$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210af08c-2d71-431e-812f-721b1a0d5ceb.roa File: 210af08c-2d71-431e-812f-721b1a0d5ceb.roa (raw, json) Hash identifier: uqSbbLa/LNspqEmd37iLPo2ph3y3dU4Ssaz4MW3p7+Q= Subject key identifier: 54:04:9C:29:81:F0:55:C4:1A:A7:BE:A1:75:B9:C1:04:38:C0:92:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 478085A43CBC5B8A80F2652D9E0DC665FB2AA06F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210af08c-2d71-431e-812f-721b1a0d5ceb.roa Signing time: Fri 25 Apr 2025 00:52:06 +0000 ROA not before: Fri 25 Apr 2025 00:52:06 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:80:85:a4:3c:bc:5b:8a:80:f2:65:2d:9e:0d:c6:65:fb:2a:a0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:52:06 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=4875ace31c178271992c4be74bab1cfee10a4c6fdd280aa294ff2d296ce79dec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:c4:bf:80:8a:12:e9:3b:1b:b6:e8:ad:26: 19:24:3b:8b:91:4c:b5:e7:f7:e4:7e:c6:34:7c:80: 1c:72:63:fc:0c:20:20:f8:2c:68:8b:0d:38:ea:a2: ab:5f:a8:ca:1e:25:b9:68:ab:37:99:9e:30:cb:1a: 5d:b2:b2:5c:d2:84:ef:8f:16:76:50:95:28:eb:44: cc:68:4a:ee:77:40:9e:75:95:36:4d:a6:b3:6d:19: 32:ac:ab:1a:da:b3:96:2b:4a:4e:a1:1d:6d:d2:45: ad:e8:9a:93:46:b8:f1:cf:c8:8a:82:42:11:80:f2: 2c:a9:73:aa:74:44:45:ea:f2:bb:e3:78:2a:16:53: 38:72:c4:9f:d9:a2:73:00:00:d8:ae:a4:83:80:2f: 93:f1:6d:01:0c:3a:b9:ca:e3:11:87:e3:32:7d:dc: 1d:34:42:a9:3e:65:1b:22:69:40:b7:0f:22:98:0f: b2:f2:8b:7d:10:67:f8:ac:da:c1:8b:77:9c:4f:ef: b2:74:87:1b:59:e7:91:ef:8a:23:03:3a:db:b0:25: 7a:aa:2a:42:b9:32:9e:1c:24:27:4c:a9:11:9c:dc: 99:aa:50:e9:c6:35:6a:da:e3:25:78:1f:af:f8:54: 63:a4:fe:ac:03:ab:1d:e2:f3:c5:77:09:1c:3d:d1: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:04:9C:29:81:F0:55:C4:1A:A7:BE:A1:75:B9:C1:04:38:C0:92:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210af08c-2d71-431e-812f-721b1a0d5ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:e2:fb:98:7c:ce:40:98:1e:7f:e1:86:ef:8f:da:9e:ae:79: ce:e3:1a:e3:9c:dd:3b:86:fc:c8:0e:40:11:bd:fe:c7:ac:15: 02:21:8d:26:4c:d3:08:34:6d:2b:7c:08:01:e4:11:6c:ed:bb: d1:ab:bd:62:0f:2e:d0:b7:4c:ee:0b:6f:66:8e:35:9b:7f:9a: 51:c5:df:13:e4:b1:ef:3f:76:b4:cb:f6:93:41:83:2e:4f:2c: 2b:24:cb:c7:d2:26:0a:ae:1e:32:ab:b5:a2:44:c0:d6:07:66: 0b:92:07:a6:cd:84:c1:f0:79:0e:64:7a:e3:86:6e:6e:8b:8a: 65:75:3a:67:73:a1:46:3c:c6:7a:30:28:be:cc:d7:04:5f:13: d4:09:f7:d2:fb:42:7b:71:5a:2d:bc:b5:fb:32:d7:bb:0d:b2: ed:f1:ce:3f:66:fc:b9:f1:73:6d:fe:79:5e:d8:b0:c4:b2:f4: 9a:e7:a0:43:ba:c9:e9:d2:41:bf:df:7f:5d:a8:f6:93:c9:04: 7f:d6:62:a0:93:07:cf:59:78:da:3e:7d:1a:36:03:64:ad:dd: a3:c3:a2:bd:0e:c5:d4:4d:69:10:0f:0d:e1:07:e8:9a:ab:d7: 7b:52:74:70:16:75:03:38:39:75:29:21:60:0f:44:0a:78:fb: 41:03:a5:ef -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR4CFpDy8W4qA8mUtng3GZfsqoG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDA1MjA2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODc1YWNlMzFjMTc4MjcxOTkyYzRiZTc0YmFiMWNmZWUx MGE0YzZmZGQyODBhYTI5NGZmMmQyOTZjZTc5ZGVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOu8S/gIoS6TsbtuitJhkkO4uRTLXn9+R+xjR8gBxyY/wM ICD4LGiLDTjqoqtfqMoeJbloqzeZnjDLGl2yslzShO+PFnZQlSjrRMxoSu53QJ51 lTZNprNtGTKsqxras5YrSk6hHW3SRa3ompNGuPHPyIqCQhGA8iypc6p0REXq8rvj eCoWUzhyxJ/ZonMAANiupIOAL5PxbQEMOrnK4xGH4zJ93B00Qqk+ZRsiaUC3DyKY D7Lyi30QZ/is2sGLd5xP77J0hxtZ55HviiMDOtuwJXqqKkK5Mp4cJCdMqRGc3Jmq UOnGNWra4yV4H6/4VGOk/qwDqx3i88V3CRw90WjLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVAScKYHwVcQap76hdbnBBDjAkiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxMGFmMDhjLTJkNzEtNDMxZS04MTJmLTcyMWIxYTBkNWNlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4cDANBgkqhkiG9w0BAQsFAAOCAQEAquL7mHzOQJgef+GG74/anq55zuMa 45zdO4b8yA5AEb3+x6wVAiGNJkzTCDRtK3wIAeQRbO270au9Yg8u0LdM7gtvZo41 m3+aUcXfE+Sx7z92tMv2k0GDLk8sKyTLx9ImCq4eMqu1okTA1gdmC5IHps2EwfB5 DmR644ZubouKZXU6Z3OhRjzGejAovszXBF8T1An30vtCe3FaLby1+zLXuw2y7fHO P2b8ufFzbf55XtiwxLL0muegQ7rJ6dJBv99/Xaj2k8kEf9ZioJMHz1l42j59GjYD ZK3do8OivQ7F1E1pEA8N4QfomqvXe1J0cBZ1Azg5dSkhYA9ECnj7QQOl7w== -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:15 2025 by rpki-client