$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69367ace-f6d0-43b7-8e3e-2583410a3580.roa File: 69367ace-f6d0-43b7-8e3e-2583410a3580.roa (raw, json) Hash identifier: 7Wj4b3xURTefWPBdYrbaakEw1B4w4dcf08d87vwo1d8= Subject key identifier: 1A:35:1E:56:60:4D:79:E6:F9:C1:FE:B8:13:B8:95:9A:03:EC:15:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FD1C8049E14F9EE5F806E5B6599173D35D390F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69367ace-f6d0-43b7-8e3e-2583410a3580.roa Signing time: Tue 15 Apr 2025 00:11:50 +0000 ROA not before: Tue 15 Apr 2025 00:11:50 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.57.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d1:c8:04:9e:14:f9:ee:5f:80:6e:5b:65:99:17:3d:35:d3:90:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:11:50 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=2d5d6bb98d89d17a1ed192fbb5eb0022c66f931bcc47ca0dbe0e64f9500707cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:23:cb:0d:a7:10:67:74:bd:85:08:00:ec: 5e:a2:1f:f4:c0:75:43:e5:aa:54:6c:91:3c:6a:1e: 29:16:f8:b4:f3:df:9f:a8:88:fd:24:d3:f8:b5:5a: 8b:3a:03:12:62:54:fa:55:e7:a2:18:e5:a1:44:4b: 49:7e:72:aa:2e:b0:db:12:e0:11:4f:01:dd:be:7f: 4f:8c:a4:bb:ee:4c:3f:5e:28:5c:d8:68:0e:e0:37: f5:f8:d4:f2:76:7e:0a:2b:10:7c:ec:86:ff:5f:fd: 46:6a:3d:7a:96:c6:01:3a:2c:77:e8:e2:93:d9:1d: 4b:cd:1e:f7:d7:12:61:9a:ff:11:c1:3d:1f:8a:ce: 07:5a:54:c3:84:26:b8:5c:43:b3:c9:90:53:5b:d1: 9a:ae:4b:2c:12:84:a7:4e:d4:91:b0:17:a0:de:16: ad:80:ba:c7:c0:63:03:15:04:9d:60:30:1d:b5:ce: 94:70:d6:a1:aa:cc:f4:fa:73:71:e0:e3:20:f0:0a: 6b:09:ed:4f:36:a8:47:ed:ad:1a:a6:54:aa:11:3a: 31:b0:e4:99:95:a4:15:d1:e2:eb:80:58:4e:fc:70: 32:a2:4a:5a:6d:48:43:08:e5:cf:27:6c:52:85:f4: fb:5b:99:07:d5:ea:ad:a6:04:4f:5e:ae:13:57:52: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:35:1E:56:60:4D:79:E6:F9:C1:FE:B8:13:B8:95:9A:03:EC:15:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69367ace-f6d0-43b7-8e3e-2583410a3580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.57.0.0/18 Signature Algorithm: sha256WithRSAEncryption d6:86:fc:9e:d3:e5:35:3a:d4:fe:09:da:d4:d2:6a:ef:8e:a7: 27:d5:8b:9a:74:81:9d:4f:e5:78:69:ee:93:88:cc:15:7d:1f: 15:05:95:62:ef:40:d7:09:6a:b0:af:86:d2:c0:d4:e8:c8:93: 5f:28:26:16:93:b2:6c:b8:c0:e2:72:83:63:32:2f:41:61:dc: 39:2e:f9:21:b8:50:bf:81:be:9a:30:c3:7c:29:76:c4:02:78: 61:bb:4b:f8:6f:db:d3:4b:08:73:a8:81:e9:99:4a:56:c5:9d: bd:d5:5b:b4:2a:75:c3:54:15:c3:4e:a8:19:ed:0f:21:e4:41: 00:04:77:49:37:c1:fa:87:a9:fa:b9:07:42:2a:b2:36:25:c2: 2b:bf:09:ae:af:79:e4:de:1a:ab:4d:2f:77:b3:cf:72:b1:0c: c2:3b:d4:92:83:8f:5b:6d:aa:c8:a1:ad:65:97:42:52:a5:93: 43:2c:8d:48:ef:93:2b:e1:d6:23:ff:c9:6e:53:98:70:81:e8: 5b:77:40:0e:ca:44:39:5d:87:f3:cd:84:7d:ff:8d:07:d1:51: ea:31:d0:5b:7d:5e:5a:33:e9:d8:95:73:d5:d9:8f:31:4f:86: fd:15:b4:dc:75:08:31:b7:28:cf:dd:b7:f1:5b:95:61:d9:14: 03:d6:a9:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT9HIBJ4U+e5fgG5bZZkXPTXTkPQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDAxMTUwWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDVkNmJiOThkODlkMTdhMWVkMTkyZmJiNWViMDAyMmM2 NmY5MzFiY2M0N2NhMGRiZTBlNjRmOTUwMDcwN2NkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaXyPLDacQZ3S9hQgA7F6iH/TAdUPlqlRskTxqHikW+LTz 35+oiP0k0/i1Wos6AxJiVPpV56IY5aFES0l+cqousNsS4BFPAd2+f0+MpLvuTD9e KFzYaA7gN/X41PJ2fgorEHzshv9f/UZqPXqWxgE6LHfo4pPZHUvNHvfXEmGa/xHB PR+KzgdaVMOEJrhcQ7PJkFNb0ZquSywShKdO1JGwF6DeFq2AusfAYwMVBJ1gMB21 zpRw1qGqzPT6c3Hg4yDwCmsJ7U82qEftrRqmVKoROjGw5JmVpBXR4uuAWE78cDKi SlptSEMI5c8nbFKF9PtbmQfV6q2mBE9erhNXUvMdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGjUeVmBNeeb5wf64E7iVmgPsFbgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5MzY3YWNlLWY2ZDAtNDNiNy04ZTNlLTI1ODM0MTBhMzU4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYOQAwDQYJKoZIhvcNAQELBQADggEBANaG/J7T5TU61P4J2tTSau+OpyfV i5p0gZ1P5Xhp7pOIzBV9HxUFlWLvQNcJarCvhtLA1OjIk18oJhaTsmy4wOJyg2My L0Fh3Dku+SG4UL+Bvpoww3wpdsQCeGG7S/hv29NLCHOogemZSlbFnb3VW7QqdcNU FcNOqBntDyHkQQAEd0k3wfqHqfq5B0IqsjYlwiu/Ca6veeTeGqtNL3ezz3KxDMI7 1JKDj1ttqsihrWWXQlKlk0MsjUjvkyvh1iP/yW5TmHCB6Ft3QA7KRDldh/PNhH3/ jQfRUeox0Ft9Xloz6diVc9XZjzFPhv0VtNx1CDG3KM/dt/FblWHZFAPWqbk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:49 2025 by rpki-client