$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa File: 93717bbd-2280-4d38-95e7-0e0e917814f8.roa (raw, json) Hash identifier: c575sUQjHH5r/Dr+AEG3xXxcJ5pTShJD3AsM08fPKw4= Subject key identifier: FD:E9:1E:94:98:67:55:46:A8:04:77:82:47:7F:66:3B:11:93:C2:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CE8BBCEE7DA0D63F86E48D4A512A5BF3B8CF901 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa Signing time: Tue 08 Apr 2025 00:41:13 +0000 ROA not before: Tue 08 Apr 2025 00:41:13 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 68.66.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e8:bb:ce:e7:da:0d:63:f8:6e:48:d4:a5:12:a5:bf:3b:8c:f9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:41:13 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=21643709542a2577a23e1019aa41ce535899c6ca8ac44cea56674c9cde1daffd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:03:3c:3b:6b:3c:0f:4e:8e:eb:e4:fb:9b: 50:01:fc:ac:55:8e:3d:20:c0:1d:42:cf:eb:0d:2e: 97:48:68:4a:9e:30:f6:c4:02:1f:1f:e7:19:8e:f7: ea:5c:a1:da:6e:dc:d5:1b:39:fb:3c:c1:47:93:7c: f2:da:30:c5:3e:1e:41:38:38:06:77:2a:cf:0e:3b: 16:38:8e:2f:c1:bb:4c:14:d7:05:ab:32:98:cd:c0: 38:48:af:3e:66:e9:a1:8d:13:ed:59:80:6d:46:cd: 6c:94:ba:b7:13:00:0b:75:5a:9b:b8:09:41:84:5f: cf:76:71:7a:56:2d:2f:82:a4:20:f2:48:5f:c5:2a: b0:61:ad:fa:4a:fd:8c:ed:63:3a:de:6b:96:1f:40: a0:f7:8c:82:12:45:9a:af:52:f7:ac:4b:eb:5a:8e: 25:b7:40:52:64:b9:96:60:3c:9b:cd:b0:64:37:89: 22:ce:79:50:ff:99:25:fe:d8:87:31:54:94:4f:76: 4c:e5:81:31:23:ed:ff:4a:37:bc:e8:29:e9:90:fa: c2:26:68:e4:64:02:22:58:cd:65:b1:db:9b:8d:57: 6a:15:7d:39:87:e9:c6:32:7d:f8:43:51:99:88:08: 36:f7:65:e0:56:f9:ac:48:3b:14:4f:78:79:fa:cc: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E9:1E:94:98:67:55:46:A8:04:77:82:47:7F:66:3B:11:93:C2:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93717bbd-2280-4d38-95e7-0e0e917814f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:89:bc:59:a5:1f:53:cd:c0:6f:a8:61:de:85:f4:88:88:92: 53:36:5b:d8:d7:74:da:f0:be:21:ae:c9:8e:bc:1c:a2:a1:20: da:8c:40:e1:96:30:da:9a:79:0f:82:3b:24:2d:f8:3b:b5:2c: 0b:98:d8:9e:ed:c0:3b:fd:90:58:8b:35:76:4f:c5:83:27:79: ad:4e:f8:41:16:cd:e7:87:b7:93:79:b0:3c:ff:c5:ae:d3:f7: b1:d8:b7:e8:a7:ae:dd:2f:7c:01:44:01:19:5c:8b:b0:07:ae: 58:b7:4d:00:71:03:4f:49:90:2d:61:78:26:c2:31:15:5b:96: ed:f9:8e:dc:f8:99:e1:2d:bf:e9:8c:f3:d1:9f:a9:7b:d3:8c: a9:78:91:25:5e:ee:b1:1b:a4:ad:24:a7:e5:db:a4:be:3c:6a: b6:e4:11:00:02:7f:d5:91:11:af:ff:35:9e:c2:51:c1:a4:6f: 58:d3:8e:9f:51:bd:29:36:b2:2e:4d:c7:79:33:37:f6:51:c7: a4:e6:f9:05:08:bd:cc:c2:08:ad:66:65:3b:1d:c7:23:f5:c2: d1:7c:f8:15:72:b1:d1:10:a0:3c:2a:04:76:f9:8d:9e:a3:d8: b7:01:9a:6d:54:bc:36:2d:66:c0:c6:b1:a8:ca:6f:af:71:c1: bb:3d:b0:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXOi7zufaDWP4bkjUpRKlvzuM+QEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDA0MTEzWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTY0MzcwOTU0MmEyNTc3YTIzZTEwMTlhYTQxY2U1MzU4 OTljNmNhOGFjNDRjZWE1NjY3NGM5Y2RlMWRhZmZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdhwM8O2s8D06O6+T7m1AB/KxVjj0gwB1Cz+sNLpdIaEqe MPbEAh8f5xmO9+pcodpu3NUbOfs8wUeTfPLaMMU+HkE4OAZ3Ks8OOxY4ji/Bu0wU 1wWrMpjNwDhIrz5m6aGNE+1ZgG1GzWyUurcTAAt1Wpu4CUGEX892cXpWLS+CpCDy SF/FKrBhrfpK/YztYzrea5YfQKD3jIISRZqvUvesS+tajiW3QFJkuZZgPJvNsGQ3 iSLOeVD/mSX+2IcxVJRPdkzlgTEj7f9KN7zoKemQ+sImaORkAiJYzWWx25uNV2oV fTmH6cYyffhDUZmICDb3ZeBW+axIOxRPeHn6zLSjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/ekelJhnVUaoBHeCR39mOxGTwkkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNzE3YmJkLTIyODAtNGQzOC05NWU3LTBlMGU5MTc4MTRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAREQnAwDQYJKoZIhvcNAQELBQADggEBAJqJvFmlH1PNwG+oYd6F9IiIklM2 W9jXdNrwviGuyY68HKKhINqMQOGWMNqaeQ+COyQt+Du1LAuY2J7twDv9kFiLNXZP xYMnea1O+EEWzeeHt5N5sDz/xa7T97HYt+inrt0vfAFEARlci7AHrli3TQBxA09J kC1heCbCMRVblu35jtz4meEtv+mM89GfqXvTjKl4kSVe7rEbpK0kp+XbpL48arbk EQACf9WREa//NZ7CUcGkb1jTjp9RvSk2si5Nx3kzN/ZRx6Tm+QUIvczCCK1mZTsd xyP1wtF8+BVysdEQoDwqBHb5jZ6j2LcBmm1UvDYtZsDGsajKb69xwbs9sKY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:38 2025 by rpki-client