$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e6ca26b-1115-4588-99fc-76e65105a567.roa File: 0e6ca26b-1115-4588-99fc-76e65105a567.roa (raw, json) Hash identifier: /TI4D3YhUJv1K/a4HprY+mHimnMA4GNlquDuSMS6J4o= Subject key identifier: 5F:AE:45:75:36:83:7C:9B:4A:9E:4E:A0:01:70:07:63:EB:33:28:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52C72EA3C5285C6A2C5CB53831B48ED75DF7874D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e6ca26b-1115-4588-99fc-76e65105a567.roa Signing time: Sat 12 Apr 2025 00:11:36 +0000 ROA not before: Sat 12 Apr 2025 00:11:36 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.210.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c7:2e:a3:c5:28:5c:6a:2c:5c:b5:38:31:b4:8e:d7:5d:f7:87:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:11:36 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=d24d93d8e59dfa695f96ae13dbf8992f078af9a61c6640d061f510f2519b5008, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:62:e2:2b:a2:13:2c:f6:69:33:27:6a:d2: b4:98:16:33:43:18:89:70:e3:df:ac:b8:d6:7f:70: a7:be:76:f5:e1:75:dd:3a:db:29:12:da:75:7b:b4: 2d:fc:a6:bf:a6:a1:96:bf:6b:90:2d:a5:11:03:40: d1:84:07:2b:e9:93:af:97:d5:59:75:a2:34:87:3a: f7:bc:47:3f:20:7f:b7:51:3a:2d:f1:b8:fa:93:5a: fc:c9:c0:97:12:6e:11:be:1d:e3:ca:f4:74:02:6e: 7b:0d:5f:fb:9f:28:ce:7d:fd:8b:e6:42:bc:51:a2: a1:79:82:26:b3:72:a6:8f:14:d4:87:50:d3:62:f0: 0e:b8:d3:e2:51:a9:e2:4f:98:6c:da:30:0d:c1:b2: f6:0c:05:57:71:b9:89:5c:d5:ce:a3:87:6f:2b:42: 55:97:69:c5:9e:2f:79:8b:2c:80:e1:fe:37:7d:c2: 2b:31:62:64:09:47:d3:3a:75:c5:e8:65:4f:49:0c: f2:c9:5d:bb:15:94:bf:a4:fe:8e:57:66:be:61:45: 37:a7:a2:0e:8f:e5:a4:b1:cc:0a:6d:b9:ee:d6:e8: 1a:ba:45:95:07:1a:71:17:99:f9:e9:f1:c2:58:98: ab:3c:db:de:0e:9e:69:a9:cc:a3:64:54:f8:06:3a: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AE:45:75:36:83:7C:9B:4A:9E:4E:A0:01:70:07:63:EB:33:28:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e6ca26b-1115-4588-99fc-76e65105a567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.210.201.0/24 Signature Algorithm: sha256WithRSAEncryption 64:d1:e0:79:bd:40:5c:a2:3d:ee:6e:9f:a9:d4:ab:58:90:cf: c5:f4:f3:b5:7c:05:65:61:95:a3:c4:fc:86:7c:c7:19:46:ae: cb:dd:8c:55:ba:c3:0e:71:a6:bc:6c:b1:ac:4c:97:6a:d8:31: d6:f2:d4:a3:a6:7c:43:6e:5c:13:4b:8d:06:b1:dd:27:76:6c: 48:5d:56:b1:52:75:45:57:49:0c:89:5b:dc:ae:80:c3:51:5c: 52:ee:a8:ec:2a:5a:68:1b:40:52:b0:25:2d:1b:06:5e:1d:bf: 96:55:ad:15:47:23:47:6e:3e:f8:4a:82:7c:a8:fb:12:69:0c: 3d:ed:a0:26:61:51:01:40:ca:93:47:94:f6:52:eb:44:57:5c: 2b:ee:26:1a:f2:a5:a9:a9:96:ec:4f:0d:71:ad:b4:4b:f6:df: 62:f0:0f:99:83:27:a5:64:7a:8d:6e:fa:e1:dd:ec:99:fd:cd: dd:1f:79:7e:30:7a:4f:7c:17:82:ed:a9:80:12:46:64:86:b2: d2:09:5a:15:81:61:8b:b4:f8:00:44:d6:c1:66:28:e7:37:71: bd:c2:8f:82:11:51:a6:41:08:2b:c5:23:4a:52:e2:8a:8e:ca: 29:c9:5d:51:d5:82:b8:85:4f:c8:0f:c3:b0:4d:af:35:51:2e: d7:7d:35:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUscuo8UoXGosXLU4MbSO1133h00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAxMTM2WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjRkOTNkOGU1OWRmYTY5NWY5NmFlMTNkYmY4OTkyZjA3 OGFmOWE2MWM2NjQwZDA2MWY1MTBmMjUxOWI1MDA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwT2LiK6ITLPZpMydq0rSYFjNDGIlw49+suNZ/cKe+dvXh dd062ykS2nV7tC38pr+moZa/a5AtpREDQNGEByvpk6+X1Vl1ojSHOve8Rz8gf7dR Oi3xuPqTWvzJwJcSbhG+HePK9HQCbnsNX/ufKM59/YvmQrxRoqF5giazcqaPFNSH UNNi8A640+JRqeJPmGzaMA3BsvYMBVdxuYlc1c6jh28rQlWXacWeL3mLLIDh/jd9 wisxYmQJR9M6dcXoZU9JDPLJXbsVlL+k/o5XZr5hRTenog6P5aSxzAptue7W6Bq6 RZUHGnEXmfnp8cJYmKs8294OnmmpzKNkVPgGOon7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX65FdTaDfJtKnk6gAXAHY+szKDIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlNmNhMjZiLTExMTUtNDU4OC05OWZjLTc2ZTY1MTA1YTU2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs0skwDQYJKoZIhvcNAQELBQADggEBAGTR4Hm9QFyiPe5un6nUq1iQz8X0 87V8BWVhlaPE/IZ8xxlGrsvdjFW6ww5xprxssaxMl2rYMdby1KOmfENuXBNLjQax 3Sd2bEhdVrFSdUVXSQyJW9yugMNRXFLuqOwqWmgbQFKwJS0bBl4dv5ZVrRVHI0du PvhKgnyo+xJpDD3toCZhUQFAypNHlPZS60RXXCvuJhrypampluxPDXGttEv232Lw D5mDJ6Vkeo1u+uHd7Jn9zd0feX4wek98F4LtqYASRmSGstIJWhWBYYu0+ABE1sFm KOc3cb3Cj4IRUaZBCCvFI0pS4oqOyinJXVHVgriFT8gPw7BNrzVRLtd9Nag= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:39 2025 by rpki-client