$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa File: 30290b49-2338-484b-b6b1-a4e2daf71d2c.roa (raw, json) Hash identifier: 5CH/XhRXazmK7ed95q5gngMVy+gEIsBC1tWU2PNL7HY= Subject key identifier: 82:BA:45:E4:F8:62:F6:B4:67:42:D4:B3:45:64:12:25:CF:10:D1:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 171F57B56F9F65521FC1CDD574ED80B26A6E33C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa Signing time: Tue 08 Apr 2025 00:31:51 +0000 ROA not before: Tue 08 Apr 2025 00:31:51 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1f:57:b5:6f:9f:65:52:1f:c1:cd:d5:74:ed:80:b2:6a:6e:33:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:31:51 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=7fa864a3e94dc9a15ee8dede118837ce181d7dac5a9ca64bf6e87cda32a2289f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:f3:30:f6:d3:9a:cd:0a:5d:19:15:f6:8c: 8b:c2:47:49:4d:31:72:16:fa:b2:b6:d0:be:c0:be: 59:e9:a8:1c:e5:c2:19:54:c1:ee:68:b3:98:a7:2e: 63:fa:7d:61:b0:23:af:c0:49:3d:7a:6e:4a:84:69: bd:d4:64:9d:26:86:ec:3c:91:d2:e7:e6:63:d5:c8: 5e:50:a0:48:99:41:88:a1:bc:35:31:27:c2:a4:51: cf:85:20:39:54:2e:5b:f5:75:2b:33:54:24:6d:ae: 25:54:81:e2:5f:88:56:6f:4e:7a:70:2b:5a:dc:5d: 26:9a:df:b4:0a:1d:76:ff:3d:1a:c7:e7:31:e6:7d: 5a:62:70:97:ef:54:1c:98:d5:44:37:47:41:f4:60: e1:fc:c3:e2:0d:13:25:9a:09:41:88:7b:58:5e:80: c6:99:0d:38:e9:de:0d:22:df:8f:10:04:66:6a:39: c2:fa:3c:42:18:fe:20:1d:64:4a:87:c2:a6:46:bd: 1c:be:71:52:90:be:45:4c:e1:1e:e5:4d:0d:0f:67: 7d:24:63:c6:bc:1b:d7:e8:3e:8e:a5:f9:8e:4a:0c: 0c:4f:75:0c:fc:95:f1:74:2b:75:f1:e8:6c:06:3b: c1:1e:59:19:85:88:67:07:7f:4d:a9:2e:1c:fd:a3: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BA:45:E4:F8:62:F6:B4:67:42:D4:B3:45:64:12:25:CF:10:D1:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30290b49-2338-484b-b6b1-a4e2daf71d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.38.0.0/16 Signature Algorithm: sha256WithRSAEncryption c5:b4:11:02:73:27:ed:fb:e8:2f:80:57:22:70:c7:4e:8a:ff: 73:06:a9:e8:76:89:ae:df:1c:92:29:e5:2d:39:9c:fc:4c:b7: 48:2e:51:f9:82:76:d8:c4:9e:bb:01:26:72:6a:86:a1:66:e0: 82:23:92:f3:2e:91:46:bf:18:6b:04:ef:6d:1b:0e:c5:7a:6c: c1:71:0a:3d:2c:89:91:a0:58:37:e8:c4:e4:29:6d:92:af:0d: d9:74:00:31:e5:41:3b:5e:66:63:49:27:98:58:f8:f6:e3:6a: 13:1a:cb:3b:e9:86:5d:51:d1:57:cf:5e:a0:80:fa:a5:41:0e: 87:11:9c:53:c5:6f:33:98:0e:42:4a:90:6f:0f:44:81:08:e0: e3:ed:7d:fc:06:e6:e1:b2:28:43:15:c2:da:75:91:e7:95:b1: 28:c6:dd:20:46:8b:5a:a0:53:f8:37:48:c9:d5:55:91:45:5b: 13:c7:43:ac:66:ad:cf:c3:5b:91:3f:fd:72:5f:b7:af:96:27: 50:7d:ba:0f:f8:3e:9e:f6:84:32:04:a9:6d:23:a0:fa:f2:9f: 26:df:c7:12:15:f6:72:10:cb:cf:af:b9:b3:69:f4:ae:74:6b: 7d:f7:a9:87:f8:aa:cf:3b:0b:c8:69:88:bd:ee:92:75:5f:5a: 19:f4:6e:96 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFx9XtW+fZVIfwc3VdO2AsmpuM8MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAzMTUxWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmE4NjRhM2U5NGRjOWExNWVlOGRlZGUxMTg4MzdjZTE4 MWQ3ZGFjNWE5Y2E2NGJmNmU4N2NkYTMyYTIyODlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1zvMw9tOazQpdGRX2jIvCR0lNMXIW+rK20L7AvlnpqBzl whlUwe5os5inLmP6fWGwI6/AST16bkqEab3UZJ0mhuw8kdLn5mPVyF5QoEiZQYih vDUxJ8KkUc+FIDlULlv1dSszVCRtriVUgeJfiFZvTnpwK1rcXSaa37QKHXb/PRrH 5zHmfVpicJfvVByY1UQ3R0H0YOH8w+INEyWaCUGIe1hegMaZDTjp3g0i348QBGZq OcL6PEIY/iAdZEqHwqZGvRy+cVKQvkVM4R7lTQ0PZ30kY8a8G9foPo6l+Y5KDAxP dQz8lfF0K3Xx6GwGO8EeWRmFiGcHf02pLhz9o92ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgrpF5Phi9rRnQtSzRWQSJc8Q0QwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwMjkwYjQ5LTIzMzgtNDg0Yi1iNmIxLWE0ZTJkYWY3MWQyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4JjANBgkqhkiG9w0BAQsFAAOCAQEAxbQRAnMn7fvoL4BXInDHTor/cwap 6HaJrt8ckinlLTmc/Ey3SC5R+YJ22MSeuwEmcmqGoWbggiOS8y6RRr8YawTvbRsO xXpswXEKPSyJkaBYN+jE5Cltkq8N2XQAMeVBO15mY0knmFj49uNqExrLO+mGXVHR V89eoID6pUEOhxGcU8VvM5gOQkqQbw9EgQjg4+19/Abm4bIoQxXC2nWR55WxKMbd IEaLWqBT+DdIydVVkUVbE8dDrGatz8NbkT/9cl+3r5YnUH26D/g+nvaEMgSpbSOg +vKfJt/HEhX2chDLz6+5s2n0rnRrffeph/iqzzsLyGmIve6SdV9aGfRulg== -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:45 2025 by rpki-client