$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa File: 3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa (raw, json) Hash identifier: xab+coCIejwDLTw5q4bixIWBTnleeop/XAeDcNmEnbQ= Subject key identifier: 29:11:24:2E:10:CE:2D:C7:93:46:E2:9C:74:EE:68:00:9E:3E:52:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A2220C9C8CC8254C1DCE7988A3C9C1FB5F7F795 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa Signing time: Fri 25 Apr 2025 15:10:44 +0000 ROA not before: Fri 25 Apr 2025 15:10:44 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 75.101.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:22:20:c9:c8:cc:82:54:c1:dc:e7:98:8a:3c:9c:1f:b5:f7:f7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:10:44 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6fba19da5b25d1c4a612612a7a907df86236e9919402f6789e8ad827425992d7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:25:86:d2:46:c2:bc:c2:98:97:3d:07:62: 3b:70:25:fb:e4:7a:eb:9e:11:1f:b7:bc:0a:c8:f6: 10:3e:ae:2b:10:d0:d6:82:63:1d:02:cc:f4:85:72: 49:ab:f4:d0:c0:f8:ff:8d:39:c3:ec:0c:03:6d:ac: fb:ab:72:22:f3:05:00:99:ae:06:fa:00:fe:5f:e0: c8:9c:fe:c6:7f:a7:92:c1:43:2a:8c:9c:ea:15:df: 8d:b3:80:15:12:5b:2c:4c:f7:50:3d:48:6b:6e:d6: c8:a6:30:a9:81:3a:0d:6d:03:5d:54:ac:83:51:8b: 7e:12:d9:38:6e:43:2c:cc:d1:5b:b1:d1:31:9a:a3: d0:af:c0:2b:ce:fb:89:0c:a3:7a:66:26:2b:c9:5e: c2:1b:6c:a6:5b:e5:f8:eb:75:68:b2:19:3c:b9:d0: a7:fb:18:8a:61:b8:bb:b9:88:6f:81:1a:1c:b1:f2: 62:bc:9e:25:8f:d7:9d:a7:60:00:c3:32:82:25:53: 4d:34:25:fc:0c:d2:8b:5f:7c:b5:e8:41:5b:0d:fc: 49:d5:41:14:db:cf:7f:7c:91:6c:6b:88:8e:8f:e8: 51:d3:73:e2:42:27:e4:26:90:bc:21:f8:22:5d:34: 53:42:7d:c9:7d:77:41:e6:c7:4f:1e:71:80:8b:2f: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:11:24:2E:10:CE:2D:C7:93:46:E2:9C:74:EE:68:00:9E:3E:52:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.101.128.0/19 Signature Algorithm: sha256WithRSAEncryption ac:49:05:e8:d2:ef:5c:01:1c:df:e2:4b:99:b0:fc:40:38:7f: 90:04:4d:8d:61:16:a3:a5:d6:e4:5b:76:30:1a:d6:e9:34:2a: eb:b1:a3:52:e2:5d:4f:62:af:04:9f:1b:75:9e:df:f6:80:95: 42:64:cb:65:c4:f3:6d:bb:76:ee:ba:28:b0:a5:ad:bf:01:d4: 3c:1e:e8:e3:09:4a:05:73:6d:a5:78:90:b9:6b:2e:df:08:d6: 33:26:13:d7:a8:86:3b:2e:fb:16:f1:83:3e:f6:e6:fa:62:80: 81:a2:16:3f:17:6d:51:f5:a6:40:c3:1a:db:d4:f1:45:33:d7: 4f:d8:d9:a7:e8:3f:32:d2:60:08:e8:4e:bc:61:d0:8c:ce:05: ba:15:93:26:c2:1c:a3:45:53:e1:f6:93:9a:e6:03:26:ff:ac: 45:16:f8:2d:8d:2a:22:04:7d:10:59:a7:27:82:d9:b7:59:78: c9:88:e8:d1:f0:54:62:eb:93:c1:5c:05:6d:2b:15:46:7c:ff: f9:29:19:dd:a6:9e:17:b6:68:67:95:92:ec:3f:62:f6:98:c3: ec:18:b0:25:1e:82:c9:58:f1:c4:93:28:46:e9:3f:b5:d6:71: 60:25:b5:48:ab:f9:71:eb:eb:fe:db:49:53:d8:78:48:95:36: ce:8e:f3:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWiIgycjMglTB3OeYijycH7X395UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMDQ0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmJhMTlkYTViMjVkMWM0YTYxMjYxMmE3YTkwN2RmODYy MzZlOTkxOTQwMmY2Nzg5ZThhZDgyNzQyNTk5MmQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKgiWG0kbCvMKYlz0HYjtwJfvkeuueER+3vArI9hA+risQ 0NaCYx0CzPSFckmr9NDA+P+NOcPsDANtrPurciLzBQCZrgb6AP5f4Mic/sZ/p5LB QyqMnOoV342zgBUSWyxM91A9SGtu1simMKmBOg1tA11UrINRi34S2ThuQyzM0Vux 0TGao9CvwCvO+4kMo3pmJivJXsIbbKZb5fjrdWiyGTy50Kf7GIphuLu5iG+BGhyx 8mK8niWP152nYADDMoIlU000JfwM0otffLXoQVsN/EnVQRTbz398kWxriI6P6FHT c+JCJ+QmkLwh+CJdNFNCfcl9d0Hmx08ecYCLL7AnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKREkLhDOLceTRuKcdO5oAJ4+UpMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2NDJmMWZhLWZhNmItNGNmZS1iMTI1LTczMzk1MWYzZWJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLZYAwDQYJKoZIhvcNAQELBQADggEBAKxJBejS71wBHN/iS5mw/EA4f5AE TY1hFqOl1uRbdjAa1uk0Kuuxo1LiXU9irwSfG3We3/aAlUJky2XE8227du66KLCl rb8B1Dwe6OMJSgVzbaV4kLlrLt8I1jMmE9eohjsu+xbxgz725vpigIGiFj8XbVH1 pkDDGtvU8UUz10/Y2afoPzLSYAjoTrxh0IzOBboVkybCHKNFU+H2k5rmAyb/rEUW +C2NKiIEfRBZpyeC2bdZeMmI6NHwVGLrk8FcBW0rFUZ8//kpGd2mnhe2aGeVkuw/ YvaYw+wYsCUegslY8cSTKEbpP7XWcWAltUir+XHr6/7bSVPYeEiVNs6O8+w= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:40 2025 by rpki-client