$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39a4a2c2-3b04-4045-82a7-b8e7c128a039.roa File: 39a4a2c2-3b04-4045-82a7-b8e7c128a039.roa (raw, json) Hash identifier: zb2D6s8s+fDVvxEnUJ20G+dPYJtCUYBH8op7upxAXf4= Subject key identifier: FE:A9:DA:B3:95:CD:EA:48:B2:28:7F:01:21:BF:FC:2F:69:EA:0D:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0773EFE495D8E70AFA8E30202370EC18A700D07E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39a4a2c2-3b04-4045-82a7-b8e7c128a039.roa Signing time: Fri 09 May 2025 00:41:39 +0000 ROA not before: Fri 09 May 2025 00:41:39 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.166.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:73:ef:e4:95:d8:e7:0a:fa:8e:30:20:23:70:ec:18:a7:00:d0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:41:39 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=dd5c537145137758511afa422cc2c3340a4b48ef9317ea2597195ab8a5fbcfcc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:b5:a5:f6:6a:a2:2f:2d:ef:46:a3:ec:c9: 75:2d:b1:6e:2d:70:9b:01:67:9a:29:af:e5:89:fb: 25:bb:88:96:a4:e1:2c:66:3a:79:44:37:5e:90:3e: f8:9c:0e:1f:80:01:bd:42:9a:8e:bb:91:77:ec:b3: 89:f9:6f:af:44:c0:7c:d9:74:ab:ba:b7:86:1b:32: 11:13:f4:68:ff:52:aa:84:44:19:60:e5:74:f4:0e: b2:c6:a6:19:5b:2f:ae:e2:44:70:14:b5:cb:6f:74: 3b:cc:5e:dc:fa:f2:83:96:b3:fb:1c:72:35:15:4c: 8f:d1:f7:9d:52:4d:88:2a:e0:8d:88:60:a2:da:57: e0:89:8c:b8:a2:15:d6:a9:91:45:90:9b:e6:c4:79: 45:8c:9f:b4:66:4d:66:b2:39:8a:7b:3f:bc:7b:13: 91:a4:12:27:d3:30:9c:b5:0c:f7:11:7f:c7:ba:54: 4b:7d:45:ca:e7:4b:6a:96:c9:4f:80:52:2b:69:5d: d0:cc:5b:98:7d:b1:10:84:e6:71:c7:61:d9:25:97: 8b:b9:02:b9:1b:83:06:e8:62:8d:63:dc:81:a6:5a: 0e:ae:7d:ef:30:5e:1d:33:b8:b3:4e:88:b8:f0:6f: 59:8a:1a:c7:33:32:15:ff:c8:a8:5e:8f:20:0a:4d: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:DA:B3:95:CD:EA:48:B2:28:7F:01:21:BF:FC:2F:69:EA:0D:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39a4a2c2-3b04-4045-82a7-b8e7c128a039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.166.0.0/15 Signature Algorithm: sha256WithRSAEncryption 4e:b6:50:d2:fc:dd:1a:00:61:9b:4a:4a:56:97:0e:da:77:95: f9:0e:3e:ec:4d:83:c5:1e:f4:e1:58:ac:5d:60:51:3a:f0:d1: a9:ea:2e:6d:19:86:e2:ca:53:59:3c:ac:c5:82:bc:14:04:58: 48:a5:c8:c3:0c:7c:95:1a:6b:e8:44:bb:70:15:a1:7d:29:73: 04:d6:11:55:11:9f:68:5e:8a:5d:05:a0:91:47:bf:70:be:28: a3:69:8a:d2:95:a7:c9:42:0f:2c:04:e0:3c:12:89:b8:72:ff: 5e:89:b3:82:9d:dd:e4:d5:1b:7b:f0:70:fe:3a:24:cb:f4:51: 28:c3:57:6a:d1:d4:71:13:a6:54:56:a9:64:81:ab:2f:84:17: 5f:8d:50:bc:83:f1:97:0c:00:43:8e:0f:12:6b:a5:9a:46:c8: 74:c0:e0:9a:2c:ad:be:1a:dc:47:8d:24:8a:83:b9:8b:8f:d4: 86:ff:37:b4:82:49:20:d4:ab:ed:02:6d:b9:34:94:45:0a:24: 3f:c4:d6:ae:74:47:e4:15:2e:d5:3f:91:ba:c1:c7:d5:f1:4b: 27:5d:15:3b:d3:36:44:98:c6:73:5c:99:d5:89:76:c0:57:fa: fb:4d:f6:ea:78:fb:a5:c7:5a:f9:f2:95:75:cd:95:54:cb:6d: ca:f3:f5:61 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB3Pv5JXY5wr6jjAgI3DsGKcA0H4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MTM5WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDVjNTM3MTQ1MTM3NzU4NTExYWZhNDIyY2MyYzMzNDBh NGI0OGVmOTMxN2VhMjU5NzE5NWFiOGE1ZmJjZmNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC91bWl9mqiLy3vRqPsyXUtsW4tcJsBZ5opr+WJ+yW7iJak 4SxmOnlEN16QPvicDh+AAb1Cmo67kXfss4n5b69EwHzZdKu6t4YbMhET9Gj/UqqE RBlg5XT0DrLGphlbL67iRHAUtctvdDvMXtz68oOWs/sccjUVTI/R951STYgq4I2I YKLaV+CJjLiiFdapkUWQm+bEeUWMn7RmTWayOYp7P7x7E5GkEifTMJy1DPcRf8e6 VEt9RcrnS2qWyU+AUitpXdDMW5h9sRCE5nHHYdkll4u5ArkbgwboYo1j3IGmWg6u fe8wXh0zuLNOiLjwb1mKGsczMhX/yKhejyAKTVGzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/qnas5XN6kiyKH8BIb/8L2nqDUYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5YTRhMmMyLTNiMDQtNDA0NS04MmE3LWI4ZTdjMTI4YTAzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESpjANBgkqhkiG9w0BAQsFAAOCAQEATrZQ0vzdGgBhm0pKVpcO2neV+Q4+ 7E2DxR704VisXWBROvDRqeoubRmG4spTWTysxYK8FARYSKXIwwx8lRpr6ES7cBWh fSlzBNYRVRGfaF6KXQWgkUe/cL4oo2mK0pWnyUIPLATgPBKJuHL/Xomzgp3d5NUb e/Bw/joky/RRKMNXatHUcROmVFapZIGrL4QXX41QvIPxlwwAQ44PEmulmkbIdMDg miytvhrcR40kioO5i4/Uhv83tIJJINSr7QJtuTSURQokP8TWrnRH5BUu1T+RusHH 1fFLJ10VO9M2RJjGc1yZ1Yl2wFf6+0326nj7pcda+fKVdc2VVMttyvP1YQ== -----END CERTIFICATE-----Generated at Fri May 9 15:44:47 2025 by rpki-client