$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bc29e57-60be-4639-8427-3dbeab2c826b.roa File: 8bc29e57-60be-4639-8427-3dbeab2c826b.roa (raw, json) Hash identifier: F3uJQ9zdFJYdHZ4euHMZssr1/i5N9fp6y9NkhtaBjZ8= Subject key identifier: 5B:B9:17:E7:22:21:A8:7E:93:E2:A3:10:A5:87:6B:EB:FC:80:A0:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 323CA32F6E5906FC8537B9A7FBA439FC41D94B74 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bc29e57-60be-4639-8427-3dbeab2c826b.roa Signing time: Sat 26 Apr 2025 00:01:48 +0000 ROA not before: Sat 26 Apr 2025 00:01:48 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3c:a3:2f:6e:59:06:fc:85:37:b9:a7:fb:a4:39:fc:41:d9:4b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:01:48 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=9e92b205e1b1b797e8fc3abcbed3801600607288c4d5036b99cecb8019a2cdf3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:56:c6:e7:c2:57:d9:ac:f9:85:39:63:2f: c7:df:19:5a:82:88:be:ae:6e:ae:9e:8d:73:9c:26: 2e:a9:9e:de:b1:c3:b6:91:8b:17:9e:e6:fd:50:ca: 76:4f:62:b4:97:5c:90:55:dc:1b:ea:31:0e:a4:14: 98:1f:82:7b:73:e2:36:5b:92:ec:41:70:c3:58:24: a3:5f:88:e1:21:14:4c:f0:3a:c6:89:ad:a6:e6:dc: fc:77:87:e8:6a:4b:90:30:98:00:7c:85:65:d0:87: db:76:98:24:fe:cd:6d:67:77:bf:72:08:0c:3f:28: 65:57:c8:07:91:0b:ea:c4:00:fa:cd:93:a4:b1:fe: 96:56:65:16:d6:21:f8:d9:c3:17:14:d9:df:81:da: e6:40:90:fd:5e:32:02:9d:4f:39:48:7d:d9:d7:b7: 2b:01:3e:2e:27:c9:b8:6d:92:a5:51:23:65:37:ba: bb:87:78:e8:c7:9d:7c:d9:0a:11:ea:a0:8d:f7:b0: d3:c2:96:90:6a:13:0e:34:38:9e:e3:4e:40:3c:36: 19:35:f4:bb:5f:4d:13:58:b8:59:c5:7b:fb:49:80: 7e:9f:36:ea:c1:4c:f5:75:2d:64:a2:3d:ab:26:40: 20:d9:c9:a0:05:2e:62:86:55:c3:f9:ed:16:90:4d: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B9:17:E7:22:21:A8:7E:93:E2:A3:10:A5:87:6B:EB:FC:80:A0:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bc29e57-60be-4639-8427-3dbeab2c826b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:56:5a:61:71:3b:29:12:bf:b8:f9:d5:0c:2f:96:3c:12:07: 71:49:49:47:07:bc:fb:e4:24:8f:38:99:c9:15:a9:5c:0d:8b: 7f:cc:c2:30:d8:0b:15:c5:00:0b:85:07:b6:9b:10:2f:1b:42: 85:24:67:42:28:18:a7:49:4c:d1:ad:0d:26:37:96:a2:ec:88: 0c:12:e4:de:a5:38:19:80:28:4e:45:3a:77:6d:2d:cd:16:86: f4:12:c1:55:5e:cc:43:ea:ff:90:a5:96:2c:88:70:2b:13:18: a0:1b:17:40:1c:8d:6a:8d:46:6b:1a:1b:a2:29:a5:99:c6:61: b8:b0:74:43:c1:00:61:6a:c4:fb:49:96:0b:a9:ad:8a:e5:cc: c5:54:1f:dd:a6:f3:6e:d0:d6:76:ca:0c:f4:6e:0f:63:42:e2: db:c8:44:31:8f:d0:55:de:ac:59:e5:63:a2:70:5f:68:d0:28: 70:6a:9c:f7:78:f1:3f:9c:c9:14:8e:7e:a7:8a:dc:e0:44:04: 3f:cc:d9:96:a6:99:6a:71:0d:50:0b:1b:3d:44:ad:1e:a7:5b: d8:6f:c0:c8:e2:ea:56:3b:64:26:8e:69:cc:4f:9e:d8:94:9d: 80:05:85:ec:32:d6:72:d5:8d:ae:5c:16:6f:66:40:eb:3e:36: ac:0f:22:59 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMjyjL25ZBvyFN7mn+6Q5/EHZS3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMTQ4WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTkyYjIwNWUxYjFiNzk3ZThmYzNhYmNiZWQzODAxNjAw NjA3Mjg4YzRkNTAzNmI5OWNlY2I4MDE5YTJjZGYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6WFbG58JX2az5hTljL8ffGVqCiL6ubq6ejXOcJi6pnt6x w7aRixee5v1QynZPYrSXXJBV3BvqMQ6kFJgfgntz4jZbkuxBcMNYJKNfiOEhFEzw OsaJrabm3Px3h+hqS5AwmAB8hWXQh9t2mCT+zW1nd79yCAw/KGVXyAeRC+rEAPrN k6Sx/pZWZRbWIfjZwxcU2d+B2uZAkP1eMgKdTzlIfdnXtysBPi4nybhtkqVRI2U3 uruHeOjHnXzZChHqoI33sNPClpBqEw40OJ7jTkA8Nhk19LtfTRNYuFnFe/tJgH6f NurBTPV1LWSiPasmQCDZyaAFLmKGVcP57RaQTZKHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUW7kX5yIhqH6T4qMQpYdr6/yAoDIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiYzI5ZTU3LTYwYmUtNDYzOS04NDI3LTNkYmVhYjJjODI2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQMTANBgkqhkiG9w0BAQsFAAOCAQEAT1ZaYXE7KRK/uPnVDC+WPBIHcUlJ Rwe8++QkjziZyRWpXA2Lf8zCMNgLFcUAC4UHtpsQLxtChSRnQigYp0lM0a0NJjeW ouyIDBLk3qU4GYAoTkU6d20tzRaG9BLBVV7MQ+r/kKWWLIhwKxMYoBsXQByNao1G axoboimlmcZhuLB0Q8EAYWrE+0mWC6mtiuXMxVQf3abzbtDWdsoM9G4PY0Li28hE MY/QVd6sWeVjonBfaNAocGqc93jxP5zJFI5+p4rc4EQEP8zZlqaZanENUAsbPUSt Hqdb2G/AyOLqVjtkJo5pzE+e2JSdgAWF7DLWctWNrlwWb2ZA6z42rA8iWQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:25 2025 by rpki-client