$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caf8452d-bc01-45b7-a1a6-dd04100ef8d6.roa File: caf8452d-bc01-45b7-a1a6-dd04100ef8d6.roa (raw, json) Hash identifier: mFBWELINiJ5AqKwh4zi4f7KrTNWQUlGbQ43tk3kf8Io= Subject key identifier: 2C:72:1B:5F:73:B4:20:45:E4:91:58:76:21:5B:D9:84:71:DB:98:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 046D60CA75B7109FD86DB62B897F974A5F8245 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caf8452d-bc01-45b7-a1a6-dd04100ef8d6.roa Signing time: Fri 09 May 2025 15:51:17 +0000 ROA not before: Fri 09 May 2025 15:51:17 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.160.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6d:60:ca:75:b7:10:9f:d8:6d:b6:2b:89:7f:97:4a:5f:82:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 15:51:17 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=84c42d04cfb65227591fa7ccd4675b4ed18f60372f0004c2b61747df9ecfe611, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:22:cc:b6:08:d9:83:51:02:e6:c8:17:49:66: 39:f3:36:a7:48:8b:b5:3d:0b:bd:ac:f4:1b:38:46: e5:dc:71:cb:fd:4b:e6:11:b7:90:78:d6:0d:71:75: aa:b3:12:2d:23:8c:c0:da:dc:2a:a3:ce:60:91:1f: 34:77:c8:c4:3e:b4:71:3d:48:0f:8a:95:d4:37:0c: 40:07:24:97:86:1d:61:07:34:f3:e3:83:61:f8:88: ae:cb:42:cb:d8:70:10:24:72:76:82:9a:28:61:e2: 92:c8:03:92:54:95:b4:1e:e4:1b:33:36:61:a3:90: 9d:82:43:24:49:f7:cf:07:27:ad:16:ae:dc:50:71: 26:19:81:7c:06:47:4e:fb:53:d1:56:de:a7:ea:e4: 25:b4:77:1d:9a:42:b9:2f:d2:f0:4e:90:63:3a:d7: a0:c0:0a:38:6c:cd:00:64:4c:b5:8e:70:12:a6:9a: 00:4a:92:d4:4a:05:9b:e4:d7:58:8c:ef:21:8f:e4: 3a:8d:bc:19:4b:92:ea:65:c9:21:7a:83:dd:3a:15: e8:d1:ca:4d:1d:82:33:ab:84:12:c6:d0:e3:54:e8: 0c:9a:30:81:3d:a6:5d:df:77:34:8f:0f:ea:29:95: 15:89:ac:b3:5d:34:6d:dc:7d:da:59:02:2e:d3:37: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:72:1B:5F:73:B4:20:45:E4:91:58:76:21:5B:D9:84:71:DB:98:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caf8452d-bc01-45b7-a1a6-dd04100ef8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.160.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2a:c9:cc:d2:c9:d5:4c:62:d4:4b:7e:ec:3b:9e:56:f5:4a:08: b3:c9:9d:85:d6:bf:bf:f2:99:cf:70:28:1a:a0:4b:76:99:bf: ec:9c:ad:7d:54:2e:14:13:d4:87:53:99:7e:72:f2:b7:70:f0: 51:16:fd:e6:c1:36:00:88:90:8c:47:8e:b6:75:00:b3:c3:32: 38:8a:52:5b:07:ba:4a:e4:54:d0:c3:63:ae:81:7f:c4:0f:e4: 50:a5:02:8f:eb:d4:ca:d8:9b:3c:32:b6:ba:e9:f9:f0:30:fd: 58:49:a0:dc:da:02:70:74:a3:42:c8:05:5d:b2:42:ce:bf:8a: 45:d1:4b:54:8f:53:f4:b9:8e:fa:0b:ad:d4:9e:21:dd:5b:a3: 5b:d1:4f:57:62:de:2a:f4:c9:77:03:b5:c2:b2:e0:22:d7:6e: 22:70:18:2d:93:e1:ad:a9:77:df:50:95:48:52:22:13:bc:38: a0:2a:f3:65:dc:65:2e:e4:fb:fc:85:77:f0:22:3f:c2:a5:51: 1b:50:8c:73:11:da:30:e7:c4:f9:18:6e:82:5b:34:f0:85:c4: 72:4b:b5:50:1d:81:dd:e7:2b:b9:1d:d4:91:55:aa:8e:d7:10: bf:f1:c1:e7:81:b0:04:d5:79:ff:e7:54:5a:19:ef:1e:3f:6b: 10:49:fc:58 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITBG1gynW3EJ/YbbYriX+XSl+CRTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA1MDkxNTUxMTdaFw0yNTA2MTMyMzU5NTla MHoxSTBHBgNVBAUTQDg0YzQyZDA0Y2ZiNjUyMjc1OTFmYTdjY2Q0Njc1YjRlZDE4 ZjYwMzcyZjAwMDRjMmI2MTc0N2RmOWVjZmU2MTExLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAPMizLYI2YNRAubIF0lmOfM2p0iLtT0Lvaz0GzhG5dxxy/1L 5hG3kHjWDXF1qrMSLSOMwNrcKqPOYJEfNHfIxD60cT1ID4qV1DcMQAckl4YdYQc0 8+ODYfiIrstCy9hwECRydoKaKGHiksgDklSVtB7kGzM2YaOQnYJDJEn3zwcnrRau 3FBxJhmBfAZHTvtT0Vbep+rkJbR3HZpCuS/S8E6QYzrXoMAKOGzNAGRMtY5wEqaa AEqS1EoFm+TXWIzvIY/kOo28GUuS6mXJIXqD3ToV6NHKTR2CM6uEEsbQ41ToDJow gT2mXd93NI8P6imVFYmss100bdx92lkCLtM3NeMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQschtfc7QgReSRWHYhW9mEcduY4zAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvY2FmODQ1MmQtYmMwMS00NWI3LWExYTYtZGQwNDEwMGVmOGQ2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBzaggDANBgkqhkiG9w0BAQsFAAOCAQEAKsnM0snVTGLUS37sO55W9UoIs8md hda/v/KZz3AoGqBLdpm/7JytfVQuFBPUh1OZfnLyt3DwURb95sE2AIiQjEeOtnUA s8MyOIpSWwe6SuRU0MNjroF/xA/kUKUCj+vUytibPDK2uun58DD9WEmg3NoCcHSj QsgFXbJCzr+KRdFLVI9T9LmO+gut1J4h3VujW9FPV2LeKvTJdwO1wrLgItduInAY LZPhral331CVSFIiE7w4oCrzZdxlLuT7/IV38CI/wqVRG1CMcxHaMOfE+Rhugls0 8IXEcku1UB2B3ecruR3UkVWqjtcQv/HB54GwBNV5/+dUWhnvHj9rEEn8WA== -----END CERTIFICATE-----Generated at Fri May 9 17:39:10 2025 by rpki-client