$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa File: 3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa (raw, json) Hash identifier: WUXFHhha5HH+tMLso5gY3/yEGpa5zSYZCjnb3KL2Huw= Subject key identifier: B5:F1:35:D6:4D:EB:6F:1B:60:D8:B9:E1:6A:9D:F3:1D:B7:E8:85:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C5B37D8D4D886F4509035CBD66CA897ADEC7A08 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa Signing time: Wed 16 Apr 2025 20:37:11 +0000 ROA not before: Wed 16 Apr 2025 20:37:11 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 158.252.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5b:37:d8:d4:d8:86:f4:50:90:35:cb:d6:6c:a8:97:ad:ec:7a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 20:37:11 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=afbcbc4ad246ebdb71ffa4a7376eaba7b1dc0f319f0a7f42f9dcda45ceca7e4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:c5:73:dd:0e:81:c3:ee:22:8c:5c:e6:b5: b4:28:f5:b0:62:36:6e:54:ee:65:f1:2d:96:f4:ad: 3f:cc:a4:e9:2a:e4:32:1a:31:ab:73:2b:56:fe:92: f6:68:36:d1:ee:b8:2a:97:1d:6f:38:71:9f:e5:b9: ed:24:05:fd:e1:5c:52:5b:a8:7a:b8:79:86:a5:5b: 7d:35:88:d2:cf:f6:a3:b7:c7:e0:00:86:98:75:91: a4:6a:a9:6d:48:8c:fd:24:ae:11:79:8f:b1:28:7f: 7a:ff:13:2b:54:a9:5f:fd:72:58:92:53:1e:ac:df: 61:74:78:59:81:1e:f6:b2:e9:2e:8f:52:45:d6:be: 0e:e2:9d:21:5e:4e:2e:cb:96:08:51:c8:b9:87:f8: 4b:9a:f7:83:8e:f4:09:4e:81:27:ff:e1:ce:6c:4a: ca:0d:ce:34:52:0c:e3:01:7c:17:c9:35:8c:1c:a6: 78:5a:b9:22:dd:1c:46:e1:b6:24:74:63:fc:48:5c: d4:62:72:44:41:63:60:29:e0:19:7c:6b:3e:f6:b5: 9b:f1:ef:c7:51:96:e0:f2:58:80:a6:7a:c5:32:b2: af:c7:d9:29:22:b3:14:71:ec:d7:69:3e:ee:1b:e7: 79:29:2c:88:f2:5e:ec:01:df:89:64:4c:28:9e:d1: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F1:35:D6:4D:EB:6F:1B:60:D8:B9:E1:6A:9D:F3:1D:B7:E8:85:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.252.0.0/15 Signature Algorithm: sha256WithRSAEncryption 59:35:7d:37:4d:10:a4:5e:0b:6e:b7:bb:45:25:43:ed:fe:37: 67:22:3a:32:8c:21:b8:0a:69:9c:f8:43:95:7e:63:c7:4e:b1: cd:ed:99:6b:4a:6f:4b:c6:34:f8:bb:74:54:6d:12:8c:20:e0: b9:96:5c:8c:27:f6:8a:31:f0:3a:6b:11:db:ae:e9:79:05:1b: 20:1c:5b:b6:cc:70:f8:78:ea:a8:52:57:74:43:55:45:8b:02: e6:c2:7b:a8:a0:49:f3:59:1f:1d:38:cb:5d:1f:25:3f:ba:2d: 27:a8:4e:8b:86:b4:65:7e:b0:1a:de:b8:b8:5d:a9:13:2a:00: ff:51:b2:34:25:e3:79:23:be:a4:c8:3f:b9:07:59:57:8d:4b: c4:5c:b6:12:a6:8a:e9:56:e5:d6:2c:2b:91:49:05:c2:0a:71: d0:45:06:c1:de:c1:d6:cd:1d:47:98:04:d1:fb:1c:01:e1:12: 1e:88:7b:4c:c2:0a:f1:22:ed:64:0f:35:fb:f8:13:3f:82:cf: 20:79:27:fd:1f:17:01:59:e0:74:95:82:16:b1:d2:55:b6:00: 2a:55:0e:ac:ca:5a:99:83:56:2b:2d:8a:49:f3:6c:82:cf:14: 2a:0a:2d:6f:7a:0a:3a:d2:39:db:d2:45:d4:86:2e:53:0d:61: 8b:13:2e:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXFs32NTYhvRQkDXL1myol63seggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE2MjAzNzExWhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmJjYmM0YWQyNDZlYmRiNzFmZmE0YTczNzZlYWJhN2Ix ZGMwZjMxOWYwYTdmNDJmOWRjZGE0NWNlY2E3ZTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEHcVz3Q6Bw+4ijFzmtbQo9bBiNm5U7mXxLZb0rT/MpOkq 5DIaMatzK1b+kvZoNtHuuCqXHW84cZ/lue0kBf3hXFJbqHq4eYalW301iNLP9qO3 x+AAhph1kaRqqW1IjP0krhF5j7Eof3r/EytUqV/9cliSUx6s32F0eFmBHvay6S6P UkXWvg7inSFeTi7LlghRyLmH+Eua94OO9AlOgSf/4c5sSsoNzjRSDOMBfBfJNYwc pnhauSLdHEbhtiR0Y/xIXNRickRBY2Ap4Bl8az72tZvx78dRluDyWICmesUysq/H 2SkisxRx7NdpPu4b53kpLIjyXuwB34lkTCie0cztAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtfE11k3rbxtg2Lnhap3zHbfohVgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmYTBjODJiLTNmNjQtNGJmYy04NDU2LWFkMmM2ZmUwYmM2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGe/DANBgkqhkiG9w0BAQsFAAOCAQEAWTV9N00QpF4Lbre7RSVD7f43ZyI6 MowhuAppnPhDlX5jx06xze2Za0pvS8Y0+Lt0VG0SjCDguZZcjCf2ijHwOmsR267p eQUbIBxbtsxw+HjqqFJXdENVRYsC5sJ7qKBJ81kfHTjLXR8lP7otJ6hOi4a0ZX6w Gt64uF2pEyoA/1GyNCXjeSO+pMg/uQdZV41LxFy2EqaK6Vbl1iwrkUkFwgpx0EUG wd7B1s0dR5gE0fscAeESHoh7TMIK8SLtZA81+/gTP4LPIHkn/R8XAVngdJWCFrHS VbYAKlUOrMpamYNWKy2KSfNsgs8UKgotb3oKOtI529JF1IYuUw1hixMuJw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:16 2025 by rpki-client