$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa File: 94760639-2712-4f50-9362-9ff9626e6a44.roa (raw, json) Hash identifier: 1YWEYmxDIV+SfFTPlwau0SLNh+BgKLj2R+T8oJtD1+4= Subject key identifier: EC:E5:AA:7A:53:70:8B:DE:68:AF:29:36:9E:CA:39:05:1A:4E:67:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F2D346194FAC87E94E3462CA0C642586D7725AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa Signing time: Mon 21 Apr 2025 17:00:27 +0000 ROA not before: Mon 21 Apr 2025 17:00:27 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.152.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2d:34:61:94:fa:c8:7e:94:e3:46:2c:a0:c6:42:58:6d:77:25:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:00:27 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=19cb3915b0eedd9f69d073dca02946e0fc34c92a298cacec4207d6788febd39a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0a:19:b3:25:43:a1:e8:5f:6d:04:16:31:b7: 17:2a:68:6b:33:2d:11:48:7c:6c:a2:fd:14:38:35: 99:1b:4b:e4:9f:b3:9a:c5:35:5a:39:3f:60:48:80: 95:be:08:8d:c9:22:6f:57:43:e5:dd:ce:fc:aa:c7: f2:1c:aa:32:c2:f3:4a:23:6c:55:e2:d8:04:26:f8: da:de:da:7b:d4:f7:2a:8d:e9:f6:96:cf:d3:c6:93: 70:41:e7:e3:88:da:28:b4:1f:0b:5d:d4:9d:6e:86: 0c:3d:c1:1b:cd:d4:10:f1:ee:fe:4b:ae:b3:ed:16: f5:81:e7:d7:f5:c2:ee:90:69:36:26:e7:c6:4e:c9: 0a:85:f1:a8:3d:74:83:97:c5:be:17:b4:4c:a2:8f: 8e:5f:b7:f7:f3:74:7e:65:4f:cb:40:a8:45:3d:66: 29:b5:b0:b3:49:79:97:b7:97:a8:94:d5:de:bd:89: 21:ca:b2:44:27:38:07:18:86:62:4f:f9:64:90:94: 28:ec:9e:be:ea:68:e7:7e:fd:45:cc:26:49:ff:21: e6:80:36:41:e8:e6:00:2b:3e:c5:1f:f6:df:93:a3: e9:d9:27:2b:3c:29:41:08:bc:49:70:4a:e3:6c:6d: 60:cb:ee:85:0b:d1:14:ec:e1:68:07:29:0f:45:62: 3a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:AA:7A:53:70:8B:DE:68:AF:29:36:9E:CA:39:05:1A:4E:67:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.152.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6b:76:04:04:3a:5c:08:b5:c6:a0:e1:6a:ed:40:cd:ef:92:3e: 67:50:09:a1:71:a1:31:af:5f:63:a1:27:f0:48:99:55:ab:71: 2f:85:56:a3:e1:7d:32:82:cd:ab:88:7e:8d:21:c8:82:7b:9a: 45:79:01:7d:9e:f6:f2:8f:fd:25:d3:54:6b:4a:c2:06:90:d4: 84:86:82:1c:14:d7:54:af:53:78:5e:a9:3d:dd:89:80:25:fc: b4:40:0c:16:d8:9d:16:f9:89:9d:6b:ae:cb:20:ec:3a:4a:da: c7:8c:dd:9f:1a:b6:16:4a:d1:d6:3a:07:92:df:49:f3:a4:02: 2a:2f:5e:d6:97:44:ed:ea:1f:92:25:ad:01:13:18:fe:15:7c: b4:69:16:2e:25:56:86:cc:ea:0b:a7:92:4f:31:4e:83:53:3e: 9e:08:be:e1:01:c8:af:56:c5:cb:a7:6b:e6:9c:09:50:b8:9b: f8:cc:c7:42:ba:e4:12:a2:b5:bc:54:17:d2:62:50:2f:28:c1: 72:2a:1b:51:ab:1a:2c:20:1e:70:29:fc:be:f7:84:2e:53:25: 9c:23:8b:b5:9f:03:2a:b3:4f:f6:05:10:5b:0c:0a:f0:cc:ca: 94:57:e7:a4:54:ff:f9:96:80:d1:46:50:e1:94:af:5b:c2:d5: 3d:e0:f4:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXy00YZT6yH6U40YsoMZCWG13Ja8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcwMDI3WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWNiMzkxNWIwZWVkZDlmNjlkMDczZGNhMDI5NDZlMGZj MzRjOTJhMjk4Y2FjZWM0MjA3ZDY3ODhmZWJkMzlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmChmzJUOh6F9tBBYxtxcqaGszLRFIfGyi/RQ4NZkbS+Sf s5rFNVo5P2BIgJW+CI3JIm9XQ+Xdzvyqx/IcqjLC80ojbFXi2AQm+Nre2nvU9yqN 6faWz9PGk3BB5+OI2ii0Hwtd1J1uhgw9wRvN1BDx7v5LrrPtFvWB59f1wu6QaTYm 58ZOyQqF8ag9dIOXxb4XtEyij45ft/fzdH5lT8tAqEU9Zim1sLNJeZe3l6iU1d69 iSHKskQnOAcYhmJP+WSQlCjsnr7qaOd+/UXMJkn/IeaANkHo5gArPsUf9t+To+nZ Jys8KUEIvElwSuNsbWDL7oUL0RTs4WgHKQ9FYjp1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7OWqelNwi95oryk2nso5BRpOZ3wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NzYwNjM5LTI3MTItNGY1MC05MzYyLTlmZjk2MjZlNmE0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrmIAwDQYJKoZIhvcNAQELBQADggEBAGt2BAQ6XAi1xqDhau1Aze+SPmdQ CaFxoTGvX2OhJ/BImVWrcS+FVqPhfTKCzauIfo0hyIJ7mkV5AX2e9vKP/SXTVGtK wgaQ1ISGghwU11SvU3heqT3diYAl/LRADBbYnRb5iZ1rrssg7DpK2seM3Z8athZK 0dY6B5LfSfOkAiovXtaXRO3qH5IlrQETGP4VfLRpFi4lVobM6gunkk8xToNTPp4I vuEByK9Wxcuna+acCVC4m/jMx0K65BKitbxUF9JiUC8owXIqG1GrGiwgHnAp/L73 hC5TJZwji7WfAyqzT/YFEFsMCvDMypRX56RU//mWgNFGUOGUr1vC1T3g9DI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:46 2025 by rpki-client