$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa File: 05767c0c-a51a-4724-8188-24d099c58bd8.roa (raw, json) Hash identifier: u/IirTJlyZL+SkzsLWE9RweYeQL9fSFflayOSL02j4g= Subject key identifier: 61:1F:78:22:16:27:6F:1D:33:03:5F:B4:54:E9:9B:06:1D:95:34:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B9FC7DB263D3C18F6EB10D5DAB536626DAF8338 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa Signing time: Mon 07 Apr 2025 15:10:52 +0000 ROA not before: Mon 07 Apr 2025 15:10:52 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9f:c7:db:26:3d:3c:18:f6:eb:10:d5:da:b5:36:62:6d:af:83:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:10:52 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=63f6b00893026f71fc142633d9a0ca3324b034e638c750f98f67f14bcb89f033, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:ca:7a:e4:89:aa:40:24:a0:c1:04:69:8e: b5:ee:f1:33:0e:d9:9a:e4:aa:f7:f0:24:cc:f3:7f: 11:d3:b7:e2:c8:6f:96:82:94:f1:27:4f:cf:10:f9: b1:86:2d:16:e2:78:57:ed:44:ab:b4:37:9b:dd:33: 29:ca:30:b8:be:e7:89:2c:b5:c6:9c:88:a5:e0:93: d5:16:f7:d7:b2:a0:b7:51:39:bb:fc:2d:fa:6b:97: c0:b2:a2:87:db:eb:17:60:c9:af:b0:e8:d7:81:cf: d0:55:d8:0e:23:f9:a0:16:c0:05:fd:74:c2:71:94: 15:6e:bf:6f:4d:36:34:64:cb:e1:93:b3:f4:e9:a7: 5a:fa:b0:a1:80:47:88:c1:04:93:38:91:64:4a:2f: b5:8e:fb:d2:f3:81:1a:07:4b:7e:9b:db:74:68:9b: 72:ff:c1:80:5e:98:3f:91:22:4a:8b:ff:d5:1a:19: 37:da:4b:5f:66:d3:c2:80:e1:d1:35:6a:dc:6e:a4: 12:00:f5:33:17:b9:db:ce:29:f3:de:7c:fc:8f:8a: 25:56:aa:a9:c8:6f:2b:8a:5d:ee:fb:d1:66:1e:cf: c0:17:23:b8:88:ad:24:cd:71:97:88:0e:01:a7:fc: 8a:dc:6c:f7:bb:f9:8c:4c:08:c3:6b:3b:e4:58:68: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:78:22:16:27:6F:1D:33:03:5F:B4:54:E9:9B:06:1D:95:34:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05767c0c-a51a-4724-8188-24d099c58bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.190.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:ef:58:f7:4d:1b:31:8b:d6:65:b2:46:50:a1:a2:b1:89:6d: 21:c8:db:2f:e5:82:52:89:1a:54:c2:e6:70:d6:dd:11:b7:ee: 08:66:c9:f1:b6:0b:4b:75:dc:c2:e0:b2:31:70:0a:27:e5:2b: 44:4a:3b:d3:ad:ee:46:4e:00:38:d1:c5:3a:66:5d:72:3a:fd: 1a:9f:58:db:72:b4:76:33:a0:b2:5e:74:e5:9e:42:15:7d:f4: b9:81:85:9a:a3:d0:49:ce:cd:4c:ba:93:96:be:07:de:6a:ee: af:4c:e5:89:42:02:da:75:e1:6c:ce:26:fe:04:3f:fa:c0:85: 24:f5:dc:b9:1c:76:34:1a:6a:ee:af:8a:48:c8:69:86:df:25: 02:01:44:20:c1:07:12:ec:3b:d8:34:bc:42:2e:e9:5c:8e:48: b2:3f:bf:8f:2f:7f:9a:5f:df:2a:53:1a:56:4f:a8:31:83:05: d4:73:09:63:87:f7:79:9d:ba:0e:0d:90:86:90:e0:bb:f4:12: 36:3d:30:59:75:07:1c:37:fc:14:41:c0:1c:e1:bc:94:c5:a7: 25:ef:fd:51:37:90:46:4a:63:64:49:69:8b:ee:7a:e8:2e:98: c6:70:78:f4:c8:f2:63:d1:ca:2b:b6:da:b2:4c:15:dc:6d:17: 08:5c:83:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS5/H2yY9PBj26xDV2rU2Ym2vgzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMDUyWhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2Y2YjAwODkzMDI2ZjcxZmMxNDI2MzNkOWEwY2EzMzI0 YjAzNGU2MzhjNzUwZjk4ZjY3ZjE0YmNiODlmMDMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpbcp65ImqQCSgwQRpjrXu8TMO2ZrkqvfwJMzzfxHTt+LI b5aClPEnT88Q+bGGLRbieFftRKu0N5vdMynKMLi+54kstcaciKXgk9UW99eyoLdR Obv8Lfprl8Cyoofb6xdgya+w6NeBz9BV2A4j+aAWwAX9dMJxlBVuv29NNjRky+GT s/Tpp1r6sKGAR4jBBJM4kWRKL7WO+9LzgRoHS36b23Rom3L/wYBemD+RIkqL/9Ua GTfaS19m08KA4dE1atxupBIA9TMXudvOKfPefPyPiiVWqqnIbyuKXe770WYez8AX I7iIrSTNcZeIDgGn/IrcbPe7+YxMCMNrO+RYaOTtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYR94IhYnbx0zA1+0VOmbBh2VNGswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NzY3YzBjLWE1MWEtNDcyNC04MTg4LTI0ZDA5OWM1OGJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQvjANBgkqhkiG9w0BAQsFAAOCAQEABO9Y900bMYvWZbJGUKGisYltIcjb L+WCUokaVMLmcNbdEbfuCGbJ8bYLS3XcwuCyMXAKJ+UrREo7063uRk4AONHFOmZd cjr9Gp9Y23K0djOgsl505Z5CFX30uYGFmqPQSc7NTLqTlr4H3mrur0zliUIC2nXh bM4m/gQ/+sCFJPXcuRx2NBpq7q+KSMhpht8lAgFEIMEHEuw72DS8Qi7pXI5Isj+/ jy9/ml/fKlMaVk+oMYMF1HMJY4f3eZ26Dg2QhpDgu/QSNj0wWXUHHDf8FEHAHOG8 lMWnJe/9UTeQRkpjZElpi+566C6YxnB49MjyY9HKK7baskwV3G0XCFyDcw== -----END CERTIFICATE-----Generated at Sat Apr 26 21:58:16 2025 by rpki-client