$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa File: 2ab45e62-7d44-4885-a10e-81a21539a820.roa (raw, json) Hash identifier: htmZC6Cy58ZStHCPXtwVhTk0EjoteV2zwUX/YAGSfyM= Subject key identifier: ED:6B:E8:4D:68:80:A1:32:87:94:C4:52:44:FE:4F:24:B1:3B:4A:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 314B91FBE1E77B798BD45EBDE7E17351A8CF7A38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa Signing time: Fri 25 Apr 2025 00:21:57 +0000 ROA not before: Fri 25 Apr 2025 00:21:57 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4b:91:fb:e1:e7:7b:79:8b:d4:5e:bd:e7:e1:73:51:a8:cf:7a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:21:57 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=aba4a47e6c0a8147f8b3f5f70e3ce62c08b0175c85919ab9136b722c094b783e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:d1:cf:9e:f2:ce:ae:f3:ba:5a:0a:a2:c1: 76:49:5a:cf:25:1f:05:1d:75:27:da:c7:05:a2:7e: 5b:97:42:ba:d4:6a:7a:73:e5:1b:3b:fe:25:94:21: 5e:1d:7f:d9:77:da:f7:4e:32:e5:54:2d:fd:ed:20: dc:f3:7c:46:1e:81:e9:5b:c8:e5:47:97:0b:3e:00: 52:74:24:b3:4b:40:fc:40:60:7f:0f:24:22:34:20: 09:0d:4c:9b:85:97:52:8f:cf:c5:75:98:17:04:7b: 27:c4:e7:c5:e2:31:44:eb:f0:c6:69:3d:01:36:83: 7b:a0:8d:7e:d0:d7:be:67:25:ff:b1:78:b3:d9:b4: 6c:bf:bb:5c:00:5a:ab:51:1a:44:cd:4a:a9:f6:96: c7:bd:3c:00:58:20:9f:8b:2e:c5:4d:33:37:9f:60: be:16:43:8e:85:8d:fd:42:5f:41:05:c9:8c:8f:6d: a8:e1:0e:9b:c5:32:d7:fc:34:50:2d:29:10:8c:97: d7:f2:b6:9f:3b:3b:9e:f5:81:27:24:5a:f0:70:c0: b7:60:0d:6c:25:5e:06:71:9c:25:57:43:f3:0a:cf: 6d:c9:5e:bb:c2:0a:1c:8f:0b:a8:a3:37:e3:29:10: 26:1f:fb:64:dc:3e:a7:1d:1a:c3:ce:0a:c4:b4:76: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6B:E8:4D:68:80:A1:32:87:94:C4:52:44:FE:4F:24:B1:3B:4A:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ab45e62-7d44-4885-a10e-81a21539a820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.72.0/22 Signature Algorithm: sha256WithRSAEncryption a8:c5:e1:12:62:87:8d:0c:1a:49:2b:28:9b:6f:24:44:cf:33: b9:70:5f:f1:7e:ec:fa:24:97:3c:8c:35:7f:92:fc:0d:fd:e3: 69:f5:2e:ef:09:b2:bf:0b:a4:6e:17:34:4b:c9:09:f8:99:05: 30:ec:8c:a4:7f:c1:ae:23:9f:36:dd:97:39:53:70:b1:22:0e: f1:ff:43:32:27:2c:4b:01:d4:fa:04:58:c8:ce:84:4e:c1:c8: c5:33:96:ec:a3:e8:f2:f2:e9:bc:be:0e:6e:e1:31:42:14:be: c6:0e:16:4e:57:b4:07:bf:39:ae:e0:7c:e5:2a:61:35:6e:b6: 99:f4:f9:05:93:97:7a:30:59:3d:84:0d:22:7d:93:99:9d:16: 42:db:d8:4f:54:76:ec:89:b3:84:cc:53:53:01:a1:e8:ac:6b: 3e:d5:2c:78:57:94:ee:56:a5:e0:8e:08:4a:9e:96:54:c4:0a: bd:ce:fb:35:f3:b1:f5:7f:2e:5a:54:a0:f6:21:dc:f7:37:88: 8a:cb:51:8b:87:a9:89:d6:7b:98:7a:f8:f1:97:ec:bc:92:e3: 3c:7e:ee:8d:05:1f:c3:f7:19:95:13:f5:06:1e:1e:d2:68:0c: 85:44:d8:e1:ac:da:86:c0:9f:85:58:e4:d2:fd:ab:d8:7d:ad: 5b:34:3c:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMUuR++Hne3mL1F695+FzUajPejgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMTU3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmE0YTQ3ZTZjMGE4MTQ3ZjhiM2Y1ZjcwZTNjZTYyYzA4 YjAxNzVjODU5MTlhYjkxMzZiNzIyYzA5NGI3ODNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqzNHPnvLOrvO6WgqiwXZJWs8lHwUddSfaxwWifluXQrrU anpz5Rs7/iWUIV4df9l32vdOMuVULf3tINzzfEYegelbyOVHlws+AFJ0JLNLQPxA YH8PJCI0IAkNTJuFl1KPz8V1mBcEeyfE58XiMUTr8MZpPQE2g3ugjX7Q175nJf+x eLPZtGy/u1wAWqtRGkTNSqn2lse9PABYIJ+LLsVNMzefYL4WQ46Fjf1CX0EFyYyP bajhDpvFMtf8NFAtKRCMl9fytp87O571gSckWvBwwLdgDWwlXgZxnCVXQ/MKz23J XrvCChyPC6ijN+MpECYf+2TcPqcdGsPOCsS0drW3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7WvoTWiAoTKHlMRSRP5PJLE7ShcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhYjQ1ZTYyLTdkNDQtNDg4NS1hMTBlLTgxYTIxNTM5YTgyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXF0gwDQYJKoZIhvcNAQELBQADggEBAKjF4RJih40MGkkrKJtvJETPM7lw X/F+7PoklzyMNX+S/A3942n1Lu8Jsr8LpG4XNEvJCfiZBTDsjKR/wa4jnzbdlzlT cLEiDvH/QzInLEsB1PoEWMjOhE7ByMUzluyj6PLy6by+Dm7hMUIUvsYOFk5XtAe/ Oa7gfOUqYTVutpn0+QWTl3owWT2EDSJ9k5mdFkLb2E9UduyJs4TMU1MBoeisaz7V LHhXlO5WpeCOCEqellTECr3O+zXzsfV/LlpUoPYh3Pc3iIrLUYuHqYnWe5h6+PGX 7LyS4zx+7o0FH8P3GZUT9QYeHtJoDIVE2OGs2obAn4VY5NL9q9h9rVs0PL4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:31 2025 by rpki-client