$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa File: 70571ce4-58f3-4cc6-b162-737a20af972d.roa (raw, json) Hash identifier: oTovRA52ml2zD84kSqqOergkGACaVzQPdt1Boslcl1c= Subject key identifier: 15:4F:6F:D6:DD:C4:E0:5E:56:78:AF:81:5D:D7:BB:A8:FA:00:3C:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40ED013A591339E980EEE0851981FA73C6AE5437 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa Signing time: Tue 08 Apr 2025 00:41:23 +0000 ROA not before: Tue 08 Apr 2025 00:41:23 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.251.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ed:01:3a:59:13:39:e9:80:ee:e0:85:19:81:fa:73:c6:ae:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:41:23 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=d109310e19c6f2140378844b04bfbc523857d4085eacd66d4482079178e99246, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:be:3c:24:ac:8d:79:43:5b:61:52:59:3a: dc:b9:62:a2:06:48:15:57:15:86:2c:b9:0f:2b:46: b8:81:cb:33:67:04:0a:96:d4:e0:8c:b6:b2:59:bf: db:66:fd:f8:fc:05:aa:bb:44:bd:af:8f:72:83:0b: 3e:71:fa:ab:22:12:fd:a5:99:e1:84:20:db:38:27: a9:9f:fd:c7:e6:1a:47:e9:4f:61:fb:3a:8b:95:bf: b3:0a:5d:7e:8e:ae:ce:aa:e5:94:8a:ae:29:fc:90: 56:f6:ad:5f:c6:c1:e6:40:55:ba:ac:75:89:d7:3b: f7:40:3d:41:58:10:90:89:05:ff:3c:40:9d:35:76: 9c:1c:80:8c:d7:7c:67:2b:c5:1e:08:02:c3:0a:43: ca:6e:55:f8:34:36:ac:a4:ad:87:b8:4b:e6:bc:f4: a4:dc:08:81:83:46:e7:79:a4:1f:b0:32:30:e2:6b: d4:97:e2:60:49:d3:f6:cb:05:8f:0f:f0:3b:20:f4: 32:83:99:69:10:10:66:31:f9:29:ce:4e:23:cb:4a: d8:4e:e2:51:fc:ba:35:fe:bf:50:12:bc:d5:33:d7: 5e:76:50:4f:0e:23:e7:78:08:68:a8:a3:59:25:d7: ed:90:f4:f6:a2:16:d7:ab:df:c7:fb:23:c9:c0:25: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4F:6F:D6:DD:C4:E0:5E:56:78:AF:81:5D:D7:BB:A8:FA:00:3C:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.251.64.0/18 Signature Algorithm: sha256WithRSAEncryption cc:98:9c:a5:fd:03:cc:5f:56:18:96:70:fa:b5:ca:14:50:30: 49:5d:3f:dd:fc:0c:b0:8c:3d:b9:58:92:ed:0a:88:02:10:fe: 72:f6:96:c7:8f:fa:36:7e:dc:f4:e3:fc:88:2f:5c:42:db:0d: d9:7e:cc:86:25:35:96:0e:f7:87:60:cd:54:82:3d:89:48:f2: d5:dd:bd:39:34:c2:96:c3:03:f6:a7:14:f0:86:bc:1c:41:99: df:61:af:b2:90:21:c1:cd:f5:f1:f1:31:43:df:a2:02:4d:b0: c1:44:7f:25:b0:3c:74:2d:60:61:ab:38:f7:f1:05:32:8d:09: 05:9a:e7:01:81:24:2d:9b:19:0c:0d:77:dd:f6:bc:41:a8:10: 63:86:ce:8e:cf:eb:5b:99:e7:ff:dc:f1:6f:00:de:b0:0e:79: 1e:7e:d8:f9:bc:ff:72:3a:50:8c:ba:00:34:c5:f4:07:33:a0: dd:9c:a1:d7:ae:ef:d5:ce:49:f7:5b:d3:92:7d:d6:28:ab:56: 98:70:c8:35:c1:b4:de:25:b6:31:d3:4e:c4:38:f7:3a:3e:e7: 61:80:43:cc:4f:4f:44:08:7c:84:87:60:2a:b7:26:e7:e5:a6: c2:bc:3b:ca:f9:7c:fd:0d:56:08:fd:d6:11:14:19:32:2b:6c: 9c:07:f1:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQO0BOlkTOemA7uCFGYH6c8auVDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDA0MTIzWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTA5MzEwZTE5YzZmMjE0MDM3ODg0NGIwNGJmYmM1MjM4 NTdkNDA4NWVhY2Q2NmQ0NDgyMDc5MTc4ZTk5MjQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJSL48JKyNeUNbYVJZOty5YqIGSBVXFYYsuQ8rRriByzNn BAqW1OCMtrJZv9tm/fj8Baq7RL2vj3KDCz5x+qsiEv2lmeGEINs4J6mf/cfmGkfp T2H7OouVv7MKXX6Ors6q5ZSKrin8kFb2rV/GweZAVbqsdYnXO/dAPUFYEJCJBf88 QJ01dpwcgIzXfGcrxR4IAsMKQ8puVfg0NqykrYe4S+a89KTcCIGDRud5pB+wMjDi a9SX4mBJ0/bLBY8P8Dsg9DKDmWkQEGYx+SnOTiPLSthO4lH8ujX+v1ASvNUz1152 UE8OI+d4CGioo1kl1+2Q9PaiFter38f7I8nAJX4VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFU9v1t3E4F5WeK+BXde7qPoAPJAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNTcxY2U0LTU4ZjMtNGNjNi1iMTYyLTczN2EyMGFmOTcyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG+0AwDQYJKoZIhvcNAQELBQADggEBAMyYnKX9A8xfVhiWcPq1yhRQMEld P938DLCMPblYku0KiAIQ/nL2lseP+jZ+3PTj/IgvXELbDdl+zIYlNZYO94dgzVSC PYlI8tXdvTk0wpbDA/anFPCGvBxBmd9hr7KQIcHN9fHxMUPfogJNsMFEfyWwPHQt YGGrOPfxBTKNCQWa5wGBJC2bGQwNd932vEGoEGOGzo7P61uZ5//c8W8A3rAOeR5+ 2Pm8/3I6UIy6ADTF9AczoN2codeu79XOSfdb05J91iirVphwyDXBtN4ltjHTTsQ4 9zo+52GAQ8xPT0QIfISHYCq3JuflpsK8O8r5fP0NVgj91hEUGTIrbJwH8WA= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:59 2025 by rpki-client