$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa File: 58c78734-91d9-4994-9461-7b6172f0caa6.roa (raw, json) Hash identifier: BDUZn/V1+0/Vz1WEvxkpy4yo/BHL0UiJOwl4JT7XMNg= Subject key identifier: 91:2F:2D:1A:AA:E2:4E:EE:A1:B5:6C:14:EC:EE:4D:3C:EE:A6:AB:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C0F4EAFEC811B0EA473B4CA5D74A0544464D3B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa Signing time: Fri 25 Apr 2025 15:00:27 +0000 ROA not before: Fri 25 Apr 2025 15:00:27 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 67.202.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0f:4e:af:ec:81:1b:0e:a4:73:b4:ca:5d:74:a0:54:44:64:d3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:00:27 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=569de33b1880b7088d9f673dc34ae205b50f4d25b0065ad103f1ddd6652571fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:ad:0a:87:2c:95:ab:22:a5:9e:40:88:74: 51:5a:b2:73:7a:5c:76:20:1b:c0:7c:11:51:ba:2e: 73:37:9c:e7:e7:b3:5e:cd:25:46:0b:35:e2:fc:7d: 8b:39:88:f7:1e:9c:81:85:3a:5e:97:59:08:1f:9f: 21:b9:0d:0a:3b:cc:79:63:64:4b:8f:78:61:1d:e6: a2:31:35:85:b2:4f:bc:cd:2c:da:f8:b1:92:db:cd: 72:fb:51:20:9e:84:e7:56:6a:0e:ad:1c:fe:a0:1e: cd:c9:c5:34:e4:cc:da:20:44:36:08:cf:c1:bf:df: c1:80:c0:6d:e6:2d:2d:b8:77:3c:6d:3f:0a:ce:9e: 0a:53:f4:56:fb:45:b8:e0:51:12:98:76:77:2b:48: 49:8f:66:e5:72:77:2a:a7:9f:96:d2:24:37:2a:ee: f3:11:22:71:25:6a:5a:b6:eb:b9:0b:96:36:b1:71: 8a:cd:1e:b1:28:75:5a:48:34:ed:24:7b:bb:c3:62: 18:e1:e5:99:a9:9b:f9:2b:a1:2c:16:22:b5:50:c8: e2:35:ea:a8:d8:2c:aa:05:7a:c1:bd:b9:07:7d:85: 6d:16:30:62:c9:77:e8:d3:d0:34:4f:d8:05:d6:4a: 29:90:31:14:97:f3:d8:ff:f5:65:16:79:34:0c:bd: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:2D:1A:AA:E2:4E:EE:A1:B5:6C:14:EC:EE:4D:3C:EE:A6:AB:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.202.0.0/18 Signature Algorithm: sha256WithRSAEncryption 08:fd:cf:44:20:57:a8:fc:71:9a:f4:f8:dc:ff:7a:61:a7:e0: 45:03:0f:9c:eb:20:bf:22:6c:d5:7c:dc:94:f7:4c:6f:67:fe: 85:b6:ce:29:03:2a:48:fc:5d:b1:74:6f:58:45:ae:27:66:53: f4:fe:44:c3:13:21:34:f4:26:2f:91:0d:1e:54:e5:72:64:f6: 86:f3:92:bd:5f:01:05:0c:da:39:47:3e:32:e7:b5:8b:17:c9: c4:d9:02:47:77:e3:ff:3a:23:0a:b0:92:cd:43:0b:85:37:a8: 44:89:9d:8b:3f:06:1a:0c:23:65:fd:08:39:88:03:c0:44:61: da:88:3d:d4:bd:58:2d:4a:3b:b0:8a:c6:39:42:a8:93:25:85: ca:c3:ed:59:6e:ee:95:6e:8b:87:82:a7:2f:97:c1:f9:3d:fb: 8b:f5:06:8a:97:be:50:b6:8a:12:48:01:d1:34:75:18:a6:d3: fc:24:64:26:73:ce:a1:7e:30:be:3b:cb:5a:0c:d0:29:ae:be: a1:90:f1:e6:de:77:79:df:8a:20:b7:6a:f8:2c:91:7b:9f:12: 0a:a0:15:bf:0d:51:b1:48:c8:9a:0b:3b:a9:0c:46:2a:e6:70: f7:d6:79:cc:d5:ea:77:a4:b9:0e:5c:2d:a6:61:64:0d:b1:e5: 91:20:4f:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHA9Or+yBGw6kc7TKXXSgVERk07cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUwMDI3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjlkZTMzYjE4ODBiNzA4OGQ5ZjY3M2RjMzRhZTIwNWI1 MGY0ZDI1YjAwNjVhZDEwM2YxZGRkNjY1MjU3MWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRhK0KhyyVqyKlnkCIdFFasnN6XHYgG8B8EVG6LnM3nOfn s17NJUYLNeL8fYs5iPcenIGFOl6XWQgfnyG5DQo7zHljZEuPeGEd5qIxNYWyT7zN LNr4sZLbzXL7USCehOdWag6tHP6gHs3JxTTkzNogRDYIz8G/38GAwG3mLS24dzxt PwrOngpT9Fb7RbjgURKYdncrSEmPZuVydyqnn5bSJDcq7vMRInElalq267kLljax cYrNHrEodVpINO0ke7vDYhjh5Zmpm/kroSwWIrVQyOI16qjYLKoFesG9uQd9hW0W MGLJd+jT0DRP2AXWSimQMRSX89j/9WUWeTQMvUvLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkS8tGqriTu6htWwU7O5NPO6mq+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yzc4NzM0LTkxZDktNDk5NC05NDYxLTdiNjE3MmYwY2FhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZDygAwDQYJKoZIhvcNAQELBQADggEBAAj9z0QgV6j8cZr0+Nz/emGn4EUD D5zrIL8ibNV83JT3TG9n/oW2zikDKkj8XbF0b1hFridmU/T+RMMTITT0Ji+RDR5U 5XJk9obzkr1fAQUM2jlHPjLntYsXycTZAkd34/86Iwqwks1DC4U3qESJnYs/BhoM I2X9CDmIA8BEYdqIPdS9WC1KO7CKxjlCqJMlhcrD7Vlu7pVui4eCpy+Xwfk9+4v1 BoqXvlC2ihJIAdE0dRim0/wkZCZzzqF+ML47y1oM0CmuvqGQ8ebed3nfiiC3avgs kXufEgqgFb8NUbFIyJoLO6kMRirmcPfWeczV6nekuQ5cLaZhZA2x5ZEgTy0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:59 2025 by rpki-client