$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa File: 7a63d989-b13f-46b2-ada6-94bd07a73e86.roa (raw, json) Hash identifier: 1oCrrePs7Hf3NRk6/7MkgkAskZaZOrBkBSUdC5oh6Zs= Subject key identifier: AF:3C:6A:BD:21:AB:09:6C:15:99:28:E9:E5:92:57:63:79:95:40:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E23E79186D01FC0C1179EC708DAEB587A9EF2AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa Signing time: Fri 25 Apr 2025 00:30:16 +0000 ROA not before: Fri 25 Apr 2025 00:30:16 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:23:e7:91:86:d0:1f:c0:c1:17:9e:c7:08:da:eb:58:7a:9e:f2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:30:16 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6bab78d7b60efa8cf25c76147d8d289ec8717660ce47e82d1d92363ff15f0c95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:d6:0c:97:f0:e3:14:cc:47:3a:91:38:6d: 9d:af:11:c4:46:28:28:1d:64:78:d3:5a:d3:d4:d8: 3b:f1:99:ad:f4:48:c9:0a:a2:f2:d3:1a:de:af:48: c4:2c:65:cd:e7:e3:02:13:d2:18:5b:3a:97:47:bd: 50:6e:d7:cc:f5:cd:c4:62:e3:f8:0a:65:91:12:73: b5:db:a4:48:bb:f8:18:a1:2a:6b:8a:ec:08:fb:cd: 3d:da:21:98:c4:23:e7:8d:ac:33:a2:eb:ed:0e:eb: 31:70:ca:e5:f4:7a:d2:1d:60:7e:52:10:6c:21:6f: ba:b0:53:c7:42:7e:95:c0:67:1e:c8:b5:c7:14:2c: bd:71:7e:34:3b:3a:1d:f2:d9:24:41:84:bb:2e:a5: 9d:32:bb:02:31:f6:97:92:e5:14:0d:6c:54:78:92: 57:60:fb:df:a4:be:82:ea:9c:73:80:a3:69:1b:60: dc:4e:e7:56:52:31:ea:d6:0d:5d:c4:72:93:a9:8b: 0e:8f:bd:6b:20:67:02:53:bf:f3:87:f1:f9:d0:4c: da:85:0b:1f:08:14:da:9a:3e:2e:2e:fc:d3:2c:13: 82:1b:e1:9b:ae:5f:5e:c2:21:53:03:2f:26:44:f6: 87:33:94:9d:ac:1b:67:68:8e:e6:e8:a0:80:72:5d: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:6A:BD:21:AB:09:6C:15:99:28:E9:E5:92:57:63:79:95:40:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption 56:0d:eb:06:5a:ec:db:b1:1e:9e:bf:2c:1e:51:a1:83:12:4e: 35:e5:c5:b9:d7:d4:7d:94:50:3c:4e:2f:45:1d:3a:85:ca:7f: 19:53:7b:9a:2d:de:36:5d:ac:88:6e:8a:cf:06:e6:57:ed:74: e8:3a:de:8b:50:90:5b:eb:f9:16:2d:c7:44:bc:02:84:25:66: e0:61:0f:90:52:27:c0:b0:92:4d:81:6b:28:cd:3b:5c:b1:b5: 93:25:9f:20:3e:87:59:43:98:82:52:19:71:d2:aa:16:c8:a9: 45:bd:cd:3a:71:34:94:29:e2:df:bd:81:dc:5f:31:86:b7:28: 5d:0b:8a:3a:60:36:82:14:15:9a:cf:0d:af:a2:b3:11:b0:61: b0:05:37:c6:35:10:c0:7e:61:46:a2:26:13:48:d8:06:f6:07: 7e:7f:38:ed:48:4c:11:18:be:4a:4b:dd:47:58:ff:d3:d4:5d: 6e:14:fe:77:f5:74:14:a4:ba:10:6f:a7:34:0d:07:78:cf:a1: d1:fb:47:bd:a1:47:9c:b1:c8:1e:fb:f4:22:e5:4f:04:61:80: 9b:9c:89:83:df:73:da:43:83:44:6f:d2:fb:6d:35:6c:d1:ca: 9c:3b:06:0c:58:40:35:15:6b:a2:c6:f1:d7:82:c4:2b:ec:9a: ab:3a:38:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXiPnkYbQH8DBF57HCNrrWHqe8qswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAzMDE2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmFiNzhkN2I2MGVmYThjZjI1Yzc2MTQ3ZDhkMjg5ZWM4 NzE3NjYwY2U0N2U4MmQxZDkyMzYzZmYxNWYwYzk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChmtYMl/DjFMxHOpE4bZ2vEcRGKCgdZHjTWtPU2Dvxma30 SMkKovLTGt6vSMQsZc3n4wIT0hhbOpdHvVBu18z1zcRi4/gKZZESc7XbpEi7+Bih KmuK7Aj7zT3aIZjEI+eNrDOi6+0O6zFwyuX0etIdYH5SEGwhb7qwU8dCfpXAZx7I tccULL1xfjQ7Oh3y2SRBhLsupZ0yuwIx9peS5RQNbFR4kldg+9+kvoLqnHOAo2kb YNxO51ZSMerWDV3EcpOpiw6PvWsgZwJTv/OH8fnQTNqFCx8IFNqaPi4u/NMsE4Ib 4ZuuX17CIVMDLyZE9oczlJ2sG2dojubooIByXR7TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrzxqvSGrCWwVmSjp5ZJXY3mVQGkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhNjNkOTg5LWIxM2YtNDZiMi1hZGE2LTk0YmQwN2E3M2U4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBAFYN6wZa7NuxHp6/LB5RoYMSTjXl xbnX1H2UUDxOL0UdOoXKfxlTe5ot3jZdrIhuis8G5lftdOg63otQkFvr+RYtx0S8 AoQlZuBhD5BSJ8Cwkk2BayjNO1yxtZMlnyA+h1lDmIJSGXHSqhbIqUW9zTpxNJQp 4t+9gdxfMYa3KF0LijpgNoIUFZrPDa+isxGwYbAFN8Y1EMB+YUaiJhNI2Ab2B35/ OO1ITBEYvkpL3UdY/9PUXW4U/nf1dBSkuhBvpzQNB3jPodH7R72hR5yxyB779CLl TwRhgJuciYPfc9pDg0Rv0vttNWzRypw7BgxYQDUVa6LG8deCxCvsmqs6OEo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:44 2025 by rpki-client