$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa File: 71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa (raw, json) Hash identifier: xY3hhOQPl7xLh0AL8b8pqUxh9QCj0VS9VCNJgtNnQtc= Subject key identifier: 22:72:E9:C3:02:2A:F8:1D:A5:DE:57:64:CE:76:F0:B2:DA:02:55:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 716503B0C687CE35E50E15C719EFB9CDD873275A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa Signing time: Tue 22 Apr 2025 00:00:47 +0000 ROA not before: Tue 22 Apr 2025 00:00:47 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 157.175.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:65:03:b0:c6:87:ce:35:e5:0e:15:c7:19:ef:b9:cd:d8:73:27:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:00:47 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4017c544ae52be4fd3dd298887bc4332502ab055b174fc51714619c874dcd408, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:49:dd:36:69:3c:a6:18:f0:13:fd:ee:74: 07:36:41:3c:33:d8:92:95:14:5e:86:ce:32:32:5b: 9c:a4:e3:c3:70:6a:55:e3:8a:5b:7f:05:41:22:cc: d2:87:53:7f:fd:b9:78:5c:a9:4c:16:90:a2:48:62: a3:96:4e:6e:ab:84:5c:49:87:75:ca:e3:80:15:d7: d1:90:88:af:98:d4:0a:48:6a:89:68:89:22:89:2e: 95:69:26:7d:fa:f9:71:84:86:6c:92:dc:61:ac:1a: a4:97:d7:93:ad:5c:db:f2:9a:70:21:ab:0d:a8:be: 54:45:6f:47:1c:94:f5:24:bd:e7:bf:9b:5c:f6:d0: 42:01:d0:7f:16:56:7d:e9:6f:7a:1c:35:b5:70:45: 53:b3:3a:75:e9:94:d5:f5:af:bc:61:3a:34:72:79: 30:d6:30:b3:67:ae:cf:8e:18:b2:f4:5a:07:41:32: df:70:73:0d:e1:a8:19:32:b9:84:f5:97:35:0d:a8: cb:e9:a2:37:f7:c8:fd:a1:8a:fe:58:e8:dd:2a:1a: 76:a1:e4:b1:f4:f3:93:83:29:7b:f8:47:31:cf:a4: 61:96:32:05:6a:df:50:b2:4f:1d:e1:59:a8:5d:83: fd:64:f5:90:7b:26:7c:82:8d:d0:f7:44:72:cc:f8: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:E9:C3:02:2A:F8:1D:A5:DE:57:64:CE:76:F0:B2:DA:02:55:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71b1cafe-9ff2-4e1c-8a6f-ec0c8f0af364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.175.2.0/23 Signature Algorithm: sha256WithRSAEncryption 98:0f:c8:b4:5c:0c:a3:39:21:6b:76:9f:49:e5:2b:7a:d2:60: 2d:d5:cf:ec:28:ae:6e:c3:80:ae:87:db:ac:dc:79:b3:4a:c1: 83:15:93:b4:be:a0:72:8f:11:f7:58:cd:c9:21:50:06:67:af: 57:5c:66:9c:ef:d6:f4:12:b3:7e:8c:36:e8:99:70:6c:d4:c6: 39:96:d6:7e:a4:e6:58:3e:f8:bc:26:be:e9:cc:35:b7:21:30: d2:1e:55:4f:24:03:fd:0e:11:b2:ea:aa:ab:d7:7a:0c:18:2b: 76:9e:d8:e9:8b:07:3f:4a:d0:bb:e6:3c:c0:d2:5f:81:18:32: f9:01:82:e6:e0:97:86:58:76:31:61:4f:21:a1:f8:90:5c:46: be:4d:08:53:2c:85:35:aa:31:ff:c2:e6:46:78:6f:40:17:de: c9:99:17:e5:12:cd:fa:48:d7:77:45:24:9f:32:2f:1e:4c:07: 9e:23:c2:f6:a5:9e:e1:ba:c5:90:b9:21:8b:05:76:61:af:18: d0:d8:bf:f5:c6:0d:99:e6:26:5e:d4:97:60:ad:1c:c9:21:e2: 0b:60:d5:34:f5:f7:16:bd:fe:c5:05:9d:23:22:9e:af:9d:ad: f3:82:e2:ba:3c:f2:c8:6e:86:84:52:b9:09:8c:bd:0f:de:14: 52:79:77:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcWUDsMaHzjXlDhXHGe+5zdhzJ1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAwMDQ3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDE3YzU0NGFlNTJiZTRmZDNkZDI5ODg4N2JjNDMzMjUw MmFiMDU1YjE3NGZjNTE3MTQ2MTljODc0ZGNkNDA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSj0ndNmk8phjwE/3udAc2QTwz2JKVFF6GzjIyW5yk48Nw alXjilt/BUEizNKHU3/9uXhcqUwWkKJIYqOWTm6rhFxJh3XK44AV19GQiK+Y1ApI aoloiSKJLpVpJn36+XGEhmyS3GGsGqSX15OtXNvymnAhqw2ovlRFb0cclPUkvee/ m1z20EIB0H8WVn3pb3ocNbVwRVOzOnXplNX1r7xhOjRyeTDWMLNnrs+OGLL0WgdB Mt9wcw3hqBkyuYT1lzUNqMvpojf3yP2hiv5Y6N0qGnah5LH085ODKXv4RzHPpGGW MgVq31CyTx3hWahdg/1k9ZB7JnyCjdD3RHLM+PfdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUInLpwwIq+B2l3ldkznbwstoCVUIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxYjFjYWZlLTlmZjItNGUxYy04YTZmLWVjMGM4ZjBhZjM2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGdrwIwDQYJKoZIhvcNAQELBQADggEBAJgPyLRcDKM5IWt2n0nlK3rSYC3V z+worm7DgK6H26zcebNKwYMVk7S+oHKPEfdYzckhUAZnr1dcZpzv1vQSs36MNuiZ cGzUxjmW1n6k5lg++LwmvunMNbchMNIeVU8kA/0OEbLqqqvXegwYK3ae2OmLBz9K 0LvmPMDSX4EYMvkBgubgl4ZYdjFhTyGh+JBcRr5NCFMshTWqMf/C5kZ4b0AX3smZ F+USzfpI13dFJJ8yLx5MB54jwvalnuG6xZC5IYsFdmGvGNDYv/XGDZnmJl7Ul2Ct HMkh4gtg1TT19xa9/sUFnSMinq+drfOC4ro88shuhoRSuQmMvQ/eFFJ5d9w= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:51 2025 by rpki-client