$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fe332a1-e627-48fb-af81-adef2af88de1.roa File: 3fe332a1-e627-48fb-af81-adef2af88de1.roa (raw, json) Hash identifier: zHoxVgv3ILHdaCyWy+ychOw3niMhphALQ4nbE/j23PQ= Subject key identifier: 38:CC:53:5A:19:42:30:A4:07:6D:5B:32:E3:CD:3D:4B:65:E3:C6:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E1F01A61EF10B72256EC3DA9C147F755C9486B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fe332a1-e627-48fb-af81-adef2af88de1.roa Signing time: Fri 25 Apr 2025 00:40:24 +0000 ROA not before: Fri 25 Apr 2025 00:40:24 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 5.60.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1f:01:a6:1e:f1:0b:72:25:6e:c3:da:9c:14:7f:75:5c:94:86:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:40:24 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f641e519133e42f00ebcd23d5819d87b3306119b585e88abc5fb53782a3e827d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:46:62:4f:b5:97:bd:c0:12:b0:3b:80:58:22: ad:be:78:eb:e9:f4:25:23:9f:31:1f:1d:63:53:2a: 96:3c:28:44:14:12:c1:42:6a:c0:4a:6c:e0:2e:76: 7a:cc:45:3b:dd:fe:3c:8f:1a:df:7f:b1:d8:fa:6f: 6a:b5:8d:a8:f6:88:8e:a3:e5:ba:7c:d6:03:e5:0a: 9f:e4:3b:fc:ec:d5:9f:69:05:0b:ca:d0:54:46:4d: 95:56:c9:ff:81:5f:11:8e:a7:e4:09:fc:16:1a:59: f4:45:b8:4f:11:d3:9e:8c:16:33:3f:7f:a0:ea:36: a6:b7:b4:19:ec:83:cb:cc:0c:4c:e1:0b:15:93:37: 3d:2c:2e:8f:03:51:49:55:5a:a4:e6:0e:0c:96:da: 31:18:36:eb:b8:11:25:f5:2b:20:0f:f8:f5:e4:5c: b7:74:1e:50:00:ce:fa:23:6c:b5:64:2e:47:2e:32: 85:93:dc:38:61:b7:03:ca:3f:bf:aa:81:22:21:fa: 93:75:7b:93:3f:98:29:d3:89:8b:0c:e5:66:92:d6: 51:bb:ae:9e:7c:99:43:51:eb:12:57:73:56:dc:8a: 40:84:d7:a0:a9:e3:3d:23:ca:88:1a:10:40:c8:3e: c6:13:5e:e8:36:2e:1e:c3:f5:52:b1:5e:1b:1e:59: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CC:53:5A:19:42:30:A4:07:6D:5B:32:E3:CD:3D:4B:65:E3:C6:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fe332a1-e627-48fb-af81-adef2af88de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:33:56:7f:ff:c7:b9:6d:59:76:7d:92:34:fc:7d:f9:47:dc: 0b:97:7b:b8:3c:04:ee:7f:4e:ff:ec:de:30:ef:3f:a2:8f:7c: 1a:28:08:93:9d:6e:42:62:ee:67:fd:bb:55:c0:cf:27:97:ae: 51:32:a0:0a:31:ea:d8:bc:75:42:1e:ef:3e:d7:1f:3c:18:9c: 43:1e:4e:94:38:4b:12:43:ef:20:1f:9c:1a:91:a3:35:a7:49: 8c:13:b9:d8:e7:c6:bf:1a:f7:38:3b:5a:68:f6:98:56:e3:61: 56:6e:b2:df:90:f5:c5:24:08:8e:ad:11:cf:c1:18:f6:77:f2: 4e:1b:fb:da:cf:0e:cf:ce:65:9a:4e:eb:f2:f8:d4:c4:38:49: c5:fc:d8:00:1f:64:78:cf:06:bf:3a:3e:43:f3:fd:f9:6f:ef: 27:83:c0:1e:50:c9:8c:3d:24:21:ed:b9:d6:18:6e:68:5f:73: 28:33:11:cb:91:e4:1c:ff:8a:ed:0f:41:60:0c:33:f5:c6:17: e8:a1:ac:e5:c5:82:0f:1e:01:bc:e3:bb:d9:a8:c1:80:8b:a2: ff:7b:1b:0f:16:bd:65:ad:3b:35:10:d4:ce:de:6f:3d:c4:dd: 93:83:2c:e4:a6:ee:56:6e:9a:53:bd:9f:4e:48:65:13:86:ef: f3:90:4e:e9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPh8Bph7xC3IlbsPanBR/dVyUhrgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDA0MDI0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjQxZTUxOTEzM2U0MmYwMGViY2QyM2Q1ODE5ZDg3YjMz MDYxMTliNTg1ZTg4YWJjNWZiNTM3ODJhM2U4MjdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLRmJPtZe9wBKwO4BYIq2+eOvp9CUjnzEfHWNTKpY8KEQU EsFCasBKbOAudnrMRTvd/jyPGt9/sdj6b2q1jaj2iI6j5bp81gPlCp/kO/zs1Z9p BQvK0FRGTZVWyf+BXxGOp+QJ/BYaWfRFuE8R056MFjM/f6DqNqa3tBnsg8vMDEzh CxWTNz0sLo8DUUlVWqTmDgyW2jEYNuu4ESX1KyAP+PXkXLd0HlAAzvojbLVkLkcu MoWT3DhhtwPKP7+qgSIh+pN1e5M/mCnTiYsM5WaS1lG7rp58mUNR6xJXc1bcikCE 16Cp4z0jyogaEEDIPsYTXug2Lh7D9VKxXhseWbcHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOMxTWhlCMKQHbVsy4809S2XjxlQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmZTMzMmExLWU2MjctNDhmYi1hZjgxLWFkZWYyYWY4OGRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAFPDANBgkqhkiG9w0BAQsFAAOCAQEAVjNWf//HuW1Zdn2SNPx9+UfcC5d7 uDwE7n9O/+zeMO8/oo98GigIk51uQmLuZ/27VcDPJ5euUTKgCjHq2Lx1Qh7vPtcf PBicQx5OlDhLEkPvIB+cGpGjNadJjBO52OfGvxr3ODtaaPaYVuNhVm6y35D1xSQI jq0Rz8EY9nfyThv72s8Oz85lmk7r8vjUxDhJxfzYAB9keM8Gvzo+Q/P9+W/vJ4PA HlDJjD0kIe251hhuaF9zKDMRy5HkHP+K7Q9BYAwz9cYX6KGs5cWCDx4BvOO72ajB gIui/3sbDxa9Za07NRDUzt5vPcTdk4Ms5KbuVm6aU72fTkhlE4bv85BO6Q== -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:58 2025 by rpki-client