$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa File: 3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa (raw, json) Hash identifier: HYfaIGT3njzdSk7qUIpm4+1wpmb9iqXAJbkB5mjQWdM= Subject key identifier: A4:51:6B:E8:75:90:FE:11:57:CD:2F:AA:F5:E6:E0:EF:C5:76:A1:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 569FD9CBA1722A6BCC01D46A78FC776055B386C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa Signing time: Sat 26 Apr 2025 00:00:16 +0000 ROA not before: Sat 26 Apr 2025 00:00:16 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.31.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9f:d9:cb:a1:72:2a:6b:cc:01:d4:6a:78:fc:77:60:55:b3:86:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:00:16 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=2ca213eb80b99c59cb9c8a83dea2a4a1ef650d9d9069e5e5de483e577fb36ad2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:a8:bf:89:45:4a:71:bc:bd:92:e4:c4:29: 01:15:b6:d0:03:7e:b1:42:11:2f:9e:4c:f4:c6:7f: d4:ac:8b:4d:fc:ab:e9:c9:8c:8c:15:bf:ba:26:3f: 7a:5a:e9:ee:90:31:79:e6:5d:fd:d5:40:ff:4a:2e: d4:d5:4e:89:a0:3a:88:57:9f:24:c2:c6:e3:0c:aa: f9:63:65:81:de:fa:84:c9:fe:36:bf:a9:df:89:43: 77:dd:20:27:2c:6b:34:34:5a:a2:4d:fd:01:0d:13: 79:bb:83:f3:55:82:7d:29:c9:89:15:b6:17:73:91: 17:8a:09:bb:8e:86:05:54:4c:ba:41:a0:5c:ca:b8: e6:99:fa:05:21:28:02:49:42:aa:38:9c:6f:20:24: 79:84:9a:4e:37:f7:90:f1:b2:b3:af:20:1d:0d:10: a4:d7:49:54:66:a0:81:df:9a:fb:78:35:ce:8d:78: 8a:1d:33:a6:bc:29:6c:9d:09:0f:d8:79:a6:9e:31: 54:fb:82:cf:b3:32:af:fc:82:6b:0c:0f:b1:88:82: 61:b9:ae:6a:c1:e5:19:b3:91:56:f9:59:c8:33:0f: 58:dd:84:21:02:44:56:02:ce:42:7a:dc:29:c9:d5: fe:60:f6:9a:31:1a:15:50:fc:6a:d9:13:60:f3:ef: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:6B:E8:75:90:FE:11:57:CD:2F:AA:F5:E6:E0:EF:C5:76:A1:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.31.212.0/24 Signature Algorithm: sha256WithRSAEncryption 76:e1:6b:68:2e:4c:f3:f6:8f:a7:69:4d:d8:8f:06:16:e7:89: 45:e3:02:c2:84:8d:74:38:22:32:fc:6b:73:ff:62:e8:80:b5: 9d:a8:3a:3f:69:8d:38:17:28:9f:58:ad:3d:5a:2c:bb:ee:33: 7c:fc:2e:c4:94:73:3e:41:64:73:d3:0f:cc:34:75:e8:83:67: 88:95:cd:6f:6f:ca:92:09:b0:27:bb:e6:b3:1b:eb:51:60:a5: b0:ca:4b:76:3f:c6:0e:91:cb:54:52:20:ff:ad:01:83:d8:7c: 0c:95:81:2b:55:94:a6:46:ae:9f:46:cf:2c:3a:ef:91:19:79: 25:9c:7a:b3:ac:cf:80:49:e3:6b:93:d5:35:a2:37:d6:8d:94: 06:a7:61:90:33:04:b0:13:10:3b:50:79:b2:ae:f8:a8:f1:b5: d1:cc:d4:f3:ff:eb:87:73:b2:b8:e6:24:72:f7:0a:14:f0:ad: aa:66:00:05:98:b4:95:4c:17:12:9a:ef:b9:4b:b5:dd:d2:9e: a5:3a:0c:cf:62:d5:5a:20:70:b3:1b:c4:2f:a6:61:e1:c5:2b: 34:3e:e5:04:8e:02:15:18:8b:01:b9:11:36:ba:cd:ab:fb:3f: 86:95:11:da:55:01:c8:a9:e7:57:1a:92:fe:81:7a:27:53:bc: 0a:d6:e6:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVp/Zy6FyKmvMAdRqePx3YFWzhsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMDE2WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2EyMTNlYjgwYjk5YzU5Y2I5YzhhODNkZWEyYTRhMWVm NjUwZDlkOTA2OWU1ZTVkZTQ4M2U1NzdmYjM2YWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWzai/iUVKcby9kuTEKQEVttADfrFCES+eTPTGf9Ssi038 q+nJjIwVv7omP3pa6e6QMXnmXf3VQP9KLtTVTomgOohXnyTCxuMMqvljZYHe+oTJ /ja/qd+JQ3fdICcsazQ0WqJN/QENE3m7g/NVgn0pyYkVthdzkReKCbuOhgVUTLpB oFzKuOaZ+gUhKAJJQqo4nG8gJHmEmk4395DxsrOvIB0NEKTXSVRmoIHfmvt4Nc6N eIodM6a8KWydCQ/YeaaeMVT7gs+zMq/8gmsMD7GIgmG5rmrB5RmzkVb5WcgzD1jd hCECRFYCzkJ63CnJ1f5g9poxGhVQ/GrZE2Dz70+HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpFFr6HWQ/hFXzS+q9ebg78V2oSAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhOWUyN2VlLWIxYjctNGM4ZS1iNWNmLTBjZmZjNjM4ODZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAH9QwDQYJKoZIhvcNAQELBQADggEBAHbha2guTPP2j6dpTdiPBhbniUXj AsKEjXQ4IjL8a3P/YuiAtZ2oOj9pjTgXKJ9YrT1aLLvuM3z8LsSUcz5BZHPTD8w0 deiDZ4iVzW9vypIJsCe75rMb61FgpbDKS3Y/xg6Ry1RSIP+tAYPYfAyVgStVlKZG rp9Gzyw675EZeSWcerOsz4BJ42uT1TWiN9aNlAanYZAzBLATEDtQebKu+KjxtdHM 1PP/64dzsrjmJHL3ChTwrapmAAWYtJVMFxKa77lLtd3SnqU6DM9i1VogcLMbxC+m YeHFKzQ+5QSOAhUYiwG5ETa6zav7P4aVEdpVAcip51cakv6BeidTvArW5kc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:38 2025 by rpki-client