$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa File: 5f22ad31-1c84-490b-a843-6ec8ce92d874.roa (raw, json) Hash identifier: BJQ7hI0INdo79upnFb6diuLWTZd5nIi65hVeWI0Foro= Subject key identifier: E5:BF:00:F1:27:C3:DA:28:B3:7F:31:6D:F8:E3:47:40:B0:D3:57:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45A3C85DAE64421A65F598C27D0F03DBDCCF1BB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa Signing time: Tue 22 Apr 2025 00:01:27 +0000 ROA not before: Tue 22 Apr 2025 00:01:27 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a3:c8:5d:ae:64:42:1a:65:f5:98:c2:7d:0f:03:db:dc:cf:1b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:01:27 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=06fd48c93f0e62e2895f65cd0d88b54e91eb52d90877a77d729efc9856fb79f7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:e3:4e:c5:46:28:5e:52:02:e2:38:b0:6a: 4f:e1:a2:f1:33:f7:b1:28:a9:78:8d:b3:1e:0f:0b: 24:ac:cd:08:be:da:a1:d9:05:01:08:d0:e4:36:5c: 5e:b4:c4:43:54:00:0e:17:ce:a6:29:08:30:4c:d2: 78:2c:72:0f:b1:52:43:d1:5c:23:ab:07:9c:27:5e: 68:04:6c:d5:78:3b:d8:ce:7a:f3:ff:85:95:fd:c8: 40:67:57:49:b2:d2:05:51:79:93:c7:33:8c:10:6d: 36:39:d1:c8:8b:ea:00:0b:8c:22:2c:3b:05:f5:cf: b0:cb:b9:39:9f:b5:0f:ee:c9:37:09:a7:26:67:a8: 14:fb:9e:55:9f:02:19:cd:1a:af:77:db:72:9b:fc: e2:97:ff:97:41:24:f6:77:c9:12:b9:34:b6:4e:78: e9:77:2f:d5:dc:7a:b0:73:13:31:e7:a8:c1:ce:3a: 2c:91:10:ac:c1:0a:d9:51:85:36:d5:4f:e6:a1:10: be:45:8b:c0:2b:23:50:49:6c:4d:71:04:dd:5c:e4: 8a:0c:74:7e:12:83:60:f0:7e:2e:59:66:5d:21:d9: 5a:cd:0d:45:0f:69:0c:ee:98:a0:eb:b4:d1:6f:93: 4a:ec:ca:63:64:98:63:db:7b:27:61:e7:5a:2f:07: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BF:00:F1:27:C3:DA:28:B3:7F:31:6D:F8:E3:47:40:B0:D3:57:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.24.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:a8:a4:c9:84:d8:40:26:3b:84:4e:4c:c9:46:ec:ab:35:b6: ed:b3:ff:80:d5:a3:a2:47:5e:15:91:b3:e3:26:24:99:fb:10: f2:07:4a:63:01:c6:77:56:dd:0b:8b:f2:af:72:02:47:40:27: 14:30:42:e2:11:43:dd:69:e5:56:2e:03:13:f1:6c:8b:73:39: 71:10:6c:58:7f:a0:7e:e9:e9:82:f1:da:de:c5:25:6e:ae:ac: e2:5b:c9:ec:15:b2:ae:8b:19:58:fb:57:e0:52:68:8d:66:f1: bb:3b:f1:52:3e:0b:db:ee:c0:7d:ac:f3:83:d1:24:1b:67:21: 7d:db:a1:ab:cf:18:d8:2f:09:5f:19:8b:20:e9:2c:7f:01:89: 93:fd:79:7e:dd:ca:25:f0:60:f4:63:d4:45:4c:bb:87:6d:c6: 02:74:2e:3c:f8:97:2b:e3:5c:35:aa:94:88:e4:2d:08:49:0b: d9:44:4f:03:d0:b9:70:67:3d:6d:53:f1:2d:66:a1:96:a1:38: 27:0b:9f:17:63:2a:fc:4a:16:e0:ff:a5:1e:fd:8d:0a:4d:97: c1:65:aa:e7:12:9a:3b:18:1e:92:66:a3:6b:87:7a:13:43:9c: 34:ec:93:8a:1d:18:f4:87:65:c4:3b:c8:fd:ab:96:65:be:d8: ab:d6:08:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURaPIXa5kQhpl9ZjCfQ8D29zPG7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAwMTI3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmZkNDhjOTNmMGU2MmUyODk1ZjY1Y2QwZDg4YjU0ZTkx ZWI1MmQ5MDg3N2E3N2Q3MjllZmM5ODU2ZmI3OWY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsS+NOxUYoXlIC4jiwak/hovEz97EoqXiNsx4PCySszQi+ 2qHZBQEI0OQ2XF60xENUAA4XzqYpCDBM0ngscg+xUkPRXCOrB5wnXmgEbNV4O9jO evP/hZX9yEBnV0my0gVReZPHM4wQbTY50ciL6gALjCIsOwX1z7DLuTmftQ/uyTcJ pyZnqBT7nlWfAhnNGq9323Kb/OKX/5dBJPZ3yRK5NLZOeOl3L9XcerBzEzHnqMHO OiyREKzBCtlRhTbVT+ahEL5Fi8ArI1BJbE1xBN1c5IoMdH4Sg2Dwfi5ZZl0h2VrN DUUPaQzumKDrtNFvk0rsymNkmGPbeydh51ovB4FHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5b8A8SfD2iizfzFt+ONHQLDTVx0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmMjJhZDMxLTFjODQtNDkwYi1hODQzLTZlYzhjZTkyZDg3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBsxgwDQYJKoZIhvcNAQELBQADggEBAAuopMmE2EAmO4ROTMlG7Ks1tu2z /4DVo6JHXhWRs+MmJJn7EPIHSmMBxndW3QuL8q9yAkdAJxQwQuIRQ91p5VYuAxPx bItzOXEQbFh/oH7p6YLx2t7FJW6urOJbyewVsq6LGVj7V+BSaI1m8bs78VI+C9vu wH2s84PRJBtnIX3boavPGNgvCV8ZiyDpLH8BiZP9eX7dyiXwYPRj1EVMu4dtxgJ0 Ljz4lyvjXDWqlIjkLQhJC9lETwPQuXBnPW1T8S1moZahOCcLnxdjKvxKFuD/pR79 jQpNl8FlqucSmjsYHpJmo2uHehNDnDTsk4odGPSHZcQ7yP2rlmW+2KvWCDY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:24 2025 by rpki-client