$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa File: 257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa (raw, json) Hash identifier: jt9J7bO5fkkJ0N22habcreITJefesurukrGSoinKhaE= Subject key identifier: B1:5E:8D:65:18:6F:03:3A:BE:80:76:A6:E0:BA:29:F7:64:5F:08:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 241F8EFB69834B5BCCB08756650B5B3C26394426 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa Signing time: Mon 14 Apr 2025 15:20:25 +0000 ROA not before: Mon 14 Apr 2025 15:20:25 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.211.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:8e:fb:69:83:4b:5b:cc:b0:87:56:65:0b:5b:3c:26:39:44:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:20:25 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=0b07f2759668ba3a5cecd0a331311af41fe855928ca8feeb3baa3efa82e73ffa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:94:eb:d0:c7:49:e5:c0:ba:95:93:77:4a: eb:73:8a:74:6b:63:a2:ad:41:18:26:81:5d:8d:21: bf:9a:9c:ae:13:04:eb:15:a9:80:b0:b3:7b:f6:84: 33:be:6f:7a:8d:f6:93:80:68:8b:bc:90:68:fe:b9: df:2c:a7:79:0a:07:6a:bc:2c:b3:9b:b8:dc:6e:4e: e3:23:81:ab:88:09:36:32:e6:71:d3:91:91:ef:8f: fd:6d:1d:42:65:f9:7e:24:03:f3:b5:39:dc:d1:0e: 63:93:c4:66:57:86:76:e6:92:6d:91:07:55:6c:d8: c3:f8:2c:b0:66:a7:b3:98:c1:a0:54:a2:a0:5b:1f: fb:f0:e2:b1:85:51:86:61:12:7d:4b:01:c1:0a:de: be:d6:db:9f:b3:0a:80:82:cb:0d:d6:38:29:1d:34: 98:1a:4f:1b:08:94:87:d4:a0:1c:3d:82:b7:ef:15: 17:b8:47:82:d2:4e:da:36:c6:d5:53:4e:a7:3f:67: 98:05:cc:78:ff:61:df:46:79:7c:12:8e:62:c0:47: 9e:66:93:b9:77:82:29:ce:7f:6d:dd:e0:d7:6a:19: 77:5b:8a:43:34:31:0d:42:0b:a8:60:49:78:c4:44: 34:7d:8c:a6:6b:89:2f:a6:08:ca:4f:3b:5d:f9:a6: f7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5E:8D:65:18:6F:03:3A:BE:80:76:A6:E0:BA:29:F7:64:5F:08:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257c0fe7-abec-4c1b-8fff-966a22dfe1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.64.0/19 Signature Algorithm: sha256WithRSAEncryption 94:75:39:14:b5:8b:fc:d9:89:88:ba:74:7a:20:31:fe:61:ba: ac:45:f9:2c:6b:48:94:e3:b0:d6:38:6c:27:2c:3e:5c:97:85: 46:bc:f1:87:26:0f:ee:bb:2b:1b:e1:62:c1:80:a8:88:28:19: 6b:45:b7:c6:48:4f:53:3c:bd:6e:ac:d2:99:bb:68:2a:cf:0f: 8d:9e:a3:9a:22:65:67:08:f1:ee:10:66:2c:17:d8:bc:11:74: cd:ca:85:98:69:ca:4d:06:33:c0:a4:b3:0a:3e:7b:22:7a:cb: df:dd:e9:13:8f:91:46:2b:4a:9e:8b:d6:0a:2e:c4:08:65:31: de:00:b7:2e:43:cc:9d:d2:f8:d5:15:9f:a3:a2:01:4a:12:4c: eb:f1:8e:76:44:5b:92:2c:12:1c:1c:3b:89:60:06:48:90:f6: e9:19:93:3f:74:76:d6:d2:81:2c:98:76:e6:87:ff:11:7c:49: 2c:3a:6b:be:36:de:bf:b2:d3:3a:c4:1b:9d:20:96:94:cd:2c: a9:9f:87:a0:54:7b:4b:91:e1:e0:67:77:29:69:96:c3:8c:65: e3:e5:fd:ed:37:dd:fb:c4:5c:55:ff:d0:cf:fa:f6:98:b5:44: ec:5c:82:ad:7b:6d:e5:32:f6:83:f1:c8:9c:86:62:26:14:27: 75:51:5f:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJB+O+2mDS1vMsIdWZQtbPCY5RCYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUyMDI1WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjA3ZjI3NTk2NjhiYTNhNWNlY2QwYTMzMTMxMWFmNDFm ZTg1NTkyOGNhOGZlZWIzYmFhM2VmYTgyZTczZmZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+bZTr0MdJ5cC6lZN3SutzinRrY6KtQRgmgV2NIb+anK4T BOsVqYCws3v2hDO+b3qN9pOAaIu8kGj+ud8sp3kKB2q8LLObuNxuTuMjgauICTYy 5nHTkZHvj/1tHUJl+X4kA/O1OdzRDmOTxGZXhnbmkm2RB1Vs2MP4LLBmp7OYwaBU oqBbH/vw4rGFUYZhEn1LAcEK3r7W25+zCoCCyw3WOCkdNJgaTxsIlIfUoBw9grfv FRe4R4LSTto2xtVTTqc/Z5gFzHj/Yd9GeXwSjmLAR55mk7l3ginOf23d4NdqGXdb ikM0MQ1CC6hgSXjERDR9jKZriS+mCMpPO135pvdBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsV6NZRhvAzq+gHam4Lop92RfCIUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1N2MwZmU3LWFiZWMtNGMxYi04ZmZmLTk2NmEyMmRmZTFmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXG00AwDQYJKoZIhvcNAQELBQADggEBAJR1ORS1i/zZiYi6dHogMf5huqxF +SxrSJTjsNY4bCcsPlyXhUa88YcmD+67KxvhYsGAqIgoGWtFt8ZIT1M8vW6s0pm7 aCrPD42eo5oiZWcI8e4QZiwX2LwRdM3KhZhpyk0GM8Ckswo+eyJ6y9/d6ROPkUYr Sp6L1gouxAhlMd4Aty5DzJ3S+NUVn6OiAUoSTOvxjnZEW5IsEhwcO4lgBkiQ9ukZ kz90dtbSgSyYduaH/xF8SSw6a7423r+y0zrEG50glpTNLKmfh6BUe0uR4eBndylp lsOMZePl/e033fvEXFX/0M/69pi1ROxcgq17beUy9oPxyJyGYiYUJ3VRX8I= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:56 2025 by rpki-client