$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7dcd435-b6c3-4381-bfd7-f51093cd7a37.roa File: a7dcd435-b6c3-4381-bfd7-f51093cd7a37.roa (raw, json) Hash identifier: id3jb0/hMQvomLyq9SSqEqHmFrD/G9hjb02WhKcYxLM= Subject key identifier: 93:48:02:A1:BA:56:BE:59:F3:CB:35:7E:01:9F:83:52:E6:80:7A:B0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DEB87C6C0272080D0A00FCE56C42591B4E89671 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7dcd435-b6c3-4381-bfd7-f51093cd7a37.roa Signing time: Fri 09 May 2025 00:41:00 +0000 ROA not before: Fri 09 May 2025 00:41:00 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 18.88.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:eb:87:c6:c0:27:20:80:d0:a0:0f:ce:56:c4:25:91:b4:e8:96:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:41:00 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=69f344b8d4ff18dc869c4db1551b556b6a75b8f70621af5a66f65377d69b4976, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:f6:6b:4d:c6:9b:f3:2e:46:6b:78:eb:6f: 03:83:14:f7:d6:83:99:98:ae:ed:41:94:d0:2b:49: 28:69:d4:25:97:7b:00:78:db:c8:c8:f9:5a:78:0d: 6f:86:a1:86:81:1d:c7:fb:07:50:32:03:0f:05:8e: 01:25:32:f4:56:8a:b9:cc:49:b1:8f:a6:88:86:cb: 74:77:56:48:17:89:48:38:44:27:d0:64:1b:db:14: 21:63:8b:a7:31:fa:f3:6a:72:0b:0c:79:e4:bd:c2: ea:a9:c2:d9:dc:e7:90:86:a2:91:b7:91:75:ab:80: 77:f6:24:cc:ee:ad:fc:f4:2e:ea:67:be:c2:66:99: e3:6f:f7:e6:c5:7c:21:39:b4:68:90:73:6b:9d:d8: 09:63:c2:70:44:7f:02:d9:44:f4:90:5d:ed:6c:cb: 2c:d8:71:d6:a6:b3:b7:49:01:3a:25:cc:a7:f4:84: e5:4c:50:cf:5a:c6:d1:06:de:41:37:72:cb:a6:46: 66:06:6c:01:c9:08:7d:34:0c:90:64:d1:fe:88:43: 51:cb:61:1e:e3:ee:a2:7d:4a:4a:86:7d:ba:0d:29: 02:52:47:ba:b7:42:7a:22:be:93:b4:47:f9:22:57: 1f:9c:9e:82:ee:ce:b1:4a:be:17:13:eb:cf:59:ad: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:02:A1:BA:56:BE:59:F3:CB:35:7E:01:9F:83:52:E6:80:7A:B0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7dcd435-b6c3-4381-bfd7-f51093cd7a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.32.0/19 Signature Algorithm: sha256WithRSAEncryption 49:34:10:4d:1d:3c:d1:32:dd:26:3d:63:b3:06:57:60:72:31: e9:a7:53:2f:b5:ef:c3:df:2f:1b:17:97:02:d2:d5:5a:99:71: c0:36:ca:2c:32:57:8c:f5:64:2b:91:aa:a0:72:68:d0:26:6e: 78:cc:79:c2:62:ea:cf:09:92:02:89:65:d2:26:33:0b:ec:01: 66:49:75:2c:a3:c4:09:1a:2e:81:e3:b8:8f:99:75:2a:7b:d4: d3:a1:7d:ad:e8:b1:0c:55:21:14:ee:4e:c9:30:4b:bf:be:47: 27:77:8a:4e:77:3a:48:c2:98:d6:11:71:75:04:81:64:e0:f2: 39:5b:a0:d4:a6:1f:b3:24:8f:73:93:9f:0a:20:29:55:3f:4e: 32:d0:0e:61:54:69:64:f5:05:da:64:c9:25:43:19:ac:5a:11: b6:e3:5d:97:d7:b3:87:66:ac:aa:ca:bf:be:fe:c7:1b:d5:1b: 43:f6:02:d8:88:21:5c:98:49:46:1e:3a:b6:c5:d9:24:13:be: aa:2f:25:02:9f:9e:a1:64:25:26:ee:46:81:1d:5a:b8:3c:3a: f3:4f:15:ed:28:1b:4d:11:d4:6f:88:9b:fe:40:a4:9e:65:a6: 9d:ed:89:6e:6d:5f:30:a3:86:c1:db:f1:96:8f:67:07:dc:3d: 07:de:ff:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfeuHxsAnIIDQoA/OVsQlkbTolnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MTAwWhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWYzNDRiOGQ0ZmYxOGRjODY5YzRkYjE1NTFiNTU2YjZh NzViOGY3MDYyMWFmNWE2NmY2NTM3N2Q2OWI0OTc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY6/ZrTcab8y5Ga3jrbwODFPfWg5mYru1BlNArSShp1CWX ewB428jI+Vp4DW+GoYaBHcf7B1AyAw8FjgElMvRWirnMSbGPpoiGy3R3VkgXiUg4 RCfQZBvbFCFji6cx+vNqcgsMeeS9wuqpwtnc55CGopG3kXWrgHf2JMzurfz0Lupn vsJmmeNv9+bFfCE5tGiQc2ud2AljwnBEfwLZRPSQXe1syyzYcdams7dJATolzKf0 hOVMUM9axtEG3kE3csumRmYGbAHJCH00DJBk0f6IQ1HLYR7j7qJ9SkqGfboNKQJS R7q3QnoivpO0R/kiVx+cnoLuzrFKvhcT689Zrf3xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk0gCobpWvlnzyzV+AZ+DUuaAerAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3ZGNkNDM1LWI2YzMtNDM4MS1iZmQ3LWY1MTA5M2NkN2EzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWCAwDQYJKoZIhvcNAQELBQADggEBAEk0EE0dPNEy3SY9Y7MGV2ByMemn Uy+178PfLxsXlwLS1VqZccA2yiwyV4z1ZCuRqqByaNAmbnjMecJi6s8JkgKJZdIm MwvsAWZJdSyjxAkaLoHjuI+ZdSp71NOhfa3osQxVIRTuTskwS7++Ryd3ik53OkjC mNYRcXUEgWTg8jlboNSmH7Mkj3OTnwogKVU/TjLQDmFUaWT1BdpkySVDGaxaEbbj XZfXs4dmrKrKv77+xxvVG0P2AtiIIVyYSUYeOrbF2SQTvqovJQKfnqFkJSbuRoEd Wrg8OvNPFe0oG00R1G+Im/5ApJ5lpp3tiW5tXzCjhsHb8ZaPZwfcPQfe/5A= -----END CERTIFICATE-----Generated at Fri May 9 15:46:57 2025 by rpki-client