$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa File: 67b9adc9-cd45-4063-bd3b-110c018322fe.roa (raw, json) Hash identifier: x1yu7yaWKuWPwOKqdTU6kGzn1bbUM6100Vmo6p+7Za0= Subject key identifier: CE:5C:8C:E3:02:72:C2:63:ED:9D:42:44:3F:5C:B4:25:81:1D:2B:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DCC942D2B95F02E956608547313ECC2B4AA7840 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa Signing time: Fri 25 Apr 2025 00:21:09 +0000 ROA not before: Fri 25 Apr 2025 00:21:09 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cc:94:2d:2b:95:f0:2e:95:66:08:54:73:13:ec:c2:b4:aa:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:21:09 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=5c9bebd890cc83e8e89b2c11ece4303528778b26637b2d297d76c59f1cad1e64, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:9c:b4:cd:24:09:c6:c9:f4:52:4c:3b:0c: be:5d:e1:dc:90:61:4f:18:ba:bf:ad:b8:b4:5b:71: d3:1d:00:03:0a:81:1e:ff:8a:ec:b8:f5:16:5a:a5: e7:02:ad:1d:88:fb:6c:79:b1:29:a5:d2:5a:2b:a5: d8:48:03:8d:37:08:11:c1:45:13:aa:f2:f0:71:e7: 27:0b:56:c4:8a:ae:fa:b6:8a:c0:ab:ed:fd:02:ed: 5a:b1:77:4b:57:a4:9a:81:ff:a8:93:87:fd:0e:b2: 8d:61:c4:42:1d:d0:ad:45:10:16:54:ee:57:05:63: a4:5b:ae:6e:2c:7e:1d:98:74:7c:cd:f7:ce:bd:c4: 54:9d:a8:4e:51:8e:26:64:90:6b:85:f3:a2:cd:37: bb:77:3b:31:03:f1:e8:d2:d8:82:56:6b:53:42:46: bb:7b:fa:60:1a:39:11:20:64:c7:2b:e0:f4:a9:c7: 71:0b:82:67:b0:39:14:7e:aa:98:7e:48:ce:57:08: d9:17:39:e6:d2:69:67:35:ac:00:77:af:78:42:a1: 21:5e:74:53:b1:b1:c3:70:de:5f:a2:9c:12:ea:e2: 46:7a:45:5c:3d:7f:09:3c:35:a9:0e:a8:98:ec:0f: d2:ca:2f:e9:ea:22:1a:cb:4e:05:12:35:7d:d6:14: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:8C:E3:02:72:C2:63:ED:9D:42:44:3F:5C:B4:25:81:1D:2B:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.40.0/21 Signature Algorithm: sha256WithRSAEncryption 54:0d:5b:03:65:d9:ce:3e:6d:37:9c:57:94:30:c9:79:e1:c9: a5:1d:e7:a7:46:2e:f5:fe:6c:8b:67:e6:66:14:26:45:1e:21: 7b:85:25:3f:3e:6e:55:42:6f:41:ab:38:d2:58:f9:e6:f4:07: 34:43:75:94:5a:bd:d1:81:95:ee:68:43:45:f6:bf:92:17:49: dc:c8:b4:e4:0e:83:13:eb:b9:45:ae:3a:12:be:f8:03:ab:6b: f5:62:2a:0b:d7:2c:cf:f2:53:96:b8:fc:37:37:9a:0c:9d:21: 1d:ad:51:80:f3:55:0a:1c:30:c9:b4:24:95:f1:fc:94:ae:cf: f1:45:44:69:61:8a:15:45:94:d6:4f:6e:65:4f:40:0f:d8:69: b4:b0:20:bb:10:3d:fc:99:e5:c7:69:06:47:db:fe:74:e7:f0: 5d:2e:19:d4:64:9c:ee:de:f0:20:83:c5:1f:c8:7c:b3:b0:5c: 50:4f:c9:4d:f7:13:c7:61:1e:ab:ba:80:01:cf:08:58:f9:55: 67:60:0f:9c:59:3e:89:b5:58:50:00:b5:51:b3:a0:fc:c2:72: ea:a5:bf:09:f9:a7:e6:a6:78:7d:78:7e:4a:24:f1:74:75:88: 28:8f:b9:18:ce:3f:73:ec:fc:26:db:fc:08:39:b0:0c:23:60: a3:ad:a7:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbcyULSuV8C6VZghUcxPswrSqeEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAyMTA5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzliZWJkODkwY2M4M2U4ZTg5YjJjMTFlY2U0MzAzNTI4 Nzc4YjI2NjM3YjJkMjk3ZDc2YzU5ZjFjYWQxZTY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2DZy0zSQJxsn0Ukw7DL5d4dyQYU8Yur+tuLRbcdMdAAMK gR7/iuy49RZapecCrR2I+2x5sSml0lorpdhIA403CBHBRROq8vBx5ycLVsSKrvq2 isCr7f0C7Vqxd0tXpJqB/6iTh/0Oso1hxEId0K1FEBZU7lcFY6Rbrm4sfh2YdHzN 9869xFSdqE5RjiZkkGuF86LNN7t3OzED8ejS2IJWa1NCRrt7+mAaOREgZMcr4PSp x3ELgmewORR+qph+SM5XCNkXOebSaWc1rAB3r3hCoSFedFOxscNw3l+inBLq4kZ6 RVw9fwk8NakOqJjsD9LKL+nqIhrLTgUSNX3WFJ6DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzlyM4wJywmPtnUJEP1y0JYEdK7AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3YjlhZGM5LWNkNDUtNDA2My1iZDNiLTExMGMwMTgzMjJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFSgwDQYJKoZIhvcNAQELBQADggEBAFQNWwNl2c4+bTecV5QwyXnhyaUd 56dGLvX+bItn5mYUJkUeIXuFJT8+blVCb0GrONJY+eb0BzRDdZRavdGBle5oQ0X2 v5IXSdzItOQOgxPruUWuOhK++AOra/ViKgvXLM/yU5a4/Dc3mgydIR2tUYDzVQoc MMm0JJXx/JSuz/FFRGlhihVFlNZPbmVPQA/YabSwILsQPfyZ5cdpBkfb/nTn8F0u GdRknO7e8CCDxR/IfLOwXFBPyU33E8dhHqu6gAHPCFj5VWdgD5xZPom1WFAAtVGz oPzCcuqlvwn5p+ameH14fkok8XR1iCiPuRjOP3Ps/Cbb/Ag5sAwjYKOtpxA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:54 2025 by rpki-client