$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa File: 5104db5f-fd45-4603-92d6-05f0fd6e1def.roa (raw, json) Hash identifier: AZ8KKGCDpYSboSavFadd/1F+JQ4PHyJMo+17BO+m40U= Subject key identifier: F1:E5:80:57:D5:26:F0:D4:0A:DF:5C:B3:72:00:5C:5F:F3:39:D7:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 273D5D7062F6D4C5A9B7E770EEDF7892D05F9EA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa Signing time: Fri 25 Apr 2025 00:52:10 +0000 ROA not before: Fri 25 Apr 2025 00:52:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3d:5d:70:62:f6:d4:c5:a9:b7:e7:70:ee:df:78:92:d0:5f:9e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:52:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=044581d37c7b80b22686d98396650ab5ec5d44d273c17ed9bfac1f1943fefa33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0b:ca:6d:1a:54:e1:0f:aa:8c:d0:06:f0:0f: 00:c4:a7:6a:57:cf:e2:ae:8d:ee:82:38:3f:50:81: f0:d6:f9:46:57:3d:61:05:e0:7d:6e:ff:af:8d:81: 19:06:71:10:9f:8b:b4:36:fb:d9:35:46:f3:d5:90: 0a:9c:02:e8:e7:44:35:b4:ac:67:01:d1:25:7d:cb: b6:2c:fc:d0:e0:67:12:20:6a:e5:8f:31:7c:09:2d: 5e:71:83:30:ce:38:63:a1:7d:05:60:eb:87:a8:e3: a9:1d:32:a2:17:9a:32:b6:d1:ba:fe:3b:63:a9:77: 31:2d:c7:79:6c:76:6e:2e:2a:6d:8a:9b:71:6e:54: 02:ee:92:e4:71:95:2b:b5:90:56:b4:9e:c3:97:a3: e4:dc:96:9c:25:4b:31:0c:ca:ac:be:c6:d3:54:68: 46:74:aa:1a:64:5d:3f:16:02:5a:44:4a:de:d1:5d: c6:31:4e:b2:67:98:d2:26:7a:c2:3b:0a:22:2b:ad: 09:37:86:0b:90:34:90:e9:56:e2:a4:f8:d3:cb:2b: 46:4b:7f:18:cb:93:4f:d8:a5:f9:32:3a:33:4f:60: fa:54:65:07:1c:f4:b3:e2:5e:9b:6b:60:0d:56:21: b6:a5:b4:15:91:09:be:5a:a2:81:60:30:2c:e3:01: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E5:80:57:D5:26:F0:D4:0A:DF:5C:B3:72:00:5C:5F:F3:39:D7:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:f7:5c:8c:bb:2e:f8:d1:39:1f:d7:fa:8d:8c:08:f4:0e:e9: 8b:35:02:70:ee:fe:89:d0:54:75:20:46:ca:08:d7:95:60:c4: ba:10:93:5b:23:1f:cc:e9:80:65:f0:50:88:fe:c6:ce:bd:62: 13:5d:e5:33:3c:5a:6b:a3:d4:20:8c:ea:8b:24:13:bf:c9:94: 39:6b:8d:17:e3:09:ef:6d:0f:e9:b2:ff:f0:27:4b:64:30:0a: 21:2e:9b:ac:19:11:d7:f0:3e:cd:5c:c9:63:89:6c:6b:6f:dd: cc:f3:07:0f:fb:39:db:b4:71:e0:d1:0f:ad:2d:f7:d0:14:38: fa:57:aa:16:af:8c:a3:d1:bc:76:16:b1:1d:6f:c2:98:29:65: 1e:e6:df:df:5f:8d:4b:47:8e:8b:61:ac:47:a1:8e:73:96:5a: e9:a2:ac:f0:17:a0:fb:53:57:8e:7d:7d:ce:a3:3d:ab:8f:27: fb:7f:f0:ae:88:42:e1:fd:d7:ac:1b:f4:33:f6:dc:bc:32:18: 4f:e4:6c:f7:83:2d:d7:34:21:6a:7f:86:c8:03:0d:40:d7:dc: ce:ca:d1:bc:1f:64:24:b9:41:4c:7d:ae:f9:5d:d4:8c:4f:74: e2:10:75:9a:20:86:c1:fa:f6:89:81:3f:4f:7d:91:5a:44:64: 40:0c:26:b2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJz1dcGL21MWpt+dw7t94ktBfnqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDA1MjEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDQ1ODFkMzdjN2I4MGIyMjY4NmQ5ODM5NjY1MGFiNWVj NWQ0NGQyNzNjMTdlZDliZmFjMWYxOTQzZmVmYTMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfC8ptGlThD6qM0AbwDwDEp2pXz+Kuje6COD9QgfDW+UZX PWEF4H1u/6+NgRkGcRCfi7Q2+9k1RvPVkAqcAujnRDW0rGcB0SV9y7Ys/NDgZxIg auWPMXwJLV5xgzDOOGOhfQVg64eo46kdMqIXmjK20br+O2OpdzEtx3lsdm4uKm2K m3FuVALukuRxlSu1kFa0nsOXo+TclpwlSzEMyqy+xtNUaEZ0qhpkXT8WAlpESt7R XcYxTrJnmNImesI7CiIrrQk3hguQNJDpVuKk+NPLK0ZLfxjLk0/YpfkyOjNPYPpU ZQcc9LPiXptrYA1WIbaltBWRCb5aooFgMCzjASqxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8eWAV9Um8NQK31yzcgBcX/M517gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxMDRkYjVmLWZkNDUtNDYwMy05MmQ2LTA1ZjBmZDZlMWRlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4fTANBgkqhkiG9w0BAQsFAAOCAQEAKPdcjLsu+NE5H9f6jYwI9A7pizUC cO7+idBUdSBGygjXlWDEuhCTWyMfzOmAZfBQiP7Gzr1iE13lMzxaa6PUIIzqiyQT v8mUOWuNF+MJ720P6bL/8CdLZDAKIS6brBkR1/A+zVzJY4lsa2/dzPMHD/s527Rx 4NEPrS330BQ4+leqFq+Mo9G8dhaxHW/CmCllHubf31+NS0eOi2GsR6GOc5Za6aKs 8Beg+1NXjn19zqM9q48n+3/wrohC4f3XrBv0M/bcvDIYT+Rs94Mt1zQhan+GyAMN QNfczsrRvB9kJLlBTH2u+V3UjE904hB1miCGwfr2iYE/T32RWkRkQAwmsg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:56 2025 by rpki-client