$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46340e00-739c-4f09-88f1-61173deb2dc5.roa File: 46340e00-739c-4f09-88f1-61173deb2dc5.roa (raw, json) Hash identifier: 44VHBzE5UIlXzL6XWYDZe449XQw2KWA/CbDSVg7gbjQ= Subject key identifier: 43:22:01:5E:D0:9A:AC:01:CA:86:FB:15:52:5D:52:6B:D0:EA:2A:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B1D79A2C6C36D5A6A194CB30AE3791F552EFED1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46340e00-739c-4f09-88f1-61173deb2dc5.roa Signing time: Fri 18 Apr 2025 00:31:16 +0000 ROA not before: Fri 18 Apr 2025 00:31:16 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1d:79:a2:c6:c3:6d:5a:6a:19:4c:b3:0a:e3:79:1f:55:2e:fe:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:31:16 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=d09f08e47aab42a9c85bb8a78de26d2967235073a73c8a2011a2a3008a500a47, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ce:a2:94:e5:e7:b2:95:67:4c:df:08:96:15: 4f:b9:bb:4a:96:91:36:a4:a0:cd:7f:56:08:f4:a6: 11:1a:a8:b6:88:52:c3:2d:14:88:e5:85:8e:63:2b: bf:ea:d3:c9:42:ab:38:5d:f8:89:71:de:39:a5:ca: fe:f7:03:ae:3c:cb:f3:a1:2a:fb:f3:34:14:39:7d: fd:cc:d6:e4:c8:35:4a:53:8e:16:5d:df:33:f9:0b: 82:f8:00:e4:43:9e:f5:96:1f:44:54:35:2f:86:22: 0d:e8:7f:ad:0c:00:64:dd:54:67:b9:31:b3:35:55: 50:34:15:21:8d:b7:8b:9c:9b:15:9e:ac:24:6e:e0: cf:3d:c5:a7:a7:07:90:40:d9:47:4b:76:dc:43:9c: bb:2f:0e:fe:d0:e6:84:8f:a7:5f:c7:4b:0f:24:b4: d5:5f:ee:fa:e5:af:f5:20:dc:49:c3:09:17:38:1c: 62:1f:7e:32:1b:06:cd:b6:a7:cc:e1:f7:8d:a2:52: 70:e5:9e:6c:01:11:24:95:81:f7:b1:8d:e6:b9:b0: 4d:19:c7:ee:d7:ea:97:48:97:b7:e9:f9:d7:e8:c4: 54:19:5f:bd:ec:1f:48:d5:fd:af:b2:f4:c9:99:aa: eb:31:f9:cf:cd:ad:77:f6:64:3d:ab:7e:c5:b8:7c: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:22:01:5E:D0:9A:AC:01:CA:86:FB:15:52:5D:52:6B:D0:EA:2A:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46340e00-739c-4f09-88f1-61173deb2dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.2.0/23 Signature Algorithm: sha256WithRSAEncryption 58:46:f0:75:1d:b8:c5:c8:7a:b3:34:44:58:bf:d0:c7:33:e3: 75:68:61:f0:6d:de:25:6a:d0:e0:c6:37:59:b2:5f:ab:4b:c9: 69:13:15:e4:51:76:b2:37:b5:4f:60:a2:3b:72:c3:64:b6:7c: 4a:f5:02:93:2d:d8:52:ba:99:ad:72:64:70:60:09:13:02:9c: 23:39:64:54:f7:b2:c1:31:f9:f0:d9:01:80:42:98:c3:47:1a: 68:a6:04:e1:ec:b8:bc:4d:93:29:e5:73:5f:dd:c8:b3:6f:11: d9:70:00:f0:46:02:63:ba:2f:2e:ca:ad:02:ea:46:03:4e:15: fa:29:61:5d:59:6d:1b:aa:64:15:22:e1:4f:13:71:e2:ee:d4: 98:b7:ae:c2:c6:f3:38:cc:56:90:a0:fe:d7:97:30:9e:38:7c: f7:51:15:40:18:e8:ea:31:70:36:72:b7:ee:36:2c:63:b2:0e: c2:7e:76:96:08:c8:af:40:4f:0f:70:bd:2d:17:f5:0a:24:22: aa:f8:87:60:5f:c5:ee:22:9f:1f:54:63:36:76:22:4f:37:78: 2f:67:1f:0c:d9:81:f3:e4:32:92:e6:39:6a:b2:af:19:2c:bc: 5d:a7:45:5f:2b:74:36:22:62:3f:57:8c:af:e8:24:bc:05:17: 28:1f:46:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOx15osbDbVpqGUyzCuN5H1Uu/tEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDAzMTE2WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDlmMDhlNDdhYWI0MmE5Yzg1YmI4YTc4ZGUyNmQyOTY3 MjM1MDczYTczYzhhMjAxMWEyYTMwMDhhNTAwYTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCazqKU5eeylWdM3wiWFU+5u0qWkTakoM1/Vgj0phEaqLaI UsMtFIjlhY5jK7/q08lCqzhd+Ilx3jmlyv73A648y/OhKvvzNBQ5ff3M1uTINUpT jhZd3zP5C4L4AORDnvWWH0RUNS+GIg3of60MAGTdVGe5MbM1VVA0FSGNt4ucmxWe rCRu4M89xaenB5BA2UdLdtxDnLsvDv7Q5oSPp1/HSw8ktNVf7vrlr/Ug3EnDCRc4 HGIffjIbBs22p8zh942iUnDlnmwBESSVgfexjea5sE0Zx+7X6pdIl7fp+dfoxFQZ X73sH0jV/a+y9MmZqusx+c/NrXf2ZD2rfsW4fOlTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQyIBXtCarAHKhvsVUl1Sa9DqKh0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2MzQwZTAwLTczOWMtNGYwOS04OGYxLTYxMTczZGViMmRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYnQIwDQYJKoZIhvcNAQELBQADggEBAFhG8HUduMXIerM0RFi/0Mcz43Vo YfBt3iVq0ODGN1myX6tLyWkTFeRRdrI3tU9gojtyw2S2fEr1ApMt2FK6ma1yZHBg CRMCnCM5ZFT3ssEx+fDZAYBCmMNHGmimBOHsuLxNkynlc1/dyLNvEdlwAPBGAmO6 Ly7KrQLqRgNOFfopYV1ZbRuqZBUi4U8TceLu1Ji3rsLG8zjMVpCg/teXMJ44fPdR FUAY6OoxcDZyt+42LGOyDsJ+dpYIyK9ATw9wvS0X9QokIqr4h2Bfxe4inx9UYzZ2 Ik83eC9nHwzZgfPkMpLmOWqyrxksvF2nRV8rdDYiYj9XjK/oJLwFFygfRk8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:16 2025 by rpki-client