$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f5100a1-9182-409a-aacd-de6217f098f6.roa File: 3f5100a1-9182-409a-aacd-de6217f098f6.roa (raw, json) Hash identifier: /9U4i9XauggZ26UqDu+mcnBWrffSqSYJmrvrLuq547w= Subject key identifier: 32:20:B3:67:23:33:B7:D2:B2:A3:20:C8:92:1F:26:16:F5:48:6E:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 045F4EC37DD5CA9006EFC2283D169130A68384BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f5100a1-9182-409a-aacd-de6217f098f6.roa Signing time: Wed 23 Apr 2025 00:51:51 +0000 ROA not before: Wed 23 Apr 2025 00:51:51 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 182.30.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5f:4e:c3:7d:d5:ca:90:06:ef:c2:28:3d:16:91:30:a6:83:84:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:51:51 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=8ad9a383eff7eefa15754f528a96b115f5bc56df69880f5ab9cdb966c2e1f225, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7a:ed:00:37:07:0c:d6:f7:bf:8c:d4:ec:7b: 5a:38:b6:e9:79:2e:03:80:fa:e5:7d:e6:fb:37:3a: 54:32:9a:2f:47:15:67:26:8e:78:49:ce:28:02:8f: ab:12:2f:c0:1e:79:f0:5f:23:16:e8:ba:56:0d:3a: 5a:a0:32:5a:a0:6c:7c:f7:2c:f3:31:60:42:7e:60: 0a:44:c8:d2:63:e3:9c:0c:16:fb:3d:0e:e4:1c:ef: 5a:e1:37:3d:cb:1e:4a:73:ce:65:a6:8e:ce:75:40: 13:fc:43:bc:33:cd:64:4b:0d:a9:61:e7:f4:b2:06: 90:d6:f6:0c:7d:63:63:4f:8c:68:5a:ae:84:f6:44: 44:d5:ec:d5:15:24:cd:27:ed:08:d7:02:2e:7a:c6: b8:7c:52:28:af:d1:86:e2:a8:57:0a:36:53:85:27: a2:0a:5f:51:45:e8:86:e2:4a:28:a5:5a:ec:df:b4: e9:40:f8:95:b3:a0:d5:20:23:8d:cc:02:0c:87:50: ac:95:ea:13:2a:a2:3f:07:64:e3:f7:23:a0:1d:e7: f9:37:68:9a:98:82:3f:ee:98:d5:bb:f9:fe:4a:e8: d5:e1:27:6c:cc:f7:f3:0b:de:13:36:84:1e:29:24: 39:97:77:8e:a6:6b:19:6d:8e:bc:cf:21:51:b4:43: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:20:B3:67:23:33:B7:D2:B2:A3:20:C8:92:1F:26:16:F5:48:6E:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f5100a1-9182-409a-aacd-de6217f098f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.30.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4e:d3:54:c6:aa:5d:15:36:9d:e6:6e:64:df:0b:73:ca:b0:6b: 70:4e:cb:52:16:dc:a0:58:f5:17:d7:59:5e:ab:8f:2d:d0:4e: e4:a3:f6:7d:4c:ca:a6:27:1c:c0:67:d9:f5:2f:f0:13:5a:3b: 91:36:26:6c:8c:3a:4a:02:ba:a7:91:21:0c:8c:61:21:83:e4: d8:c7:2e:76:8e:58:20:38:a7:83:f2:8d:7e:2d:4b:94:c6:01: b9:bf:a0:2d:6f:22:ee:06:ab:1d:49:a6:a9:ea:f0:b2:96:ea: 5f:9d:30:a0:ac:56:50:1d:c0:7d:e4:4c:47:bc:d6:74:78:93: cb:6f:4e:98:01:88:3c:91:ca:01:59:e6:06:f2:89:7c:9e:25: 6b:ce:92:32:f9:21:2c:95:f7:0e:d7:9c:c5:9f:df:2f:f5:67: 66:d3:81:7e:c0:7d:11:b5:39:fa:e3:46:f1:10:65:81:32:d2: ea:aa:05:62:70:26:17:0e:8b:ee:77:46:db:a7:c1:f3:66:ac: ab:db:1c:d7:08:3e:bf:d8:28:a2:33:8f:44:36:52:e2:bb:89: 4b:5a:77:94:dc:88:12:bc:2f:86:fe:58:54:c3:1f:b5:76:62: 52:2c:c3:16:81:50:08:3b:5f:56:41:25:c7:9e:43:6d:bf:56: dd:25:6d:37 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBF9Ow33VypAG78IoPRaRMKaDhL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA1MTUxWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWQ5YTM4M2VmZjdlZWZhMTU3NTRmNTI4YTk2YjExNWY1 YmM1NmRmNjk4ODBmNWFiOWNkYjk2NmMyZTFmMjI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDueu0ANwcM1ve/jNTse1o4tul5LgOA+uV95vs3OlQymi9H FWcmjnhJzigCj6sSL8AeefBfIxboulYNOlqgMlqgbHz3LPMxYEJ+YApEyNJj45wM Fvs9DuQc71rhNz3LHkpzzmWmjs51QBP8Q7wzzWRLDalh5/SyBpDW9gx9Y2NPjGha roT2RETV7NUVJM0n7QjXAi56xrh8Uiiv0YbiqFcKNlOFJ6IKX1FF6IbiSiilWuzf tOlA+JWzoNUgI43MAgyHUKyV6hMqoj8HZOP3I6Ad5/k3aJqYgj/umNW7+f5K6NXh J2zM9/ML3hM2hB4pJDmXd46maxltjrzPIVG0Q0kVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMiCzZyMzt9KyoyDIkh8mFvVIbq4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmNTEwMGExLTkxODItNDA5YS1hYWNkLWRlNjIxN2YwOThmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwC2HjANBgkqhkiG9w0BAQsFAAOCAQEATtNUxqpdFTad5m5k3wtzyrBrcE7L UhbcoFj1F9dZXquPLdBO5KP2fUzKpiccwGfZ9S/wE1o7kTYmbIw6SgK6p5EhDIxh IYPk2Mcudo5YIDing/KNfi1LlMYBub+gLW8i7garHUmmqerwspbqX50woKxWUB3A feRMR7zWdHiTy29OmAGIPJHKAVnmBvKJfJ4la86SMvkhLJX3DtecxZ/fL/VnZtOB fsB9EbU5+uNG8RBlgTLS6qoFYnAmFw6L7ndG26fB82asq9sc1wg+v9goojOPRDZS 4ruJS1p3lNyIErwvhv5YVMMftXZiUizDFoFQCDtfVkElx55Dbb9W3SVtNw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:06 2025 by rpki-client