$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa File: 8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa (raw, json) Hash identifier: n/jq+LQ9xwA2/niXxIHsgU1f+pNIevpIoitGvO9qR04= Subject key identifier: C1:F0:8F:9B:D8:ED:6A:87:DA:48:50:64:C6:80:E0:0C:0A:30:3C:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A59B60B6C2EFBD2AD919FBC7AF882961074284D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa Signing time: Fri 25 Apr 2025 18:37:15 +0000 ROA not before: Fri 25 Apr 2025 18:37:15 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.60.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:59:b6:0b:6c:2e:fb:d2:ad:91:9f:bc:7a:f8:82:96:10:74:28:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 18:37:15 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=df6487c25c2723056a54c1129a9b8dcba0444c12df36ae8cc8d843a3a2843824, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:54:3e:7c:27:a8:61:07:fd:45:6c:a8:67: 32:dd:06:26:ba:87:94:3b:28:be:dd:f0:3f:3f:d8: 55:6b:10:f7:ef:d0:dc:c3:2e:32:68:e1:8c:2d:d2: 52:7f:ab:e5:8d:9b:ce:4f:81:71:ec:16:4f:9a:32: 6d:07:eb:f3:23:2b:f9:df:c5:74:46:75:fc:c5:b2: 76:e4:e3:45:19:95:aa:47:dd:71:d9:1b:df:b5:ea: 2d:6f:64:8a:30:42:21:f0:90:6a:7d:29:1b:51:a4: b7:d1:e9:07:89:d2:d7:54:a4:b2:08:bd:8a:af:47: 73:25:e9:e2:66:e1:91:60:33:a5:58:0d:0a:52:2b: 91:dd:9f:0a:f8:90:be:13:fa:79:72:b9:7a:56:18: 17:01:50:61:46:39:e1:2d:16:75:2a:24:60:1a:33: df:89:a9:0f:57:f7:57:4c:d6:f7:ce:f8:5c:a5:58: b2:87:98:61:6d:4b:78:df:90:21:a2:d0:89:93:d2: 72:65:8c:5d:24:77:af:16:07:fb:56:d5:5e:89:9d: 37:a6:ce:19:f4:95:3f:9f:10:3a:34:5b:34:00:13: ec:0c:8e:b1:c1:06:1f:d4:b6:50:8e:6a:a9:65:f2: 05:70:b5:7d:f4:ef:58:86:42:ca:a6:14:2e:07:84: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:8F:9B:D8:ED:6A:87:DA:48:50:64:C6:80:E0:0C:0A:30:3C:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:4c:fe:a8:2f:a8:be:41:35:57:d0:f9:65:c2:f6:c5:63:00: 1a:2a:dc:7c:96:66:39:11:cd:35:ea:83:e8:b0:b0:fc:b5:d2: a5:0a:01:e4:db:a1:b4:bc:20:3b:14:9a:19:04:17:6c:56:71: 7d:dc:85:0f:b0:13:b6:24:b3:c5:47:fa:f5:44:d5:61:43:64: 00:f6:9f:02:ca:a0:be:ae:9b:04:62:3f:dd:7d:10:09:6c:d7: 17:51:bf:cd:c7:e8:98:71:78:aa:0c:41:fd:58:0c:6d:e7:e0: 1d:f6:86:78:a9:21:5d:aa:37:f7:09:3c:68:f2:c9:16:e1:0c: 7b:8c:33:f2:9c:2d:6e:36:23:3c:2d:45:62:6c:42:33:c7:35: d4:00:9f:6c:93:db:2c:fb:02:e8:ad:bd:70:c4:71:df:34:42: fc:bf:a7:55:71:e6:0e:83:8c:b7:b0:24:26:78:8b:c9:7e:7f: 00:93:c3:83:de:ad:32:02:6f:43:f9:63:41:55:94:aa:ed:29: 60:1e:2b:f7:df:f0:58:fd:a9:f0:20:37:4a:0a:f9:78:99:cb: 5a:5d:e2:65:69:08:43:41:60:f6:0c:0d:89:cc:28:8b:d2:9a: 1c:21:a5:b1:16:f8:2c:be:a0:a3:fd:af:04:a5:86:62:f4:79: de:1a:69:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSlm2C2wu+9KtkZ+8eviClhB0KE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTgzNzE1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjY0ODdjMjVjMjcyMzA1NmE1NGMxMTI5YTliOGRjYmEw NDQ0YzEyZGYzNmFlOGNjOGQ4NDNhM2EyODQzODI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQqFQ+fCeoYQf9RWyoZzLdBia6h5Q7KL7d8D8/2FVrEPfv 0NzDLjJo4Ywt0lJ/q+WNm85PgXHsFk+aMm0H6/MjK/nfxXRGdfzFsnbk40UZlapH 3XHZG9+16i1vZIowQiHwkGp9KRtRpLfR6QeJ0tdUpLIIvYqvR3Ml6eJm4ZFgM6VY DQpSK5Hdnwr4kL4T+nlyuXpWGBcBUGFGOeEtFnUqJGAaM9+JqQ9X91dM1vfO+Fyl WLKHmGFtS3jfkCGi0ImT0nJljF0kd68WB/tW1V6JnTemzhn0lT+fEDo0WzQAE+wM jrHBBh/UtlCOaqll8gVwtX3071iGQsqmFC4HhIftAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwfCPm9jtaofaSFBkxoDgDAowPIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkNmE4MDEyLTA4ZGQtNDZkMi1hNmVlLTg4OTExYzg3ZjFhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4PDANBgkqhkiG9w0BAQsFAAOCAQEAQ0z+qC+ovkE1V9D5ZcL2xWMAGirc fJZmORHNNeqD6LCw/LXSpQoB5NuhtLwgOxSaGQQXbFZxfdyFD7ATtiSzxUf69UTV YUNkAPafAsqgvq6bBGI/3X0QCWzXF1G/zcfomHF4qgxB/VgMbefgHfaGeKkhXao3 9wk8aPLJFuEMe4wz8pwtbjYjPC1FYmxCM8c11ACfbJPbLPsC6K29cMRx3zRC/L+n VXHmDoOMt7AkJniLyX5/AJPDg96tMgJvQ/ljQVWUqu0pYB4r99/wWP2p8CA3Sgr5 eJnLWl3iZWkIQ0Fg9gwNicwoi9KaHCGlsRb4LL6go/2vBKWGYvR53hppYA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:00 2025 by rpki-client