$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/234e46a7-d4c0-4498-863f-fe0ed912a21e.roa File: 234e46a7-d4c0-4498-863f-fe0ed912a21e.roa (raw, json) Hash identifier: FhRI9xQN+zDrRXXgUejizDRpVrve2CJhUtSpb4ND/Do= Subject key identifier: FA:27:33:ED:BE:1B:32:B5:98:87:5B:A7:1A:58:CF:B9:22:18:08:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32D92C369C3267DCBC5D074E3EC539C27F1E2575 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/234e46a7-d4c0-4498-863f-fe0ed912a21e.roa Signing time: Fri 04 Apr 2025 00:10:16 +0000 ROA not before: Fri 04 Apr 2025 00:10:16 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.235.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d9:2c:36:9c:32:67:dc:bc:5d:07:4e:3e:c5:39:c2:7f:1e:25:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:10:16 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: serialNumber=d31f28d5bbe257e3c5ff301f95a3672ed4928ede2b9e0b1a37a531a37aeb5449, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:1e:15:6b:40:fd:b7:38:d9:55:90:59:70: 96:ae:a8:09:0b:b1:a2:5f:97:74:5e:29:d6:7a:90: f6:dc:ef:c6:05:57:10:14:7b:5f:89:fa:40:a9:f0: 82:21:30:92:8b:cd:cd:f7:3d:b5:5d:ad:f1:38:99: 35:13:54:6c:e5:47:a8:fe:55:53:ce:55:61:f7:5d: 03:89:e2:06:89:55:de:3e:04:9a:e1:36:bf:a9:0b: ed:f1:77:b3:77:87:23:48:80:c8:a2:65:e0:65:44: 1a:00:94:a0:00:2d:cd:ae:e7:39:a4:c8:87:b6:bd: c7:4e:58:19:d5:ed:d1:5c:a9:d4:a6:de:99:e4:96: c7:40:c9:9c:99:fc:2a:1b:19:54:0c:2d:ef:da:9a: a0:bd:dd:30:17:83:97:ea:e3:e6:a8:a0:13:b7:53: 42:aa:1d:59:c3:c2:d0:5d:52:96:d4:2f:f3:24:24: f5:c1:ac:26:12:c7:58:19:a7:3b:f7:d4:e1:14:cb: c9:a8:41:01:10:e5:f3:4e:81:a6:6c:0e:98:cc:da: 01:3a:e2:2b:49:df:19:dd:50:74:d0:21:d7:81:ff: 2d:e1:e1:ff:0a:d5:d2:1a:cc:79:40:df:c4:76:7c: 7a:7d:aa:ed:b2:7e:23:08:8e:83:71:14:de:e9:f5: c3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:33:ED:BE:1B:32:B5:98:87:5B:A7:1A:58:CF:B9:22:18:08:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/234e46a7-d4c0-4498-863f-fe0ed912a21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.235.0.0/18 Signature Algorithm: sha256WithRSAEncryption 84:a9:ff:72:4c:0e:88:3f:e7:e5:90:d8:f0:61:63:34:5e:22: a3:53:a8:34:97:23:eb:04:64:53:d0:54:21:22:2d:34:69:a4: af:73:b6:a1:bb:d2:e8:de:8e:bf:94:f5:ac:a6:f9:43:c1:cb: e9:c2:46:5b:24:02:17:e8:5f:6a:d8:8b:da:1b:4d:94:81:44: 3e:fe:a7:ab:d1:57:10:f6:6e:9a:a1:db:fc:30:cd:da:bc:c8: b5:27:e8:71:42:f5:fd:e3:4f:08:c5:4d:2e:82:4c:9c:be:16: a9:0f:26:d3:38:41:a3:d6:29:e0:ab:52:66:d2:c9:aa:dc:c9: 3c:dd:ea:cd:2d:a0:6f:7a:cc:a3:da:4e:ca:a9:93:30:f7:42: e2:fa:fd:35:6e:f8:cd:6f:43:a3:7c:97:0c:30:9c:8e:44:57: b2:1a:39:f3:04:0d:08:3b:42:20:09:c3:0b:e2:79:55:d1:f0: 4d:50:83:6f:90:41:3a:1e:3b:89:af:73:77:33:61:e6:24:7d: a2:c8:21:6a:cb:d7:d1:ec:d0:34:3b:fa:8f:51:9a:0d:15:13: ae:1d:94:86:48:80:2e:c3:9a:73:a7:45:da:71:74:57:c7:19: fd:03:5f:a4:31:18:01:c0:6b:3e:41:af:86:cd:6f:5c:26:2a: d8:b1:64:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMtksNpwyZ9y8XQdOPsU5wn8eJXUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAxMDE2WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzFmMjhkNWJiZTI1N2UzYzVmZjMwMWY5NWEzNjcyZWQ0 OTI4ZWRlMmI5ZTBiMWEzN2E1MzFhMzdhZWI1NDQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKFR4Va0D9tzjZVZBZcJauqAkLsaJfl3ReKdZ6kPbc78YF VxAUe1+J+kCp8IIhMJKLzc33PbVdrfE4mTUTVGzlR6j+VVPOVWH3XQOJ4gaJVd4+ BJrhNr+pC+3xd7N3hyNIgMiiZeBlRBoAlKAALc2u5zmkyIe2vcdOWBnV7dFcqdSm 3pnklsdAyZyZ/CobGVQMLe/amqC93TAXg5fq4+aooBO3U0KqHVnDwtBdUpbUL/Mk JPXBrCYSx1gZpzv31OEUy8moQQEQ5fNOgaZsDpjM2gE64itJ3xndUHTQIdeB/y3h 4f8K1dIazHlA38R2fHp9qu2yfiMIjoNxFN7p9cOTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+icz7b4bMrWYh1unGljPuSIYCLkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNGU0NmE3LWQ0YzAtNDQ5OC04NjNmLWZlMGVkOTEyYTIxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYo6wAwDQYJKoZIhvcNAQELBQADggEBAISp/3JMDog/5+WQ2PBhYzReIqNT qDSXI+sEZFPQVCEiLTRppK9ztqG70ujejr+U9aym+UPBy+nCRlskAhfoX2rYi9ob TZSBRD7+p6vRVxD2bpqh2/wwzdq8yLUn6HFC9f3jTwjFTS6CTJy+FqkPJtM4QaPW KeCrUmbSyarcyTzd6s0toG96zKPaTsqpkzD3QuL6/TVu+M1vQ6N8lwwwnI5EV7Ia OfMEDQg7QiAJwwvieVXR8E1Qg2+QQToeO4mvc3czYeYkfaLIIWrL19Hs0DQ7+o9R mg0VE64dlIZIgC7DmnOnRdpxdFfHGf0DX6QxGAHAaz5Br4bNb1wmKtixZIg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:33 2025 by rpki-client