$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a474b2e-a6fd-4298-b5df-ff9caa26f91c.roa File: 5a474b2e-a6fd-4298-b5df-ff9caa26f91c.roa (raw, json) Hash identifier: RogU1olKolU3lvVqozVen1DjMqWkeBk2uKp3wxPhzC8= Subject key identifier: 8E:8C:F1:93:E0:9C:AC:EE:D6:2E:29:B1:3B:21:EE:6C:59:63:CB:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43AB94B88B8A34BD68F39DDAA9CBDBE099924D0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a474b2e-a6fd-4298-b5df-ff9caa26f91c.roa Signing time: Tue 08 Apr 2025 00:31:54 +0000 ROA not before: Tue 08 Apr 2025 00:31:54 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.52.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ab:94:b8:8b:8a:34:bd:68:f3:9d:da:a9:cb:db:e0:99:92:4d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:31:54 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=ff0292fb695b8f00ab9980427455629a1652c44e5db8078dfe30830d0a2358a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2b:b7:a3:ce:4c:3d:34:1f:4e:71:b8:19:fa: 78:06:30:07:c7:36:39:2b:ee:e5:8e:4b:61:44:e7: 5b:2b:f4:58:6f:60:e6:31:07:a3:37:fb:17:24:e1: d7:bd:6c:98:e9:09:0b:e2:c7:c3:a3:9d:64:f2:f3: e7:d9:ac:e7:2e:a1:03:8d:c4:a2:70:e9:14:96:85: 72:e0:c6:8d:e4:23:dc:34:ca:a9:44:08:c2:c2:3c: f1:d8:d0:e7:bb:5c:b9:9b:4d:46:8d:bf:1a:f8:e1: af:7b:f0:1a:a9:aa:24:8b:fd:c4:59:9b:65:6e:57: 14:76:6d:b4:09:8a:a8:fe:db:b8:80:07:85:a6:b6: e6:09:f8:fa:e2:a6:54:0e:0f:29:23:4c:82:31:a1: 49:7b:4c:73:0e:d9:d7:a6:9b:7a:26:1f:1c:d8:31: e9:d5:79:73:19:82:ef:ca:4e:06:07:7c:a2:77:e1: 0a:45:f5:96:a4:3b:69:f0:aa:66:a6:8a:19:f0:30: 13:2d:90:a8:b0:db:3f:79:1c:7a:80:f6:a5:58:31: 41:4c:e9:40:c9:b0:d2:62:27:2c:35:54:6e:85:5d: e1:0d:21:90:63:92:3c:ba:c2:4d:04:5f:37:2f:84: 76:2d:cb:5f:b8:6c:f6:6d:9b:d7:9d:d9:7d:b5:cc: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8C:F1:93:E0:9C:AC:EE:D6:2E:29:B1:3B:21:EE:6C:59:63:CB:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a474b2e-a6fd-4298-b5df-ff9caa26f91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.52.0.0/16 Signature Algorithm: sha256WithRSAEncryption cc:6b:91:07:d2:52:f0:40:98:85:ee:86:d6:8a:4d:5d:28:6f: 34:28:4c:29:88:bd:91:f1:64:b6:82:be:c4:b3:99:d4:89:af: f9:00:1d:a1:a8:62:a6:b4:81:34:8e:b6:89:24:c4:ba:72:36: 76:01:72:44:ba:6d:9f:d5:59:ad:ff:84:3d:02:f9:93:ac:e1: 36:cf:b8:71:ab:78:6b:56:e9:b0:a0:d0:2f:3c:3a:15:5a:a1: ff:72:16:a1:4c:3c:6d:a3:2d:04:6e:89:3d:f0:4f:39:36:76: 35:82:5a:9b:b9:0b:37:52:39:85:03:a1:28:01:c9:db:a8:f6: 67:c4:f5:1c:eb:0b:74:18:87:45:68:24:fe:1e:6e:09:9c:38: 50:d1:99:67:12:db:54:a2:f2:c3:53:16:cc:0c:3b:41:6a:9c: 59:66:7c:4b:b8:a3:a9:b8:07:23:58:1b:cf:36:3b:0a:8a:45: 59:1d:98:ed:ce:3d:b1:6d:60:ce:75:6d:b5:6e:54:67:df:67: c5:db:ea:e4:d9:60:22:ff:af:73:e9:98:13:4a:c9:53:26:ad: c5:b7:c6:65:57:0b:2c:60:e1:74:b9:fb:a0:f3:67:26:37:93: af:ac:d9:2c:0f:1a:35:c6:1b:b0:d1:4c:68:9f:62:0e:b9:d7: 8b:f4:dc:59 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ6uUuIuKNL1o853aqcvb4JmSTQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAzMTU0WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjAyOTJmYjY5NWI4ZjAwYWI5OTgwNDI3NDU1NjI5YTE2 NTJjNDRlNWRiODA3OGRmZTMwODMwZDBhMjM1OGEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLK7ejzkw9NB9OcbgZ+ngGMAfHNjkr7uWOS2FE51sr9Fhv YOYxB6M3+xck4de9bJjpCQvix8OjnWTy8+fZrOcuoQONxKJw6RSWhXLgxo3kI9w0 yqlECMLCPPHY0Oe7XLmbTUaNvxr44a978BqpqiSL/cRZm2VuVxR2bbQJiqj+27iA B4WmtuYJ+PriplQODykjTIIxoUl7THMO2demm3omHxzYMenVeXMZgu/KTgYHfKJ3 4QpF9ZakO2nwqmamihnwMBMtkKiw2z95HHqA9qVYMUFM6UDJsNJiJyw1VG6FXeEN IZBjkjy6wk0EXzcvhHYty1+4bPZtm9ed2X21zBNbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjozxk+CcrO7WLimxOyHubFljy64wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhNDc0YjJlLWE2ZmQtNDI5OC1iNWRmLWZmOWNhYTI2ZjkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4NDANBgkqhkiG9w0BAQsFAAOCAQEAzGuRB9JS8ECYhe6G1opNXShvNChM KYi9kfFktoK+xLOZ1Imv+QAdoahiprSBNI62iSTEunI2dgFyRLptn9VZrf+EPQL5 k6zhNs+4cat4a1bpsKDQLzw6FVqh/3IWoUw8baMtBG6JPfBPOTZ2NYJam7kLN1I5 hQOhKAHJ26j2Z8T1HOsLdBiHRWgk/h5uCZw4UNGZZxLbVKLyw1MWzAw7QWqcWWZ8 S7ijqbgHI1gbzzY7CopFWR2Y7c49sW1gznVttW5UZ99nxdvq5NlgIv+vc+mYE0rJ UyatxbfGZVcLLGDhdLn7oPNnJjeTr6zZLA8aNcYbsNFMaJ9iDrnXi/TcWQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:44 2025 by rpki-client