$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa File: 5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa (raw, json) Hash identifier: EoxGeyswso4fegczlswWfxQTFOcQ/pdJQv4THlrPR2A= Subject key identifier: 0D:2C:37:A4:84:C9:60:5E:E9:5B:C3:75:89:D6:FB:CA:22:0D:A0:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16A09750407E97D4B0ED7FCFADDC4755405504EA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa Signing time: Wed 23 Apr 2025 00:41:33 +0000 ROA not before: Wed 23 Apr 2025 00:41:33 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a0:97:50:40:7e:97:d4:b0:ed:7f:cf:ad:dc:47:55:40:55:04:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:33 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=713375490465d3c3f40fb1fbb352b9c9b251809ac1c9dd323054186ba0bd8d39, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:28:bf:fb:52:e1:1f:f1:c0:a8:34:3b:7b: 04:d2:33:bc:b8:d6:b0:ef:cd:79:89:4e:1d:c4:60: 62:6f:5c:ac:44:b8:a6:4b:c6:40:c0:b9:34:71:a6: e3:ac:26:f4:39:2f:a2:1f:d1:52:dd:2e:82:98:88: e5:5a:30:38:d2:23:ab:56:03:c5:0f:f4:e5:73:b9: e5:c7:63:31:9b:3c:22:e7:b6:a7:9c:36:0c:7a:90: bb:0c:d0:e6:19:36:8f:7b:0a:60:90:83:eb:c1:40: 86:b8:8e:cb:a8:5e:84:d0:aa:f2:8a:fb:73:a8:51: 3f:7a:fb:87:f2:5e:bb:0f:0e:0d:a4:67:e0:07:ae: cc:cf:5b:8c:da:ea:0d:1f:9f:21:e8:cf:3e:b1:2f: 6f:23:e3:d7:63:f2:9e:c3:a9:b0:86:42:29:8d:52: 1d:46:0a:43:d8:93:b9:01:ca:77:75:29:e3:66:78: b2:46:24:22:a8:6f:8e:88:30:5c:a7:5c:a5:3f:2c: c5:1d:11:13:21:42:d0:8e:94:0b:15:4d:85:7a:f9: dc:25:fb:b0:e5:a3:38:74:1f:b5:83:f3:66:41:dd: 1c:1d:b0:d7:4c:a7:25:7b:9e:4b:4e:b3:56:d6:0b: 9c:f7:98:79:28:db:57:4f:a6:11:32:aa:cd:64:a2: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2C:37:A4:84:C9:60:5E:E9:5B:C3:75:89:D6:FB:CA:22:0D:A0:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f989e3a-8e3d-45ce-a83d-d53491ab4a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:38:e0:37:ef:58:50:7a:f4:7e:a8:84:b7:c7:74:0e:ba:a4: 0c:71:cf:f5:76:53:f4:ab:1f:f6:31:1d:65:b0:1a:c7:56:1d: 20:18:9d:26:0c:f5:20:b9:06:91:7f:b8:a5:94:e6:20:1c:05: a3:5a:84:b1:88:ae:eb:37:92:dc:e9:b7:ff:ec:94:56:fd:8e: db:b4:8a:8e:90:1c:10:29:e0:01:f4:c4:ca:41:1b:4b:ce:4e: f8:f6:3f:ab:76:2c:8f:2d:43:6a:a6:f3:49:9d:5f:9d:79:e4: 8b:a0:bd:0f:f6:b2:4c:17:42:63:45:8d:29:6a:5f:de:5d:e0: 76:f5:bb:d8:86:dc:91:29:a2:b2:ab:98:d5:fc:a8:a2:53:c0: 54:12:51:23:a0:bc:ad:ee:62:a8:95:ad:a3:bc:14:b3:50:b9: 8b:3c:a0:7f:99:fe:49:61:cf:9f:cf:b1:e9:db:55:ec:25:5e: 1c:5e:c4:e9:e2:f1:f9:98:63:2f:fb:c8:28:52:9d:f4:84:2c: 5a:86:cc:bf:e1:54:38:3e:be:96:b8:bf:cc:11:7b:ce:ff:13: 0a:20:90:94:10:01:e3:53:65:61:9a:50:51:a9:e9:cc:d5:26: 27:b0:cd:c9:0b:0d:55:f1:0d:cf:23:d4:d3:ef:15:53:13:d0: f0:a8:8c:80 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFqCXUEB+l9Sw7X/PrdxHVUBVBOowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTMzWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTMzNzU0OTA0NjVkM2MzZjQwZmIxZmJiMzUyYjljOWIy NTE4MDlhYzFjOWRkMzIzMDU0MTg2YmEwYmQ4ZDM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDvyi/+1LhH/HAqDQ7ewTSM7y41rDvzXmJTh3EYGJvXKxE uKZLxkDAuTRxpuOsJvQ5L6If0VLdLoKYiOVaMDjSI6tWA8UP9OVzueXHYzGbPCLn tqecNgx6kLsM0OYZNo97CmCQg+vBQIa4jsuoXoTQqvKK+3OoUT96+4fyXrsPDg2k Z+AHrszPW4za6g0fnyHozz6xL28j49dj8p7DqbCGQimNUh1GCkPYk7kBynd1KeNm eLJGJCKob46IMFynXKU/LMUdERMhQtCOlAsVTYV6+dwl+7Dlozh0H7WD82ZB3Rwd sNdMpyV7nktOs1bWC5z3mHko21dPphEyqs1kolxlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDSw3pITJYF7pW8N1idb7yiINoPowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmOTg5ZTNhLThlM2QtNDVjZS1hODNkLWQ1MzQ5MWFiNGEzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQOTANBgkqhkiG9w0BAQsFAAOCAQEAozjgN+9YUHr0fqiEt8d0DrqkDHHP 9XZT9Ksf9jEdZbAax1YdIBidJgz1ILkGkX+4pZTmIBwFo1qEsYiu6zeS3Om3/+yU Vv2O27SKjpAcECngAfTEykEbS85O+PY/q3Ysjy1DaqbzSZ1fnXnki6C9D/ayTBdC Y0WNKWpf3l3gdvW72IbckSmisquY1fyoolPAVBJRI6C8re5iqJWto7wUs1C5izyg f5n+SWHPn8+x6dtV7CVeHF7E6eLx+ZhjL/vIKFKd9IQsWobMv+FUOD6+lri/zBF7 zv8TCiCQlBAB41NlYZpQUanpzNUmJ7DNyQsNVfENzyPU0+8VUxPQ8KiMgA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:33 2025 by rpki-client