$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa File: 5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa (raw, json) Hash identifier: MOON3F4DqjlqYQcCQGRLgT4ICraPjFygCy73/XTuSWM= Subject key identifier: 04:14:8C:02:A9:A5:CD:7C:C2:6B:26:CD:44:79:D5:EB:46:00:56:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 396B1A1FF92452F48A2B67D31955EA961659B31F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa Signing time: Fri 18 Apr 2025 00:42:02 +0000 ROA not before: Fri 18 Apr 2025 00:42:02 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6b:1a:1f:f9:24:52:f4:8a:2b:67:d3:19:55:ea:96:16:59:b3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:42:02 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=dbfa78677b99e2a4e03af2d8ad7e80d16f386ee2bd3bd0731d387c0c45b68e43, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:29:6f:81:fe:4f:c1:dc:3c:de:5e:b9:3a: 64:5b:c8:f3:39:23:d0:31:e1:ca:43:a6:6e:dc:b2: 2b:2c:90:94:1d:83:1e:c3:3b:c8:3d:81:a2:df:4e: a4:8d:d3:c1:24:27:39:52:00:fb:c4:71:91:8f:de: 10:be:4f:93:d9:40:10:80:bf:8f:3e:19:0e:f8:d0: 7d:e4:41:50:f1:7e:fa:a9:d4:42:52:f6:d9:c9:fd: b1:78:2f:f2:c5:02:1e:de:ae:09:16:4b:66:f4:ae: 8a:51:90:a0:b9:9e:1b:b6:64:23:54:af:b6:a0:f2: 4e:4a:78:86:71:d3:e3:66:d3:89:4e:3e:22:be:5b: 25:6e:2b:86:be:b8:cc:28:e1:73:45:02:da:12:85: 48:32:5a:39:30:4d:88:03:75:c7:b0:42:80:91:4b: eb:bd:b6:3a:92:a9:c5:b0:ad:cb:8a:47:24:ca:9e: 84:83:7a:1f:19:42:e3:64:bf:59:df:1a:77:c7:ec: 3a:71:37:df:7d:9f:d4:5b:64:d0:a3:8d:a1:44:3f: 1c:fb:85:fb:de:32:ff:db:e0:d7:6f:40:64:35:71: 05:1e:0b:f1:11:d6:21:70:9d:80:18:7e:f6:3d:79: 30:65:36:46:96:8a:f1:fa:23:30:fb:58:03:35:ea: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:14:8C:02:A9:A5:CD:7C:C2:6B:26:CD:44:79:D5:EB:46:00:56:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d4bce8a-50bb-4c95-9e1a-d37c6b295bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.222.0/23 Signature Algorithm: sha256WithRSAEncryption 47:4a:e9:cf:26:61:84:63:ee:52:5b:c8:aa:95:dc:e2:69:24: b0:90:4c:c8:54:fa:f7:c3:55:a7:8a:02:9b:60:d8:7a:20:9d: 9e:75:43:fc:f8:3e:d5:c0:36:d8:ac:b8:a0:70:3b:52:70:e1: 75:9f:e0:45:95:fa:61:53:ad:f3:23:d0:01:a1:d5:c7:31:2c: f4:df:3b:28:61:4e:29:63:17:25:bc:25:c4:c6:4e:71:7b:45: f4:a4:89:af:e2:7d:87:bf:47:a5:ad:34:f0:a3:f3:46:2e:88: 71:c7:98:58:ee:b5:1f:48:4c:65:c5:63:9b:3a:5f:79:99:59: 26:1e:06:26:20:9e:5d:e8:e9:9a:ec:7e:8f:06:8c:b9:3e:72: 4b:15:94:4c:a7:de:51:05:90:ae:7b:18:f8:2d:35:67:71:38: fa:a7:3d:31:25:40:c7:19:d1:f6:69:d7:a3:e2:52:48:b7:bd: ea:2f:f9:a8:43:32:2a:db:89:f1:d9:85:f2:75:56:62:fb:7a: 2d:1f:e6:21:0a:31:a4:9a:1c:07:d5:09:c4:fe:70:c8:97:87: e8:e7:3d:26:dd:0a:96:60:d3:d4:2d:6f:3c:06:3d:2e:10:d2: 6a:5c:2c:d4:93:04:e3:72:3e:fc:05:5f:79:81:d3:73:b2:4c: db:21:81:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOWsaH/kkUvSKK2fTGVXqlhZZsx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MjAyWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmZhNzg2NzdiOTllMmE0ZTAzYWYyZDhhZDdlODBkMTZm Mzg2ZWUyYmQzYmQwNzMxZDM4N2MwYzQ1YjY4ZTQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzcilvgf5Pwdw83l65OmRbyPM5I9Ax4cpDpm7csisskJQd gx7DO8g9gaLfTqSN08EkJzlSAPvEcZGP3hC+T5PZQBCAv48+GQ740H3kQVDxfvqp 1EJS9tnJ/bF4L/LFAh7ergkWS2b0ropRkKC5nhu2ZCNUr7ag8k5KeIZx0+Nm04lO PiK+WyVuK4a+uMwo4XNFAtoShUgyWjkwTYgDdcewQoCRS+u9tjqSqcWwrcuKRyTK noSDeh8ZQuNkv1nfGnfH7DpxN999n9RbZNCjjaFEPxz7hfveMv/b4NdvQGQ1cQUe C/ER1iFwnYAYfvY9eTBlNkaWivH6IzD7WAM16siZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBBSMAqmlzXzCaybNRHnV60YAVm4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkNGJjZThhLTUwYmItNGM5NS05ZTFhLWQzN2M2YjI5NWJkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFA4t4wDQYJKoZIhvcNAQELBQADggEBAEdK6c8mYYRj7lJbyKqV3OJpJLCQ TMhU+vfDVaeKAptg2HognZ51Q/z4PtXANtisuKBwO1Jw4XWf4EWV+mFTrfMj0AGh 1ccxLPTfOyhhTiljFyW8JcTGTnF7RfSkia/ifYe/R6WtNPCj80YuiHHHmFjutR9I TGXFY5s6X3mZWSYeBiYgnl3o6Zrsfo8GjLk+cksVlEyn3lEFkK57GPgtNWdxOPqn PTElQMcZ0fZp16PiUki3veov+ahDMirbifHZhfJ1VmL7ei0f5iEKMaSaHAfVCcT+ cMiXh+jnPSbdCpZg09QtbzwGPS4Q0mpcLNSTBONyPvwFX3mB03OyTNshgYk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:10 2025 by rpki-client