$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa File: 054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa (raw, json) Hash identifier: TFRdG83Rr6wndDLg7VHY2DIgmuxDSG0jnatUilKaOKM= Subject key identifier: D7:E4:78:43:02:86:98:83:33:C7:29:0B:0A:D3:29:B3:C5:12:5E:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C100E6F35F656F11E751F6C591505DB2076770D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa Signing time: Mon 21 Apr 2025 17:11:16 +0000 ROA not before: Mon 21 Apr 2025 17:11:16 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:10:0e:6f:35:f6:56:f1:1e:75:1f:6c:59:15:05:db:20:76:77:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:11:16 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=69f46d20e5b191a0aafd98c1de680ab5d6b8ce082fa370cebf5f0a53ad71724b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:ea:7e:17:10:b6:54:d1:58:ab:ad:de:a6: 8f:db:34:b0:1f:35:7d:bd:1b:38:7d:ee:0e:ed:58: 3d:1c:a3:ce:4f:3c:01:65:ba:66:45:c2:be:b4:32: 2c:9f:7e:0b:cc:1f:9d:e2:ad:2b:f4:62:a5:71:cd: a7:64:18:37:8b:2b:3e:f5:df:a1:b5:97:36:9b:24: 4e:48:ea:55:67:a0:2e:f5:76:bc:69:57:e7:fa:88: f6:2a:62:30:b8:68:8e:c2:f0:b1:04:b9:3c:d6:51: f4:c5:b1:9e:ca:c5:31:31:56:92:c4:f5:2e:ac:62: 11:cd:c1:30:69:c5:ea:be:5f:92:60:e8:e8:0f:26: 90:c7:57:fa:e4:e9:22:e6:59:a2:fa:2d:1e:e1:df: 51:b4:c5:17:33:ee:51:02:1b:fe:76:da:2c:04:5f: 33:fb:b9:ea:d3:27:91:16:d5:a6:e0:ed:b0:85:4f: c8:c3:09:b7:86:20:36:b7:a8:16:7c:0c:0f:b5:5c: 7b:48:eb:15:98:f1:a8:cf:87:30:63:a1:72:09:d3: f9:1f:96:e6:34:e1:38:97:1a:68:98:fe:22:21:0d: 51:05:03:ce:d2:32:80:57:14:c7:dd:52:f7:48:12: 36:85:20:18:6d:04:e2:4c:e9:b0:a6:f2:ab:ad:1f: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E4:78:43:02:86:98:83:33:C7:29:0B:0A:D3:29:B3:C5:12:5E:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:7f:b5:99:4b:cf:0c:fb:fd:2c:b5:7a:28:03:7b:db:03:60: 7e:c5:5a:86:40:db:d3:4b:a5:56:2f:f5:b0:23:9b:c1:48:00: da:74:33:cd:00:21:d7:2f:03:2a:79:52:dc:e0:ec:e8:a2:1e: 84:c6:a2:7c:27:d8:63:8b:49:6e:dd:d4:8f:21:69:3d:13:a2: 38:93:c0:b8:ea:28:63:98:b0:a3:66:be:40:5f:68:fb:62:9b: d4:99:a5:fa:ef:de:f2:ce:da:d7:d3:05:d6:bd:b8:83:46:87: 84:0b:8c:bf:56:2d:4f:0f:d2:ad:f6:8e:d8:f2:4b:b0:d3:66: 4b:f6:35:4b:cd:58:0c:c0:8e:03:01:b3:af:72:88:af:32:54: b2:85:8b:4e:61:b7:00:ed:4b:f4:85:66:fa:c0:34:f9:42:cd: c3:6c:79:d8:86:52:7f:25:35:13:79:b3:c2:f8:69:4d:17:06: 21:b3:dc:40:c9:7b:ec:90:9f:22:ed:3b:bf:0e:12:1e:ef:71: 7c:1c:b0:28:16:cd:c6:f8:df:63:d0:95:87:34:9c:90:4a:96: a4:49:9c:64:f1:3d:ca:9d:03:69:ef:0b:c7:c3:ca:cd:6f:9d: 09:cf:b4:c1:06:44:bb:61:86:59:54:67:41:93:17:31:c7:e8: 33:2f:7d:3a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHBAObzX2VvEedR9sWRUF2yB2dw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcxMTE2WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWY0NmQyMGU1YjE5MWEwYWFmZDk4YzFkZTY4MGFiNWQ2 YjhjZTA4MmZhMzcwY2ViZjVmMGE1M2FkNzE3MjRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCovep+FxC2VNFYq63epo/bNLAfNX29Gzh97g7tWD0co85P PAFlumZFwr60MiyffgvMH53irSv0YqVxzadkGDeLKz7136G1lzabJE5I6lVnoC71 drxpV+f6iPYqYjC4aI7C8LEEuTzWUfTFsZ7KxTExVpLE9S6sYhHNwTBpxeq+X5Jg 6OgPJpDHV/rk6SLmWaL6LR7h31G0xRcz7lECG/522iwEXzP7uerTJ5EW1abg7bCF T8jDCbeGIDa3qBZ8DA+1XHtI6xWY8ajPhzBjoXIJ0/kfluY04TiXGmiY/iIhDVEF A87SMoBXFMfdUvdIEjaFIBhtBOJM6bCm8qutH3gtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1+R4QwKGmIMzxykLCtMps8USXvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NDk0OGNkLTQwZWQtNDgwNy1iMmZjLThhOGMzOGY4ZGRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQEDANBgkqhkiG9w0BAQsFAAOCAQEAXn+1mUvPDPv9LLV6KAN72wNgfsVa hkDb00ulVi/1sCObwUgA2nQzzQAh1y8DKnlS3ODs6KIehMaifCfYY4tJbt3UjyFp PROiOJPAuOooY5iwo2a+QF9o+2Kb1Jml+u/e8s7a19MF1r24g0aHhAuMv1YtTw/S rfaO2PJLsNNmS/Y1S81YDMCOAwGzr3KIrzJUsoWLTmG3AO1L9IVm+sA0+ULNw2x5 2IZSfyU1E3mzwvhpTRcGIbPcQMl77JCfIu07vw4SHu9xfBywKBbNxvjfY9CVhzSc kEqWpEmcZPE9yp0Dae8Lx8PKzW+dCc+0wQZEu2GGWVRnQZMXMcfoMy99Og== -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:44 2025 by rpki-client