$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa File: 811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa (raw, json) Hash identifier: NpjAOC8VSt1yqpDPvoR6qtybWsiUUNgda8IDiID1Lbc= Subject key identifier: 90:30:C8:30:E9:24:C7:3F:F4:EB:AF:C9:2B:18:AD:8B:E2:B8:1B:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79A7EA9A5A97901DA614804F25AE889EA343FCB9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa Signing time: Mon 07 Apr 2025 15:11:30 +0000 ROA not before: Mon 07 Apr 2025 15:11:30 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:ea:9a:5a:97:90:1d:a6:14:80:4f:25:ae:88:9e:a3:43:fc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:11:30 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=024d4449300c9176fda4fd1cc4759caa88f63e100b654d5bed34fc7f6489b372, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:59:98:07:6d:89:a2:8e:80:ac:cd:da:4e: ce:61:d8:97:52:12:85:51:85:a7:dc:3a:8d:97:74: 99:4b:24:26:95:33:44:bd:86:54:72:24:47:af:53: c4:91:38:bd:29:2b:d3:78:d5:b7:03:3a:4e:1b:0a: 16:48:41:1c:ae:f1:05:5d:51:a1:64:76:a2:93:6e: 3d:dc:e8:14:81:07:02:bd:f8:e5:bb:a7:e8:7b:35: 79:86:2b:d5:50:8b:1b:96:8d:1d:b1:2b:07:94:98: 37:c3:59:a6:4c:3d:43:7d:4a:08:d1:12:63:08:25: 6c:ff:4f:dd:77:20:d7:16:32:c9:c0:d3:59:77:cf: 3f:a3:5e:13:da:be:da:b7:94:ce:00:35:1d:27:63: e6:41:91:62:38:c5:36:62:e9:4e:b5:75:53:ad:11: 99:ea:d6:ae:8b:3c:28:47:8a:ac:a5:b7:62:dc:c1: 7d:7b:d0:29:cd:d6:1a:75:6b:54:26:a4:d8:35:c7: f7:c9:3f:5a:6f:15:2f:b0:90:3b:07:b9:bf:62:a0: 4a:ff:f2:0a:95:89:1d:a6:72:fb:da:5c:a4:e7:5b: 02:fb:53:52:f1:65:dc:27:1d:fc:b6:de:f8:cf:a9: 6d:96:51:dd:29:96:a1:77:77:5a:34:4f:0c:58:66: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:C8:30:E9:24:C7:3F:F4:EB:AF:C9:2B:18:AD:8B:E2:B8:1B:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/811fca13-b40a-4fb1-bc7c-6c599637fd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.92.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:9e:63:10:13:d9:8c:c0:b0:83:50:e8:ec:82:7e:07:c8:9a: 70:d4:4b:74:83:35:65:50:29:80:e3:28:bd:34:09:f5:fb:c3: ce:66:2a:33:87:4c:17:53:11:fb:fb:d7:cc:06:eb:ab:38:ab: f2:87:0c:f2:cb:8f:11:b0:cb:63:09:48:74:6f:c1:68:41:37: 85:20:ef:5a:ac:2c:04:8d:fd:d0:3a:c4:bf:eb:82:bc:7a:c6: 7c:4e:66:23:99:02:4b:7d:75:e2:2a:35:13:d8:db:7a:cb:e4: 57:1b:9c:e9:73:ce:0d:46:2f:cd:0f:d1:90:01:8b:55:57:4a: fe:d4:c1:6e:37:1d:e3:86:60:58:a0:8c:ce:6e:d9:44:01:e5: 9f:f8:02:a1:11:6c:34:34:6e:6c:9d:e6:74:aa:7d:61:f3:b2: 82:ae:d7:0b:70:cb:7f:55:ad:c7:a3:1f:55:e0:bf:4c:9d:bc: 46:3a:b5:a1:2d:34:cf:90:60:b4:c1:7c:b3:ee:6b:60:b2:af: c9:32:53:3f:f0:c7:f7:b9:7c:5a:db:e9:94:4a:b5:cf:03:64: ee:23:c1:67:78:e3:a0:bc:f5:8b:f7:52:24:39:7d:2d:78:3a: 16:42:f4:5e:f5:b0:ec:82:17:94:22:0c:f8:73:4a:7f:29:92: f1:c5:63:be -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeafqmlqXkB2mFIBPJa6InqND/LkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMTMwWhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjRkNDQ0OTMwMGM5MTc2ZmRhNGZkMWNjNDc1OWNhYTg4 ZjYzZTEwMGI2NTRkNWJlZDM0ZmM3ZjY0ODliMzcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUj1mYB22Joo6ArM3aTs5h2JdSEoVRhafcOo2XdJlLJCaV M0S9hlRyJEevU8SROL0pK9N41bcDOk4bChZIQRyu8QVdUaFkdqKTbj3c6BSBBwK9 +OW7p+h7NXmGK9VQixuWjR2xKweUmDfDWaZMPUN9SgjREmMIJWz/T913INcWMsnA 01l3zz+jXhPavtq3lM4ANR0nY+ZBkWI4xTZi6U61dVOtEZnq1q6LPChHiqylt2Lc wX170CnN1hp1a1QmpNg1x/fJP1pvFS+wkDsHub9ioEr/8gqViR2mcvvaXKTnWwL7 U1LxZdwnHfy23vjPqW2WUd0plqF3d1o0TwxYZsq/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkDDIMOkkxz/066/JKxiti+K4G7cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxMWZjYTEzLWI0MGEtNGZiMS1iYzdjLTZjNTk5NjM3ZmQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQXDANBgkqhkiG9w0BAQsFAAOCAQEAlp5jEBPZjMCwg1Do7IJ+B8iacNRL dIM1ZVApgOMovTQJ9fvDzmYqM4dMF1MR+/vXzAbrqzir8ocM8suPEbDLYwlIdG/B aEE3hSDvWqwsBI390DrEv+uCvHrGfE5mI5kCS3114io1E9jbesvkVxuc6XPODUYv zQ/RkAGLVVdK/tTBbjcd44ZgWKCMzm7ZRAHln/gCoRFsNDRubJ3mdKp9YfOygq7X C3DLf1Wtx6MfVeC/TJ28Rjq1oS00z5BgtMF8s+5rYLKvyTJTP/DH97l8WtvplEq1 zwNk7iPBZ3jjoLz1i/dSJDl9LXg6FkL0XvWw7IIXlCIM+HNKfymS8cVjvg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:36:31 2025 by rpki-client