$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa File: ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa (raw, json) Hash identifier: tUH6PmpWdl4BbWaZY6qvOvMcC+Qtu1O4ZP/eXuSqtow= Subject key identifier: 46:3C:3E:5B:5E:CB:27:9A:67:F4:E1:64:C9:5B:C4:7C:FD:ED:38:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FE5C024D037F39F86C87EF63F002F5FD014D35A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa Signing time: Fri 09 May 2025 00:50:18 +0000 ROA not before: Fri 09 May 2025 00:50:18 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.253.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e5:c0:24:d0:37:f3:9f:86:c8:7e:f6:3f:00:2f:5f:d0:14:d3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:50:18 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=081110eca442fff73028ab17911d7f0da717d52577f8fb723761646e6830f3b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:87:23:93:03:41:5e:df:53:e1:83:c5:da: 3f:b9:7e:f8:22:93:7d:ce:c6:4d:27:0a:50:65:92: 99:b5:7c:71:6a:0e:47:a7:22:77:9b:b7:02:36:0b: 69:9f:32:25:b1:14:e2:d3:1d:a5:7b:ca:87:22:70: f3:0b:34:77:e5:85:71:40:81:f7:77:52:b2:6a:28: 63:34:0f:ca:75:f7:26:93:b1:24:4f:15:b2:44:d8: 81:d9:eb:d4:60:97:e0:d6:0d:1f:9f:75:a8:d1:86: 5d:e1:19:23:32:e6:bf:9e:c0:e5:82:81:9d:34:5e: 35:2b:9b:bc:88:1f:a9:b1:1b:37:d1:2b:bb:e2:39: a0:22:d6:56:18:73:52:db:d5:d7:a6:19:14:a1:2b: 3d:42:16:2b:a1:c2:ad:2a:34:d4:05:47:67:0b:2f: 68:b5:f6:26:90:9f:d4:e2:75:9c:59:89:4c:be:91: 68:9e:f4:99:c7:e4:c4:39:d7:4f:2b:29:a7:b3:de: 90:c0:7b:4c:a1:92:e5:c2:a4:51:33:f7:23:70:e9: 79:ea:6f:8e:9c:75:7f:bf:40:fd:81:00:d3:cb:16: fa:11:42:a6:ab:3d:c2:d9:b7:7b:a4:a6:df:2e:28: 96:a7:ac:5d:84:9c:df:6d:47:22:89:94:4c:e5:05: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3C:3E:5B:5E:CB:27:9A:67:F4:E1:64:C9:5B:C4:7C:FD:ED:38:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.253.212.0/22 Signature Algorithm: sha256WithRSAEncryption 17:50:60:99:ce:56:8b:96:9c:b4:0b:81:79:2b:f7:6a:f1:80: 9e:7d:a3:d9:0e:72:1d:46:de:94:9b:ec:65:f7:a0:fd:11:60: 93:c3:86:42:56:cc:d0:a0:82:f9:f5:f7:b5:f7:39:d3:23:64: 13:ba:0f:1b:af:a8:93:58:fb:db:da:95:86:ca:1d:58:5c:b7: af:31:f5:49:2d:e7:2d:38:33:2c:7e:cf:5a:80:49:c5:08:ee: 32:5c:0a:41:55:d2:77:bd:8c:b9:4f:b3:63:1d:de:1d:13:8f: d0:21:21:7d:33:ce:3d:eb:e1:37:f4:b1:66:47:5e:de:6d:2c: c4:15:37:a8:ec:20:31:0d:2f:ce:b9:55:d0:22:94:b7:a8:24: 2a:5d:2c:03:2c:80:10:ce:d7:1f:c8:3c:27:ad:e1:6f:04:0b: f1:8f:37:d4:5c:dc:b7:89:bd:74:57:db:4a:08:70:77:88:3f: e8:d2:42:35:1c:d0:6a:cc:04:73:e3:58:de:05:6a:5e:10:d2: dc:19:b9:81:bb:b6:e9:3b:85:3a:66:58:fe:a3:d1:11:4b:59: 10:1b:f0:33:c7:71:bb:cb:20:2e:0e:6b:1b:14:34:45:4d:bd: c7:8f:23:1e:e7:83:bb:67:35:56:3f:6f:da:54:df:de:b0:ca: 46:d3:d1:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT+XAJNA385+GyH72PwAvX9AU01owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA1MDE4WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODExMTBlY2E0NDJmZmY3MzAyOGFiMTc5MTFkN2YwZGE3 MTdkNTI1NzdmOGZiNzIzNzYxNjQ2ZTY4MzBmM2IxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/VocjkwNBXt9T4YPF2j+5fvgik33Oxk0nClBlkpm1fHFq DkenInebtwI2C2mfMiWxFOLTHaV7yocicPMLNHflhXFAgfd3UrJqKGM0D8p19yaT sSRPFbJE2IHZ69Rgl+DWDR+fdajRhl3hGSMy5r+ewOWCgZ00XjUrm7yIH6mxGzfR K7viOaAi1lYYc1Lb1demGRShKz1CFiuhwq0qNNQFR2cLL2i19iaQn9TidZxZiUy+ kWie9JnH5MQ5108rKaez3pDAe0yhkuXCpFEz9yNw6Xnqb46cdX+/QP2BANPLFvoR QqarPcLZt3ukpt8uKJanrF2EnN9tRyKJlEzlBfG5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURjw+W17LJ5pn9OFkyVvEfP3tOCEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmNGQxYTQ1LTUxYzEtNDlhNi04ZmYwLTM5ZTFiNmJlNDBhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAID/dQwDQYJKoZIhvcNAQELBQADggEBABdQYJnOVouWnLQLgXkr92rxgJ59 o9kOch1G3pSb7GX3oP0RYJPDhkJWzNCggvn197X3OdMjZBO6DxuvqJNY+9valYbK HVhct68x9Ukt5y04Myx+z1qAScUI7jJcCkFV0ne9jLlPs2Md3h0Tj9AhIX0zzj3r 4Tf0sWZHXt5tLMQVN6jsIDENL865VdAilLeoJCpdLAMsgBDO1x/IPCet4W8EC/GP N9Rc3LeJvXRX20oIcHeIP+jSQjUc0GrMBHPjWN4Fal4Q0twZuYG7tuk7hTpmWP6j 0RFLWRAb8DPHcbvLIC4OaxsUNEVNvcePIx7ng7tnNVY/b9pU396wykbT0cI= -----END CERTIFICATE-----Generated at Fri May 9 15:29:56 2025 by rpki-client