$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cebaed08-bc8a-433f-bf06-916c72b51fbf.roa File: cebaed08-bc8a-433f-bf06-916c72b51fbf.roa (raw, json) Hash identifier: JoyiGm0YIXNg8t7smALfoXkE5SXCUU8uG1a3sdvNPLE= Subject key identifier: B5:FB:51:3E:8D:0C:A1:50:2A:61:71:C1:93:BC:7E:3D:E0:AD:FE:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 045FF9D8F08B8FA2117F38296A195AE66028100A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cebaed08-bc8a-433f-bf06-916c72b51fbf.roa Signing time: Wed 07 May 2025 00:50:54 +0000 ROA not before: Wed 07 May 2025 00:50:54 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.43.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5f:f9:d8:f0:8b:8f:a2:11:7f:38:29:6a:19:5a:e6:60:28:10:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 7 00:50:54 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=0ca6f9ef54fb58dcfcd01c45ba5a22b6f6a0103869916dd5c84d70ac224ac3eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:5a:25:4a:97:ee:f4:aa:d4:65:3e:04:79: a8:ae:81:c0:9a:44:b8:20:d5:1e:b9:c2:b8:98:17: 69:e5:8a:7a:b5:3e:ed:6e:65:cb:68:49:50:84:d2: 39:44:40:79:65:07:4f:70:fd:97:73:51:74:f6:25: c6:fc:1c:b2:c9:29:54:92:4f:83:44:81:5f:b9:9b: 2d:32:18:46:ed:67:e2:87:a4:4c:ca:4f:b9:cb:a6: 4a:fd:d3:53:dc:cf:fb:80:97:bb:65:4a:54:bd:a8: d2:3d:bd:b0:9b:a7:8c:4a:77:4f:d8:00:37:e0:28: 29:14:37:6d:82:36:00:1f:be:c5:3a:f6:31:12:1a: 24:26:3f:02:d7:dc:b2:bd:a7:58:f5:58:fa:a1:ee: 8c:c2:2c:bb:71:a7:ff:e2:2a:16:35:10:91:c8:e0: 36:9f:4f:ab:de:93:05:1b:49:be:45:d9:d3:d4:46: b5:b6:33:30:b2:9a:a4:44:8f:e7:7a:15:f6:52:3d: bb:05:aa:d7:43:46:24:e8:f5:b3:46:94:cf:e8:96: 0a:f8:f7:13:43:88:4d:04:79:db:9e:a6:44:a9:e1: d3:5a:8f:dd:c1:8a:f7:19:2e:e2:46:5b:8b:e6:25: a9:d9:1c:8a:f2:33:da:54:61:04:ab:0e:c9:22:ac: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FB:51:3E:8D:0C:A1:50:2A:61:71:C1:93:BC:7E:3D:E0:AD:FE:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cebaed08-bc8a-433f-bf06-916c72b51fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.43.48.0/23 Signature Algorithm: sha256WithRSAEncryption 05:8d:39:ec:6d:a9:43:d1:14:dc:b7:3c:98:40:74:68:39:c2: fa:71:15:8e:ef:32:0c:2c:a6:9e:96:24:68:71:71:b0:88:b5: c0:79:1b:32:a7:4d:08:c9:d5:74:6d:5b:32:58:d4:20:a5:06: da:75:b9:b2:0e:91:e2:04:ab:10:0d:6e:1c:c8:b8:c4:7b:a3: 34:81:42:42:bf:c2:80:11:0f:4c:99:89:06:81:9e:54:ab:dc: 1b:15:29:1b:d3:eb:2c:48:0e:cc:d5:d8:a9:f1:04:1b:b7:29: 9b:6e:31:9c:cf:4b:e2:f0:dd:d2:2a:48:9d:33:1b:25:a3:60: 4d:44:6d:7d:43:df:8a:f3:df:de:d9:5f:86:22:c8:28:70:83: a2:ca:56:dd:d0:0d:10:f6:f2:69:d4:cd:c7:49:37:1d:bb:0f: b9:ba:81:86:91:66:bf:41:b9:0d:27:e9:db:29:73:63:fd:a7: b8:48:59:cc:ec:5c:13:1f:29:ea:b3:0f:84:25:fa:cf:a6:09: 5b:63:60:90:48:ca:99:fa:34:f3:d6:7c:9b:66:33:4d:1e:5f: 07:2c:9f:96:2b:dd:2b:77:95:22:fc:50:2b:69:33:04:aa:69: 2e:0a:1f:88:b8:fa:e7:41:bf:b0:a7:9d:6a:6e:00:7c:76:6f: e4:ab:77:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBF/52PCLj6IRfzgpahla5mAoEAowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA3MDA1MDU0WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2E2ZjllZjU0ZmI1OGRjZmNkMDFjNDViYTVhMjJiNmY2 YTAxMDM4Njk5MTZkZDVjODRkNzBhYzIyNGFjM2ViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2yFolSpfu9KrUZT4EeaiugcCaRLgg1R65wriYF2nlinq1 Pu1uZctoSVCE0jlEQHllB09w/ZdzUXT2Jcb8HLLJKVSST4NEgV+5my0yGEbtZ+KH pEzKT7nLpkr901Pcz/uAl7tlSlS9qNI9vbCbp4xKd0/YADfgKCkUN22CNgAfvsU6 9jESGiQmPwLX3LK9p1j1WPqh7ozCLLtxp//iKhY1EJHI4DafT6vekwUbSb5F2dPU RrW2MzCymqREj+d6FfZSPbsFqtdDRiTo9bNGlM/olgr49xNDiE0EeduepkSp4dNa j93BivcZLuJGW4vmJanZHIryM9pUYQSrDskirJdzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtftRPo0MoVAqYXHBk7x+PeCt/icwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlYmFlZDA4LWJjOGEtNDMzZi1iZjA2LTkxNmM3MmI1MWZiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENKzAwDQYJKoZIhvcNAQELBQADggEBAAWNOextqUPRFNy3PJhAdGg5wvpx FY7vMgwspp6WJGhxcbCItcB5GzKnTQjJ1XRtWzJY1CClBtp1ubIOkeIEqxANbhzI uMR7ozSBQkK/woARD0yZiQaBnlSr3BsVKRvT6yxIDszV2KnxBBu3KZtuMZzPS+Lw 3dIqSJ0zGyWjYE1EbX1D34rz397ZX4YiyChwg6LKVt3QDRD28mnUzcdJNx27D7m6 gYaRZr9BuQ0n6dspc2P9p7hIWczsXBMfKeqzD4Ql+s+mCVtjYJBIypn6NPPWfJtm M00eXwcsn5Yr3St3lSL8UCtpMwSqaS4KH4i4+udBv7CnnWpuAHx2b+Srd2w= -----END CERTIFICATE-----Generated at Fri May 9 17:28:04 2025 by rpki-client