$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa File: 386ccd05-1fa4-42cd-8a87-843146c1c015.roa (raw, json) Hash identifier: 3ApjN6VaBVPn4rabup8xYJZ227yQl7OK8dBcvxgjo9M= Subject key identifier: 4A:E4:0E:66:07:26:72:1A:BA:B2:E5:E4:E4:BC:C2:E5:02:08:F4:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50C078BD0D3D107168C3703394EFE225A9800A68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa Signing time: Fri 25 Apr 2025 15:11:29 +0000 ROA not before: Fri 25 Apr 2025 15:11:29 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 83.128.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c0:78:bd:0d:3d:10:71:68:c3:70:33:94:ef:e2:25:a9:80:0a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:11:29 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f69f7866d61e486ea024d9c5a5bb4476bc2f1151488094eeafe4c2df756e27e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:51:dc:15:22:67:20:69:3c:3b:ea:48:f6: 39:a5:a6:58:6c:74:fa:12:2a:01:78:b6:bb:25:dd: 0e:d8:fe:2a:44:d1:3a:0c:74:a5:f3:0e:40:f5:e2: d1:82:cc:2c:34:39:5d:11:b1:45:26:3f:36:c7:f4: e6:66:6b:01:54:63:a1:2e:df:38:14:06:40:e9:26: b1:89:2c:63:bf:8d:f8:1d:fa:a3:88:5f:c8:ce:89: c8:79:c0:4d:de:09:d7:63:ed:49:bd:76:f1:c1:85: ac:de:f4:38:72:64:3f:12:aa:9a:56:cf:68:27:71: 30:e2:81:c6:8e:db:99:9d:e6:ad:fe:8f:62:16:45: 81:72:2d:ef:0c:53:b9:dd:43:f8:f1:4f:ca:32:9f: c1:56:de:61:28:3e:2a:c4:c0:2b:d7:21:fa:5a:a4: a4:11:24:57:4a:2c:86:28:f1:23:24:35:1e:7a:b7: 37:f6:3b:30:42:28:00:38:25:92:25:8d:10:2e:be: 6c:5f:3a:48:42:6b:b6:fa:7a:1a:2b:1e:b7:6c:66: 70:4d:63:b7:c3:48:d5:7b:45:fb:07:a7:35:a4:f4: 8f:c7:95:e2:76:bd:5a:4c:52:6e:2a:f7:af:ef:7c: e6:68:75:b6:34:6f:b6:54:f8:1e:fb:c5:ea:2b:99: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E4:0E:66:07:26:72:1A:BA:B2:E5:E4:E4:BC:C2:E5:02:08:F4:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/386ccd05-1fa4-42cd-8a87-843146c1c015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption d0:97:ad:af:a6:c2:f9:c1:96:65:9a:9d:f8:e4:e2:cc:ab:57: ab:2c:d6:2c:0f:bd:bc:fa:7c:67:b6:a9:81:1f:27:c0:8e:2b: c2:c4:f8:1c:d8:bc:d7:43:c1:6b:3d:29:9c:f5:7d:ac:96:ab: 00:5d:d8:8f:80:0d:db:a0:4d:00:e0:8d:f0:06:ad:23:bb:5c: 26:b3:bf:77:a4:e4:c5:b8:2c:19:a5:92:fd:49:15:fe:c7:7b: df:93:fe:bc:b0:5e:62:70:60:21:46:3d:55:35:c5:0d:58:e0: dd:7a:e0:5e:00:19:1a:a8:ef:e2:37:c2:cb:3c:59:31:c5:e8: 77:0e:0e:65:ab:1d:70:87:79:5a:44:f1:2a:be:b2:e5:a0:63: 43:7a:66:f7:5d:43:f5:b3:02:03:d3:c6:f2:c2:77:7f:a9:ad: 23:d8:ff:81:2a:e0:19:39:da:13:94:7e:47:68:3a:ec:2e:c1: 54:b3:9f:76:eb:b9:aa:2b:3d:29:d3:95:ae:ac:b8:0c:7c:93: 4b:13:89:14:23:86:98:df:e8:d5:ed:e2:34:90:fb:0d:a4:2e: ae:38:6e:39:54:aa:b6:93:17:a9:a1:1a:44:4a:97:b6:e4:a4: 9d:c6:de:f6:62:59:34:f8:90:3c:96:02:13:ed:83:32:09:e2: b5:6b:dc:d0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUMB4vQ09EHFow3AzlO/iJamACmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMTI5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjlmNzg2NmQ2MWU0ODZlYTAyNGQ5YzVhNWJiNDQ3NmJj MmYxMTUxNDg4MDk0ZWVhZmU0YzJkZjc1NmUyN2UwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2sFHcFSJnIGk8O+pI9jmlplhsdPoSKgF4trsl3Q7Y/ipE 0ToMdKXzDkD14tGCzCw0OV0RsUUmPzbH9OZmawFUY6Eu3zgUBkDpJrGJLGO/jfgd +qOIX8jOich5wE3eCddj7Um9dvHBhaze9DhyZD8SqppWz2gncTDigcaO25md5q3+ j2IWRYFyLe8MU7ndQ/jxT8oyn8FW3mEoPirEwCvXIfpapKQRJFdKLIYo8SMkNR56 tzf2OzBCKAA4JZIljRAuvmxfOkhCa7b6ehorHrdsZnBNY7fDSNV7RfsHpzWk9I/H leJ2vVpMUm4q96/vfOZodbY0b7ZU+B77xeormd6TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSuQOZgcmchq6suXk5LzC5QII9MwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4NmNjZDA1LTFmYTQtNDJjZC04YTg3LTg0MzE0NmMxYzAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBTgDANBgkqhkiG9w0BAQsFAAOCAQEA0Jetr6bC+cGWZZqd+OTizKtXqyzW LA+9vPp8Z7apgR8nwI4rwsT4HNi810PBaz0pnPV9rJarAF3Yj4AN26BNAOCN8Aat I7tcJrO/d6TkxbgsGaWS/UkV/sd735P+vLBeYnBgIUY9VTXFDVjg3XrgXgAZGqjv 4jfCyzxZMcXodw4OZasdcId5WkTxKr6y5aBjQ3pm911D9bMCA9PG8sJ3f6mtI9j/ gSrgGTnaE5R+R2g67C7BVLOfduu5qis9KdOVrqy4DHyTSxOJFCOGmN/o1e3iNJD7 DaQurjhuOVSqtpMXqaEaREqXtuSkncbe9mJZNPiQPJYCE+2DMgnitWvc0A== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:17 2025 by rpki-client