$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa File: 2efb9bd0-475f-417d-8e72-8a50428e9da8.roa (raw, json) Hash identifier: g38QhoUPPVlKRKPQnjgl3/EY2Q5dAk01jh4PBWeBBGA= Subject key identifier: EE:AE:CA:FA:38:B5:56:19:DA:B7:74:22:37:E6:3A:FF:C6:33:AA:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 773020BB8DF1BC6759A4076310719493120B2992 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa Signing time: Tue 22 Apr 2025 00:01:28 +0000 ROA not before: Tue 22 Apr 2025 00:01:28 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:30:20:bb:8d:f1:bc:67:59:a4:07:63:10:71:94:93:12:0b:29:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:01:28 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=9505452be880bf937f7906b370ae88b0ced3ec6bb5e967f8d014fcf035615fc8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:6d:21:2f:8f:3b:5a:8d:60:49:c2:3d:36: f3:2c:6b:e6:31:01:f8:bd:4b:6d:87:11:1c:fb:91: 02:27:7e:c5:49:37:2b:cd:c7:2f:cc:07:1c:6d:b6: fd:f2:2a:b1:14:04:76:b9:79:fc:b2:91:a0:9b:ee: 70:df:7f:92:e7:d3:c5:79:8c:85:62:78:56:38:80: 88:e9:09:c4:ab:0f:12:cd:55:dc:3b:41:50:d3:ea: 26:39:61:34:37:b3:d3:be:ec:1c:ea:55:4a:f7:a0: c0:21:47:e1:4d:a0:6b:47:14:05:f7:16:49:21:d6: 03:5e:19:95:83:30:0d:ad:d7:4b:ed:2a:a9:d5:4b: 14:42:f9:45:49:31:19:8d:d7:0f:f0:02:f9:71:9e: a8:86:06:0e:6f:45:6e:cd:cd:7d:44:20:fc:84:16: 82:61:28:7b:82:c6:c0:db:f6:42:b3:f7:c5:2d:0f: 0b:87:13:9c:2d:7b:a4:05:5d:e3:79:3a:44:b0:46: 9b:0b:50:66:e8:ea:a0:10:1a:18:5b:82:a0:83:a8: bf:35:bc:0c:68:53:90:96:51:f2:a6:5f:8f:61:1a: e8:99:94:55:75:e5:32:36:95:ab:06:6d:94:de:0d: ff:61:b0:40:fa:bf:84:66:6c:15:18:8e:d7:d2:8a: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AE:CA:FA:38:B5:56:19:DA:B7:74:22:37:E6:3A:FF:C6:33:AA:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.52.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:fa:da:59:f3:af:dd:f4:c6:30:bb:45:13:9c:20:09:02:a9: d8:e8:56:65:17:69:e2:6a:8c:66:f6:ce:64:50:91:c5:f1:a0: f7:bd:1f:a9:4c:43:d5:1d:a0:b9:3d:d5:6a:33:40:e6:43:a7: 72:7c:2e:e6:8e:4f:8c:67:ae:0b:58:9a:35:4b:6c:37:b6:eb: 9c:d7:94:24:b7:35:c9:c1:15:a7:a3:93:21:d8:c9:3a:c6:7d: 67:f5:2e:9d:1d:c3:17:cf:9a:46:d5:ea:0a:81:4d:11:c1:33: 20:1f:de:c5:95:01:e5:ce:43:60:82:cf:b5:3b:cb:eb:61:8f: 4c:55:68:7d:01:25:0d:ba:4d:1a:de:4c:31:93:f4:d5:9d:3d: 3c:62:bf:8f:ec:91:ed:9c:d9:d4:b4:e7:fc:4d:02:f5:a1:a9: 61:cd:dd:4f:f2:71:20:cd:25:24:01:0f:18:ff:77:f8:b3:fc: 9d:ef:f2:0f:4c:4e:fc:e4:e3:4a:9b:a8:e1:9e:a5:f6:00:68: cb:5c:74:ed:b3:54:7b:0c:d9:21:8f:f9:d4:ca:c9:e4:7d:23: 0d:fe:9c:7f:d1:0a:98:42:52:b4:74:9b:98:aa:7d:a7:0c:36: 6a:b8:23:15:6b:c9:ea:5f:2c:90:b6:fc:4b:71:ab:7f:e1:7a: 3b:0a:8c:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdzAgu43xvGdZpAdjEHGUkxILKZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAwMTI4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTA1NDUyYmU4ODBiZjkzN2Y3OTA2YjM3MGFlODhiMGNl ZDNlYzZiYjVlOTY3ZjhkMDE0ZmNmMDM1NjE1ZmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnR20hL487Wo1gScI9NvMsa+YxAfi9S22HERz7kQInfsVJ NyvNxy/MBxxttv3yKrEUBHa5efyykaCb7nDff5Ln08V5jIVieFY4gIjpCcSrDxLN Vdw7QVDT6iY5YTQ3s9O+7BzqVUr3oMAhR+FNoGtHFAX3Fkkh1gNeGZWDMA2t10vt KqnVSxRC+UVJMRmN1w/wAvlxnqiGBg5vRW7NzX1EIPyEFoJhKHuCxsDb9kKz98Ut DwuHE5wte6QFXeN5OkSwRpsLUGbo6qAQGhhbgqCDqL81vAxoU5CWUfKmX49hGuiZ lFV15TI2lasGbZTeDf9hsED6v4RmbBUYjtfSipsnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7q7K+ji1Vhnat3QiN+Y6/8YzquowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlZmI5YmQwLTQ3NWYtNDE3ZC04ZTcyLThhNTA0MjhlOWRhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBszQwDQYJKoZIhvcNAQELBQADggEBACv62lnzr930xjC7RROcIAkCqdjo VmUXaeJqjGb2zmRQkcXxoPe9H6lMQ9UdoLk91WozQOZDp3J8LuaOT4xnrgtYmjVL bDe265zXlCS3NcnBFaejkyHYyTrGfWf1Lp0dwxfPmkbV6gqBTRHBMyAf3sWVAeXO Q2CCz7U7y+thj0xVaH0BJQ26TRreTDGT9NWdPTxiv4/ske2c2dS05/xNAvWhqWHN 3U/ycSDNJSQBDxj/d/iz/J3v8g9MTvzk40qbqOGepfYAaMtcdO2zVHsM2SGP+dTK yeR9Iw3+nH/RCphCUrR0m5iqfacMNmq4IxVryepfLJC2/Etxq3/hejsKjMM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:25 2025 by rpki-client