$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa File: 2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa (raw, json) Hash identifier: zEbHdWt88yYiRydrkpU12z0llNQ7Jl+/ZVjyKLvhx+A= Subject key identifier: A5:5C:3E:3E:D8:AB:92:75:04:BD:49:1D:71:F0:E3:03:1E:DD:3D:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36AB6D53DEE71D403AD69E293DD7E8A385E2D63B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa Signing time: Mon 07 Apr 2025 15:00:21 +0000 ROA not before: Mon 07 Apr 2025 15:00:21 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 128.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ab:6d:53:de:e7:1d:40:3a:d6:9e:29:3d:d7:e8:a3:85:e2:d6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:00:21 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=1b81e24662d69e7012f09a5b230321e7260ed8351f17d716e39a75120f8e2de5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:94:d1:84:5c:2f:01:d9:78:90:17:f9:09:88: e8:5d:09:e6:90:c0:73:ed:8b:0e:76:fa:bd:b8:32: 65:ff:6a:ef:1c:91:e4:57:dd:63:ec:cd:de:d8:61: ec:2e:03:a1:c9:54:5f:70:43:2a:72:57:20:be:f8: 04:b6:59:89:42:45:03:64:b6:56:c7:e4:6f:e1:8f: a1:93:35:f3:94:e5:8b:70:24:e5:96:7a:49:6a:b0: 27:75:3a:45:48:cb:51:ea:a5:3d:e8:87:2f:d3:50: 7a:a8:41:eb:a2:3e:48:6a:94:d5:88:86:a1:c3:a0: ff:56:b1:c4:8c:20:4b:75:29:aa:44:8c:ad:95:45: e4:56:5b:b6:5b:3a:5d:e9:a7:ba:d7:40:82:62:d2: 5a:06:82:a2:7b:43:e4:92:a8:55:4c:fa:f3:e3:9b: 5d:18:7b:51:84:d7:4c:4b:70:30:c8:cd:92:18:8b: cc:7a:20:4a:85:cb:b2:0b:64:27:a0:04:69:ec:03: 77:07:4a:02:47:dd:57:d7:67:8d:37:28:f6:4e:bc: 4a:80:fe:03:60:5a:56:01:3a:c9:2b:91:f8:94:2c: 76:93:ef:28:fa:f0:73:85:92:44:ad:91:b4:fb:41: 24:7a:0d:a8:cf:0e:3d:dc:c3:82:e8:e2:63:76:87: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5C:3E:3E:D8:AB:92:75:04:BD:49:1D:71:F0:E3:03:1E:DD:3D:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:af:7b:c8:48:f3:0b:d8:3c:a6:fc:35:a6:54:f7:f5:2b:5b: c0:54:31:16:a7:2b:5a:c9:5a:55:52:47:cb:fe:5d:3d:ea:46: 9b:b0:ae:02:48:ec:4d:2f:cc:0e:64:3a:f7:c9:11:49:c1:d3: 51:82:ed:73:1d:dc:f7:9c:ac:1b:65:8f:72:5a:9c:c6:21:4c: 5c:8c:6f:35:7a:0d:04:68:de:80:fd:31:05:90:e7:61:ad:27: e3:d3:53:65:91:2e:17:75:ed:5e:26:c4:60:6f:4a:4d:23:c2: d5:33:88:da:a7:13:d1:22:cc:16:1a:f6:a1:17:28:08:da:1c: 19:7d:df:69:e2:fa:1c:bb:9a:bf:72:fb:d3:9a:01:c5:f0:dd: 7d:ec:59:f3:28:c9:11:a2:61:d5:5a:98:a2:17:a2:71:8f:a5: e5:26:05:3b:1d:37:8d:6c:4f:09:c0:45:53:72:bc:b3:67:ea: e7:84:21:8a:ee:01:d4:8f:4b:ed:07:3e:8f:b7:4a:eb:1b:39: 3d:ee:58:44:e6:08:00:cb:cd:11:4f:68:e0:09:8d:af:38:74: 30:4b:9e:19:77:37:c9:50:02:e9:fb:5d:23:6b:24:27:a5:99: 5c:15:00:f2:1c:af:26:a4:9d:3a:1f:21:70:3e:89:75:25:40: 32:a5:67:2b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNqttU97nHUA61p4pPdfoo4Xi1jswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUwMDIxWhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjgxZTI0NjYyZDY5ZTcwMTJmMDlhNWIyMzAzMjFlNzI2 MGVkODM1MWYxN2Q3MTZlMzlhNzUxMjBmOGUyZGU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4lNGEXC8B2XiQF/kJiOhdCeaQwHPtiw52+r24MmX/au8c keRX3WPszd7YYewuA6HJVF9wQypyVyC++AS2WYlCRQNktlbH5G/hj6GTNfOU5Ytw JOWWeklqsCd1OkVIy1HqpT3ohy/TUHqoQeuiPkhqlNWIhqHDoP9WscSMIEt1KapE jK2VReRWW7ZbOl3pp7rXQIJi0loGgqJ7Q+SSqFVM+vPjm10Ye1GE10xLcDDIzZIY i8x6IEqFy7ILZCegBGnsA3cHSgJH3VfXZ403KPZOvEqA/gNgWlYBOskrkfiULHaT 7yj68HOFkkStkbT7QSR6DajPDj3cw4Lo4mN2h5DXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpVw+PtirknUEvUkdcfDjAx7dPZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMjFlYjRjLWNmZDQtNGFkMC05ZTQ3LTQ0OGE4OTUyN2QwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCAUTANBgkqhkiG9w0BAQsFAAOCAQEAf697yEjzC9g8pvw1plT39StbwFQx FqcrWslaVVJHy/5dPepGm7CuAkjsTS/MDmQ698kRScHTUYLtcx3c95ysG2WPclqc xiFMXIxvNXoNBGjegP0xBZDnYa0n49NTZZEuF3XtXibEYG9KTSPC1TOI2qcT0SLM Fhr2oRcoCNocGX3faeL6HLuav3L705oBxfDdfexZ8yjJEaJh1VqYoheicY+l5SYF Ox03jWxPCcBFU3K8s2fq54Qhiu4B1I9L7Qc+j7dK6xs5Pe5YROYIAMvNEU9o4AmN rzh0MEueGXc3yVAC6ftdI2skJ6WZXBUA8hyvJqSdOh8hcD6JdSVAMqVnKw== -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:09 2025 by rpki-client