$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa File: 4bc62270-49ca-441b-ba8d-65b483733244.roa (raw, json) Hash identifier: 5Uzk+pxTfhrURu0ABEBHzMeiMQMiwnAP23PVxSRdmMY= Subject key identifier: 6A:B9:09:48:BF:3A:8F:19:8F:71:41:9A:10:3B:4D:C5:81:26:0F:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49BF10EEF2995B6A13D930937C20FCF4052390C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa Signing time: Fri 18 Apr 2025 00:40:14 +0000 ROA not before: Fri 18 Apr 2025 00:40:14 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.230.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bf:10:ee:f2:99:5b:6a:13:d9:30:93:7c:20:fc:f4:05:23:90:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:40:14 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=9bf02377ad62edee2767cbf566981dc581db7067ec77942f78f2fb2d3015f6b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b6:46:fa:b6:83:b8:22:0d:b4:62:c2:4f:5a: 63:ae:63:dc:56:9e:af:7f:51:8a:d2:b6:1f:b3:9f: f9:28:ef:59:45:8c:80:9f:a7:c7:78:1f:c2:b9:3c: 76:50:9a:7d:5a:eb:21:5c:51:44:e3:3f:64:38:93: 54:7a:a6:73:7d:4c:0b:1d:b1:9d:f2:99:61:c0:64: 60:d6:27:da:ed:9c:ce:5c:84:2d:86:03:db:71:a8: 27:e5:58:dc:56:5c:bd:e7:f3:a2:42:ff:c3:d2:e9: f6:01:19:a5:c4:53:00:a0:d4:8a:d3:17:67:46:02: 41:6f:b8:f0:54:e4:3a:8f:ca:61:17:14:ac:67:e6: f8:f7:04:02:ae:ea:a1:52:ad:27:e2:99:ff:e3:06: 80:69:67:33:aa:9e:b4:a4:e2:f4:9f:e4:84:fb:76: fb:db:79:7d:70:6c:52:d2:53:43:b7:f9:f3:22:8c: 5a:4a:3b:65:dc:1c:3e:23:61:5a:03:22:c8:6d:20: a9:03:65:6b:d2:87:ef:3e:ad:91:c6:02:ac:25:0b: f8:c7:73:0a:4e:3a:31:c5:33:c0:86:61:f8:ed:f8: e7:9e:a1:66:a9:f7:fc:56:a7:77:e1:90:cd:c5:68: aa:59:8b:20:9e:4b:44:8d:10:65:a2:a3:e8:3f:78: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:09:48:BF:3A:8F:19:8F:71:41:9A:10:3B:4D:C5:81:26:0F:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.230.65.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a7:97:26:af:75:79:45:a1:8f:b1:9c:ec:ef:ce:69:ff:ba: 2b:0c:73:cc:07:a8:d3:55:ef:86:60:16:a9:de:34:27:c0:ce: 54:ad:fa:5a:da:de:c6:76:36:83:76:6e:1e:55:6a:ec:fc:cf: 4d:56:48:a8:18:cd:6a:1d:e7:a1:f0:d2:48:32:62:e7:9e:a1: 75:cf:7f:e8:79:48:8a:e8:c6:9d:8d:98:18:15:d7:88:7b:0f: 67:51:65:fd:36:87:a9:dd:8b:35:c5:b0:24:f8:99:45:46:4a: 87:f4:3e:11:95:51:96:a5:7c:f7:fc:77:92:18:65:19:c8:d3: 81:fc:f5:39:64:d9:b3:97:56:89:5d:a0:6d:28:5f:6b:ce:30: 5d:78:b8:d0:dd:94:05:d2:c4:47:f8:0f:95:35:93:ed:46:de: bf:62:85:a1:76:06:bd:d6:c8:82:58:5d:41:38:0d:34:ad:e2: 6a:32:3a:46:63:fc:9a:d2:00:20:58:57:fc:9a:aa:23:8e:98: a4:0f:79:00:a0:e4:4f:44:bf:d6:c1:00:f8:69:ba:00:53:5b: 40:a5:7f:ab:61:8b:5c:27:64:23:f7:94:d9:43:f0:00:1a:76: 34:ef:88:08:76:d5:d5:fd:fc:8b:e4:e9:14:43:18:7c:4c:71: 80:f1:84:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSb8Q7vKZW2oT2TCTfCD89AUjkMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MDE0WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmYwMjM3N2FkNjJlZGVlMjc2N2NiZjU2Njk4MWRjNTgx ZGI3MDY3ZWM3Nzk0MmY3OGYyZmIyZDMwMTVmNmIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqtkb6toO4Ig20YsJPWmOuY9xWnq9/UYrSth+zn/ko71lF jICfp8d4H8K5PHZQmn1a6yFcUUTjP2Q4k1R6pnN9TAsdsZ3ymWHAZGDWJ9rtnM5c hC2GA9txqCflWNxWXL3n86JC/8PS6fYBGaXEUwCg1IrTF2dGAkFvuPBU5DqPymEX FKxn5vj3BAKu6qFSrSfimf/jBoBpZzOqnrSk4vSf5IT7dvvbeX1wbFLSU0O3+fMi jFpKO2XcHD4jYVoDIshtIKkDZWvSh+8+rZHGAqwlC/jHcwpOOjHFM8CGYfjt+Oee oWap9/xWp3fhkM3FaKpZiyCeS0SNEGWio+g/eLUDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUarkJSL86jxmPcUGaEDtNxYEmD3IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiYzYyMjcwLTQ5Y2EtNDQxYi1iYThkLTY1YjQ4MzczMzI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY5kEwDQYJKoZIhvcNAQELBQADggEBAICnlyavdXlFoY+xnOzvzmn/uisM c8wHqNNV74ZgFqneNCfAzlSt+lra3sZ2NoN2bh5Vauz8z01WSKgYzWod56Hw0kgy YueeoXXPf+h5SIroxp2NmBgV14h7D2dRZf02h6ndizXFsCT4mUVGSof0PhGVUZal fPf8d5IYZRnI04H89Tlk2bOXVoldoG0oX2vOMF14uNDdlAXSxEf4D5U1k+1G3r9i haF2Br3WyIJYXUE4DTSt4moyOkZj/JrSACBYV/yaqiOOmKQPeQCg5E9Ev9bBAPhp ugBTW0Clf6thi1wnZCP3lNlD8AAadjTviAh21dX9/Ivk6RRDGHxMcYDxhCI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:40 2025 by rpki-client