$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa File: 630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa (raw, json) Hash identifier: G3RcHynWjvBzO/wjrtiC8Hp9CcyqoJ/MKerlgtAOQL0= Subject key identifier: 55:2C:56:9D:FE:DE:01:F9:9E:1F:C4:68:E2:55:50:B7:2A:91:1F:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C24B62DBC47DC3F451327905165B6726039D695 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa Signing time: Mon 07 Apr 2025 15:11:27 +0000 ROA not before: Mon 07 Apr 2025 15:11:27 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.87.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:24:b6:2d:bc:47:dc:3f:45:13:27:90:51:65:b6:72:60:39:d6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:11:27 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=ff152612882b45da26de412863650a0c5838c9d234e55e53c057fa41bf2621fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:21:30:7e:d5:9e:6e:0e:49:af:86:1a:2a: 00:8b:bc:00:ca:cc:80:57:4e:ab:2d:df:e2:11:09: a3:d8:e7:2b:b2:d6:d7:0f:dd:87:75:00:8b:0d:a2: 00:3e:8c:58:38:25:88:94:9d:29:0a:58:1b:1f:a7: 79:0e:73:25:b7:87:ff:f2:c7:8b:b0:50:7d:48:47: 3b:d9:6f:2b:bf:9e:ea:f9:b5:05:f8:c2:db:43:f1: e8:9a:c2:4a:fe:0a:b2:b2:51:d7:00:c0:76:f1:1b: cd:0c:f1:41:a6:03:17:b9:bf:60:9a:71:de:e4:d4: 21:89:e7:60:5f:dc:72:da:98:f9:1c:03:e7:da:df: bc:76:e6:14:25:87:7e:ed:fa:7a:a4:8a:ae:cc:ac: 9b:47:86:f6:6d:ae:92:2b:c7:cb:ca:b9:1d:9d:ed: 0e:7c:8a:fb:08:36:7c:3d:cd:5b:78:51:60:26:ac: 26:34:01:52:4c:b9:4e:32:33:7b:6b:c8:1e:0f:b1: fe:69:a9:b5:47:bd:48:ac:22:87:63:01:01:14:f3: 94:9d:48:99:0b:01:46:a5:c3:4a:b1:15:2d:f3:60: c4:5b:99:f1:f2:63:47:62:ea:69:d9:db:da:1f:8f: 2e:86:1a:11:4b:6c:c9:97:7e:76:ad:b0:74:00:a1: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:56:9D:FE:DE:01:F9:9E:1F:C4:68:E2:55:50:B7:2A:91:1F:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/630b64f9-b9e9-46e7-b8e4-8ea7c44a1a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.87.0.0/16 Signature Algorithm: sha256WithRSAEncryption 93:56:d6:92:e6:fe:30:9f:6a:bd:e0:78:de:14:b7:84:a1:86: 50:ca:33:22:28:36:df:11:36:8a:e3:e2:8d:e4:c9:17:16:b6: 8f:fb:81:ce:64:ea:4b:a9:ed:57:42:b1:2f:59:bf:c6:73:02: 48:6e:85:f7:6c:5d:46:8e:e1:5a:db:77:1b:37:36:02:d6:cd: fa:53:5d:81:8a:fd:0e:cc:64:5a:c1:42:af:c9:d9:ac:60:64: 30:b3:12:ec:e4:5c:16:7d:b0:03:a4:6e:88:c2:50:aa:da:53: 7d:7b:93:42:f3:4d:0a:3c:58:01:46:62:d0:b3:d5:f2:f8:d6: cf:1e:44:57:3b:f2:8e:e6:e0:c7:47:c7:3f:a0:dc:fd:0c:63: 9a:0c:61:77:41:c2:f0:21:50:b4:05:8d:db:ba:13:f8:00:08: 1b:ac:c6:6d:87:03:01:40:0e:71:e0:e8:23:6a:ae:63:f3:af: ad:7f:db:f7:78:78:6b:25:6b:b4:98:5e:6c:43:e5:cf:ce:71: f1:5c:ee:57:d3:ae:a5:88:36:b2:07:d3:cb:fa:e0:ce:36:48: 53:18:b4:4c:57:f5:1f:68:3b:ca:3d:3c:36:ae:f5:ac:72:be: fc:0c:b7:f9:81:12:8d:0f:d2:b4:11:52:6c:33:67:bc:d0:0f: ef:91:22:f8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbCS2LbxH3D9FEyeQUWW2cmA51pUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMTI3WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjE1MjYxMjg4MmI0NWRhMjZkZTQxMjg2MzY1MGEwYzU4 MzhjOWQyMzRlNTVlNTNjMDU3ZmE0MWJmMjYyMWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKSSEwftWebg5Jr4YaKgCLvADKzIBXTqst3+IRCaPY5yuy 1tcP3Yd1AIsNogA+jFg4JYiUnSkKWBsfp3kOcyW3h//yx4uwUH1IRzvZbyu/nur5 tQX4wttD8eiawkr+CrKyUdcAwHbxG80M8UGmAxe5v2Cacd7k1CGJ52Bf3HLamPkc A+fa37x25hQlh37t+nqkiq7MrJtHhvZtrpIrx8vKuR2d7Q58ivsINnw9zVt4UWAm rCY0AVJMuU4yM3tryB4Psf5pqbVHvUisIodjAQEU85SdSJkLAUalw0qxFS3zYMRb mfHyY0di6mnZ29ofjy6GGhFLbMmXfnatsHQAoY3jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVSxWnf7eAfmeH8Ro4lVQtyqRH1AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzMGI2NGY5LWI5ZTktNDZlNy1iOGU0LThlYTdjNDRhMWExNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQVzANBgkqhkiG9w0BAQsFAAOCAQEAk1bWkub+MJ9qveB43hS3hKGGUMoz Iig23xE2iuPijeTJFxa2j/uBzmTqS6ntV0KxL1m/xnMCSG6F92xdRo7hWtt3Gzc2 AtbN+lNdgYr9DsxkWsFCr8nZrGBkMLMS7ORcFn2wA6RuiMJQqtpTfXuTQvNNCjxY AUZi0LPV8vjWzx5EVzvyjubgx0fHP6Dc/Qxjmgxhd0HC8CFQtAWN27oT+AAIG6zG bYcDAUAOceDoI2quY/OvrX/b93h4ayVrtJhebEPlz85x8VzuV9OupYg2sgfTy/rg zjZIUxi0TFf1H2g7yj08Nq71rHK+/Ay3+YESjQ/StBFSbDNnvNAP75Ei+A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:32 2025 by rpki-client