$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10963cb0-949a-4d70-92e8-7ffe7d080a89.roa File: 10963cb0-949a-4d70-92e8-7ffe7d080a89.roa (raw, json) Hash identifier: d3ggNVD4ra2qOzAgbO443uOT+qsEIwqvt/cP0XNjHQ4= Subject key identifier: D6:9B:42:7A:30:3F:58:B4:E5:73:22:CA:7D:B3:63:E9:83:77:3A:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 698603DABF728633AD23CC100C5DDA28A75D1E13 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10963cb0-949a-4d70-92e8-7ffe7d080a89.roa Signing time: Mon 14 Apr 2025 15:10:13 +0000 ROA not before: Mon 14 Apr 2025 15:10:13 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.15.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:86:03:da:bf:72:86:33:ad:23:cc:10:0c:5d:da:28:a7:5d:1e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:10:13 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=fff92059bf7aa501d348bf019849bc22f9869c51e7222ce4351dd60fc4a1f54a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:94:66:39:76:e3:90:dc:a6:1a:bd:4b:4c: ff:ca:fd:7a:06:00:e1:97:49:79:3a:5c:b6:f0:c0: 40:72:db:be:fe:0b:13:ad:5b:6e:b2:00:60:6b:78: 7e:1b:4d:50:27:23:ef:2a:c5:dd:24:46:04:9f:de: 30:e8:9a:4a:4e:f8:e9:64:d9:06:19:90:dd:a9:7c: 41:71:00:40:ca:84:e8:c3:79:4d:0b:3b:ba:93:65: 45:ec:aa:9e:23:7c:fd:78:20:04:95:45:7b:2a:5c: fe:e8:c7:ca:53:43:0c:e1:66:1e:2d:74:aa:d8:58: bb:43:d7:06:5b:93:72:db:d0:a5:6f:c7:fd:93:9e: cf:37:46:1a:e5:b8:0d:30:7b:23:5a:88:af:52:97: a2:a6:2a:3b:ec:92:dd:8c:82:f8:58:19:bb:3d:f5: 48:bb:4f:99:ca:de:cd:c8:dd:95:e0:37:d4:31:48: e2:14:d1:a6:1d:a9:dd:d5:02:8b:2a:ae:b8:49:60: dd:f9:a3:6a:d6:09:43:45:ee:34:ae:8d:d3:ef:67: 70:03:99:18:7c:c3:91:82:5e:63:5d:4b:bb:82:26: 61:1d:84:56:f4:82:e5:74:b1:5b:14:6e:55:88:a7: b3:14:8c:75:40:53:ea:27:0e:d9:b6:fe:25:ce:25: 33:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:42:7A:30:3F:58:B4:E5:73:22:CA:7D:B3:63:E9:83:77:3A:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10963cb0-949a-4d70-92e8-7ffe7d080a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4a:40:2b:75:73:c3:d4:85:08:03:5c:db:ba:6b:0c:a1:5f:68: 7d:61:d0:39:d6:5a:ea:e2:9e:7c:cb:d7:3a:63:6d:5c:09:44: 71:2b:61:83:c7:87:62:aa:48:cc:cf:a0:ca:95:56:f7:4c:6b: 3e:4d:2e:6d:29:a0:95:82:b3:ca:62:ee:d2:df:84:9b:85:d6: a1:67:59:e0:60:52:7c:49:a8:04:e8:6e:fa:fe:af:39:38:0e: 91:7b:13:71:65:60:27:70:fc:db:08:52:e5:c3:64:19:86:db: 68:f7:5b:0e:d8:da:4f:5b:a6:4d:09:b1:88:b6:67:31:3a:4a: f3:94:19:b9:8e:85:b3:9c:d6:ff:58:b9:8b:01:d3:f4:64:f5: 68:e9:ba:4f:2c:58:72:64:6e:b7:4b:13:29:30:29:97:25:c5: 91:fa:58:5d:2a:6d:90:0a:a2:38:4b:2b:06:51:16:31:86:88: cf:73:10:62:e6:b9:af:7e:7e:a5:f3:68:d9:f1:c9:03:6c:ed: 98:db:a6:87:ce:ae:02:c0:b7:f6:cb:76:b6:38:53:e1:98:3d: f3:c1:95:07:0b:e4:1b:bf:cf:42:4e:5e:7f:b6:86:08:bd:12: d9:2d:2d:13:ac:09:30:4f:8d:99:cd:65:5b:e3:4b:d4:6f:3d: 0f:95:f3:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYYD2r9yhjOtI8wQDF3aKKddHhMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUxMDEzWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmY5MjA1OWJmN2FhNTAxZDM0OGJmMDE5ODQ5YmMyMmY5 ODY5YzUxZTcyMjJjZTQzNTFkZDYwZmM0YTFmNTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr1ZRmOXbjkNymGr1LTP/K/XoGAOGXSXk6XLbwwEBy277+ CxOtW26yAGBreH4bTVAnI+8qxd0kRgSf3jDomkpO+Olk2QYZkN2pfEFxAEDKhOjD eU0LO7qTZUXsqp4jfP14IASVRXsqXP7ox8pTQwzhZh4tdKrYWLtD1wZbk3Lb0KVv x/2Tns83RhrluA0weyNaiK9Sl6KmKjvskt2MgvhYGbs99Ui7T5nK3s3I3ZXgN9Qx SOIU0aYdqd3VAosqrrhJYN35o2rWCUNF7jSujdPvZ3ADmRh8w5GCXmNdS7uCJmEd hFb0guV0sVsUblWIp7MUjHVAU+onDtm2/iXOJTMLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1ptCejA/WLTlcyLKfbNj6YN3OvwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwOTYzY2IwLTk0OWEtNGQ3MC05MmU4LTdmZmU3ZDA4MGE4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQD8AwDQYJKoZIhvcNAQELBQADggEBAEpAK3Vzw9SFCANc27prDKFfaH1h 0DnWWurinnzL1zpjbVwJRHErYYPHh2KqSMzPoMqVVvdMaz5NLm0poJWCs8pi7tLf hJuF1qFnWeBgUnxJqATobvr+rzk4DpF7E3FlYCdw/NsIUuXDZBmG22j3Ww7Y2k9b pk0JsYi2ZzE6SvOUGbmOhbOc1v9YuYsB0/Rk9Wjpuk8sWHJkbrdLEykwKZclxZH6 WF0qbZAKojhLKwZRFjGGiM9zEGLmua9+fqXzaNnxyQNs7ZjbpofOrgLAt/bLdrY4 U+GYPfPBlQcL5Bu/z0JOXn+2hgi9EtktLROsCTBPjZnNZVvjS9RvPQ+V8xA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:24 2025 by rpki-client