$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b892c8-2081-4197-8610-abaae0f56b66.roa File: c5b892c8-2081-4197-8610-abaae0f56b66.roa (raw, json) Hash identifier: 9ykEV3VRwOGEI5Qj0q8rujZ+s3NXe/BswPfr+L8fK1k= Subject key identifier: 6A:64:15:06:FC:E6:57:C9:C4:90:B1:11:C8:D1:56:38:13:09:69:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 453D355E9B46813E4AD0ECE17F7989DA49CD888C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b892c8-2081-4197-8610-abaae0f56b66.roa Signing time: Sat 26 Apr 2025 00:31:51 +0000 ROA not before: Sat 26 Apr 2025 00:31:51 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.32.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3d:35:5e:9b:46:81:3e:4a:d0:ec:e1:7f:79:89:da:49:cd:88:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 26 00:31:51 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=f87d8323fad6920f9b48db4bc973b321f26b6597c255a5612d88c7c9f00c46c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:2c:39:59:59:d6:7e:85:d8:50:42:55:f1: eb:a3:1f:a6:a1:2f:f8:2e:84:d0:18:93:86:ab:53: 9e:72:61:97:59:67:69:ee:f0:12:8a:fb:6c:92:9f: 2c:3d:f0:b5:ee:91:b9:f7:b0:50:46:c6:a2:5f:74: ab:ff:8e:3b:a9:f6:b7:65:cb:3e:34:51:4e:28:0c: d1:e6:eb:17:ab:f8:69:3c:46:1f:7d:32:ec:81:40: dc:23:70:d1:6c:be:b8:0d:1d:55:00:54:fa:68:16: 44:d4:63:94:26:1a:09:c9:12:9d:e2:9e:09:2f:b2: 64:b3:e4:0f:9e:e3:84:23:c7:ea:a9:48:f5:7f:61: 8b:a0:09:3e:8c:02:3c:26:6b:9b:3f:b2:2c:d0:b4: e8:6c:c1:75:c6:b7:18:6c:ee:fc:72:6a:14:f1:f6: b4:f5:6c:e5:b4:3f:fc:40:b9:83:9f:a8:4a:b7:64: 89:23:bd:2e:ee:d3:62:e0:1d:0b:b4:58:02:fb:1e: e8:80:0e:99:a3:74:7d:f5:46:bb:b1:e1:f0:5b:6f: 67:30:a7:e9:f7:1e:40:8c:ba:4a:4a:44:d2:07:95: 09:79:67:28:55:ed:03:be:64:7c:ac:f2:31:28:cc: 08:78:6c:0e:69:f2:c1:2b:a9:40:ef:14:df:a5:d5: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:15:06:FC:E6:57:C9:C4:90:B1:11:C8:D1:56:38:13:09:69:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5b892c8-2081-4197-8610-abaae0f56b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.32.0.0/11 Signature Algorithm: sha256WithRSAEncryption 65:06:9c:0a:e6:c0:18:a1:9d:83:96:66:8b:85:28:d7:48:bc: 06:6b:96:af:6a:9f:2d:79:39:88:38:37:a6:fb:67:4a:5d:0a: f3:94:d2:21:ef:27:51:06:52:09:26:78:8b:0f:ef:0e:38:d8: 8e:f8:74:dd:b5:74:0a:8c:1e:7e:d7:de:c5:30:2d:b7:ee:61: 26:a2:12:16:3d:50:b3:7a:6a:7b:1d:55:5f:64:e0:0e:d6:7c: 26:a5:b6:f0:16:1f:cf:67:63:c5:d7:14:f3:cf:40:14:0b:31: 49:06:ea:bc:41:06:d9:37:c8:d2:f8:be:9f:df:08:e5:fd:f8: 32:d6:06:1d:2a:39:a3:40:bf:c1:04:0d:00:ac:1c:a3:5e:7a: bf:9f:2e:58:c6:96:9c:d7:41:98:6f:eb:af:f6:43:3d:e9:11: a3:76:33:47:9d:41:7b:83:e5:44:9f:38:20:9a:7c:21:f0:b3: 78:ed:a1:19:57:65:cf:4d:85:8d:89:0e:50:11:b6:c8:17:c6: 6d:e0:c7:2d:43:e1:d0:da:6e:b4:05:6d:61:fb:ff:47:8a:85: 5f:d8:72:a8:d1:2f:d4:ec:bb:ac:44:ee:b2:ac:e3:00:1a:85: 2b:01:1b:b3:17:5a:1d:6a:c6:51:99:2a:27:c8:2e:4f:f2:8f: c9:f7:a8:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURT01XptGgT5K0Ozhf3mJ2knNiIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI2MDAzMTUxWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODdkODMyM2ZhZDY5MjBmOWI0OGRiNGJjOTczYjMyMWYy NmI2NTk3YzI1NWE1NjEyZDg4YzdjOWYwMGM0NmMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbeiw5WVnWfoXYUEJV8eujH6ahL/guhNAYk4arU55yYZdZ Z2nu8BKK+2ySnyw98LXukbn3sFBGxqJfdKv/jjup9rdlyz40UU4oDNHm6xer+Gk8 Rh99MuyBQNwjcNFsvrgNHVUAVPpoFkTUY5QmGgnJEp3ingkvsmSz5A+e44Qjx+qp SPV/YYugCT6MAjwma5s/sizQtOhswXXGtxhs7vxyahTx9rT1bOW0P/xAuYOfqEq3 ZIkjvS7u02LgHQu0WAL7HuiADpmjdH31Rrux4fBbb2cwp+n3HkCMukpKRNIHlQl5 ZyhV7QO+ZHys8jEozAh4bA5p8sErqUDvFN+l1YuXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUamQVBvzmV8nEkLERyNFWOBMJaXkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1Yjg5MmM4LTIwODEtNDE5Ny04NjEwLWFiYWFlMGY1NmI2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwU0IDANBgkqhkiG9w0BAQsFAAOCAQEAZQacCubAGKGdg5Zmi4Uo10i8BmuW r2qfLXk5iDg3pvtnSl0K85TSIe8nUQZSCSZ4iw/vDjjYjvh03bV0CoweftfexTAt t+5hJqISFj1Qs3pqex1VX2TgDtZ8JqW28BYfz2djxdcU889AFAsxSQbqvEEG2TfI 0vi+n98I5f34MtYGHSo5o0C/wQQNAKwco156v58uWMaWnNdBmG/rr/ZDPekRo3Yz R51Be4PlRJ84IJp8IfCzeO2hGVdlz02FjYkOUBG2yBfGbeDHLUPh0NputAVtYfv/ R4qFX9hyqNEv1Oy7rETusqzjABqFKwEbsxdaHWrGUZkqJ8guT/KPyfeoeQ== -----END CERTIFICATE-----Generated at Fri May 9 16:15:23 2025 by rpki-client