$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa File: 705d8477-e54a-4267-815f-2296f4a9554d.roa (raw, json) Hash identifier: xM87jseJ2zKoXvodrU8hLo55SQMN1i/bKbYxH8TQcfc= Subject key identifier: BC:A8:BE:7D:9A:19:BC:05:70:7B:93:96:3B:60:D0:31:94:46:B3:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04845770DA6628FE670CF7D7AB60AB176C4D90FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa Signing time: Wed 09 Apr 2025 00:21:25 +0000 ROA not before: Wed 09 Apr 2025 00:21:25 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 63.246.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:84:57:70:da:66:28:fe:67:0c:f7:d7:ab:60:ab:17:6c:4d:90:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:21:25 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=954ecf40572911dbe0e720771e4a7200b5ed4e97e27450f171e551851e1a3588, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:85:05:86:01:8b:b2:5d:af:05:51:44:ec: b0:38:52:0e:bd:48:ed:87:70:11:a8:f9:ee:11:ef: 66:37:14:5b:25:b8:bf:48:65:ad:06:e5:21:13:2e: c2:32:88:d1:38:e1:f0:5a:32:a9:0f:2d:83:35:f4: f1:d1:20:10:d6:5d:16:26:a2:f1:6c:75:de:b8:a1: 05:ac:6c:a6:2b:f3:8e:16:7a:45:e7:66:a4:80:31: 0d:1f:67:7c:af:7b:62:a1:24:b1:09:1b:a3:39:76: 3a:aa:5a:e8:0b:55:b7:0e:d8:37:bb:05:23:bf:5b: f5:40:39:0e:2f:2e:70:04:13:f5:36:39:1e:7d:89: 82:8d:0b:c4:e7:a6:17:02:7d:33:a2:09:d7:82:27: 65:18:8f:79:b0:08:0e:9a:76:a5:85:29:03:c7:b6: 63:fb:36:f5:76:52:4c:2c:6a:40:e3:ac:86:13:e8: 27:0a:0b:e4:e8:dd:a8:78:04:0c:fb:50:7b:9a:ef: c6:71:cc:fc:5f:d4:47:bb:92:2b:34:47:37:f1:6b: db:a4:c9:4d:bc:60:a8:56:b4:5c:6e:a2:1e:2e:74: b2:4c:e1:8b:84:65:61:39:9c:d8:8a:b5:43:6e:92: 4c:3c:f3:79:eb:e9:b0:45:a6:f7:6f:ab:0b:e7:48: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A8:BE:7D:9A:19:BC:05:70:7B:93:96:3B:60:D0:31:94:46:B3:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.119.0/24 Signature Algorithm: sha256WithRSAEncryption 19:94:ae:65:c0:3f:81:cc:e9:6e:ee:e9:1f:57:3f:f9:a3:c4: 4a:e4:8e:9e:84:67:cc:2c:64:50:13:15:7e:49:07:bb:0b:c8: c7:54:86:f8:46:46:06:0b:6d:f4:fa:af:85:58:9d:54:9a:0a: b2:87:d4:a0:3f:43:d8:10:2a:22:61:a3:38:be:eb:34:e8:79: 1a:47:85:ae:a3:0c:3b:ea:6c:73:0d:a4:3f:32:11:60:3b:07: 98:34:78:77:f2:bb:b4:7e:dd:4b:7b:80:2b:ee:18:2c:e2:96: c1:43:29:2c:79:10:f8:cb:17:da:ea:37:8c:0a:9b:71:36:98: 73:4d:07:76:c5:75:ed:e2:31:c1:e7:2b:a7:f9:ee:10:3f:02: 21:a7:8a:41:41:7c:f4:46:c8:26:7b:9d:ab:96:e5:da:a5:23: 79:99:04:82:86:4d:02:7e:f9:25:ed:8d:4c:cb:be:e9:c0:f8: c3:18:3e:35:f5:e3:01:03:e7:4d:1a:5f:ca:55:93:20:8b:a9: 87:fb:fa:f3:fa:73:ec:6b:3e:41:e8:63:eb:08:c9:de:56:6f: 25:7f:c6:b3:79:66:08:cf:20:ee:7a:ca:7d:f7:d4:dc:7c:9a: f7:96:ab:8a:22:cc:15:7d:7a:db:87:61:96:ff:48:02:8b:81: 4d:1c:fd:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBIRXcNpmKP5nDPfXq2CrF2xNkPwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAyMTI1WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTRlY2Y0MDU3MjkxMWRiZTBlNzIwNzcxZTRhNzIwMGI1 ZWQ0ZTk3ZTI3NDUwZjE3MWU1NTE4NTFlMWEzNTg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOSYUFhgGLsl2vBVFE7LA4Ug69SO2HcBGo+e4R72Y3FFsl uL9IZa0G5SETLsIyiNE44fBaMqkPLYM19PHRIBDWXRYmovFsdd64oQWsbKYr844W ekXnZqSAMQ0fZ3yve2KhJLEJG6M5djqqWugLVbcO2De7BSO/W/VAOQ4vLnAEE/U2 OR59iYKNC8TnphcCfTOiCdeCJ2UYj3mwCA6adqWFKQPHtmP7NvV2UkwsakDjrIYT 6CcKC+To3ah4BAz7UHua78ZxzPxf1Ee7kis0Rzfxa9ukyU28YKhWtFxuoh4udLJM 4YuEZWE5nNiKtUNukkw883nr6bBFpvdvqwvnSOcjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvKi+fZoZvAVwe5OWO2DQMZRGs/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNWQ4NDc3LWU1NGEtNDI2Ny04MTVmLTIyOTZmNGE5NTU0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA/9ncwDQYJKoZIhvcNAQELBQADggEBABmUrmXAP4HM6W7u6R9XP/mjxErk jp6EZ8wsZFATFX5JB7sLyMdUhvhGRgYLbfT6r4VYnVSaCrKH1KA/Q9gQKiJhozi+ 6zToeRpHha6jDDvqbHMNpD8yEWA7B5g0eHfyu7R+3Ut7gCvuGCzilsFDKSx5EPjL F9rqN4wKm3E2mHNNB3bFde3iMcHnK6f57hA/AiGnikFBfPRGyCZ7nauW5dqlI3mZ BIKGTQJ++SXtjUzLvunA+MMYPjX14wED500aX8pVkyCLqYf7+vP6c+xrPkHoY+sI yd5WbyV/xrN5ZgjPIO56yn331Nx8mveWq4oizBV9etuHYZb/SAKLgU0c/fc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:37 2025 by rpki-client