$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fe5e5eb-2924-46fd-b686-45983035f1bb.roa File: 6fe5e5eb-2924-46fd-b686-45983035f1bb.roa (raw, json) Hash identifier: JnA6Ql401AbQhSiVtk+7yP0iB4gCn45hEhZxYRdYoiY= Subject key identifier: 7C:25:63:D9:56:AD:A4:19:66:D9:F2:60:F6:C0:59:73:43:6A:70:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D83EB221D2B7CF6E8063184057D913161CF909B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fe5e5eb-2924-46fd-b686-45983035f1bb.roa Signing time: Wed 23 Apr 2025 00:21:13 +0000 ROA not before: Wed 23 Apr 2025 00:21:13 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:83:eb:22:1d:2b:7c:f6:e8:06:31:84:05:7d:91:31:61:cf:90:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:21:13 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=ea3f10d8090cb8baabdb8ba5d3376c031cdc8390115d888bcb91ac0dfeeb29ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e4:f0:64:66:3a:a1:bf:ec:48:f8:08:1a:60: df:d5:ad:2a:85:98:67:8e:28:4d:86:5b:56:4a:ee: 2e:76:1b:ca:3e:f7:e2:68:95:42:34:65:53:e9:39: 88:26:cd:41:6a:f3:f5:ad:ca:e3:c2:e5:d1:76:a5: e7:f6:b7:87:e3:f1:6b:a2:7a:9a:82:39:a7:be:62: b9:e0:08:c3:8f:93:76:23:b7:5f:a6:d7:fc:a1:47: a0:9b:f0:76:a4:ee:ea:12:08:3c:8a:ae:31:5a:97: 63:51:9b:85:28:f8:5b:87:4d:8c:fb:1d:b7:e5:95: a7:b0:6b:7d:da:86:ad:a6:7c:a5:89:fa:ce:1d:c0: 24:6a:68:8a:66:d6:db:b9:cc:c6:06:c4:6b:7d:88: 47:ac:31:34:c1:e5:51:50:19:9c:d5:be:ae:34:75: 25:7d:70:b2:b8:8f:b0:df:92:4e:76:4f:50:c5:01: 35:29:4d:e8:32:ea:97:05:83:b6:ee:b5:5f:25:dd: a3:94:52:5c:ce:af:ad:5c:6e:66:ee:a2:17:4a:42: 1b:0e:45:f6:3f:06:ae:06:eb:56:2a:94:77:2a:e3: 41:2d:76:7d:28:e2:c5:9d:cd:c0:da:36:6f:0a:dc: 63:a2:ef:17:fe:3d:be:69:23:3c:cf:29:eb:f7:94: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:25:63:D9:56:AD:A4:19:66:D9:F2:60:F6:C0:59:73:43:6A:70:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fe5e5eb-2924-46fd-b686-45983035f1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/17 Signature Algorithm: sha256WithRSAEncryption 54:d8:2f:03:8d:f7:90:63:f9:64:c0:88:da:7e:b7:ef:10:fb: 26:42:66:10:1e:6c:e4:89:f1:51:74:26:45:0c:a6:87:8f:ca: 3c:d5:e0:95:0b:c7:b9:37:53:98:12:e9:a9:c3:d3:92:9d:98: 08:94:24:47:42:cd:9c:5d:3c:d7:61:d2:46:19:b4:8d:8f:85: 5e:e8:fa:3b:5e:6b:a3:dd:8d:79:e8:64:c8:4b:92:ea:c7:3f: 27:3c:93:f1:db:fb:f1:75:7f:62:92:23:97:f5:65:6b:0c:c1: a2:4c:b5:ce:63:fd:1a:7c:c1:bd:ac:10:22:6a:38:32:5e:7e: b0:4c:0e:a4:72:25:04:f4:95:5e:04:65:9f:3c:34:01:e8:6b: 9f:ca:44:a2:75:86:4b:4c:a1:52:6b:19:1e:1a:bc:c4:d8:c6: 81:12:83:74:b5:d1:bd:17:37:f1:fe:f2:dd:d2:a8:b4:48:bb: f2:d1:96:53:a5:ed:46:e7:7e:a9:76:1b:31:0a:de:b3:f2:6e: 87:13:51:e8:7c:0e:56:92:a6:fe:1f:04:a2:a6:07:22:0a:b1: c5:60:67:5f:9b:d5:94:07:aa:56:32:b4:60:67:a5:62:1d:78: 60:13:70:20:87:4b:39:a3:b0:47:37:a1:e3:d6:00:5c:ec:5c: 5c:b3:8f:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHYPrIh0rfPboBjGEBX2RMWHPkJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAyMTEzWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTNmMTBkODA5MGNiOGJhYWJkYjhiYTVkMzM3NmMwMzFj ZGM4MzkwMTE1ZDg4OGJjYjkxYWMwZGZlZWIyOWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD45PBkZjqhv+xI+AgaYN/VrSqFmGeOKE2GW1ZK7i52G8o+ 9+JolUI0ZVPpOYgmzUFq8/WtyuPC5dF2pef2t4fj8WuiepqCOae+YrngCMOPk3Yj t1+m1/yhR6Cb8Hak7uoSCDyKrjFal2NRm4Uo+FuHTYz7Hbfllaewa33ahq2mfKWJ +s4dwCRqaIpm1tu5zMYGxGt9iEesMTTB5VFQGZzVvq40dSV9cLK4j7Dfkk52T1DF ATUpTegy6pcFg7butV8l3aOUUlzOr61cbmbuohdKQhsORfY/Bq4G61YqlHcq40Et dn0o4sWdzcDaNm8K3GOi7xf+Pb5pIzzPKev3lCKfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfCVj2VatpBlm2fJg9sBZc0NqcOswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZmZTVlNWViLTI5MjQtNDZmZC1iNjg2LTQ1OTgzMDM1ZjFiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFAAwDQYJKoZIhvcNAQELBQADggEBAFTYLwON95Bj+WTAiNp+t+8Q+yZC ZhAebOSJ8VF0JkUMpoePyjzV4JULx7k3U5gS6anD05KdmAiUJEdCzZxdPNdh0kYZ tI2PhV7o+jtea6PdjXnoZMhLkurHPyc8k/Hb+/F1f2KSI5f1ZWsMwaJMtc5j/Rp8 wb2sECJqODJefrBMDqRyJQT0lV4EZZ88NAHoa5/KRKJ1hktMoVJrGR4avMTYxoES g3S10b0XN/H+8t3SqLRIu/LRllOl7Ubnfql2GzEK3rPybocTUeh8DlaSpv4fBKKm ByIKscVgZ1+b1ZQHqlYytGBnpWIdeGATcCCHSzmjsEc3oePWAFzsXFyzj+4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:33 2025 by rpki-client