$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa File: 7812bdff-a702-4659-8989-c79feeb052dd.roa (raw, json) Hash identifier: 6wYP7/v5CKdtSVdA9hR7R/OehbuwlAXokGNz7XKAT8k= Subject key identifier: 49:2E:76:81:BC:CE:83:95:04:14:1D:18:20:0B:40:8F:03:0C:4D:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F38D6B557D5B5C57E6B8731DE7A71448D3101EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa Signing time: Fri 18 Apr 2025 00:31:24 +0000 ROA not before: Fri 18 Apr 2025 00:31:24 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.198.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:38:d6:b5:57:d5:b5:c5:7e:6b:87:31:de:7a:71:44:8d:31:01:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:31:24 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=399ba40bbe3cd66f3876bd85566a0b0e70844f650bf65da6ea169a5b9340e0ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:5e:4c:61:01:e3:a1:d9:43:65:25:20:5c: d0:71:6e:a6:bf:7b:21:0d:9e:98:26:cd:fc:e9:f4: 97:8e:d3:b7:b0:2d:2d:15:71:16:6b:21:a0:73:cf: 69:b0:30:8e:4d:98:fd:68:e6:52:90:dd:b2:8d:10: 5d:63:5b:d1:01:65:4f:a6:37:f5:7f:e2:62:c0:77: aa:53:9c:26:37:10:3e:77:d4:3d:74:24:c0:cd:56: 17:dc:b6:d4:72:9f:71:f3:b6:6d:19:2c:e1:0f:28: 2c:1b:d0:79:94:3c:38:19:4d:39:bf:61:b0:ff:74: b3:0d:7a:ce:0a:a2:95:18:fe:31:e2:33:ca:f7:f6: 31:d8:fc:ae:aa:48:4f:4b:48:c3:62:e3:3d:00:f0: a4:c5:bd:dd:07:4e:da:39:d3:47:df:74:a0:3c:3d: fd:f1:e4:e3:79:d8:ed:ee:d8:3e:88:03:be:cc:9a: d4:cc:bb:3f:a4:7b:dc:6a:e6:8f:77:46:10:f9:04: 50:b1:78:88:f5:65:d5:66:90:93:77:9a:5c:6f:d6: 3a:82:b7:a7:09:20:5d:a6:e8:51:28:6c:65:7e:ff: 02:1e:a3:ee:43:b7:6e:50:5a:91:41:83:55:f0:5c: 68:28:82:3c:a3:35:93:6f:a9:98:c9:f7:1d:21:b4: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:76:81:BC:CE:83:95:04:14:1D:18:20:0B:40:8F:03:0C:4D:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.198.85.0/24 Signature Algorithm: sha256WithRSAEncryption d8:e2:61:87:b1:ed:ce:c6:80:33:fb:c7:f0:bc:eb:ea:e6:24: 08:e5:b9:93:59:e4:02:77:fb:76:20:fc:21:ee:99:37:22:96: c8:7b:e6:48:11:d3:18:ea:a6:6c:bd:ba:0d:38:da:5f:bb:9a: 11:ab:d4:69:95:47:ed:01:27:74:8f:7a:be:fc:43:12:f6:67: 28:a7:4c:dd:5f:42:60:da:5b:c9:51:f4:66:8a:ab:9b:b8:f2: 8c:71:02:21:c5:4f:8a:3c:2d:f4:ed:23:fc:26:fe:66:84:87: 94:c3:88:d3:8c:2a:84:2f:b7:a6:56:17:4b:16:bc:d6:af:8d: 13:af:aa:00:d7:66:82:39:04:9c:0b:fe:6c:ad:a9:68:3e:d7: bf:34:9d:1c:93:1f:ca:14:47:f7:d8:39:6e:c9:f7:eb:e2:1b: 39:95:6e:6f:ba:f9:a4:4b:e5:33:cd:1c:2f:e4:76:6b:ce:50: 79:e8:4a:ba:4b:3a:5d:60:87:54:f0:8e:e9:c4:eb:e8:4e:23: 64:aa:07:59:24:76:4b:48:5d:18:51:da:56:c4:34:72:99:1d: db:44:6d:4b:7d:e5:8c:f3:a7:4f:f2:fd:07:b3:a7:84:a8:ef: 14:40:db:cd:b4:e3:ef:c6:12:9d:e2:2c:82:29:5e:04:39:02: 52:8a:1e:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHzjWtVfVtcV+a4cx3npxRI0xAe8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDAzMTI0WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTliYTQwYmJlM2NkNjZmMzg3NmJkODU1NjZhMGIwZTcw ODQ0ZjY1MGJmNjVkYTZlYTE2OWE1YjkzNDBlMGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9Xl5MYQHjodlDZSUgXNBxbqa/eyENnpgmzfzp9JeO07ew LS0VcRZrIaBzz2mwMI5NmP1o5lKQ3bKNEF1jW9EBZU+mN/V/4mLAd6pTnCY3ED53 1D10JMDNVhfcttRyn3Hztm0ZLOEPKCwb0HmUPDgZTTm/YbD/dLMNes4KopUY/jHi M8r39jHY/K6qSE9LSMNi4z0A8KTFvd0HTto500ffdKA8Pf3x5ON52O3u2D6IA77M mtTMuz+ke9xq5o93RhD5BFCxeIj1ZdVmkJN3mlxv1jqCt6cJIF2m6FEobGV+/wIe o+5Dt25QWpFBg1XwXGgogjyjNZNvqZjJ9x0htNIfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSS52gbzOg5UEFB0YIAtAjwMMTakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MTJiZGZmLWE3MDItNDY1OS04OTg5LWM3OWZlZWIwNTJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYxlUwDQYJKoZIhvcNAQELBQADggEBANjiYYex7c7GgDP7x/C86+rmJAjl uZNZ5AJ3+3Yg/CHumTcilsh75kgR0xjqpmy9ug042l+7mhGr1GmVR+0BJ3SPer78 QxL2ZyinTN1fQmDaW8lR9GaKq5u48oxxAiHFT4o8LfTtI/wm/maEh5TDiNOMKoQv t6ZWF0sWvNavjROvqgDXZoI5BJwL/mytqWg+1780nRyTH8oUR/fYOW7J9+viGzmV bm+6+aRL5TPNHC/kdmvOUHnoSrpLOl1gh1TwjunE6+hOI2SqB1kkdktIXRhR2lbE NHKZHdtEbUt95Yzzp0/y/Qezp4So7xRA28204+/GEp3iLIIpXgQ5AlKKHn0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:49 2025 by rpki-client