$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa File: 6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa (raw, json) Hash identifier: clt7daQSIvv+0Aae+i+LJRysCspvAdVz0vHMi0iZcaA= Subject key identifier: B4:60:A4:6C:8F:B1:F0:A6:A6:DD:4E:D1:CA:93:1F:FC:35:E0:67:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A9B4B35271BFB5FC364ABCB2AAF595120FC52D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa Signing time: Wed 16 Apr 2025 00:11:14 +0000 ROA not before: Wed 16 Apr 2025 00:11:14 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 78.12.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9b:4b:35:27:1b:fb:5f:c3:64:ab:cb:2a:af:59:51:20:fc:52:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:11:14 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=74e88fe9e267bccbe6b50bed7f147b5ee4b470e2cef000a6736b6d2e086d2f66, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:03:5a:a1:6e:3d:22:81:6b:a1:59:a4:fc: 97:cb:1d:d6:11:91:9d:56:b9:49:9a:29:de:b0:b3: 0c:92:9a:f6:6e:0c:f5:42:4a:45:13:de:e6:e0:61: bb:d2:fe:47:1a:4c:b3:04:c2:6c:81:a7:e6:13:89: 3b:85:d2:9b:8e:f2:0b:48:b2:d4:c8:d7:af:96:d4: c9:a3:ed:ac:7a:39:6c:dd:ff:a7:5e:92:31:c6:f7: 51:05:6d:28:83:3b:3c:95:91:4f:2c:54:d4:24:b3: 46:7b:b5:61:f6:7f:5d:64:9e:c3:68:94:cb:6a:73: 23:cf:68:b8:b5:10:90:0b:11:70:b3:ff:2e:73:db: 5f:ca:b8:9e:ae:d5:1f:cb:b1:b8:09:f5:74:2a:40: 06:51:13:63:51:7a:a2:b4:2a:85:94:d4:22:f5:bb: 4e:34:d6:34:ac:0e:a1:40:ef:cc:2b:1f:36:3b:fd: 42:77:3d:84:f1:0d:06:d3:95:de:c7:b8:b3:ea:e8: 13:2e:ab:9c:11:0e:2e:5b:a1:53:3c:a4:c8:44:c5: d5:a7:98:07:00:d7:99:4e:45:43:ac:be:83:b8:b5: d9:23:fd:f7:fd:c9:7e:71:ba:ea:87:ca:7a:f4:d8: 13:17:8a:9a:ef:7f:80:b7:28:cb:8d:4f:a2:db:10: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:60:A4:6C:8F:B1:F0:A6:A6:DD:4E:D1:CA:93:1F:FC:35:E0:67:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b2f3095-813c-4aa6-ad8f-5cfe7b34fd26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.12.63.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:2a:4f:25:7d:e5:2f:1a:e8:6e:3e:a7:51:24:dd:55:b9:84: 05:65:b9:2b:b8:69:1e:25:4b:05:5a:83:c0:3c:12:39:fa:be: 86:5c:a7:91:b3:ad:8c:cf:3d:83:a4:fa:fd:1a:44:b0:23:39: 34:62:f9:b3:0b:97:4b:e4:24:93:87:b0:61:94:bd:c2:de:e2: c4:d7:c8:ee:47:a1:0f:59:42:40:e8:ee:b1:2e:85:60:92:84: 40:36:ed:1e:70:62:58:ca:85:5c:19:70:d1:89:cd:00:3f:07: 0f:3c:0d:3e:94:7d:c0:92:e4:91:85:e3:64:80:ce:f0:00:b6: eb:8f:e5:67:55:39:19:a7:41:9f:dd:85:77:97:3f:ba:d6:92: dd:1a:d0:fc:a1:dc:a2:91:ad:0f:3c:d9:73:11:cc:47:9f:36: cb:c3:1f:7a:19:71:c1:f6:e3:bb:cd:28:55:5d:4a:bb:7e:c5: ad:1d:99:06:20:82:87:26:ff:37:82:ba:d2:d6:86:4f:85:a2: 17:e2:19:b8:c9:dd:d6:fa:37:fd:ef:6a:7e:c6:7c:73:a8:56: ba:b3:fe:92:76:0e:76:80:85:05:b7:e4:3d:39:55:e8:84:1c: 45:2f:e3:72:5b:39:39:21:5c:f7:8a:74:81:b9:98:6e:60:91: 3e:43:6a:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaptLNScb+1/DZKvLKq9ZUSD8UtEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE2MDAxMTE0WhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGU4OGZlOWUyNjdiY2NiZTZiNTBiZWQ3ZjE0N2I1ZWU0 YjQ3MGUyY2VmMDAwYTY3MzZiNmQyZTA4NmQyZjY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJnwNaoW49IoFroVmk/JfLHdYRkZ1WuUmaKd6wswySmvZu DPVCSkUT3ubgYbvS/kcaTLMEwmyBp+YTiTuF0puO8gtIstTI16+W1Mmj7ax6OWzd /6dekjHG91EFbSiDOzyVkU8sVNQks0Z7tWH2f11knsNolMtqcyPPaLi1EJALEXCz /y5z21/KuJ6u1R/LsbgJ9XQqQAZRE2NReqK0KoWU1CL1u0401jSsDqFA78wrHzY7 /UJ3PYTxDQbTld7HuLPq6BMuq5wRDi5boVM8pMhExdWnmAcA15lORUOsvoO4tdkj /ff9yX5xuuqHynr02BMXiprvf4C3KMuNT6LbEME/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtGCkbI+x8Kam3U7RypMf/DXgZzEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiMmYzMDk1LTgxM2MtNGFhNi1hZDhmLTVjZmU3YjM0ZmQyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABODD8wDQYJKoZIhvcNAQELBQADggEBAD8qTyV95S8a6G4+p1Ek3VW5hAVl uSu4aR4lSwVag8A8Ejn6voZcp5GzrYzPPYOk+v0aRLAjOTRi+bMLl0vkJJOHsGGU vcLe4sTXyO5HoQ9ZQkDo7rEuhWCShEA27R5wYljKhVwZcNGJzQA/Bw88DT6UfcCS 5JGF42SAzvAAtuuP5WdVORmnQZ/dhXeXP7rWkt0a0Pyh3KKRrQ882XMRzEefNsvD H3oZccH247vNKFVdSrt+xa0dmQYggocm/zeCutLWhk+FohfiGbjJ3db6N/3van7G fHOoVrqz/pJ2DnaAhQW35D05VeiEHEUv43JbOTkhXPeKdIG5mG5gkT5Daok= -----END CERTIFICATE-----Generated at Sat Apr 26 18:41:49 2025 by rpki-client