$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa File: 91ea0496-867b-4435-a47a-de477b4827c7.roa (raw, json) Hash identifier: iOQqJxAgZvqiaB1PSQnQzOsyAcdmsRZ/kwVNMWLb69g= Subject key identifier: A7:C2:E9:EC:81:B5:41:E7:BB:53:F9:3F:40:74:F8:9D:2A:6C:10:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 632FE96F6A852A8C081C085A44D59CD4575851CE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa Signing time: Sat 12 Apr 2025 00:11:43 +0000 ROA not before: Sat 12 Apr 2025 00:11:43 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.233.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2f:e9:6f:6a:85:2a:8c:08:1c:08:5a:44:d5:9c:d4:57:58:51:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:11:43 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=df4e20975f30de323d0d9803ca16c36f581a892cd87b46adffab8e6ed85e286b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3a:53:09:b5:98:4f:cc:21:df:5a:4c:cd:81: 13:1b:e8:fe:65:6f:e8:ac:b7:2e:f5:37:8b:5c:33: fe:5f:ca:22:0d:48:56:5c:96:9a:8a:e1:c8:f1:fd: f0:e5:95:2d:b9:fa:9e:bc:82:c7:8a:aa:8d:ae:88: ab:08:1b:b7:2e:1d:3f:46:e2:01:12:7c:62:bc:21: 91:54:f5:c0:f0:39:c8:e4:d5:b5:01:3d:d8:f3:ab: d3:66:56:ae:4f:58:d1:36:cd:da:5e:3a:aa:cf:7b: 1d:d9:b9:55:cf:0e:1c:e4:d4:0d:85:13:79:25:ce: 0b:65:59:57:93:cf:6a:bc:57:6e:75:59:3f:31:3f: ff:79:d8:05:0d:6d:03:cf:23:32:ba:27:f7:3d:33: e0:3c:7c:c7:54:77:47:48:e6:41:8d:1b:92:0f:e0: 71:cb:1e:45:3e:ab:85:d3:83:b9:55:66:3a:b3:3f: 61:19:c0:cf:91:f7:a2:e4:59:1d:70:cc:39:54:a6: 84:30:f5:3f:5a:14:29:0b:34:5b:c8:fa:ea:76:29: ce:2c:7a:fc:37:02:95:a4:b9:11:2b:21:de:b0:47: 55:a6:d6:4d:84:d3:f0:e2:00:12:72:47:88:90:ed: 17:92:87:04:9e:ce:67:e2:bf:d8:95:51:3c:10:e7: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C2:E9:EC:81:B5:41:E7:BB:53:F9:3F:40:74:F8:9D:2A:6C:10:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.233.118.0/24 Signature Algorithm: sha256WithRSAEncryption 02:62:d3:89:1d:60:a0:cd:31:fd:a4:b8:27:24:ed:3c:f8:e8: 58:5d:61:0a:59:48:48:6f:c8:7e:0a:9a:49:57:48:56:2b:6f: f8:55:1c:63:b5:0b:f3:5a:8d:fc:3f:11:ef:26:ac:9b:9c:f5: a0:8e:6d:f3:81:f4:63:72:a6:a4:6b:00:79:9d:bd:80:b7:a5: 30:40:89:2c:f7:c1:48:c2:c4:71:50:18:b6:00:e3:ad:49:c8: ab:3f:49:48:bd:04:d1:43:44:e7:9f:94:7c:c8:13:1f:83:8f: b5:20:39:36:9a:d3:c6:63:84:bb:ca:2c:3e:e7:c5:45:02:ee: ca:81:e2:f3:97:f1:bd:60:e8:86:fd:54:d8:b9:0d:50:d8:df: 4e:e5:92:b5:58:c2:82:c1:85:72:82:b3:f0:50:15:59:35:76: ec:c7:30:51:7a:94:00:dc:e3:6e:bf:36:bc:3c:f1:1e:84:9e: c5:42:94:4b:d4:f9:7a:38:97:1e:e5:39:86:31:80:eb:23:ee: c6:79:e9:30:35:f3:ad:21:c2:c2:e6:59:0a:99:24:ac:94:c1: 6c:05:de:98:b7:8b:96:23:19:56:d2:2b:08:66:60:e9:1f:b1: e9:ad:52:2f:ae:f6:ad:b6:07:79:4c:3f:1e:e4:a5:e3:e3:8d: 2e:73:79:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYy/pb2qFKowIHAhaRNWc1FdYUc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAxMTQzWhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjRlMjA5NzVmMzBkZTMyM2QwZDk4MDNjYTE2YzM2ZjU4 MWE4OTJjZDg3YjQ2YWRmZmFiOGU2ZWQ4NWUyODZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2OlMJtZhPzCHfWkzNgRMb6P5lb+isty71N4tcM/5fyiIN SFZclpqK4cjx/fDllS25+p68gseKqo2uiKsIG7cuHT9G4gESfGK8IZFU9cDwOcjk 1bUBPdjzq9NmVq5PWNE2zdpeOqrPex3ZuVXPDhzk1A2FE3klzgtlWVeTz2q8V251 WT8xP/952AUNbQPPIzK6J/c9M+A8fMdUd0dI5kGNG5IP4HHLHkU+q4XTg7lVZjqz P2EZwM+R96LkWR1wzDlUpoQw9T9aFCkLNFvI+up2Kc4sevw3ApWkuRErId6wR1Wm 1k2E0/DiABJyR4iQ7ReShwSezmfiv9iVUTwQ5zJNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp8Lp7IG1Qee7U/k/QHT4nSpsEFswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxZWEwNDk2LTg2N2ItNDQzNS1hNDdhLWRlNDc3YjQ4MjdjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs6XYwDQYJKoZIhvcNAQELBQADggEBAAJi04kdYKDNMf2kuCck7Tz46Fhd YQpZSEhvyH4KmklXSFYrb/hVHGO1C/Najfw/Ee8mrJuc9aCObfOB9GNypqRrAHmd vYC3pTBAiSz3wUjCxHFQGLYA461JyKs/SUi9BNFDROeflHzIEx+Dj7UgOTaa08Zj hLvKLD7nxUUC7sqB4vOX8b1g6Ib9VNi5DVDY307lkrVYwoLBhXKCs/BQFVk1duzH MFF6lADc426/Nrw88R6EnsVClEvU+Xo4lx7lOYYxgOsj7sZ56TA1860hwsLmWQqZ JKyUwWwF3pi3i5YjGVbSKwhmYOkfsemtUi+u9q22B3lMPx7kpePjjS5zeeg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:49 2025 by rpki-client