$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa File: 2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa (raw, json) Hash identifier: Q26vv3gihrbsiCwT9lYDp50uzex8R2Sdlw1AZxTV5WI= Subject key identifier: E3:B7:83:A0:2B:53:F4:4D:E8:4B:81:E9:47:98:C8:68:4A:75:86:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 593BA3E9D10CAB7820F2FF2C49716D36F45EA852 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa Signing time: Mon 07 Apr 2025 15:20:58 +0000 ROA not before: Mon 07 Apr 2025 15:20:58 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.148.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:a3:e9:d1:0c:ab:78:20:f2:ff:2c:49:71:6d:36:f4:5e:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:20:58 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=e64a55a0c3a49bf56191dc35914b7bfb7887132c88176bcbb21376ecd74d52ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:f3:5e:b8:3a:99:ea:7c:8a:dc:ce:47:0b: 91:5c:7b:5e:68:9f:cf:55:ee:1a:e6:b7:a4:b0:16: dd:31:28:33:1a:68:d3:e6:d7:93:51:41:18:7f:ab: 69:f9:60:c8:86:f5:d9:35:1a:94:42:c6:94:65:91: bb:c0:7f:a1:d2:7e:61:e1:29:37:1b:ed:25:72:be: 06:9b:3f:2c:33:3f:65:15:c6:5d:f3:a5:7e:e2:a1: 7e:2d:e7:d9:5a:5d:c8:3b:fa:05:07:55:dc:47:80: 5b:7e:33:83:8e:25:03:74:24:bc:a4:cc:bf:78:ea: 64:f9:bc:b4:a9:ee:1a:3a:04:2b:8d:e3:5c:c2:8d: be:5b:5d:41:a0:c1:3f:e3:1c:25:0a:46:c0:43:d1: ca:3b:14:9e:17:29:63:bc:0b:2e:01:9a:64:9d:ab: e1:0d:34:59:20:f5:26:90:3f:56:f7:6b:e7:1a:99: e0:af:ff:3d:75:65:ef:6c:61:1d:b2:14:01:05:dd: cb:09:f4:0f:a1:de:e7:ff:c9:9c:60:75:e7:10:86: 70:74:4f:48:29:78:03:5b:37:be:3f:e1:50:fa:a5: be:1d:4d:7b:74:3d:f8:fe:4c:46:f5:fb:a9:6a:99: 2a:0c:70:71:35:7a:e9:9f:4e:5e:88:89:e1:ee:48: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B7:83:A0:2B:53:F4:4D:E8:4B:81:E9:47:98:C8:68:4A:75:86:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption 03:e5:ab:85:cb:f8:00:68:61:20:5d:c2:b3:8c:8f:0d:6c:a9: 37:55:44:21:8b:cd:f3:b0:cb:88:b0:ed:16:6e:d7:7f:63:18: e8:87:03:b0:ae:f0:0f:eb:1e:78:fc:ae:5f:86:ed:31:31:5b: 9d:1a:b7:54:1b:33:53:9a:be:ac:d1:46:74:4c:62:7e:2b:39: 79:08:6f:43:08:46:e2:bb:d7:15:6f:3b:a8:03:f7:38:9c:2e: 65:de:f1:68:9a:ca:e9:58:d5:07:7d:41:02:c7:33:0f:24:f6: 17:d7:0b:9f:29:36:c2:41:b9:00:65:08:63:d8:0c:88:81:02: b1:ef:7f:0f:73:5a:6e:7b:cb:07:08:d4:56:f3:4b:96:e0:84: d8:a2:47:4e:40:13:d6:e6:21:f0:03:b5:e9:50:51:12:de:9b: 8f:90:d2:77:bf:90:17:70:7b:69:c3:f7:2e:5d:d9:1d:f6:a3: f0:37:a9:94:91:c1:da:80:31:f7:d0:67:ce:57:7c:da:61:4a: 1d:94:8a:04:0b:7d:25:27:11:a3:1b:f8:e5:86:fb:80:16:cd: 24:6a:4f:17:eb:6a:58:1a:74:86:f7:74:d9:1f:04:f3:13:f9: 4b:75:48:cd:91:55:39:95:e9:49:56:8f:6f:03:ed:df:84:4a: a9:28:00:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWTuj6dEMq3gg8v8sSXFtNvReqFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUyMDU4WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjRhNTVhMGMzYTQ5YmY1NjE5MWRjMzU5MTRiN2JmYjc4 ODcxMzJjODgxNzZiY2JiMjEzNzZlY2Q3NGQ1MmFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnFvNeuDqZ6nyK3M5HC5Fce15on89V7hrmt6SwFt0xKDMa aNPm15NRQRh/q2n5YMiG9dk1GpRCxpRlkbvAf6HSfmHhKTcb7SVyvgabPywzP2UV xl3zpX7ioX4t59laXcg7+gUHVdxHgFt+M4OOJQN0JLykzL946mT5vLSp7ho6BCuN 41zCjb5bXUGgwT/jHCUKRsBD0co7FJ4XKWO8Cy4BmmSdq+ENNFkg9SaQP1b3a+ca meCv/z11Ze9sYR2yFAEF3csJ9A+h3uf/yZxgdecQhnB0T0gpeANbN74/4VD6pb4d TXt0Pfj+TEb1+6lqmSoMcHE1eumfTl6IieHuSOEhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU47eDoCtT9E3oS4HpR5jIaEp1hlwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMTcxM2ZhLWU1ZGUtNGNlYS05YTc2LWEwZTBkY2Y2YzgzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXClEAwDQYJKoZIhvcNAQELBQADggEBAAPlq4XL+ABoYSBdwrOMjw1sqTdV RCGLzfOwy4iw7RZu139jGOiHA7Cu8A/rHnj8rl+G7TExW50at1QbM1OavqzRRnRM Yn4rOXkIb0MIRuK71xVvO6gD9zicLmXe8WiayulY1Qd9QQLHMw8k9hfXC58pNsJB uQBlCGPYDIiBArHvfw9zWm57ywcI1FbzS5bghNiiR05AE9bmIfADtelQURLem4+Q 0ne/kBdwe2nD9y5d2R32o/A3qZSRwdqAMffQZ85XfNphSh2UigQLfSUnEaMb+OWG +4AWzSRqTxfralgadIb3dNkfBPMT+Ut1SM2RVTmV6UlWj28D7d+ESqkoAAE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:03 2025 by rpki-client