$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa File: 2685e722-0e36-4c7d-81cd-710122343f21.roa (raw, json) Hash identifier: So83gDdzMKLXkjzn4VG4p6MpzXSlFdcOi3N4Vk5op4I= Subject key identifier: 73:FD:E2:18:F1:5D:C7:08:AA:70:CA:01:B5:A0:7C:28:35:24:79:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E014FCEB5A0A03417DB418D02407FA1C41149B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa Signing time: Tue 22 Apr 2025 15:40:16 +0000 ROA not before: Tue 22 Apr 2025 15:40:16 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.252.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:01:4f:ce:b5:a0:a0:34:17:db:41:8d:02:40:7f:a1:c4:11:49:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:40:16 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=62308fbbf881edb00d7571ff4e2bf325edbb7b902d93546d68c6fe68a33a43fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:33:30:7d:c0:b2:fc:91:71:95:5c:e3:81: 22:88:76:18:e3:67:a1:7f:ae:46:40:ca:10:49:06: dd:8d:75:c1:48:fb:9f:f4:9a:76:61:2d:34:46:1e: a7:3d:33:e0:51:48:63:fe:51:bc:bc:dc:bb:b9:9a: 62:6a:49:44:a7:9c:03:78:a8:41:09:fa:79:9e:14: 19:54:f0:ce:bd:50:0c:af:d6:9c:ad:33:72:82:05: 3a:79:83:0a:db:6b:d4:77:e1:9d:91:f7:0e:9a:08: fd:a8:88:bb:ad:6a:fd:02:6d:80:79:a9:0f:a6:17: a2:c1:ce:69:c7:c3:35:62:c4:3e:98:a5:b7:8b:ef: aa:ce:39:3d:1a:90:04:d3:6a:1e:74:da:d2:c0:1a: 47:c5:d9:ca:cc:ad:1b:30:32:43:97:7f:76:0a:bb: 2a:b0:bb:d9:c1:bc:c7:bf:8d:f4:8b:87:81:a0:4a: ee:65:1c:0d:07:97:33:ee:02:2c:a3:8f:12:86:12: 31:fb:86:88:4c:4a:4e:22:c9:75:64:92:b7:1d:1c: 91:4c:ec:dd:56:d8:8b:84:2f:f3:aa:f6:76:f6:9b: da:2f:b4:a7:b9:19:c2:7a:46:f3:4e:9f:f9:e3:68: 51:c0:8b:ce:d2:f8:38:a6:9c:54:03:e2:db:da:1b: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:E2:18:F1:5D:C7:08:AA:70:CA:01:B5:A0:7C:28:35:24:79:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.252.216.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:c2:a2:1d:6a:cf:80:c2:97:15:fd:8b:a2:72:c6:06:9b:0f: bf:4f:41:84:2e:94:01:7c:67:f5:7a:2a:3f:06:cd:27:d7:9a: b7:f5:23:b7:ce:4e:a0:c3:6c:ce:08:8a:e9:0f:a3:c7:8b:c2: a0:60:80:94:22:6b:96:e7:d4:ee:7b:49:db:69:ca:06:c0:8a: 6c:da:3b:32:a6:80:2a:9a:92:6d:8c:96:a3:79:15:56:c9:29: 15:f1:17:0a:9d:b7:f0:94:bb:f5:c3:61:c3:ce:7c:53:89:64: fd:1c:76:fd:9c:b4:78:c7:72:34:6e:7b:97:74:0e:52:c6:0a: 5e:18:47:27:0a:05:93:f7:fd:5c:7b:d9:ba:e4:c2:40:45:97: 24:de:89:24:3a:db:b3:7e:6a:23:ba:65:f8:88:0a:3a:31:4b: da:0e:1c:7d:76:0c:5e:4d:7c:94:85:a4:d2:c2:da:b1:e8:f2: a5:d4:28:36:46:f3:42:72:13:2b:06:be:b4:3d:a0:5a:29:d0: de:2c:1b:b9:f0:64:16:17:94:d2:19:9f:01:a9:31:c3:af:63: f5:ad:49:b1:79:08:ad:c9:af:5f:e9:74:9e:d7:b9:ef:bf:f9: 44:7d:78:c2:6d:0a:ec:cc:a8:a6:86:e6:4c:61:15:c7:5b:a2: 84:4e:a4:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfgFPzrWgoDQX20GNAkB/ocQRSbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU0MDE2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjMwOGZiYmY4ODFlZGIwMGQ3NTcxZmY0ZTJiZjMyNWVk YmI3YjkwMmQ5MzU0NmQ2OGM2ZmU2OGEzM2E0M2ZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyNDMwfcCy/JFxlVzjgSKIdhjjZ6F/rkZAyhBJBt2NdcFI +5/0mnZhLTRGHqc9M+BRSGP+Uby83Lu5mmJqSUSnnAN4qEEJ+nmeFBlU8M69UAyv 1pytM3KCBTp5gwrba9R34Z2R9w6aCP2oiLutav0CbYB5qQ+mF6LBzmnHwzVixD6Y pbeL76rOOT0akATTah502tLAGkfF2crMrRswMkOXf3YKuyqwu9nBvMe/jfSLh4Gg Su5lHA0HlzPuAiyjjxKGEjH7hohMSk4iyXVkkrcdHJFM7N1W2IuEL/Oq9nb2m9ov tKe5GcJ6RvNOn/njaFHAi87S+DimnFQD4tvaGwaNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc/3iGPFdxwiqcMoBtaB8KDUkeRQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2ODVlNzIyLTBlMzYtNGM3ZC04MWNkLTcxMDEyMjM0M2YyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALY/NgwDQYJKoZIhvcNAQELBQADggEBAI7Coh1qz4DClxX9i6JyxgabD79P QYQulAF8Z/V6Kj8GzSfXmrf1I7fOTqDDbM4IiukPo8eLwqBggJQia5bn1O57Sdtp ygbAimzaOzKmgCqakm2MlqN5FVbJKRXxFwqdt/CUu/XDYcPOfFOJZP0cdv2ctHjH cjRue5d0DlLGCl4YRycKBZP3/Vx72brkwkBFlyTeiSQ627N+aiO6ZfiICjoxS9oO HH12DF5NfJSFpNLC2rHo8qXUKDZG80JyEysGvrQ9oFop0N4sG7nwZBYXlNIZnwGp McOvY/WtSbF5CK3Jr1/pdJ7Xue+/+UR9eMJtCuzMqKaG5kxhFcdbooROpCg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:30 2025 by rpki-client