$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa File: 04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa (raw, json) Hash identifier: FQMfv7+GHHfzkJZK/D6hhbaTSpwjgOvuX0fw6aMf0lI= Subject key identifier: 70:F3:1C:36:2C:C0:3A:17:88:4D:16:AC:95:49:0A:B5:FB:E8:66:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B404F8EC0AD9E79947A4E2715AABB27E2021A16 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa Signing time: Tue 08 Apr 2025 00:20:22 +0000 ROA not before: Tue 08 Apr 2025 00:20:22 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.138.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:40:4f:8e:c0:ad:9e:79:94:7a:4e:27:15:aa:bb:27:e2:02:1a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:20:22 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=9190ac9cc620f117cae7b070d0a0904479044563cd234babb37b7773f20f364e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:0f:aa:76:9a:80:5d:52:c8:01:2a:d9:84: bb:4d:9b:37:3e:6b:94:2d:05:3a:01:8b:51:60:ae: b6:7e:8e:92:86:e0:12:14:f4:e9:82:2f:d1:40:59: 68:95:0a:08:41:6a:5d:d1:ea:60:d3:68:f1:4d:a4: ea:7a:14:f4:c5:80:23:8d:6a:fe:ac:c6:35:ed:ae: 76:fc:a5:b5:4b:7e:5c:f5:03:f4:72:db:90:2f:e4: 2c:66:25:dc:c4:47:e7:ce:92:26:c5:79:85:4b:1c: 01:11:e2:9b:ee:65:ea:4d:f4:79:98:70:73:8d:ba: ab:ab:2c:0c:fc:d3:91:da:8d:60:9e:1f:e0:7a:91: 33:03:e8:72:32:01:5a:e7:f5:23:14:26:f8:1e:77: 18:a7:1e:f5:6f:a6:b2:35:07:59:e5:2a:fe:f7:b0: 76:b5:7c:4d:5d:c6:d2:f7:b0:c1:47:c3:18:fd:79: fd:62:e8:35:cb:64:83:72:78:96:f3:e2:72:24:93: d8:1c:d3:0d:70:ef:a7:6e:ef:ab:fa:00:b3:ff:ec: 04:85:d9:00:ae:f1:f5:06:3a:55:e6:5e:d3:ea:1e: 89:98:4b:e4:bb:f0:d7:87:87:0d:a5:f9:75:25:80: fb:2b:d3:b0:e3:90:0c:28:b5:b4:e9:1e:85:85:e3: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:1C:36:2C:C0:3A:17:88:4D:16:AC:95:49:0A:B5:FB:E8:66:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04e57552-1dfb-41ee-9dd2-f14d4faacbb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.138.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2d:89:8e:14:5c:52:ab:6a:e9:fe:d2:39:d9:0b:fb:e8:b4:14: 3e:3d:af:8e:9d:ca:28:af:7c:ec:c4:0b:66:df:dd:35:6f:df: a9:8b:00:39:3d:06:43:4a:06:82:c3:7c:d3:30:f7:9e:4f:64: e7:43:e9:7e:ac:33:e6:88:df:58:84:74:d7:68:7e:64:38:86: 37:62:db:e2:48:fb:64:19:55:13:ee:44:e2:e1:00:f8:46:6a: 04:e3:e9:b4:3f:39:95:25:b7:11:38:29:2f:f6:98:ff:11:2c: 77:86:e6:99:09:c0:d1:77:8d:eb:42:d9:66:d1:6b:fe:0f:ab: f4:37:fa:ba:c6:09:48:07:5c:19:5c:8f:69:63:fc:fa:32:4d: 59:38:a5:f6:f5:f1:13:a2:27:41:07:1c:1d:7c:d7:c5:ea:d3: 0a:9c:37:8f:36:c4:de:bc:b2:93:95:49:ab:fc:14:df:f8:5f: 35:36:7b:7b:bf:af:06:f8:99:70:d9:43:9d:5b:23:00:02:a1: 8b:2b:0e:cb:39:da:c9:08:ac:ea:d7:d1:0b:e7:01:7c:7b:7a: 62:21:aa:e7:31:f8:5f:f8:d8:91:3e:d3:76:65:96:44:25:09: 18:1e:b1:f6:51:35:e9:f6:8f:45:82:21:0e:f5:6e:1d:6e:24: db:dc:e3:2a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUK0BPjsCtnnmUek4nFaq7J+ICGhYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAyMDIyWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTkwYWM5Y2M2MjBmMTE3Y2FlN2IwNzBkMGEwOTA0NDc5 MDQ0NTYzY2QyMzRiYWJiMzdiNzc3M2YyMGYzNjRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGJw+qdpqAXVLIASrZhLtNmzc+a5QtBToBi1FgrrZ+jpKG 4BIU9OmCL9FAWWiVCghBal3R6mDTaPFNpOp6FPTFgCONav6sxjXtrnb8pbVLflz1 A/Ry25Av5CxmJdzER+fOkibFeYVLHAER4pvuZepN9HmYcHONuqurLAz805HajWCe H+B6kTMD6HIyAVrn9SMUJvgedxinHvVvprI1B1nlKv73sHa1fE1dxtL3sMFHwxj9 ef1i6DXLZINyeJbz4nIkk9gc0w1w76du76v6ALP/7ASF2QCu8fUGOlXmXtPqHomY S+S78NeHhw2l+XUlgPsr07DjkAwotbTpHoWF41ldAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcPMcNizAOheITRaslUkKtfvoZhkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0ZTU3NTUyLTFkZmItNDFlZS05ZGQyLWYxNGQ0ZmFhY2JiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2ijANBgkqhkiG9w0BAQsFAAOCAQEALYmOFFxSq2rp/tI52Qv76LQUPj2v jp3KKK987MQLZt/dNW/fqYsAOT0GQ0oGgsN80zD3nk9k50Ppfqwz5ojfWIR012h+ ZDiGN2Lb4kj7ZBlVE+5E4uEA+EZqBOPptD85lSW3ETgpL/aY/xEsd4bmmQnA0XeN 60LZZtFr/g+r9Df6usYJSAdcGVyPaWP8+jJNWTil9vXxE6InQQccHXzXxerTCpw3 jzbE3ryyk5VJq/wU3/hfNTZ7e7+vBviZcNlDnVsjAAKhiysOyznayQis6tfRC+cB fHt6YiGq5zH4X/jYkT7TdmWWRCUJGB6x9lE16faPRYIhDvVuHW4k29zjKg== -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:40 2025 by rpki-client