$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa File: 69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa (raw, json) Hash identifier: qADVvqwwGCxVldnvv9URCfD6jGHtNHJy/81ZolhtsrI= Subject key identifier: 9D:25:25:31:12:D6:22:42:B2:00:E2:FC:05:61:9E:79:53:37:A2:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16834F7A8197189996540E0BC4EBE13976BB84CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa Signing time: Mon 14 Apr 2025 15:21:17 +0000 ROA not before: Mon 14 Apr 2025 15:21:17 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:83:4f:7a:81:97:18:99:96:54:0e:0b:c4:eb:e1:39:76:bb:84:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:21:17 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=5506365a72408611fc7cdc40612fc89c0b4cad7c63caa359625e0e14a9856441, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:5a:c2:4d:a3:fc:f6:20:13:2e:de:b5:b8: ab:ce:ca:66:b9:42:8e:fe:e8:ee:08:d2:49:6d:c0: 08:92:3d:29:57:f3:73:e8:63:b8:d0:f4:10:92:a6: a3:55:e2:ae:c8:ce:40:51:2a:7b:03:48:a8:46:99: e8:71:1e:8d:a7:8e:53:ae:f9:f2:a4:9c:d8:80:24: e9:54:f2:fd:24:4f:cd:05:c4:49:fd:39:4a:23:f6: d6:8d:d2:bc:b7:56:5c:0d:25:85:9d:01:ae:43:e2: 02:1a:70:b8:bd:3d:e8:9f:d3:65:f1:da:4e:6d:78: ea:83:c1:41:c6:65:e7:af:dd:97:eb:44:2c:61:1a: 2c:0f:86:45:b7:60:46:16:4e:05:bf:9b:d0:20:95: 59:fd:83:2d:d3:32:b9:73:b6:38:87:a2:b8:71:97: 58:e3:48:dd:be:72:9b:f1:67:e1:f7:d1:9d:36:0f: eb:bb:9c:0e:07:43:81:6e:7b:2d:fe:24:ba:dd:d7: 19:f8:1c:93:04:d9:56:92:2c:b7:78:83:0d:83:97: e5:43:eb:c3:14:7c:2c:d4:74:c0:07:9b:04:dc:43: 21:85:79:de:e7:1e:6c:39:3c:5f:30:08:b6:8f:36: 2c:d8:97:cb:48:0f:eb:09:82:c0:27:92:47:32:0b: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:25:25:31:12:D6:22:42:B2:00:E2:FC:05:61:9E:79:53:37:A2:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69a2a1b0-dc51-4592-b1c3-c557a6a8ae27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.192.0/20 Signature Algorithm: sha256WithRSAEncryption d0:77:4a:b6:ed:09:41:38:50:17:11:3f:3c:34:1a:7a:cd:91: fb:64:e1:e8:80:bc:9a:e3:d0:bf:20:8d:4f:ec:b5:ee:58:fa: 47:1e:ed:e0:8a:4a:86:6f:86:3b:23:bf:bf:c4:b6:ce:fb:a4: ae:2d:bf:36:31:0c:8e:be:8c:fb:cc:0a:88:6c:67:5b:3d:80: 08:69:95:1d:cb:e9:ec:33:9d:5d:39:37:15:ac:47:6b:82:fb: d8:5a:2d:ae:82:40:0f:71:3c:a4:c8:75:fe:e3:46:8a:16:94: eb:6d:b8:0c:03:a1:d3:e9:d1:99:b2:13:3a:19:c1:44:d7:16: bd:52:21:d5:cb:7f:63:25:83:87:3c:bc:ee:3e:af:dc:7b:86: fe:89:ae:1a:09:7f:d3:50:b3:f9:9f:df:4b:2e:d9:fa:e2:0b: f6:83:51:65:96:13:78:74:4b:fc:b8:41:a8:e0:fc:40:50:57: 9a:4a:fd:ca:9c:a2:8c:e8:40:7e:60:25:cb:ec:33:ff:2c:41: 54:72:7f:2f:ac:c8:19:67:10:3b:cb:32:a5:27:9e:85:e4:97: 9e:80:92:c6:6b:18:df:bd:f0:d1:2b:d0:75:d7:07:b9:3e:e9: 46:25:0c:2b:91:eb:b3:ca:96:fb:f1:a1:1b:2c:83:9a:89:fc: 30:25:0e:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFoNPeoGXGJmWVA4LxOvhOXa7hMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUyMTE3WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTA2MzY1YTcyNDA4NjExZmM3Y2RjNDA2MTJmYzg5YzBi NGNhZDdjNjNjYWEzNTk2MjVlMGUxNGE5ODU2NDQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnqVrCTaP89iATLt61uKvOyma5Qo7+6O4I0kltwAiSPSlX 83PoY7jQ9BCSpqNV4q7IzkBRKnsDSKhGmehxHo2njlOu+fKknNiAJOlU8v0kT80F xEn9OUoj9taN0ry3VlwNJYWdAa5D4gIacLi9Peif02Xx2k5teOqDwUHGZeev3Zfr RCxhGiwPhkW3YEYWTgW/m9AglVn9gy3TMrlztjiHorhxl1jjSN2+cpvxZ+H30Z02 D+u7nA4HQ4Fuey3+JLrd1xn4HJME2VaSLLd4gw2Dl+VD68MUfCzUdMAHmwTcQyGF ed7nHmw5PF8wCLaPNizYl8tID+sJgsAnkkcyC5wTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnSUlMRLWIkKyAOL8BWGeeVM3omwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5YTJhMWIwLWRjNTEtNDU5Mi1iMWMzLWM1NTdhNmE4YWUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS4SMAwDQYJKoZIhvcNAQELBQADggEBANB3SrbtCUE4UBcRPzw0GnrNkftk 4eiAvJrj0L8gjU/ste5Y+kce7eCKSoZvhjsjv7/Ets77pK4tvzYxDI6+jPvMCohs Z1s9gAhplR3L6ewznV05NxWsR2uC+9haLa6CQA9xPKTIdf7jRooWlOttuAwDodPp 0ZmyEzoZwUTXFr1SIdXLf2Mlg4c8vO4+r9x7hv6JrhoJf9NQs/mf30su2friC/aD UWWWE3h0S/y4Qajg/EBQV5pK/cqcoozoQH5gJcvsM/8sQVRyfy+syBlnEDvLMqUn noXkl56AksZrGN+98NEr0HXXB7k+6UYlDCuR67PKlvvxoRssg5qJ/DAlDgU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:04 2025 by rpki-client