$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/483a95d6-6e75-4d3f-bb33-4dd6b4772abb.roa File: 483a95d6-6e75-4d3f-bb33-4dd6b4772abb.roa (raw, json) Hash identifier: DDkO/z6P/pyIy6kDDTbSP0U1VkSYIZZC3teBc3d0B6w= Subject key identifier: AD:6E:FD:FB:76:16:7A:EB:99:8D:78:A4:65:81:9A:8C:55:EF:C4:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EAC1E11A41F17BA65A8ACD35B918C3BFA7F4B2D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/483a95d6-6e75-4d3f-bb33-4dd6b4772abb.roa Signing time: Sat 12 Apr 2025 00:01:18 +0000 ROA not before: Sat 12 Apr 2025 00:01:18 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 185.121.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ac:1e:11:a4:1f:17:ba:65:a8:ac:d3:5b:91:8c:3b:fa:7f:4b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:01:18 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=fa0e3ad974be9f121e80c146b7f92f392f2f93947959cceefc9aba4b21a0798a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:7e:3f:4a:23:5c:5e:c6:21:c4:63:d8:c6: b2:6c:02:f0:b3:c7:54:da:39:f3:cd:b2:6b:6b:6c: ce:c6:d5:43:6c:a0:07:1d:0b:5b:95:7f:bd:bc:59: 85:30:bc:e5:6c:7a:9c:e1:d5:e6:0c:7b:c4:71:5f: 1e:aa:7a:02:b2:e2:94:a6:6b:9e:4d:c0:77:cb:52: 43:87:4b:3b:d4:00:3e:24:a1:aa:c1:cf:3e:62:2d: 96:1b:43:29:b2:8b:0f:f4:75:bf:fb:11:82:d2:a0: 94:86:29:e2:3e:2e:6c:d4:1d:0f:39:4d:46:ba:0a: e3:55:07:61:3a:01:c3:d6:f8:12:fa:ec:db:4c:a5: 44:70:70:ad:20:12:04:e2:c8:8e:32:4f:8f:c9:fe: 88:ff:ee:ea:86:f1:c4:89:0f:f7:eb:5a:9c:d7:41: 88:9e:68:42:96:29:3b:f4:ce:9c:1e:b4:b6:e1:12: f7:f4:71:4f:62:18:7a:f6:3a:80:1b:71:3a:5e:51: cc:6a:ee:e4:da:43:5e:17:02:aa:ee:77:7c:d3:c6: c2:45:51:ce:49:c4:79:4b:97:c0:09:82:88:a3:5c: 29:f1:75:ff:12:15:35:37:2b:e1:05:d5:6e:45:1c: 98:de:82:ad:ea:c7:99:df:6a:e4:40:13:81:fd:23: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:FD:FB:76:16:7A:EB:99:8D:78:A4:65:81:9A:8C:55:EF:C4:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/483a95d6-6e75-4d3f-bb33-4dd6b4772abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.4.0/22 Signature Algorithm: sha256WithRSAEncryption 61:ea:93:fb:55:a1:f6:37:17:2f:bc:e8:7d:8a:98:e7:fc:6c: 96:41:da:25:b6:32:e0:0d:e5:ab:a0:24:fb:5b:9b:77:3b:e5: 39:4a:d3:76:83:e0:25:54:4f:26:3f:4c:35:32:98:67:0c:b7: 1e:02:61:94:4f:55:7b:3a:c7:fe:46:9f:30:c7:cb:bc:92:ea: 48:3f:43:35:93:8d:bf:da:3b:b4:1b:e4:12:04:0f:b0:37:e0: dc:93:56:da:21:85:f1:46:cf:58:ab:98:04:98:8a:9e:31:41: a4:bb:92:0d:80:73:b1:da:22:5b:f8:fe:61:88:0f:08:c8:8b: 43:69:a9:21:01:7d:db:1a:df:b7:b3:66:77:12:38:f6:ed:75: 14:2f:43:ca:3a:f0:6d:b9:54:7a:b1:99:31:a4:91:d3:a3:d8: 10:bd:db:a1:5f:1b:95:74:4b:7e:e2:51:08:72:ca:34:c6:bd: ff:91:2e:55:98:13:16:62:c4:c9:fd:00:f1:80:ba:60:3e:60: cc:7c:05:49:05:f0:e6:3c:2a:95:a9:15:ff:88:e5:64:26:73: da:f2:35:c3:2c:60:4d:39:1d:0b:ec:b2:15:0e:3b:82:e0:f1: 12:f9:9f:74:b2:27:1c:8e:f4:54:ef:11:31:a9:de:c2:05:6a: f7:91:22:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHqweEaQfF7plqKzTW5GMO/p/Sy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAwMTE4WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTBlM2FkOTc0YmU5ZjEyMWU4MGMxNDZiN2Y5MmYzOTJm MmY5Mzk0Nzk1OWNjZWVmYzlhYmE0YjIxYTA3OThhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVWn4/SiNcXsYhxGPYxrJsAvCzx1TaOfPNsmtrbM7G1UNs oAcdC1uVf728WYUwvOVsepzh1eYMe8RxXx6qegKy4pSma55NwHfLUkOHSzvUAD4k oarBzz5iLZYbQymyiw/0db/7EYLSoJSGKeI+LmzUHQ85TUa6CuNVB2E6AcPW+BL6 7NtMpURwcK0gEgTiyI4yT4/J/oj/7uqG8cSJD/frWpzXQYieaEKWKTv0zpwetLbh Evf0cU9iGHr2OoAbcTpeUcxq7uTaQ14XAqrud3zTxsJFUc5JxHlLl8AJgoijXCnx df8SFTU3K+EF1W5FHJjegq3qx5nfauRAE4H9Iy7tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrW79+3YWeuuZjXikZYGajFXvxEQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4M2E5NWQ2LTZlNzUtNGQzZi1iYjMzLTRkZDZiNDc3MmFiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK5eQQwDQYJKoZIhvcNAQELBQADggEBAGHqk/tVofY3Fy+86H2KmOf8bJZB 2iW2MuAN5augJPtbm3c75TlK03aD4CVUTyY/TDUymGcMtx4CYZRPVXs6x/5GnzDH y7yS6kg/QzWTjb/aO7Qb5BIED7A34NyTVtohhfFGz1irmASYip4xQaS7kg2Ac7Ha Ilv4/mGIDwjIi0NpqSEBfdsa37ezZncSOPbtdRQvQ8o68G25VHqxmTGkkdOj2BC9 26FfG5V0S37iUQhyyjTGvf+RLlWYExZixMn9APGAumA+YMx8BUkF8OY8KpWpFf+I 5WQmc9ryNcMsYE05HQvsshUOO4Lg8RL5n3SyJxyO9FTvETGp3sIFaveRIg4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:19 2025 by rpki-client