$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa File: 713d60da-dad2-49a0-b57f-6b63365113f7.roa (raw, json) Hash identifier: lnHjCd8lZg4ykqrpIkF22A0NqR1LTjTZC1A85ZV44VI= Subject key identifier: 99:A5:C8:BC:36:27:E7:4B:96:BD:85:D8:85:5C:D4:93:2B:05:44:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0373DD58CE2CC81CD39BAA52AADE681EB0D0E08A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa Signing time: Fri 25 Apr 2025 00:31:21 +0000 ROA not before: Fri 25 Apr 2025 00:31:21 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:73:dd:58:ce:2c:c8:1c:d3:9b:aa:52:aa:de:68:1e:b0:d0:e0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:31:21 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=fcd8b3b4a504db52ccb83a0c1ea81e6747e26b9309360ec2bc706eaa8d08eab0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:e2:50:5d:b2:b2:8a:c2:88:07:c7:bb:3f: a6:60:a8:d3:f0:3e:40:f4:ff:86:3e:17:10:34:28: ac:86:05:16:51:0f:65:87:9e:15:c8:32:ba:46:c4: 00:d2:eb:05:63:ae:a5:5a:c6:1a:76:e5:8d:14:95: be:d5:9f:f8:fe:90:21:4d:84:f2:26:4d:7d:46:2f: f6:24:37:32:d0:23:ab:ca:7c:fb:00:9b:ea:f6:0d: 42:20:d7:78:52:ba:00:fc:0f:1d:86:16:b1:b5:05: 78:21:63:6a:d5:b3:66:52:c0:2e:e3:66:2f:4d:09: 7e:21:4b:f4:36:ec:03:2f:db:a0:69:d3:92:95:fe: 74:58:90:be:78:35:c9:12:d7:3f:5c:e9:91:76:1d: 3e:5a:1c:69:c8:2e:03:b1:60:f1:2b:dc:f9:a1:8f: 5b:8d:19:37:9d:71:62:b5:a4:c6:de:c5:15:ce:95: 8a:e0:a1:ef:ab:44:57:87:68:14:89:4a:4a:c1:3f: be:2d:2b:a7:bc:42:3d:e1:c8:48:94:d1:c3:07:d4: 29:12:69:3b:ae:0f:2e:60:df:b0:98:a7:47:fe:f9: 5a:af:86:dc:62:c1:19:dd:38:f9:a6:d1:b5:3a:95: c6:4b:f8:01:a7:fc:df:e8:98:5e:96:d9:f3:d9:1a: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:C8:BC:36:27:E7:4B:96:BD:85:D8:85:5C:D4:93:2B:05:44:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/713d60da-dad2-49a0-b57f-6b63365113f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.96.0/19 Signature Algorithm: sha256WithRSAEncryption c1:e5:1a:63:1a:2c:9f:f7:48:c1:4a:a9:6b:85:9f:d1:3a:43: 6d:a3:b4:c3:86:ef:f1:8d:b5:a3:7a:58:a4:46:7a:2e:00:e4: 73:b6:4a:d3:9c:7a:f7:28:51:ee:c7:c0:d9:f6:16:35:f1:08: a7:df:e6:c8:b4:05:f3:5d:cb:ab:c0:6f:da:24:29:72:1d:bf: 96:d6:68:11:84:80:90:db:e7:a1:56:5e:91:d8:fb:e1:0e:8a: a5:31:0b:8a:97:45:0c:22:a3:d9:20:d4:e3:e3:cb:71:c3:40: 90:c1:31:c6:5c:fe:95:86:7a:5e:14:f4:71:83:c4:80:31:0f: 7d:6e:6d:da:1e:ca:07:7d:b2:19:cc:66:16:f4:cb:e3:b3:17: db:fe:52:e3:40:8d:b9:17:78:76:8d:6f:7b:81:a4:f8:97:38: fe:a2:33:cb:da:83:9a:10:28:41:19:d0:c8:b4:f2:e8:7a:a9: 0f:74:3e:8d:08:ed:d8:29:8c:81:9a:21:8b:b5:7f:b8:62:d6: 10:19:93:dd:9c:72:c6:fd:13:12:11:7e:fc:00:b8:a2:41:34: 06:32:68:e7:f7:26:15:8f:85:75:bb:03:3f:dd:5e:85:a6:d1: e6:a5:8b:1f:e3:9b:7e:2c:b2:4f:5f:26:10:89:b3:ff:25:59: c7:05:d0:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA3PdWM4syBzTm6pSqt5oHrDQ4IowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAzMTIxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2Q4YjNiNGE1MDRkYjUyY2NiODNhMGMxZWE4MWU2NzQ3 ZTI2YjkzMDkzNjBlYzJiYzcwNmVhYThkMDhlYWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZTeJQXbKyisKIB8e7P6ZgqNPwPkD0/4Y+FxA0KKyGBRZR D2WHnhXIMrpGxADS6wVjrqVaxhp25Y0Ulb7Vn/j+kCFNhPImTX1GL/YkNzLQI6vK fPsAm+r2DUIg13hSugD8Dx2GFrG1BXghY2rVs2ZSwC7jZi9NCX4hS/Q27AMv26Bp 05KV/nRYkL54NckS1z9c6ZF2HT5aHGnILgOxYPEr3Pmhj1uNGTedcWK1pMbexRXO lYrgoe+rRFeHaBSJSkrBP74tK6e8Qj3hyEiU0cMH1CkSaTuuDy5g37CYp0f++Vqv htxiwRndOPmm0bU6lcZL+AGn/N/omF6W2fPZGrw1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmaXIvDYn50uWvYXYhVzUkysFRDowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxM2Q2MGRhLWRhZDItNDlhMC1iNTdmLTZiNjMzNjUxMTNmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUXFmAwDQYJKoZIhvcNAQELBQADggEBAMHlGmMaLJ/3SMFKqWuFn9E6Q22j tMOG7/GNtaN6WKRGei4A5HO2StOcevcoUe7HwNn2FjXxCKff5si0BfNdy6vAb9ok KXIdv5bWaBGEgJDb56FWXpHY++EOiqUxC4qXRQwio9kg1OPjy3HDQJDBMcZc/pWG el4U9HGDxIAxD31ubdoeygd9shnMZhb0y+OzF9v+UuNAjbkXeHaNb3uBpPiXOP6i M8vag5oQKEEZ0Mi08uh6qQ90Po0I7dgpjIGaIYu1f7hi1hAZk92ccsb9ExIRfvwA uKJBNAYyaOf3JhWPhXW7Az/dXoWm0ealix/jm34ssk9fJhCJs/8lWccF0M4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:06 2025 by rpki-client