$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/788c8f4f-a3db-4e18-acda-6fc96da8a534.roa File: 788c8f4f-a3db-4e18-acda-6fc96da8a534.roa (raw, json) Hash identifier: KMIh8PyoIYkKyUwulkDy5DmBonlSIb/n+sI+uLZOuCI= Subject key identifier: FF:1C:86:6D:4F:AD:27:0A:7B:BA:8F:3D:CB:52:09:56:7B:BD:AF:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E9D6EEC2F9D5259ED27B3B5C8E6D53CF7F68566 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/788c8f4f-a3db-4e18-acda-6fc96da8a534.roa Signing time: Wed 23 Apr 2025 00:30:28 +0000 ROA not before: Wed 23 Apr 2025 00:30:28 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.156.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9d:6e:ec:2f:9d:52:59:ed:27:b3:b5:c8:e6:d5:3c:f7:f6:85:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:30:28 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=bab3196c6922ac8eb9cc7eb47e382a552aa15c1891b96843bd7ccb9eb3a8643b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:24:80:d1:0c:65:a0:a5:50:94:b3:e4:27: d3:b2:f2:d6:5f:23:ce:63:25:ec:7e:1c:e7:23:d3: af:b5:62:26:cf:11:18:d5:27:5f:b6:86:95:0f:ae: b0:93:63:18:66:22:11:2e:cb:33:12:5f:1a:69:b7: 6c:94:7c:8c:cc:e4:e3:b9:b1:0f:71:7c:82:c5:24: 4c:86:0a:5f:e3:56:97:62:07:d2:16:4a:ac:37:81: c3:89:3c:7a:9b:e3:9f:66:60:ad:fe:62:3b:a0:62: 0f:71:35:82:43:d0:56:09:3e:6f:38:46:30:ea:b2: ef:34:5b:d4:39:6e:f2:6b:2c:5f:e3:48:3e:e1:9b: b8:ff:62:b4:d3:a9:f9:63:52:1f:3e:7c:9f:9e:93: e1:34:07:18:2a:41:28:e9:ac:70:13:93:30:9c:ec: 0c:0d:0f:65:76:f7:de:5d:ce:53:ef:c5:cc:97:77: 5d:3f:68:c6:11:24:b7:e1:9b:4f:e5:96:3e:36:86: 44:1c:08:61:40:eb:72:bf:99:f3:77:70:1a:cf:cb: be:99:cd:d4:0e:37:51:ae:d2:fd:19:2e:e9:8a:6c: 52:de:80:0b:21:83:ec:3e:df:05:66:56:9a:05:8c: 9b:4f:86:07:1f:7a:7f:4f:29:e3:99:37:b6:16:31: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1C:86:6D:4F:AD:27:0A:7B:BA:8F:3D:CB:52:09:56:7B:BD:AF:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/788c8f4f-a3db-4e18-acda-6fc96da8a534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.156.0.0/15 Signature Algorithm: sha256WithRSAEncryption 81:9c:44:84:f7:e6:86:21:59:de:15:9b:ed:9a:fd:69:d3:34: cb:96:e8:8a:74:ec:f7:18:23:90:1c:d0:0c:cc:00:ec:21:6b: d7:e3:71:47:88:26:68:24:62:8b:6c:cf:a1:5f:95:a7:da:aa: 7c:9d:33:01:94:91:5d:32:5d:29:f3:00:f7:9b:3a:3f:41:b3: b7:1a:ae:b0:5e:a3:58:4d:bf:12:ac:a7:58:d5:b7:82:f6:3f: 75:1c:9f:eb:6d:8a:3f:78:5e:1c:dd:5c:9b:40:27:ac:d4:27: fa:10:88:18:44:92:52:8c:79:c7:b9:b9:96:95:46:65:3c:a1: 06:2c:7d:f5:1b:59:ce:f6:65:64:6f:49:6a:7a:3c:56:ea:be: 0f:67:e5:f6:3d:95:14:7f:1a:b9:23:43:17:c3:4f:16:4e:49: 9a:e0:0b:1d:5a:a3:9f:8d:27:0c:e5:fa:6a:b1:84:d3:b9:18: 9b:7c:ed:f2:c7:c8:4e:41:11:82:99:eb:6a:53:1b:06:a0:c1: 58:fe:c7:f6:63:cf:f6:e7:a7:49:3a:e0:e1:f4:0e:91:d5:50: b4:21:3a:e8:06:b1:a2:79:6b:db:3b:96:e5:d7:37:3a:73:b8: 4a:b2:11:77:19:d4:38:f7:57:79:52:b1:1e:61:40:5b:bd:e6: 02:46:97:b4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbp1u7C+dUlntJ7O1yObVPPf2hWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAzMDI4WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWIzMTk2YzY5MjJhYzhlYjljYzdlYjQ3ZTM4MmE1NTJh YTE1YzE4OTFiOTY4NDNiZDdjY2I5ZWIzYTg2NDNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4qiSA0QxloKVQlLPkJ9Oy8tZfI85jJex+HOcj06+1YibP ERjVJ1+2hpUPrrCTYxhmIhEuyzMSXxppt2yUfIzM5OO5sQ9xfILFJEyGCl/jVpdi B9IWSqw3gcOJPHqb459mYK3+YjugYg9xNYJD0FYJPm84RjDqsu80W9Q5bvJrLF/j SD7hm7j/YrTTqfljUh8+fJ+ek+E0BxgqQSjprHATkzCc7AwND2V2995dzlPvxcyX d10/aMYRJLfhm0/llj42hkQcCGFA63K/mfN3cBrPy76ZzdQON1Gu0v0ZLumKbFLe gAshg+w+3wVmVpoFjJtPhgcfen9PKeOZN7YWMeTFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/xyGbU+tJwp7uo89y1IJVnu9rzkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4OGM4ZjRmLWEzZGItNGUxOC1hY2RhLTZmYzk2ZGE4YTUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQnDANBgkqhkiG9w0BAQsFAAOCAQEAgZxEhPfmhiFZ3hWb7Zr9adM0y5bo inTs9xgjkBzQDMwA7CFr1+NxR4gmaCRii2zPoV+Vp9qqfJ0zAZSRXTJdKfMA95s6 P0GztxqusF6jWE2/EqynWNW3gvY/dRyf622KP3heHN1cm0AnrNQn+hCIGESSUox5 x7m5lpVGZTyhBix99RtZzvZlZG9Jano8Vuq+D2fl9j2VFH8auSNDF8NPFk5JmuAL HVqjn40nDOX6arGE07kYm3zt8sfITkERgpnralMbBqDBWP7H9mPP9uenSTrg4fQO kdVQtCE66Aaxonlr2zuW5dc3OnO4SrIRdxnUOPdXeVKxHmFAW73mAkaXtA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:45:56 2025 by rpki-client