$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/725de74a-ea25-4864-a260-52460f0b56de.roa File: 725de74a-ea25-4864-a260-52460f0b56de.roa (raw, json) Hash identifier: oKQFPiPhWzSg+VE23fJjwv9JJg9MWGerw0RvRHW5PWg= Subject key identifier: F0:D5:A4:93:B3:BE:F1:21:A3:F9:88:98:50:2D:F2:9B:8F:28:54:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54D30AC1DB472AF851015C8ABF0CA04C806EA33E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/725de74a-ea25-4864-a260-52460f0b56de.roa Signing time: Mon 07 Apr 2025 15:20:29 +0000 ROA not before: Mon 07 Apr 2025 15:20:29 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.43.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d3:0a:c1:db:47:2a:f8:51:01:5c:8a:bf:0c:a0:4c:80:6e:a3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:20:29 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=c0de7feca3178dbe6f4000621318c8e446bd9c6104624b9f6bdb1133a6eebc61, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:ea:28:39:a3:9a:7b:5b:4e:54:56:b8:81: 65:b6:23:30:b7:f5:e5:41:1b:2a:4a:db:60:3f:1b: 43:9b:5a:98:e2:ea:7d:6e:53:29:ff:ac:f2:b4:1e: 4e:59:7f:dd:a0:5c:05:99:aa:3f:29:08:d0:c4:23: 91:56:c8:a3:a8:08:75:bf:9a:fb:2e:82:ef:35:64: 73:7d:ae:43:95:c1:cf:5a:85:5a:3f:81:9e:24:48: 5d:e7:c3:70:9a:fd:23:d2:eb:5c:0a:6f:75:5c:ae: 3a:36:56:78:1e:a8:f3:71:cb:2f:79:82:f4:76:f9: 2c:8a:96:b3:9e:98:25:e0:ca:eb:4c:52:84:66:e6: 08:ad:a6:92:d8:2c:75:e1:4f:24:e8:21:f8:f1:13: 71:6e:c8:70:49:f3:dd:d8:e6:1c:f5:6f:b5:6e:17: 7a:0a:44:4e:6a:1b:d0:f8:b2:87:d2:38:cf:17:7d: 47:84:6a:89:e6:e7:d7:c9:00:fe:cf:9b:e1:90:3c: f0:8b:04:a6:4b:fa:4b:7a:3b:fa:58:d4:29:48:d9: 18:9b:a6:18:a9:ca:fc:c6:7c:c2:a0:d1:ac:a9:dd: b0:3e:be:fc:9d:e1:39:09:a8:89:e8:0b:63:06:b7: 9c:2f:36:1e:f3:c7:45:a1:0e:38:e1:fd:31:66:6f: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D5:A4:93:B3:BE:F1:21:A3:F9:88:98:50:2D:F2:9B:8F:28:54:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/725de74a-ea25-4864-a260-52460f0b56de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.175.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:d9:c2:58:68:83:73:4e:26:99:5a:4d:50:d4:40:d7:91:8c: 5e:30:30:65:cf:c2:01:d7:26:e6:e9:59:e6:a3:03:df:f9:0f: 52:f1:89:57:00:de:97:ca:04:dc:f6:5a:02:0e:53:5e:c3:84: e8:39:2a:b0:38:79:37:94:c3:46:3f:b9:3d:00:cf:84:9d:0c: ae:c0:b9:42:c8:f8:19:c8:b8:3a:15:e0:22:fb:67:7b:aa:e2: 67:01:77:b1:18:28:59:4e:a9:0f:49:9b:8c:cc:ae:15:4d:bf: 41:e8:b2:38:27:27:19:a6:bc:3f:23:48:c9:bb:f5:60:40:f5: 54:32:03:42:b1:9d:08:fc:31:08:b9:de:3e:8d:5b:46:36:57: fa:08:73:ab:c0:c2:ae:78:f4:fd:9e:61:61:ca:67:07:06:17: ae:f3:63:50:4a:e7:eb:76:aa:a3:a4:c8:60:32:f5:49:f8:7a: 18:54:85:73:b9:66:cf:3f:73:20:86:98:16:de:0d:dd:eb:de: 14:c3:84:44:78:86:db:7b:23:22:5c:ec:db:24:1b:c3:fc:7f: fc:2f:5a:60:85:3e:e5:24:34:ba:ff:55:a8:ef:d9:db:bf:f0: 5f:cb:b7:b1:ff:be:fa:aa:6f:62:44:c4:ef:2e:18:86:16:d6: db:d9:19:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVNMKwdtHKvhRAVyKvwygTIBuoz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUyMDI5WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGRlN2ZlY2EzMTc4ZGJlNmY0MDAwNjIxMzE4YzhlNDQ2 YmQ5YzYxMDQ2MjRiOWY2YmRiMTEzM2E2ZWViYzYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCizuooOaOae1tOVFa4gWW2IzC39eVBGypK22A/G0ObWpji 6n1uUyn/rPK0Hk5Zf92gXAWZqj8pCNDEI5FWyKOoCHW/mvsugu81ZHN9rkOVwc9a hVo/gZ4kSF3nw3Ca/SPS61wKb3Vcrjo2VngeqPNxyy95gvR2+SyKlrOemCXgyutM UoRm5gitppLYLHXhTyToIfjxE3FuyHBJ893Y5hz1b7VuF3oKRE5qG9D4sofSOM8X fUeEaonm59fJAP7Pm+GQPPCLBKZL+kt6O/pY1ClI2RibphipyvzGfMKg0ayp3bA+ vvyd4TkJqInoC2MGt5wvNh7zx0WhDjjh/TFmbxDZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8NWkk7O+8SGj+YiYUC3ym48oVKowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyNWRlNzRhLWVhMjUtNDg2NC1hMjYwLTUyNDYwZjBiNTZkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAK68wDQYJKoZIhvcNAQELBQADggEBADzZwlhog3NOJplaTVDUQNeRjF4w MGXPwgHXJubpWeajA9/5D1LxiVcA3pfKBNz2WgIOU17DhOg5KrA4eTeUw0Y/uT0A z4SdDK7AuULI+BnIuDoV4CL7Z3uq4mcBd7EYKFlOqQ9Jm4zMrhVNv0HosjgnJxmm vD8jSMm79WBA9VQyA0KxnQj8MQi53j6NW0Y2V/oIc6vAwq549P2eYWHKZwcGF67z Y1BK5+t2qqOkyGAy9Un4ehhUhXO5Zs8/cyCGmBbeDd3r3hTDhER4htt7IyJc7Nsk G8P8f/wvWmCFPuUkNLr/Vajv2du/8F/Lt7H/vvqqb2JExO8uGIYW1tvZGaM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:21 2025 by rpki-client