$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28338aab-a7c5-4702-8149-23ccb69f8d03.roa File: 28338aab-a7c5-4702-8149-23ccb69f8d03.roa (raw, json) Hash identifier: MM/RDiZ7VyjUlzoo5PBpYG7a4jne8MT6FSGw/9+NznY= Subject key identifier: F9:FF:C1:0B:39:05:F2:D2:BA:36:DE:88:7E:0B:D6:0B:FD:F2:87:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AE79E4F91DD6D38E9A75E13E267C3D0F9FB573C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28338aab-a7c5-4702-8149-23ccb69f8d03.roa Signing time: Fri 04 Apr 2025 00:11:11 +0000 ROA not before: Fri 04 Apr 2025 00:11:11 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.27.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e7:9e:4f:91:dd:6d:38:e9:a7:5e:13:e2:67:c3:d0:f9:fb:57:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:11:11 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: serialNumber=30acbdff92e9427efa09f20742e3d1520b1a3da42311c1ce5289e6c09d328db5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:06:5e:68:5f:af:2b:ed:79:80:b5:84:53: b8:f3:33:2a:71:04:30:ba:77:62:e9:20:d6:91:26: 48:e4:ee:96:70:0a:20:da:98:ce:22:18:59:62:ad: 78:74:f7:4b:21:f5:41:b7:3e:46:92:c8:3f:9a:62: 2c:7d:72:7a:99:04:76:86:f4:bc:10:05:e3:df:b7: f5:19:ab:9e:10:48:9c:b2:ae:f5:1f:5c:7d:43:51: 50:fb:3a:37:05:5e:68:73:40:6f:ba:de:05:d5:a3: 45:ae:5f:f6:4c:8e:8b:fd:d1:62:f2:65:bf:dc:80: a7:14:c7:42:64:5f:27:8b:8e:19:e9:34:91:1a:82: 42:b4:bb:1e:53:8d:97:32:f3:32:48:a7:74:4e:1b: b6:9e:76:ae:89:f7:55:6d:a6:e2:80:df:88:75:12: ab:88:73:d0:35:75:1b:04:fc:98:fe:21:65:d8:6d: 6d:65:57:bb:1b:a7:f3:e6:c5:32:b6:4e:fe:a8:0c: 60:4c:c3:f8:de:30:e3:b3:ca:23:52:65:b8:e2:ef: 5b:e4:f2:87:3b:06:f7:65:c7:f5:ed:26:5d:fe:f1: fc:10:18:5b:fc:cf:7e:f7:59:6a:d0:a4:be:44:3d: a2:2b:b6:77:05:b8:a6:cf:11:b9:97:49:b0:90:80: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:C1:0B:39:05:F2:D2:BA:36:DE:88:7E:0B:D6:0B:FD:F2:87:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28338aab-a7c5-4702-8149-23ccb69f8d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 Signature Algorithm: sha256WithRSAEncryption 34:80:bb:74:5c:aa:46:bd:6d:9b:a4:65:01:31:c8:68:6a:1e: 63:36:7e:9b:bd:44:3c:33:56:70:04:7a:3d:6b:f9:77:50:93: 83:c9:3a:26:a7:d0:c4:fc:d2:38:fc:c9:fb:c5:14:1e:5d:2c: 20:77:c7:97:c4:e0:d2:c1:d1:6e:59:a8:d1:4f:04:43:e5:bf: 7c:61:33:2a:41:63:fb:21:59:98:f1:c6:35:21:59:ac:b6:b1: cf:0f:06:f1:f7:9a:84:90:ac:7e:92:16:0a:bc:26:4c:4f:24: 76:05:8d:91:e2:39:70:75:12:5b:7a:82:b7:01:ce:fc:dd:d0: a6:26:47:38:2f:77:4c:af:27:33:0f:a8:7a:2b:a8:b3:bc:02: c6:78:31:ee:6f:95:a0:6a:e1:10:de:99:a9:23:48:0d:7d:0b: d4:4b:69:81:da:9f:35:16:33:12:86:4d:d5:11:8a:85:88:15: ac:ca:6a:97:1d:a0:ba:a1:75:98:1b:09:1e:35:79:45:d6:d0: 43:22:dd:9e:0e:4f:6b:f8:df:d3:a6:bb:90:3f:b7:94:0c:a9: c5:bb:d0:fe:0d:de:da:a1:23:97:2c:6e:55:c2:71:db:25:85: cb:fc:82:ca:42:7a:fc:d4:63:b0:37:4f:94:f1:52:7e:71:03: 68:3a:d6:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeueeT5HdbTjpp14T4mfD0Pn7VzwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAxMTExWhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGFjYmRmZjkyZTk0MjdlZmEwOWYyMDc0MmUzZDE1MjBi MWEzZGE0MjMxMWMxY2U1Mjg5ZTZjMDlkMzI4ZGI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkFwZeaF+vK+15gLWEU7jzMypxBDC6d2LpINaRJkjk7pZw CiDamM4iGFlirXh090sh9UG3PkaSyD+aYix9cnqZBHaG9LwQBePft/UZq54QSJyy rvUfXH1DUVD7OjcFXmhzQG+63gXVo0WuX/ZMjov90WLyZb/cgKcUx0JkXyeLjhnp NJEagkK0ux5TjZcy8zJIp3ROG7aedq6J91VtpuKA34h1EquIc9A1dRsE/Jj+IWXY bW1lV7sbp/PmxTK2Tv6oDGBMw/jeMOOzyiNSZbji71vk8oc7Bvdlx/XtJl3+8fwQ GFv8z373WWrQpL5EPaIrtncFuKbPEbmXSbCQgKf7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+f/BCzkF8tK6Nt6IfgvWC/3yhzswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4MzM4YWFiLWE3YzUtNDcwMi04MTQ5LTIzY2NiNjlmOGQwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAGwAwDQYJKoZIhvcNAQELBQADggEBADSAu3Rcqka9bZukZQExyGhqHmM2 fpu9RDwzVnAEej1r+XdQk4PJOian0MT80jj8yfvFFB5dLCB3x5fE4NLB0W5ZqNFP BEPlv3xhMypBY/shWZjxxjUhWay2sc8PBvH3moSQrH6SFgq8JkxPJHYFjZHiOXB1 Elt6grcBzvzd0KYmRzgvd0yvJzMPqHorqLO8AsZ4Me5vlaBq4RDemakjSA19C9RL aYHanzUWMxKGTdURioWIFazKapcdoLqhdZgbCR41eUXW0EMi3Z4OT2v439Omu5A/ t5QMqcW70P4N3tqhI5csblXCcdslhcv8gspCevzUY7A3T5TxUn5xA2g61sE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:33 2025 by rpki-client