$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa File: 528b6591-3aae-49d5-aecd-8320249f6d0e.roa (raw, json) Hash identifier: jRDDp+wBR0BKz8j2kyTzgb/l+thOFeW2qYhbSlIMKjs= Subject key identifier: 7D:6C:13:CF:2C:EA:54:7D:81:C5:97:CE:02:E1:2D:23:A7:23:75:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61E8988B5B78ACDC64475F60F50CC540B051E4D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa Signing time: Mon 07 Apr 2025 15:10:25 +0000 ROA not before: Mon 07 Apr 2025 15:10:25 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.17.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e8:98:8b:5b:78:ac:dc:64:47:5f:60:f5:0c:c5:40:b0:51:e4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:10:25 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=3c765f9692332b6dd952b42034844e5c955b7149e176d1d84a2091f76c147386, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:de:f1:2b:3e:f9:ba:78:d9:f7:a0:e9:15: 2b:f7:66:59:7d:3c:3a:5c:46:58:5f:61:35:b4:c9: b6:5f:c6:50:60:5e:46:d0:b6:1d:79:7e:f0:78:2a: 74:64:19:c8:de:63:c9:18:a0:fa:64:18:2d:c8:3b: 93:a8:30:1a:50:cb:57:16:6b:c1:d1:9e:95:72:7a: 71:1a:40:9d:fe:fa:e3:77:f0:40:05:10:89:6e:be: 6d:13:13:2b:f2:7b:b4:dd:cc:e7:c2:7a:4a:a6:7b: 0d:89:97:8b:99:52:e3:80:a9:69:6c:64:d5:c4:7f: 84:64:52:c6:58:04:70:78:24:a4:89:6d:41:ec:f2: 2e:47:b8:84:aa:fb:65:ce:ee:f8:2d:ea:f0:7c:a5: 39:87:72:da:96:c3:97:17:67:0c:31:4b:8e:0c:07: 4e:dd:83:2f:63:03:fd:9a:36:3c:18:b9:1f:af:ff: 3d:d0:50:29:8f:a5:9c:b8:e1:fd:92:2e:48:bc:cb: 04:14:59:f2:ff:77:e8:d1:15:bc:02:d6:99:75:0c: 01:2e:3b:5a:d8:b5:e2:22:5b:86:c7:79:f4:f6:f3: 85:36:ee:37:ef:8d:29:9e:37:57:a4:83:74:9d:ba: 02:01:af:0c:2f:ce:05:c4:13:80:87:7c:b8:03:3b: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:13:CF:2C:EA:54:7D:81:C5:97:CE:02:E1:2D:23:A7:23:75:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:ef:9e:c2:d5:cc:82:24:a6:8b:95:49:57:81:1b:ba:1d:4a: eb:7f:93:83:04:26:0e:50:b5:a7:a7:95:b7:0c:33:e2:fd:57: a0:3e:aa:93:fc:ac:b6:f3:27:d2:6f:54:2f:9a:a5:b6:89:56: 2a:a2:b0:7c:e2:d3:5d:de:99:cd:e4:5e:5c:03:d7:64:a9:a0: 65:72:17:d5:d4:fa:6c:6a:be:5a:a4:9d:b0:ee:55:8f:a4:20: 53:b5:c9:a2:a9:ae:1b:55:1f:6e:7a:d2:38:fc:b7:99:15:62: 51:20:6a:ef:7f:b1:db:60:1a:e3:10:ac:94:05:b5:3f:ca:1e: c7:2c:a6:5e:7e:b5:63:e9:bb:7e:e1:10:c6:6c:07:f5:a2:37: a5:47:f5:49:73:e1:56:50:28:ee:a5:1b:4d:11:16:e1:c9:29: ac:65:fe:28:c8:ef:c6:7d:cb:20:c9:23:af:61:17:5a:11:47: ce:e5:62:70:74:6e:a9:96:bb:74:1b:f1:2e:d2:22:1c:3d:8d: 3f:71:ba:09:5a:03:5b:f6:e7:1e:41:28:ff:98:bc:ac:57:f2: 17:d4:0d:3a:e5:fe:3f:0d:80:4d:e7:a4:03:f9:f5:87:88:bd: f8:11:d9:ac:bb:16:a4:c6:11:88:d5:1c:80:28:b7:04:08:1d: e9:82:1f:06 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYeiYi1t4rNxkR19g9QzFQLBR5NkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMDI1WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzc2NWY5NjkyMzMyYjZkZDk1MmI0MjAzNDg0NGU1Yzk1 NWI3MTQ5ZTE3NmQxZDg0YTIwOTFmNzZjMTQ3Mzg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpGt7xKz75unjZ96DpFSv3Zll9PDpcRlhfYTW0ybZfxlBg XkbQth15fvB4KnRkGcjeY8kYoPpkGC3IO5OoMBpQy1cWa8HRnpVyenEaQJ3++uN3 8EAFEIluvm0TEyvye7TdzOfCekqmew2Jl4uZUuOAqWlsZNXEf4RkUsZYBHB4JKSJ bUHs8i5HuISq+2XO7vgt6vB8pTmHctqWw5cXZwwxS44MB07dgy9jA/2aNjwYuR+v /z3QUCmPpZy44f2SLki8ywQUWfL/d+jRFbwC1pl1DAEuO1rYteIiW4bHefT284U2 7jfvjSmeN1ekg3SdugIBrwwvzgXEE4CHfLgDO95RAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfWwTzyzqVH2BxZfOAuEtI6cjdS4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyOGI2NTkxLTNhYWUtNDlkNS1hZWNkLTgzMjAyNDlmNmQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQETANBgkqhkiG9w0BAQsFAAOCAQEAUu+ewtXMgiSmi5VJV4Ebuh1K63+T gwQmDlC1p6eVtwwz4v1XoD6qk/ystvMn0m9UL5qltolWKqKwfOLTXd6ZzeReXAPX ZKmgZXIX1dT6bGq+WqSdsO5Vj6QgU7XJoqmuG1UfbnrSOPy3mRViUSBq73+x22Aa 4xCslAW1P8oexyymXn61Y+m7fuEQxmwH9aI3pUf1SXPhVlAo7qUbTREW4ckprGX+ KMjvxn3LIMkjr2EXWhFHzuVicHRuqZa7dBvxLtIiHD2NP3G6CVoDW/bnHkEo/5i8 rFfyF9QNOuX+Pw2ATeekA/n1h4i9+BHZrLsWpMYRiNUcgCi3BAgd6YIfBg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:00:32 2025 by rpki-client