$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa File: 6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa (raw, json) Hash identifier: 0kowDxL2zYvWQUOj2B2OBl6BkvNAeHKNk32brXdD6Iw= Subject key identifier: 38:9A:A9:A6:71:C3:F4:47:E1:19:F0:B9:33:9D:4A:56:27:DE:76:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: CD1B23ABB9584339C18D5909A1556BF0E996B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa Signing time: Wed 09 Apr 2025 00:00:23 +0000 ROA not before: Wed 09 Apr 2025 00:00:23 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cd:1b:23:ab:b9:58:43:39:c1:8d:59:09:a1:55:6b:f0:e9:96:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:00:23 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=47f6551d4c075b69b0c05cb3932287b01553961316235c5a0ff84a582aad3715, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:58:77:b5:24:d0:ae:94:a7:58:92:ca:e2: 73:55:9e:23:68:fd:75:f1:09:7f:9c:ed:b4:a6:34: f6:2c:d5:d2:83:57:8f:6a:64:f2:e4:3c:f4:0f:76: 52:a2:23:df:63:3d:ef:18:fc:57:16:8b:29:a1:0c: e1:de:4e:25:fd:3d:4c:07:2c:52:92:bc:fc:2a:fa: 2e:c1:8f:50:00:96:e2:42:ad:9b:ea:9a:55:ec:b6: 44:61:11:dd:d1:87:cd:3e:79:15:e6:87:1e:ad:e9: e5:f0:9e:69:77:18:ce:8f:2f:2a:dc:ef:b1:41:bb: ad:47:f1:e7:0d:3c:c9:25:e7:38:c4:42:e3:80:6a: 87:4f:d3:f8:92:ee:e8:d1:46:c5:67:70:1a:9e:d7: bb:65:50:cc:f8:59:10:58:72:6a:b1:ae:40:c6:f3: e7:a3:e4:03:e3:a0:a2:9d:c4:f5:91:2a:99:ec:8f: 85:ef:ee:9f:bb:1e:15:7d:81:49:45:d8:81:73:45: a6:19:dd:3e:47:f2:a5:e7:de:c7:da:12:b7:74:11: 97:c1:ba:e9:d2:1a:86:83:15:69:64:61:66:4d:91: eb:35:86:88:dd:86:15:1e:9e:91:68:20:43:f2:83: 4d:19:b5:72:32:6d:81:f9:54:fd:f4:27:2d:53:5b: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9A:A9:A6:71:C3:F4:47:E1:19:F0:B9:33:9D:4A:56:27:DE:76:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6953702a-f8c1-4bc6-af6d-59ab3157d20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.4.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:b3:69:88:96:8a:1d:e0:e8:2d:48:43:5d:05:8f:b6:d6:1c: 91:22:01:b9:80:64:29:56:a0:de:b3:5f:83:77:70:52:24:b6: 78:8a:fc:49:63:72:96:fb:6e:53:69:d5:87:3e:1c:2c:b2:d8: 20:d2:f2:7f:9b:be:10:51:f7:bf:0c:ec:f6:84:a2:75:12:66: d6:4c:dc:b9:83:7c:38:7c:60:86:53:00:05:58:db:20:86:83: 6d:ac:5e:5e:80:4f:bf:85:aa:59:94:7c:5f:0e:10:e9:1a:7b: c3:e7:07:2f:c6:c1:c5:90:17:f7:21:cd:aa:14:71:40:b2:12: dd:e5:56:03:fc:cb:71:f0:70:8c:26:d9:0d:79:47:4b:cd:aa: 47:98:b5:bc:60:43:9f:ff:84:46:3e:ea:a6:30:91:f9:7b:02: e5:f8:85:c0:93:ba:0f:18:92:c5:33:c7:f6:cb:69:45:6e:3b: ea:1d:e0:29:28:7d:31:f4:ef:54:34:ea:50:0b:be:41:5f:bb: a7:88:1f:a7:8a:ed:03:e3:f3:8b:51:b7:9a:16:2c:f3:5a:b0: f2:ad:99:d2:67:e4:fe:c7:5c:3a:bc:18:a0:e6:16:0c:88:cf: 4b:54:73:5c:b1:03:bd:6c:b9:15:f9:bc:8e:d9:95:76:52:ff: 30:63:17:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAM0bI6u5WEM5wY1ZCaFVa/DplrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAwMDIzWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2Y2NTUxZDRjMDc1YjY5YjBjMDVjYjM5MzIyODdiMDE1 NTM5NjEzMTYyMzVjNWEwZmY4NGE1ODJhYWQzNzE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk+Vh3tSTQrpSnWJLK4nNVniNo/XXxCX+c7bSmNPYs1dKD V49qZPLkPPQPdlKiI99jPe8Y/FcWiymhDOHeTiX9PUwHLFKSvPwq+i7Bj1AAluJC rZvqmlXstkRhEd3Rh80+eRXmhx6t6eXwnml3GM6PLyrc77FBu61H8ecNPMkl5zjE QuOAaodP0/iS7ujRRsVncBqe17tlUMz4WRBYcmqxrkDG8+ej5APjoKKdxPWRKpns j4Xv7p+7HhV9gUlF2IFzRaYZ3T5H8qXn3sfaErd0EZfBuunSGoaDFWlkYWZNkes1 hojdhhUenpFoIEPyg00ZtXIybYH5VP30Jy1TW3dBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOJqppnHD9EfhGfC5M51KVifedjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5NTM3MDJhLWY4YzEtNGJjNi1hZjZkLTU5YWIzMTU3ZDIwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEgQwDQYJKoZIhvcNAQELBQADggEBAJ2zaYiWih3g6C1IQ10Fj7bWHJEi AbmAZClWoN6zX4N3cFIktniK/Eljcpb7blNp1Yc+HCyy2CDS8n+bvhBR978M7PaE onUSZtZM3LmDfDh8YIZTAAVY2yCGg22sXl6AT7+FqlmUfF8OEOkae8PnBy/GwcWQ F/chzaoUcUCyEt3lVgP8y3HwcIwm2Q15R0vNqkeYtbxgQ5//hEY+6qYwkfl7AuX4 hcCTug8YksUzx/bLaUVuO+od4CkofTH071Q06lALvkFfu6eIH6eK7QPj84tRt5oW LPNasPKtmdJn5P7HXDq8GKDmFgyIz0tUc1yxA71suRX5vI7ZlXZS/zBjF1o= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:36 2025 by rpki-client