$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6867ff00-ff82-4402-a40b-1095364801f5.roa File: 6867ff00-ff82-4402-a40b-1095364801f5.roa (raw, json) Hash identifier: dX0EFN/kEvVm1Bd3BvOJvr6LSVu7TnoI+xBZ3VabAGw= Subject key identifier: B4:42:39:7F:1B:66:8F:76:32:AC:09:31:3E:CD:42:FD:D1:1F:2C:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E7AADA807D9DE32299126E7A55074ACDE5D32AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6867ff00-ff82-4402-a40b-1095364801f5.roa Signing time: Tue 15 Apr 2025 00:00:30 +0000 ROA not before: Tue 15 Apr 2025 00:00:30 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 188.135.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7a:ad:a8:07:d9:de:32:29:91:26:e7:a5:50:74:ac:de:5d:32:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:00:30 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=8b4a13ae44b2c6d01dee22513267e5fbf685274d02bae64f9ed6848d58c2671d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:1f:bb:e0:6a:43:45:a7:6f:d1:0d:1d:86: 8f:ff:33:e4:3b:19:6c:9c:c3:57:00:18:fc:c2:b6: bd:9a:a3:d2:6b:d6:63:7d:13:d6:98:fd:23:ec:7f: 35:b1:f6:7b:77:b1:26:65:e3:43:97:c7:dc:dd:e5: 3e:91:64:fe:a5:e8:9d:79:e8:67:84:79:9a:f8:f0: e3:55:51:19:a3:b2:6a:9e:fc:4b:0c:26:a6:1f:07: 8f:30:ce:1c:1e:5b:cf:61:68:c5:b7:58:b6:75:24: be:5d:f7:98:09:e0:a7:d9:be:26:86:1f:84:47:42: 10:da:8c:58:e5:71:ae:d6:d3:a3:19:60:7d:fc:fd: d2:e7:72:e2:f3:38:fc:3a:29:7e:12:78:6c:55:07: 8b:3d:de:52:b8:0d:0e:13:00:bc:07:2e:87:81:52: 65:59:71:e8:83:75:40:39:5e:5e:6c:19:aa:d6:b7: 85:e0:12:25:8c:02:d3:8b:69:2e:34:3a:58:c1:47: 7e:ca:8c:c0:18:d0:3b:42:55:14:45:1b:12:b2:e1: 1f:bc:ee:68:cc:82:dc:08:5f:79:8e:ca:87:dd:87: 2f:72:a5:0c:0c:05:17:f9:bc:d2:3a:d4:78:83:50: f5:c5:0b:67:5c:29:b1:aa:71:d1:2d:69:c7:ed:2d: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:42:39:7F:1B:66:8F:76:32:AC:09:31:3E:CD:42:FD:D1:1F:2C:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6867ff00-ff82-4402-a40b-1095364801f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.135.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6e:f0:66:47:0c:98:93:bf:f2:e6:e2:e0:48:a1:c2:7d:03:2b: 91:25:4c:02:d0:f5:49:4f:b5:47:b4:3f:3f:0a:ae:2e:19:80: 71:ec:64:cf:4f:a9:39:09:64:2f:92:b9:ad:5c:88:25:5c:c9: 7b:0b:36:77:62:24:06:cc:44:7f:0e:82:27:f7:63:6a:63:85: 6d:18:98:a6:13:ed:4e:fd:c7:b5:48:c6:ac:a7:f8:7f:cc:fc: 09:0e:61:c6:66:77:02:3a:1a:bc:df:e8:68:8b:9f:e5:65:5c: e9:9f:f3:49:18:6e:7c:19:a3:36:0b:48:7a:3f:7a:8e:53:f4: dd:91:d6:08:cc:fb:4c:ea:06:80:39:a3:ee:37:ea:e1:72:1a: 2b:7e:cd:55:c9:24:85:f3:b2:ae:4b:71:ae:9c:d0:f2:77:a1: e9:27:e0:e1:5e:11:1c:48:93:65:f5:ce:44:71:bc:12:7d:0f: 60:de:bc:30:0b:5c:44:70:9f:91:45:fb:ec:00:e5:ce:46:fa: 10:fa:13:8c:db:f7:59:d2:02:5b:9c:56:da:53:29:ba:64:41: 21:3b:bf:e8:82:6e:c3:59:12:f5:95:b7:be:f1:1e:d8:d6:aa: d8:48:d0:63:a2:17:35:19:a8:64:19:fe:60:a8:d5:6c:d0:40: 87:96:cd:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbnqtqAfZ3jIpkSbnpVB0rN5dMq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDAwMDMwWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjRhMTNhZTQ0YjJjNmQwMWRlZTIyNTEzMjY3ZTVmYmY2 ODUyNzRkMDJiYWU2NGY5ZWQ2ODQ4ZDU4YzI2NzFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Ih+74GpDRadv0Q0dho//M+Q7GWycw1cAGPzCtr2ao9Jr 1mN9E9aY/SPsfzWx9nt3sSZl40OXx9zd5T6RZP6l6J156GeEeZr48ONVURmjsmqe /EsMJqYfB48wzhweW89haMW3WLZ1JL5d95gJ4KfZviaGH4RHQhDajFjlca7W06MZ YH38/dLncuLzOPw6KX4SeGxVB4s93lK4DQ4TALwHLoeBUmVZceiDdUA5Xl5sGarW t4XgEiWMAtOLaS40OljBR37KjMAY0DtCVRRFGxKy4R+87mjMgtwIX3mOyofdhy9y pQwMBRf5vNI61HiDUPXFC2dcKbGqcdEtacftLYaRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtEI5fxtmj3YyrAkxPs1C/dEfLCEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NjdmZjAwLWZmODItNDQwMi1hNDBiLTEwOTUzNjQ4MDFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe8h4AwDQYJKoZIhvcNAQELBQADggEBAG7wZkcMmJO/8ubi4Eihwn0DK5El TALQ9UlPtUe0Pz8Kri4ZgHHsZM9PqTkJZC+Sua1ciCVcyXsLNndiJAbMRH8Ogif3 Y2pjhW0YmKYT7U79x7VIxqyn+H/M/AkOYcZmdwI6Grzf6GiLn+VlXOmf80kYbnwZ ozYLSHo/eo5T9N2R1gjM+0zqBoA5o+436uFyGit+zVXJJIXzsq5Lca6c0PJ3oekn 4OFeERxIk2X1zkRxvBJ9D2DevDALXERwn5FF++wA5c5G+hD6E4zb91nSAlucVtpT KbpkQSE7v+iCbsNZEvWVt77xHtjWqthI0GOiFzUZqGQZ/mCo1WzQQIeWzVI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:56 2025 by rpki-client