$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/572f362e-6914-46b6-ac5b-4d5ab372468e.roa File: 572f362e-6914-46b6-ac5b-4d5ab372468e.roa (raw, json) Hash identifier: Fo0cxAty3zGmPjUdBvNCHilibDrZm/3qhtqIXb4gM6E= Subject key identifier: 05:9B:DA:A9:2A:8D:C3:77:C1:5E:B1:04:BE:83:A0:A3:C1:36:46:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3130CF69D9BE01F3015CD77A3AF0D96F4C1C255E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/572f362e-6914-46b6-ac5b-4d5ab372468e.roa Signing time: Fri 09 May 2025 16:20:10 +0000 ROA not before: Fri 09 May 2025 16:20:10 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.210.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:cf:69:d9:be:01:f3:01:5c:d7:7a:3a:f0:d9:6f:4c:1c:25:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 16:20:10 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=3dd2df6d308d69cf82e0c2336e914d2df0100744129abedaaeb2d1eea3cc3003, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:af:e7:de:38:ac:03:51:09:0d:8e:49:94: 5a:7f:4c:d2:b6:8f:70:a3:dc:ec:f4:53:ce:50:a0: 1c:f0:f8:3b:d4:68:38:71:1e:a2:c6:31:fa:4c:c8: 0b:52:8c:f5:d4:81:8e:66:30:57:4f:45:aa:11:0a: 10:57:44:ac:32:9b:8d:9f:1b:3e:3e:da:d3:36:24: 0a:73:d2:6e:de:29:a1:3f:a4:9d:bd:a3:fe:7e:d7: 47:66:c1:e1:3a:7c:e0:2c:11:66:c1:29:c7:e3:98: 74:bf:8d:34:d5:29:32:ce:4d:96:10:31:17:a5:da: b0:2b:b3:84:8d:c8:9c:53:f9:7d:7d:51:14:76:82: a2:75:a7:ec:bc:f1:a1:34:7c:af:f7:91:ec:a1:e3: 20:81:96:fb:b5:d1:9e:f3:09:15:94:43:0f:b0:2f: 0f:65:a2:4d:e6:fb:f5:58:b2:85:e3:61:da:f9:68: 8e:28:37:48:62:c9:af:3f:c9:e9:aa:e2:9a:86:20: f1:79:93:8e:32:42:2e:04:13:36:2c:c4:af:25:88: cb:c2:40:9f:41:43:fd:24:5c:6f:91:7a:45:0b:1a: e6:e9:e4:7f:90:9a:0e:fb:0a:e5:a5:b3:ee:91:8c: d9:d6:8d:cf:d9:96:1e:b9:a6:dc:79:90:68:2f:61: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:DA:A9:2A:8D:C3:77:C1:5E:B1:04:BE:83:A0:A3:C1:36:46:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/572f362e-6914-46b6-ac5b-4d5ab372468e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.210.0.0/15 Signature Algorithm: sha256WithRSAEncryption b3:11:65:e0:d9:07:ee:ce:24:35:a5:32:6b:11:dd:86:14:c9: de:d4:bb:b7:70:97:4c:c3:ea:39:8f:a2:7c:99:57:87:b6:f3: 9c:a0:3b:45:bc:89:65:77:6a:79:cb:aa:f0:fc:b2:34:fe:d1: 6a:fc:70:4a:ab:39:0b:8c:ed:fe:3d:d7:da:35:f9:78:7a:d7: 22:14:96:bc:68:b5:f1:00:0d:7d:26:90:b7:3a:a2:0c:1a:a8: 2f:d3:15:77:83:d5:6b:55:69:73:a1:47:85:c2:45:34:4a:3f: 76:e7:5a:63:83:99:37:4f:0a:1b:ab:4d:b5:98:e6:71:d8:8c: ee:3d:c2:25:bd:30:84:11:50:3d:7a:db:2b:79:19:41:7f:c6: 22:93:ac:71:11:b7:25:06:2b:21:0d:d7:27:d0:e7:cc:b1:5b: 93:11:8a:da:35:36:9b:a3:bf:90:5c:b5:e1:f9:89:07:a0:ef: a0:97:a2:08:25:06:f2:81:9b:48:fb:5c:05:58:67:05:7b:3c: f4:a8:aa:b4:58:ab:be:6e:03:d2:36:42:49:71:52:fb:e9:b2: 76:33:6a:fd:6d:2c:33:9e:fd:aa:78:0b:78:7a:bb:34:3f:56: 69:29:93:06:8d:af:10:a0:b1:af:7a:c0:9c:d9:0a:9f:1b:34: 84:4c:bd:6c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMTDPadm+AfMBXNd6OvDZb0wcJV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MTYyMDEwWhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGQyZGY2ZDMwOGQ2OWNmODJlMGMyMzM2ZTkxNGQyZGYw MTAwNzQ0MTI5YWJlZGFhZWIyZDFlZWEzY2MzMDAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLH6/n3jisA1EJDY5JlFp/TNK2j3Cj3Oz0U85QoBzw+DvU aDhxHqLGMfpMyAtSjPXUgY5mMFdPRaoRChBXRKwym42fGz4+2tM2JApz0m7eKaE/ pJ29o/5+10dmweE6fOAsEWbBKcfjmHS/jTTVKTLOTZYQMRel2rArs4SNyJxT+X19 URR2gqJ1p+y88aE0fK/3keyh4yCBlvu10Z7zCRWUQw+wLw9lok3m+/VYsoXjYdr5 aI4oN0hiya8/yemq4pqGIPF5k44yQi4EEzYsxK8liMvCQJ9BQ/0kXG+RekULGubp 5H+Qmg77CuWls+6RjNnWjc/Zlh65ptx5kGgvYV+ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBZvaqSqNw3fBXrEEvoOgo8E2RicwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU3MmYzNjJlLTY5MTQtNDZiNi1hYzViLTRkNWFiMzcyNDY4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE20jANBgkqhkiG9w0BAQsFAAOCAQEAsxFl4NkH7s4kNaUyaxHdhhTJ3tS7 t3CXTMPqOY+ifJlXh7bznKA7RbyJZXdqecuq8PyyNP7RavxwSqs5C4zt/j3X2jX5 eHrXIhSWvGi18QANfSaQtzqiDBqoL9MVd4PVa1Vpc6FHhcJFNEo/dudaY4OZN08K G6tNtZjmcdiM7j3CJb0whBFQPXrbK3kZQX/GIpOscRG3JQYrIQ3XJ9DnzLFbkxGK 2jU2m6O/kFy14fmJB6DvoJeiCCUG8oGbSPtcBVhnBXs89KiqtFirvm4D0jZCSXFS ++mydjNq/W0sM579qngLeHq7ND9WaSmTBo2vEKCxr3rAnNkKnxs0hEy9bA== -----END CERTIFICATE-----Generated at Fri May 9 20:03:30 2025 by rpki-client