$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa File: 19dbb176-711e-430f-a492-7e57ed06c8f2.roa (raw, json) Hash identifier: r6QOkXmFnt5v81dHLNtMcLAqurqtBwg6progHPvqw28= Subject key identifier: B4:A9:F3:60:C5:C6:D1:A8:D9:31:FE:48:92:26:B9:98:6D:C6:47:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45F112E92CF9ACE4C1605EF5CD916DCD31396C96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa Signing time: Wed 23 Apr 2025 00:21:50 +0000 ROA not before: Wed 23 Apr 2025 00:21:50 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f1:12:e9:2c:f9:ac:e4:c1:60:5e:f5:cd:91:6d:cd:31:39:6c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:21:50 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=0cf604bf3a0757f4dbe89b5d7bd1a746f24ad559dd9be4dc04901526f622ac3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:02:d6:5d:92:88:14:dc:15:06:90:98:63: 88:cc:95:43:36:04:4f:da:cc:fb:4b:0c:2a:03:38: ed:99:d2:61:5f:53:74:b4:71:7d:0d:99:f4:35:82: 8b:36:f7:90:80:2b:eb:10:e6:c4:9c:ef:fe:a6:dc: 44:57:a3:c3:39:b4:de:bc:48:21:58:df:a3:3b:5c: 19:28:88:37:3e:03:14:ed:ec:84:f3:15:9f:80:46: b6:ee:a9:16:36:d3:da:65:6f:3a:30:ad:3e:94:4c: 4b:31:00:fc:cf:83:ba:43:e4:74:9e:46:f6:58:b2: 20:41:a8:51:9a:ef:19:bb:18:a7:25:5a:b3:5e:f4: 91:97:bb:7d:98:73:0c:34:20:63:3f:2b:7c:1c:ea: c8:cd:74:3c:c7:d6:d8:67:47:fc:ee:ce:88:43:dc: f7:b4:00:7a:f6:f8:80:dc:84:a1:30:c0:1d:e5:0a: c0:0a:88:11:1c:fa:a1:a0:6a:e5:fe:6d:9e:c3:69: bd:1e:9c:1a:d8:93:0d:14:a0:bc:e1:bf:86:39:a9: 35:2a:b3:37:b2:10:25:f3:10:c7:43:d7:1f:37:50: 93:d2:d1:0e:c3:03:13:b5:65:27:b7:b0:50:2b:4b: 49:5a:db:ae:94:06:ee:07:61:80:df:51:ca:77:79: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A9:F3:60:C5:C6:D1:A8:D9:31:FE:48:92:26:B9:98:6D:C6:47:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/18 Signature Algorithm: sha256WithRSAEncryption 13:e5:c7:d5:f2:69:57:6d:49:3f:ec:6a:c0:1c:70:f4:d5:31: 1f:3b:0c:60:22:44:f2:8e:60:97:9a:63:01:99:19:b5:af:32: 71:ac:dd:ff:3b:09:c1:56:79:59:c7:f1:c5:0e:d6:a5:86:9f: 3e:d8:f0:0e:4d:2c:55:c2:6e:43:d8:92:e6:b1:6a:53:f0:e0: 49:b8:b9:b3:16:9a:66:59:a5:47:3f:9c:30:7b:54:7f:17:56: 0d:d2:b5:b2:88:58:5d:4b:45:bd:4d:05:1e:f9:f3:e6:48:d7: 07:6f:c1:6f:58:76:cb:d2:6c:3c:05:ae:99:ef:e2:50:cf:c5: 0a:2e:17:d9:82:25:b2:3d:d7:6a:a9:a0:f1:e4:e0:f8:d2:8e: 43:aa:f3:63:b6:50:ed:f1:de:6c:96:6f:01:a7:d9:84:f3:c7: 31:9f:e5:35:e1:1b:30:48:02:53:3c:16:9b:66:92:c9:af:27: d3:a8:7b:62:45:5e:16:f2:c2:bf:ba:f4:7b:d9:85:cb:6b:0a: 8d:87:b8:3b:b9:f3:e3:96:25:d0:91:30:48:6a:10:1a:bc:5f: b0:8a:76:31:b4:63:32:c2:a2:00:c4:fe:51:f5:b4:c2:12:07: f3:5c:ce:ae:cf:de:56:c0:64:01:77:c8:49:1c:53:93:b0:97: 80:01:a5:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURfES6Sz5rOTBYF71zZFtzTE5bJYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAyMTUwWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2Y2MDRiZjNhMDc1N2Y0ZGJlODliNWQ3YmQxYTc0NmYy NGFkNTU5ZGQ5YmU0ZGMwNDkwMTUyNmY2MjJhYzNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnswLWXZKIFNwVBpCYY4jMlUM2BE/azPtLDCoDOO2Z0mFf U3S0cX0NmfQ1gos295CAK+sQ5sSc7/6m3ERXo8M5tN68SCFY36M7XBkoiDc+AxTt 7ITzFZ+ARrbuqRY209plbzowrT6UTEsxAPzPg7pD5HSeRvZYsiBBqFGa7xm7GKcl WrNe9JGXu32Ycww0IGM/K3wc6sjNdDzH1thnR/zuzohD3Pe0AHr2+IDchKEwwB3l CsAKiBEc+qGgauX+bZ7Dab0enBrYkw0UoLzhv4Y5qTUqszeyECXzEMdD1x83UJPS 0Q7DAxO1ZSe3sFArS0la266UBu4HYYDfUcp3eaVHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtKnzYMXG0ajZMf5Ikia5mG3GR8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5ZGJiMTc2LTcxMWUtNDMwZi1hNDkyLTdlNTdlZDA2YzhmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFUAwDQYJKoZIhvcNAQELBQADggEBABPlx9XyaVdtST/sasAccPTVMR87 DGAiRPKOYJeaYwGZGbWvMnGs3f87CcFWeVnH8cUO1qWGnz7Y8A5NLFXCbkPYkuax alPw4Em4ubMWmmZZpUc/nDB7VH8XVg3StbKIWF1LRb1NBR758+ZI1wdvwW9YdsvS bDwFrpnv4lDPxQouF9mCJbI912qpoPHk4PjSjkOq82O2UO3x3myWbwGn2YTzxzGf 5TXhGzBIAlM8FptmksmvJ9Ooe2JFXhbywr+69HvZhctrCo2HuDu58+OWJdCRMEhq EBq8X7CKdjG0YzLCogDE/lH1tMISB/Nczq7P3lbAZAF3yEkcU5Owl4ABpeg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:15 2025 by rpki-client