$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02f64397-44ee-4051-91ed-e40644e90d92.roa File: 02f64397-44ee-4051-91ed-e40644e90d92.roa (raw, json) Hash identifier: pTV/uBZ3FI34+ct2ybnKwYW3Aa447RgMDTxyFKunzCo= Subject key identifier: 35:BA:57:0B:47:73:68:4C:7E:3E:12:60:A5:96:7C:05:78:16:E7:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22193E171E556B49D382FA72E4B0D7EF4FEB73B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02f64397-44ee-4051-91ed-e40644e90d92.roa Signing time: Wed 23 Apr 2025 00:40:54 +0000 ROA not before: Wed 23 Apr 2025 00:40:54 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.178.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:19:3e:17:1e:55:6b:49:d3:82:fa:72:e4:b0:d7:ef:4f:eb:73:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:40:54 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=526be5dd873e2e6d88779a366877f6d8fd208efb97e5c6f36fc1fb6d3c8d351a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:3e:f7:78:7c:01:fa:6a:bf:ce:26:00:a9: ec:fc:92:04:89:7f:93:57:3c:0a:78:74:e6:db:f3: b2:66:9d:0b:5b:65:82:eb:4f:01:78:89:e5:db:be: 3e:bd:c7:72:6f:04:18:8e:dc:79:19:b3:de:95:27: c3:78:6e:f1:cf:4a:82:b0:df:24:49:eb:84:5c:6b: cf:c1:85:9e:a9:b0:34:a2:0d:48:57:71:7d:4a:fd: 59:6d:ac:31:90:60:96:34:25:cd:e3:79:60:42:b6: e7:b2:75:b6:cb:3f:8b:4a:b5:10:d6:d9:68:f8:b0: db:9a:a7:c5:e0:a2:f0:19:1e:f4:da:c8:03:d2:2a: d7:73:c7:80:f0:c5:9b:51:e8:ff:a4:59:5d:8f:80: 2e:86:79:c3:07:5f:19:b7:9f:7e:16:d0:77:be:43: ff:c7:66:86:16:a1:a2:62:0c:ae:64:da:a7:d2:a7: 4e:23:ca:95:90:74:6f:f5:31:23:26:87:b9:44:32: a5:02:2c:ea:e6:96:37:73:a0:a3:c5:17:1f:23:f6: db:47:a2:9b:19:8f:a0:0f:0b:11:8b:f7:7c:4f:29: 3d:38:59:cb:28:00:83:2a:7b:56:ef:48:71:cb:82: ef:cd:db:4d:c8:f9:e8:e6:2f:30:b7:59:80:37:8b: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BA:57:0B:47:73:68:4C:7E:3E:12:60:A5:96:7C:05:78:16:E7:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02f64397-44ee-4051-91ed-e40644e90d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.178.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:b2:90:86:97:7f:8e:c2:5f:ee:7a:37:c2:9c:e5:38:9c:61: 53:b0:ce:5e:76:59:59:50:91:85:7f:ad:94:97:11:1f:3f:58: 9e:ed:86:dc:9a:18:d4:63:44:f2:e4:38:54:85:6a:22:79:d1: ca:f4:aa:64:d0:0e:a2:7b:f0:14:44:f9:f0:4a:d0:2b:fd:78: 0a:c1:89:73:9a:b8:d9:4e:30:d3:68:08:04:2b:fa:16:10:4b: 86:38:92:eb:1c:22:d0:a5:4d:0a:36:5b:34:8f:40:98:62:37: 12:f1:04:d1:b0:60:f6:99:2d:e4:a1:ae:c7:49:5d:97:b1:8f: 94:7c:87:97:be:18:fc:7a:e8:bd:b0:7b:6f:76:9a:95:47:d9: 2d:11:39:da:30:bf:1b:27:e0:36:cd:13:1b:e4:77:e8:a0:84: f7:09:0c:e9:bd:31:d6:a1:86:bd:8e:50:59:4b:f4:b6:a5:8c: db:cf:fc:a1:e4:99:00:ea:eb:f1:7c:bd:fb:e1:b4:1b:b6:95: 09:a3:23:7c:5d:5b:07:6b:25:53:a4:04:c7:11:f7:17:00:22: 2a:56:5a:a1:72:79:a5:52:ed:66:dc:db:de:9c:ae:d6:f5:62: f6:d6:56:08:df:c4:72:40:04:fb:ba:aa:08:2a:87:2b:95:2c: fa:87:19:fd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIhk+Fx5Va0nTgvpy5LDX70/rc7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MDU0WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjZiZTVkZDg3M2UyZTZkODg3NzlhMzY2ODc3ZjZkOGZk MjA4ZWZiOTdlNWM2ZjM2ZmMxZmI2ZDNjOGQzNTFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPiT73eHwB+mq/ziYAqez8kgSJf5NXPAp4dObb87JmnQtb ZYLrTwF4ieXbvj69x3JvBBiO3HkZs96VJ8N4bvHPSoKw3yRJ64Rca8/BhZ6psDSi DUhXcX1K/VltrDGQYJY0Jc3jeWBCtueydbbLP4tKtRDW2Wj4sNuap8XgovAZHvTa yAPSKtdzx4DwxZtR6P+kWV2PgC6GecMHXxm3n34W0He+Q//HZoYWoaJiDK5k2qfS p04jypWQdG/1MSMmh7lEMqUCLOrmljdzoKPFFx8j9ttHopsZj6APCxGL93xPKT04 WcsoAIMqe1bvSHHLgu/N203I+ejmLzC3WYA3iz8XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNbpXC0dzaEx+PhJgpZZ8BXgW53QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyZjY0Mzk3LTQ0ZWUtNDA1MS05MWVkLWU0MDY0NGU5MGQ5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwChsjANBgkqhkiG9w0BAQsFAAOCAQEABbKQhpd/jsJf7no3wpzlOJxhU7DO XnZZWVCRhX+tlJcRHz9Ynu2G3JoY1GNE8uQ4VIVqInnRyvSqZNAOonvwFET58ErQ K/14CsGJc5q42U4w02gIBCv6FhBLhjiS6xwi0KVNCjZbNI9AmGI3EvEE0bBg9pkt 5KGux0ldl7GPlHyHl74Y/HrovbB7b3aalUfZLRE52jC/GyfgNs0TG+R36KCE9wkM 6b0x1qGGvY5QWUv0tqWM28/8oeSZAOrr8Xy9++G0G7aVCaMjfF1bB2slU6QExxH3 FwAiKlZaoXJ5pVLtZtzb3pyu1vVi9tZWCN/EckAE+7qqCCqHK5Us+ocZ/Q== -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:32 2025 by rpki-client