$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa File: 210b8422-48d5-4f34-b821-4a72f419973a.roa (raw, json) Hash identifier: oMYPCWXUZmU8bLFF/jVNA72Q9wUN7qgkE29tuvjbNYA= Subject key identifier: AB:88:63:D8:A7:3A:4A:2C:34:16:07:EC:B3:FC:9E:10:4B:0C:1F:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75407F8B27F96BEB7F56386231F45E709245D177 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa Signing time: Fri 25 Apr 2025 18:07:05 +0000 ROA not before: Fri 25 Apr 2025 18:07:05 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.39.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:40:7f:8b:27:f9:6b:eb:7f:56:38:62:31:f4:5e:70:92:45:d1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 18:07:05 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f90fe652a106fe1e51d49640e5009563ecb78b64f4419a99dfc84127a2634826, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:02:0b:bf:d8:46:47:cc:6c:fa:31:1f:0d:65: 3d:8e:e9:f9:77:98:ec:49:45:e8:ba:9f:b4:5e:fa: ae:83:c2:63:af:1a:fe:c0:72:9b:df:38:ce:b4:8e: 98:73:23:88:7c:44:07:5c:6f:31:12:d9:bc:1b:89: be:d7:fc:de:cf:2d:62:02:05:3b:18:08:97:f8:3f: 9b:5f:97:1d:8a:a6:8d:99:c9:1c:c2:6f:d6:a2:2a: 3b:35:dd:2b:cd:a9:95:10:09:f0:cd:52:00:b3:58: bc:1b:b9:8a:af:cd:15:4c:9b:8b:08:c8:db:61:92: b8:dc:8f:c7:48:01:07:ea:b6:52:9c:7c:f8:63:99: 35:0f:0d:da:df:35:11:74:89:ea:bb:26:a4:9c:a5: e1:80:07:f8:5f:0e:73:93:b4:ba:f4:e2:0c:1f:64: 6e:14:f4:87:0f:73:e4:07:42:68:0f:03:23:24:22: 80:8d:65:46:fc:85:92:91:c4:77:04:c2:b1:dd:79: ce:9a:c6:94:be:9e:90:cf:1e:25:02:53:ab:8b:80: b1:8f:8b:2f:a6:a4:a2:73:44:7c:1b:23:3d:4e:52: 84:0d:37:98:6c:cf:ad:ad:8d:5f:90:97:f4:b6:79: dc:74:85:97:74:e3:ef:2b:ff:c9:d3:67:17:33:d2: 52:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:63:D8:A7:3A:4A:2C:34:16:07:EC:B3:FC:9E:10:4B:0C:1F:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.39.0.0/16 Signature Algorithm: sha256WithRSAEncryption d0:a1:e7:70:52:cd:c3:92:d9:f2:b1:55:0d:29:90:64:71:53: af:19:fa:81:ca:b6:34:a1:b8:8c:c0:11:d8:80:a1:c2:a9:84: b8:d6:40:f0:8c:22:76:b0:0f:86:59:f8:df:7d:0f:d7:c5:18: 16:7a:41:57:80:ba:56:10:e6:7f:cc:e8:b1:0e:3d:20:3f:a1: 85:e3:82:95:8e:15:41:84:06:aa:20:1a:f1:1a:4a:8f:02:7e: bd:6e:46:c0:65:6b:33:22:18:8c:a8:e4:c9:e4:b9:df:41:2f: 6e:f7:e8:11:f7:7c:06:5a:4e:d7:86:28:7c:1a:99:8a:2f:08: 66:ed:78:b0:77:6b:89:e2:fa:b0:bc:0e:fc:db:52:0a:a4:62: e9:94:2b:f0:81:e5:3f:24:c5:eb:86:22:92:df:a2:f8:ca:d2: 07:0b:a0:44:7e:36:19:1a:4a:de:03:26:cd:c8:07:06:8d:53: ea:fd:4b:f1:e9:a7:f2:0b:6b:2f:81:7e:69:fd:0a:e9:fb:d4: 9f:62:d0:3d:6e:a4:4e:de:61:72:91:10:c0:26:83:07:6d:6d: 4c:a3:e9:bf:9f:80:3c:d7:22:0a:aa:cb:fa:7f:db:eb:05:2d: 3c:f6:e2:a0:47:ef:e5:82:86:3c:fa:f4:e6:fe:d8:5d:a8:da: f7:33:48:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdUB/iyf5a+t/VjhiMfRecJJF0XcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTgwNzA1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTBmZTY1MmExMDZmZTFlNTFkNDk2NDBlNTAwOTU2M2Vj Yjc4YjY0ZjQ0MTlhOTlkZmM4NDEyN2EyNjM0ODI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTAgu/2EZHzGz6MR8NZT2O6fl3mOxJRei6n7Re+q6DwmOv Gv7AcpvfOM60jphzI4h8RAdcbzES2bwbib7X/N7PLWICBTsYCJf4P5tflx2Kpo2Z yRzCb9aiKjs13SvNqZUQCfDNUgCzWLwbuYqvzRVMm4sIyNthkrjcj8dIAQfqtlKc fPhjmTUPDdrfNRF0ieq7JqScpeGAB/hfDnOTtLr04gwfZG4U9IcPc+QHQmgPAyMk IoCNZUb8hZKRxHcEwrHdec6axpS+npDPHiUCU6uLgLGPiy+mpKJzRHwbIz1OUoQN N5hsz62tjV+Ql/S2edx0hZd04+8r/8nTZxcz0lINAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUq4hj2Kc6Siw0Fgfss/yeEEsMH+wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxMGI4NDIyLTQ4ZDUtNGYzNC1iODIxLTRhNzJmNDE5OTczYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4JzANBgkqhkiG9w0BAQsFAAOCAQEA0KHncFLNw5LZ8rFVDSmQZHFTrxn6 gcq2NKG4jMAR2IChwqmEuNZA8IwidrAPhln4330P18UYFnpBV4C6VhDmf8zosQ49 ID+hheOClY4VQYQGqiAa8RpKjwJ+vW5GwGVrMyIYjKjkyeS530EvbvfoEfd8BlpO 14YofBqZii8IZu14sHdrieL6sLwO/NtSCqRi6ZQr8IHlPyTF64Yikt+i+MrSBwug RH42GRpK3gMmzcgHBo1T6v1L8emn8gtrL4F+af0K6fvUn2LQPW6kTt5hcpEQwCaD B21tTKPpv5+APNciCqrL+n/b6wUtPPbioEfv5YKGPPr05v7YXaja9zNICg== -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:34 2025 by rpki-client