Signing time: Fri 25 Apr 2025 16:41:32 +0000 ROA not before: Fri 25 Apr 2025 16:41:32 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.152.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a9:74:57:57:de:de:54:9a:e8:ff:10:e8:7f:14:47:45:d3:55:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:41:32 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2fced14f5d050ad98c21a49952df329494ae927077610698bca79e52110aa61a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:49:b9:c6:46:fd:42:d8:8e:9d:0f:1b:a3: 8f:38:f1:f0:e9:89:69:b6:b1:9a:34:3b:77:40:30: 03:43:e2:73:17:c6:c8:b5:bd:fb:34:0f:b8:40:b5: 46:7b:ac:b6:d0:d2:72:21:25:4d:0a:12:cd:bb:65: 15:60:b1:50:6d:b0:4b:0d:c1:cb:d7:ac:14:bf:dd: dd:04:73:9e:d4:44:51:32:bc:24:ac:58:17:32:09: 80:fb:ce:6d:15:ca:95:55:3c:ca:46:41:29:f0:15: 62:e6:45:7d:99:38:9a:86:76:a6:dd:e6:e3:f1:e6: 2f:28:22:e9:72:aa:8d:69:8a:90:c7:4b:eb:1d:88: c5:a2:b0:07:f6:b3:d1:64:86:4c:0f:ca:d6:5e:b8: f0:83:b4:8b:59:dc:cd:ff:6b:fb:46:f9:58:5e:d5: d3:9d:bc:ef:b4:00:77:a2:cd:f8:a4:c8:aa:ad:52: 94:bd:db:75:a0:2f:1e:06:70:4b:89:c7:7b:4f:f7: 38:a2:f2:39:cc:82:c2:07:36:9b:5a:9a:1c:02:87: f8:bc:9a:f1:92:b8:75:24:c1:ad:3f:4e:21:c1:02: 24:a5:13:f7:c3:70:f6:9f:d4:ee:e8:d3:d4:ad:f8: ef:97:1c:93:a6:5a:1b:77:69:87:55:5e:f7:f2:88: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:61:61:5A:58:D7:56:D2:F4:11:D8:83:4E:17:A5:AA:75:C9:1B:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33315dd8-3545-45c2-b15e-4eb03f44b7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.152.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4c:70:0f:6f:13:e5:e3:d8:6e:4b:9c:1d:07:a1:f6:6c:6d:4b: 53:7f:c6:dc:e9:02:b6:28:ec:bb:96:f1:09:02:0a:b8:34:2e: 72:24:2e:dc:d6:33:ea:e2:46:35:cc:53:9e:d2:64:09:1e:30: f9:a6:56:f4:3e:ff:83:bf:2f:12:7c:f6:af:62:c9:b6:16:05: 00:93:41:74:1f:ca:5c:1a:06:94:2e:6d:43:aa:2d:77:e4:ce: e0:e4:95:2a:0f:1e:b8:38:25:73:98:ee:cd:7a:2e:88:db:dc: 1d:46:89:61:86:bf:a3:f9:a4:34:5d:d4:26:93:5b:a5:98:d5: 81:81:44:3e:db:cf:03:e3:67:ab:33:ca:01:ae:ae:db:4a:0b: 61:ec:fe:31:12:ee:34:9e:df:80:0d:a2:62:96:31:cf:3f:24: f6:55:3a:37:76:9b:99:23:df:5a:d9:a5:f4:5d:89:35:9a:80: c8:57:6a:d9:44:f8:6d:a3:6a:e3:9d:c7:0f:79:dc:ab:64:dd: 81:0c:88:d8:7a:bb:a4:22:16:4a:7b:ca:f6:07:3a:1c:1e:c4: 74:a1:d8:d9:d7:39:8e:b9:17:9c:6a:59:1f:f3:35:17:74:01: 57:4a:1e:ca:ae:28:d9:bb:db:16:1b:69:f4:bd:9b:2f:b9:64: 3f:ba:35:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIql0V1fe3lSa6P8Q6H8UR0XTVfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTY0MTMyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmNlZDE0ZjVkMDUwYWQ5OGMyMWE0OTk1MmRmMzI5NDk0 YWU5MjcwNzc2MTA2OThiY2E3OWU1MjExMGFhNjFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8N0m5xkb9QtiOnQ8bo4848fDpiWm2sZo0O3dAMAND4nMX xsi1vfs0D7hAtUZ7rLbQ0nIhJU0KEs27ZRVgsVBtsEsNwcvXrBS/3d0Ec57URFEy vCSsWBcyCYD7zm0VypVVPMpGQSnwFWLmRX2ZOJqGdqbd5uPx5i8oIulyqo1pipDH S+sdiMWisAf2s9FkhkwPytZeuPCDtItZ3M3/a/tG+Vhe1dOdvO+0AHeizfikyKqt UpS923WgLx4GcEuJx3tP9zii8jnMgsIHNptamhwCh/i8mvGSuHUkwa0/TiHBAiSl E/fDcPaf1O7o09St+O+XHJOmWht3aYdVXvfyiJv3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAWFhWljXVtL0EdiDThelqnXJGyswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzMzE1ZGQ4LTM1NDUtNDVjMi1iMTVlLTRlYjAzZjQ0YjdiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjmIAwDQYJKoZIhvcNAQELBQADggEBAExwD28T5ePYbkucHQeh9mxtS1N/ xtzpArYo7LuW8QkCCrg0LnIkLtzWM+riRjXMU57SZAkeMPmmVvQ+/4O/LxJ89q9i ybYWBQCTQXQfylwaBpQubUOqLXfkzuDklSoPHrg4JXOY7s16Lojb3B1GiWGGv6P5 pDRd1CaTW6WY1YGBRD7bzwPjZ6szygGurttKC2Hs/jES7jSe34ANomKWMc8/JPZV Ojd2m5kj31rZpfRdiTWagMhXatlE+G2jauOdxw953Ktk3YEMiNh6u6QiFkp7yvYH OhwexHSh2NnXOY65F5xqWR/zNRd0AVdKHsquKNm72xYbafS9my+5ZD+6Ndk= -----END CERTIFICATE-----Generated at Fri May 9 16:43:51 2025 by rpki-client