$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56ca29b0-0fff-42c8-860e-844edf87814a.roa File: 56ca29b0-0fff-42c8-860e-844edf87814a.roa (raw, json) Hash identifier: DEdr8rEFjfCrQ5q20DvGEMJqxmcP8Yc+NaZIt8YH4xs= Subject key identifier: FB:6E:21:70:50:63:A6:B2:20:0D:77:FF:4C:98:9D:B8:88:9D:55:5F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22ECCB17A5698C09BBB8C746C8B7D231C68F3B41 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56ca29b0-0fff-42c8-860e-844edf87814a.roa Signing time: Fri 09 May 2025 00:50:55 +0000 ROA not before: Fri 09 May 2025 00:50:55 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.192.0.0/10 maxlen: 10 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ec:cb:17:a5:69:8c:09:bb:b8:c7:46:c8:b7:d2:31:c6:8f:3b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:50:55 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=40bdbcdda83ddc84225089bf64b0e4b5297f7891f286e8db75fb396b226a56e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:cf:07:38:f4:ab:c6:5b:4d:65:fd:68:72: f8:d8:76:d7:39:1f:d9:2c:d9:ed:d8:03:8a:18:52: ab:44:1c:d3:fa:b7:29:4a:f5:51:cc:45:0d:cd:fb: 75:38:2a:0d:25:12:a6:a7:48:25:8b:42:60:69:75: 87:00:6b:ae:44:50:ca:2e:f3:f1:59:36:57:95:12: f8:b6:db:02:90:32:6c:83:57:1c:48:da:6b:7c:e6: 83:e3:bc:af:4b:5a:5f:e9:c8:56:1e:03:b8:c1:6c: 67:3e:58:89:2c:de:71:b2:84:09:86:9d:c1:3b:fa: 34:25:17:66:0d:1f:55:d8:ac:fc:d4:36:15:1c:d8: 4f:51:2d:a2:89:52:60:19:dd:66:be:ee:f4:ba:63: 6a:bc:a2:f9:8e:30:49:86:48:f2:d8:a4:b0:d8:bc: 15:8f:59:7b:cf:75:29:c9:bd:e7:1d:0a:b0:1f:8a: 96:a0:fb:79:3a:be:33:41:08:cf:d1:08:47:3c:87: 78:2e:82:34:de:8d:3f:ef:14:04:99:0b:df:a1:20: f3:f3:d5:e2:28:f9:18:06:d9:dc:1a:90:0c:0a:82: c0:77:9e:d5:26:d0:b9:63:ca:66:2a:2b:c5:32:88: 9b:6b:cf:2a:07:8d:cf:17:76:e2:26:94:8b:b2:bb: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6E:21:70:50:63:A6:B2:20:0D:77:FF:4C:98:9D:B8:88:9D:55:5F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56ca29b0-0fff-42c8-860e-844edf87814a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.192.0.0/10 Signature Algorithm: sha256WithRSAEncryption 14:10:0a:a5:31:5f:28:5a:a9:1c:d1:23:dc:35:0d:09:ac:19: 18:e2:df:7e:c4:5d:72:1d:5b:b1:4b:fe:c4:cd:93:5b:31:76: e6:f1:f8:17:03:b3:90:b9:51:e6:40:2e:8b:9f:17:ea:88:d7: 63:65:98:f9:f7:a0:29:77:5c:8c:65:dd:a9:9b:47:6b:a8:c4: 8f:3d:73:28:b7:c8:09:b0:78:79:5f:74:36:b7:6f:20:64:0a: f2:e2:b8:29:e9:01:60:12:17:92:ec:54:80:5f:67:f9:d0:84: 3e:2b:e5:ed:3b:92:39:62:c2:da:86:c3:06:73:43:40:36:0d: 1e:ce:ae:3d:fe:18:4f:8e:4b:b9:9b:db:c1:53:a7:56:b5:4e: b4:e7:8a:96:ea:da:90:93:5a:49:84:df:f6:35:65:dc:e3:8e: 75:66:b3:0c:1a:28:f2:eb:71:c5:d7:5a:02:86:bd:e8:6e:03: ad:6b:b9:46:7f:df:11:3d:e3:53:08:2c:de:22:da:1f:7e:83: a1:ab:9d:bf:9f:d0:13:69:56:17:95:ac:ee:92:a2:68:3d:5e: e8:94:61:c2:6d:d8:19:77:86:57:ac:15:36:d8:33:55:63:b4: b5:2b:d5:2d:cd:cd:ac:89:48:04:d1:0c:36:e0:16:9f:55:ae: f0:58:1d:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIuzLF6VpjAm7uMdGyLfSMcaPO0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA1MDU1WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGJkYmNkZGE4M2RkYzg0MjI1MDg5YmY2NGIwZTRiNTI5 N2Y3ODkxZjI4NmU4ZGI3NWZiMzk2YjIyNmE1NmU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN5s8HOPSrxltNZf1ocvjYdtc5H9ks2e3YA4oYUqtEHNP6 tylK9VHMRQ3N+3U4Kg0lEqanSCWLQmBpdYcAa65EUMou8/FZNleVEvi22wKQMmyD VxxI2mt85oPjvK9LWl/pyFYeA7jBbGc+WIks3nGyhAmGncE7+jQlF2YNH1XYrPzU NhUc2E9RLaKJUmAZ3Wa+7vS6Y2q8ovmOMEmGSPLYpLDYvBWPWXvPdSnJvecdCrAf ipag+3k6vjNBCM/RCEc8h3gugjTejT/vFASZC9+hIPPz1eIo+RgG2dwakAwKgsB3 ntUm0LljymYqK8UyiJtrzyoHjc8XduImlIuyux3pAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+24hcFBjprIgDXf/TJiduIidVV8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2Y2EyOWIwLTBmZmYtNDJjOC04NjBlLTg0NGVkZjg3ODE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwYDwDANBgkqhkiG9w0BAQsFAAOCAQEAFBAKpTFfKFqpHNEj3DUNCawZGOLf fsRdch1bsUv+xM2TWzF25vH4FwOzkLlR5kAui58X6ojXY2WY+fegKXdcjGXdqZtH a6jEjz1zKLfICbB4eV90NrdvIGQK8uK4KekBYBIXkuxUgF9n+dCEPivl7TuSOWLC 2obDBnNDQDYNHs6uPf4YT45LuZvbwVOnVrVOtOeKlurakJNaSYTf9jVl3OOOdWaz DBoo8utxxddaAoa96G4DrWu5Rn/fET3jUwgs3iLaH36Doaudv5/QE2lWF5Ws7pKi aD1e6JRhwm3YGXeGV6wVNtgzVWO0tSvVLc3NrIlIBNEMNuAWn1Wu8FgdCg== -----END CERTIFICATE-----Generated at Fri May 9 16:02:36 2025 by rpki-client