$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa File: 579713b0-f99f-4653-8f39-039a43f1fb58.roa (raw, json) Hash identifier: NGChrlf97/ywQcLm70jFQ44vSlwiWllGo9i1aIs7/Jg= Subject key identifier: B7:A7:8D:31:A2:D6:A2:C2:E4:CA:63:60:8F:AC:96:DD:DE:5D:E7:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 137DE03A32769CEF533CECD293B2FB06A1CA5C69 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa Signing time: Sat 26 Apr 2025 00:01:06 +0000 ROA not before: Sat 26 Apr 2025 00:01:06 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 135.133.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7d:e0:3a:32:76:9c:ef:53:3c:ec:d2:93:b2:fb:06:a1:ca:5c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:01:06 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=9ab1d0a00448749fa7f37629cbfecaabc43bd381088754dbe90b6ef0d5996022, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:da:c0:4e:d0:0f:f8:d0:db:e9:ab:36:1f: 25:a1:ef:66:89:82:a6:58:33:13:44:e2:d7:fe:b3: da:a2:24:66:4d:5c:66:74:85:a3:fb:53:5b:7b:ad: 26:af:8e:65:82:d7:0a:e6:9e:4f:4d:50:4a:16:c3: 78:e2:df:44:a6:98:90:90:34:bb:56:42:64:3c:b1: 23:1f:fd:7e:36:fe:58:ff:97:f0:7d:c1:2e:64:e9: e4:26:69:a2:5e:3a:d4:a3:e6:cf:11:64:11:2c:7d: 6c:a9:f5:62:09:24:b8:f8:6a:36:88:85:5c:3a:f7: 74:e3:f5:03:f0:ab:81:c7:72:da:75:7d:ae:84:11: 70:63:89:ee:3c:a8:25:a6:ad:8c:15:e8:27:bc:28: 39:94:5a:77:92:4e:d6:99:06:b6:cb:2b:08:78:ca: b6:9f:5b:b9:93:03:3b:e4:fa:0a:ab:f4:c7:d7:53: 82:26:17:65:c2:45:c8:de:6f:10:01:cf:b5:40:0e: 82:d5:2d:3f:e1:2f:ab:95:4e:00:38:56:59:c2:86: 95:92:30:36:5a:c7:06:cd:aa:12:61:38:1b:27:5c: 8b:3d:16:47:ea:18:0a:41:c5:56:52:18:84:22:05: 45:eb:67:56:2a:c5:e6:1a:d2:b6:aa:e6:c3:b6:ea: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A7:8D:31:A2:D6:A2:C2:E4:CA:63:60:8F:AC:96:DD:DE:5D:E7:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/579713b0-f99f-4653-8f39-039a43f1fb58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.133.0.0/16 Signature Algorithm: sha256WithRSAEncryption d5:e6:b0:fd:e5:91:bb:65:b6:cf:b6:85:58:ad:2e:9e:e4:b4: f6:c5:23:b7:0f:32:23:1c:c3:95:4a:62:d4:34:da:2c:78:fc: 59:e7:a6:14:07:38:8c:5d:8a:c9:0d:66:18:03:f4:a6:a1:38: e5:a9:bf:e8:f2:c8:c1:6d:93:79:ef:5f:d5:86:fe:49:6f:1c: c2:11:ee:7f:45:4d:5a:42:f5:12:6f:e4:b9:0f:ef:7c:c1:f6: 8e:11:4f:5b:2d:de:c6:70:dc:3f:88:bd:e5:3a:2e:6a:6b:88: 90:27:92:c3:a5:f4:64:fc:c7:bc:1f:63:47:48:4b:43:ed:2d: a5:70:96:b9:ed:21:b0:12:2e:6a:02:76:6b:e5:28:6f:07:05: 22:cc:d6:8f:79:1e:48:e1:26:73:1b:71:95:b0:5a:e3:76:cb: 1d:74:fe:91:5b:55:0c:ab:00:f5:7d:8d:c1:dd:91:3b:0d:4f: a4:5e:67:df:d4:5a:0f:d7:98:a4:27:84:de:e2:1d:57:eb:02: 5c:36:67:91:90:ce:e0:a3:10:b1:f1:ec:55:4d:e3:45:7e:b2: 24:a6:10:a2:2b:e0:8e:1f:94:46:fc:bc:a8:d7:60:5c:f4:0b: 7a:37:e7:94:b4:25:95:36:01:17:1f:df:d8:19:35:42:18:8c: 80:8e:9d:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE33gOjJ2nO9TPOzSk7L7BqHKXGkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMTA2WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWIxZDBhMDA0NDg3NDlmYTdmMzc2MjljYmZlY2FhYmM0 M2JkMzgxMDg4NzU0ZGJlOTBiNmVmMGQ1OTk2MDIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsZtrATtAP+NDb6as2HyWh72aJgqZYMxNE4tf+s9qiJGZN XGZ0haP7U1t7rSavjmWC1wrmnk9NUEoWw3ji30SmmJCQNLtWQmQ8sSMf/X42/lj/ l/B9wS5k6eQmaaJeOtSj5s8RZBEsfWyp9WIJJLj4ajaIhVw693Tj9QPwq4HHctp1 fa6EEXBjie48qCWmrYwV6Ce8KDmUWneSTtaZBrbLKwh4yrafW7mTAzvk+gqr9MfX U4ImF2XCRcjebxABz7VADoLVLT/hL6uVTgA4VlnChpWSMDZaxwbNqhJhOBsnXIs9 FkfqGApBxVZSGIQiBUXrZ1YqxeYa0raq5sO26oeDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUt6eNMaLWosLkymNgj6yW3d5d5x0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3OTcxM2IwLWY5OWYtNDY1My04ZjM5LTAzOWE0M2YxZmI1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCHhTANBgkqhkiG9w0BAQsFAAOCAQEA1eaw/eWRu2W2z7aFWK0unuS09sUj tw8yIxzDlUpi1DTaLHj8WeemFAc4jF2KyQ1mGAP0pqE45am/6PLIwW2Tee9f1Yb+ SW8cwhHuf0VNWkL1Em/kuQ/vfMH2jhFPWy3exnDcP4i95TouamuIkCeSw6X0ZPzH vB9jR0hLQ+0tpXCWue0hsBIuagJ2a+UobwcFIszWj3keSOEmcxtxlbBa43bLHXT+ kVtVDKsA9X2Nwd2ROw1PpF5n39RaD9eYpCeE3uIdV+sCXDZnkZDO4KMQsfHsVU3j RX6yJKYQoivgjh+URvy8qNdgXPQLejfnlLQllTYBFx/f2Bk1QhiMgI6dTQ== -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:57 2025 by rpki-client