$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6180caee-ed00-4870-a7a1-8606e433e128.roa File: 6180caee-ed00-4870-a7a1-8606e433e128.roa (raw, json) Hash identifier: v09xptV448uJ98CD1aDEmkqCaZLPWkrgipCiyu/xcrw= Subject key identifier: EB:F8:9F:5A:08:9A:58:2A:6E:7A:9B:A1:F7:E4:B6:71:A5:BD:95:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 627C45823EADF468FA0B572F275E77C032B79DED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6180caee-ed00-4870-a7a1-8606e433e128.roa Signing time: Wed 16 Apr 2025 00:10:08 +0000 ROA not before: Wed 16 Apr 2025 00:10:08 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 78.12.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7c:45:82:3e:ad:f4:68:fa:0b:57:2f:27:5e:77:c0:32:b7:9d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:10:08 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=7bd8c1a45711f2fccaad46d15ca0d4a8be6ae1c9a68ef1d069f006767372e0f2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:25:c6:19:36:22:c1:5d:7e:af:a7:d2:c4: aa:56:34:1a:b3:cc:2b:55:d5:56:9e:15:bf:94:d3: 57:d5:33:68:d5:72:99:77:c4:81:21:c3:39:43:4a: 45:bd:ae:5a:aa:71:46:4d:b7:ca:76:ee:e3:5d:da: 2b:9a:ee:b0:db:0a:cb:e3:bc:76:2e:c9:9a:03:25: 56:e6:be:62:45:bc:fc:eb:09:98:97:3d:c4:db:db: f3:74:aa:64:ee:2f:78:dd:78:80:8c:fc:52:b4:d3: 99:05:3b:4b:6f:bd:85:fa:3b:2b:49:e6:eb:95:20: 02:a5:d0:5c:93:78:a1:28:99:97:56:a5:fc:49:20: c3:88:e9:44:30:dd:8c:db:db:dc:83:3f:43:5a:56: 6d:5d:86:81:f8:f5:8c:65:31:5d:ec:a1:7f:e4:1f: 0f:00:59:a6:00:76:98:0f:7f:50:bc:d1:37:e2:77: e5:8e:f2:09:a9:3c:c1:a8:3a:e3:39:87:84:f1:7e: 51:35:46:57:d5:41:46:d5:66:34:a0:2b:0b:61:ce: a1:0b:0c:54:ba:10:7a:e1:71:f8:da:e2:c8:e9:17: 7c:8e:cc:da:2a:aa:02:17:69:be:7a:1c:e5:a1:d1: 90:b7:f8:8c:0d:01:83:d8:16:87:1e:45:6d:03:61: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F8:9F:5A:08:9A:58:2A:6E:7A:9B:A1:F7:E4:B6:71:A5:BD:95:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6180caee-ed00-4870-a7a1-8606e433e128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.12.62.0/24 Signature Algorithm: sha256WithRSAEncryption 59:a2:58:d8:29:b8:9d:c5:2a:64:96:81:5f:39:8a:14:02:e0: a7:fd:69:6e:fd:4e:2b:6e:fc:26:69:f5:48:18:3a:ce:1f:ba: 2e:36:0f:a6:16:d4:9b:78:bb:3b:28:ee:16:8c:47:f8:26:32: b1:f6:7f:73:47:fa:fa:5c:73:cf:f5:11:1b:05:fe:70:5d:2e: 67:58:8a:28:49:98:a6:ee:3a:b6:72:78:64:d8:ae:f1:5f:a4: d8:a6:58:ad:95:50:ad:9b:62:16:2e:e7:23:b7:7b:61:81:25: b9:b9:93:79:01:7b:d1:51:51:50:de:37:d1:6d:b2:c2:e1:0b: 89:bb:28:a3:c1:e9:05:f9:b6:49:dc:d3:38:32:af:5c:c6:2b: aa:f7:86:88:9f:a6:a5:fb:f4:fd:9b:58:b5:99:7b:c8:d4:ce: ed:cd:6e:2d:6e:8b:f2:f4:c2:65:0d:e0:c1:1d:0f:6d:18:6c: 10:34:62:fd:4e:76:ed:49:83:c9:13:0b:ee:ab:12:e1:71:40: 0e:89:b7:34:10:47:c1:53:3f:6d:ef:53:76:75:14:a6:fb:68: b4:f0:a3:e8:1c:01:2b:4e:85:d0:5f:00:5e:cc:7b:a4:7f:c9: fb:b9:ec:97:39:5a:89:3e:95:08:22:86:4b:21:fd:7d:ce:85: 06:50:ee:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYnxFgj6t9Gj6C1cvJ153wDK3ne0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE2MDAxMDA4WhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmQ4YzFhNDU3MTFmMmZjY2FhZDQ2ZDE1Y2EwZDRhOGJl NmFlMWM5YTY4ZWYxZDA2OWYwMDY3NjczNzJlMGYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRBiXGGTYiwV1+r6fSxKpWNBqzzCtV1VaeFb+U01fVM2jV cpl3xIEhwzlDSkW9rlqqcUZNt8p27uNd2iua7rDbCsvjvHYuyZoDJVbmvmJFvPzr CZiXPcTb2/N0qmTuL3jdeICM/FK005kFO0tvvYX6OytJ5uuVIAKl0FyTeKEomZdW pfxJIMOI6UQw3Yzb29yDP0NaVm1dhoH49YxlMV3soX/kHw8AWaYAdpgPf1C80Tfi d+WO8gmpPMGoOuM5h4TxflE1RlfVQUbVZjSgKwthzqELDFS6EHrhcfja4sjpF3yO zNoqqgIXab56HOWh0ZC3+IwNAYPYFoceRW0DYQU9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6/ifWgiaWCpuepuh9+S2caW9ldcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxODBjYWVlLWVkMDAtNDg3MC1hN2ExLTg2MDZlNDMzZTEyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABODD4wDQYJKoZIhvcNAQELBQADggEBAFmiWNgpuJ3FKmSWgV85ihQC4Kf9 aW79Titu/CZp9UgYOs4fui42D6YW1Jt4uzso7haMR/gmMrH2f3NH+vpcc8/1ERsF /nBdLmdYiihJmKbuOrZyeGTYrvFfpNimWK2VUK2bYhYu5yO3e2GBJbm5k3kBe9FR UVDeN9FtssLhC4m7KKPB6QX5tknc0zgyr1zGK6r3hoifpqX79P2bWLWZe8jUzu3N bi1ui/L0wmUN4MEdD20YbBA0Yv1Odu1Jg8kTC+6rEuFxQA6JtzQQR8FTP23vU3Z1 FKb7aLTwo+gcAStOhdBfAF7Me6R/yfu57Jc5Wok+lQgihksh/X3OhQZQ7vg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:16 2025 by rpki-client