$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa File: 721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa (raw, json) Hash identifier: rhWStUPqhhpo51wGaEKS64R/9TiZThZb9LbJ7/A4t0M= Subject key identifier: B5:62:CD:1E:89:AF:74:62:F7:ED:E6:D0:34:52:4F:0B:E6:5D:C9:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A2B2A708F52DA7A1AC8459F1614738A1E44AB8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa Signing time: Mon 07 Apr 2025 15:00:15 +0000 ROA not before: Mon 07 Apr 2025 15:00:15 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 107.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2b:2a:70:8f:52:da:7a:1a:c8:45:9f:16:14:73:8a:1e:44:ab:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:00:15 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=6e2883c7f16e6ae7489e1207ece6a666b139092826d5010ff360fb8c6fdaa02f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:f2:33:25:db:37:c4:6a:a5:9c:d4:6d:16: 0f:8e:17:0e:13:00:2c:dc:31:22:29:48:2b:c6:2c: a6:c8:df:c9:b5:27:01:9a:68:76:94:ca:bc:02:96: b4:9e:9f:b5:e2:c8:1b:7a:23:d3:f7:30:55:75:cd: d6:c5:bc:64:63:47:07:1c:1d:a2:be:a7:c4:a1:d4: db:84:dd:03:d2:78:35:20:07:c5:3c:30:31:b6:c3: 64:4d:1c:c0:49:c1:94:a0:f9:5f:55:b6:53:20:fe: 55:e2:42:c7:6f:a5:bb:29:db:f6:24:f9:cf:42:0c: 0b:32:fe:6c:7b:ef:0f:af:41:02:09:83:69:4c:63: 97:6b:b0:29:a1:0c:94:1b:e5:fe:82:37:3d:68:32: 8f:51:d4:e7:5b:0d:8c:e1:f2:c2:87:1c:f6:9a:d2: 52:6e:ef:68:e0:cf:05:64:cf:b4:f4:0a:a4:05:d9: c6:23:6d:f2:3a:5f:de:50:3e:d0:c9:68:57:84:49: a1:c3:12:9e:cc:ce:4b:8f:0c:47:fb:78:d3:eb:2d: 72:88:04:2e:f5:54:6c:d3:c8:b6:a9:48:e0:8e:7a: 41:46:de:1e:4d:e9:fe:84:13:b2:77:64:7b:b0:c9: 39:db:42:ef:32:70:98:e6:08:0d:9e:6e:35:12:bb: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:CD:1E:89:AF:74:62:F7:ED:E6:D0:34:52:4F:0B:E6:5D:C9:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/721aa7be-d4b7-4d44-97d2-6fbc2144f45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption c6:97:9e:3a:a2:96:4d:b7:3e:53:19:a1:55:26:86:46:69:af: fd:ec:2a:26:4b:3c:5f:24:be:d6:19:4e:92:62:49:2c:de:e2: 89:0c:f0:3b:94:57:27:d5:8e:e9:fc:ce:fc:ef:8c:ab:76:e1: bf:53:b7:6e:6d:20:19:21:1d:ad:f8:41:b7:cc:ff:a7:e2:26: 35:f3:6f:f9:4b:66:a6:c4:c6:a0:34:47:cd:92:35:b4:33:86: c0:00:82:f9:9b:f9:61:c6:0c:ec:d5:e4:89:fb:ea:67:5d:1e: fe:98:07:75:10:ec:24:bd:f6:4e:78:1d:9f:68:b4:d4:1e:a6: 29:34:3a:b7:40:6d:59:83:7d:5d:53:47:32:8c:6b:ad:f6:89: fc:a7:ef:cf:3a:b2:5a:e1:20:48:aa:8e:04:90:cb:0c:71:c4: 99:81:62:11:63:31:9e:cb:cc:db:3d:f2:cd:49:61:bb:ff:02: d3:74:de:e8:46:15:91:45:7f:f5:e1:e6:c0:e7:bc:e3:68:8e: 69:0e:9d:fa:8e:cb:1c:8d:79:eb:77:69:3b:50:b6:ef:22:04: ba:b3:35:84:a0:b8:1c:f4:f3:14:d3:8f:29:2a:28:ed:3c:d9: f2:0c:8f:f2:1b:30:6f:19:31:4d:c5:e1:12:42:88:6b:5e:2c: 59:aa:42:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGisqcI9S2noayEWfFhRzih5Eq48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUwMDE1WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTI4ODNjN2YxNmU2YWU3NDg5ZTEyMDdlY2U2YTY2NmIx MzkwOTI4MjZkNTAxMGZmMzYwZmI4YzZmZGFhMDJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2MPIzJds3xGqlnNRtFg+OFw4TACzcMSIpSCvGLKbI38m1 JwGaaHaUyrwClrSen7XiyBt6I9P3MFV1zdbFvGRjRwccHaK+p8Sh1NuE3QPSeDUg B8U8MDG2w2RNHMBJwZSg+V9VtlMg/lXiQsdvpbsp2/Yk+c9CDAsy/mx77w+vQQIJ g2lMY5drsCmhDJQb5f6CNz1oMo9R1OdbDYzh8sKHHPaa0lJu72jgzwVkz7T0CqQF 2cYjbfI6X95QPtDJaFeESaHDEp7MzkuPDEf7eNPrLXKIBC71VGzTyLapSOCOekFG 3h5N6f6EE7J3ZHuwyTnbQu8ycJjmCA2ebjUSu0TdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtWLNHomvdGL37ebQNFJPC+ZdyYkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyMWFhN2JlLWQ0YjctNGQ0NC05N2QyLTZmYmMyMTQ0ZjQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEAxpeeOqKWTbc+UxmhVSaGRmmv/ewq Jks8XyS+1hlOkmJJLN7iiQzwO5RXJ9WO6fzO/O+Mq3bhv1O3bm0gGSEdrfhBt8z/ p+ImNfNv+UtmpsTGoDRHzZI1tDOGwACC+Zv5YcYM7NXkifvqZ10e/pgHdRDsJL32 Tngdn2i01B6mKTQ6t0BtWYN9XVNHMoxrrfaJ/KfvzzqyWuEgSKqOBJDLDHHEmYFi EWMxnsvM2z3yzUlhu/8C03Te6EYVkUV/9eHmwOe842iOaQ6d+o7LHI1563dpO1C2 7yIEurM1hKC4HPTzFNOPKSoo7TzZ8gyP8hswbxkxTcXhEkKIa14sWapCpA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:33 2025 by rpki-client