$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa File: 957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa (raw, json) Hash identifier: CleJkB0qcQy8NhvrzkN8L2ilWfgzZH0C+xebbgsDyjQ= Subject key identifier: AC:AB:33:D6:21:B8:20:B9:93:4C:D8:7C:90:0B:49:72:2B:0F:30:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C4B79712F1C617696A75C974DF9774C90B259FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa Signing time: Tue 08 Apr 2025 00:10:57 +0000 ROA not before: Tue 08 Apr 2025 00:10:57 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.164.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4b:79:71:2f:1c:61:76:96:a7:5c:97:4d:f9:77:4c:90:b2:59:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:10:57 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=5f08e7dc501e15a18a7d039e8029d1f75c5df4afdf6d0264c3df3e9e9e9fdcaf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:32:5e:d8:c5:ed:74:9e:5c:53:c8:b1:b9: bd:68:9b:70:dc:43:13:12:3b:5a:79:0a:20:61:b2: 50:89:ec:1d:3f:2a:7c:fc:48:e6:eb:e9:ef:1f:3a: 68:53:cd:4a:86:b1:77:75:f9:f1:39:11:d2:31:47: 3a:f5:44:01:f4:bd:a8:88:96:48:c5:ad:9d:56:ae: f9:b1:2c:2a:c1:7c:3f:15:e2:da:91:f9:0f:25:c0: 86:3e:a9:0e:74:5a:22:ab:fe:1d:b3:63:ff:d1:f1: 87:c0:5d:52:57:38:97:57:57:04:85:d1:15:a7:b1: a6:dd:6b:ec:d6:97:cd:cc:1a:42:cc:9f:d8:07:97: c4:65:d5:fb:8a:4a:ed:d9:1a:1c:e6:45:23:41:72: d9:73:b4:11:c2:c2:61:23:37:82:68:06:d6:f9:04: 05:36:d8:90:91:ea:a4:b5:71:c9:2d:31:0d:84:99: 80:e0:fa:f7:ca:2d:2d:84:c8:09:80:06:81:82:4d: af:45:e8:2f:e9:60:7e:ec:11:b8:19:d8:94:ec:97: ac:ec:b9:8f:19:10:fd:0b:3a:eb:17:a2:d4:f0:06: aa:3e:4b:f0:1d:fa:81:7e:3e:4e:f4:9c:22:e0:d7: bd:c4:9f:83:7e:08:9e:fa:65:51:28:58:7b:47:2c: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AB:33:D6:21:B8:20:B9:93:4C:D8:7C:90:0B:49:72:2B:0F:30:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/957ea7c6-3090-4382-9ef5-24bfb9390cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.164.64.0/18 Signature Algorithm: sha256WithRSAEncryption 01:93:c6:6a:8f:d3:62:4d:67:bb:7e:4a:bd:9e:50:a7:b1:81: e7:29:68:b4:0a:22:71:3d:c9:e0:5a:1c:c7:bb:23:fa:a6:bc: 4a:cd:ce:37:e3:a8:b4:72:91:51:39:23:a7:54:5b:d8:33:fd: 88:84:87:e2:72:ad:5f:9f:82:6a:3b:3c:19:e5:d5:90:a1:ce: 80:5d:2f:44:1f:aa:8e:a4:0a:62:d1:b8:35:d4:f4:0f:73:44: d1:a5:b7:ec:11:5d:55:c7:33:2d:f0:d4:96:ed:0d:2e:69:ce: 23:20:4d:4d:a3:72:c3:96:01:5d:27:ad:00:85:77:e8:a6:41: fc:c9:00:e4:40:c2:0b:88:a0:7d:59:29:26:06:3d:4e:2a:30: 8e:3a:62:12:de:45:8c:e3:31:00:39:96:a6:58:35:b8:25:40: 47:09:96:08:74:02:c3:c3:05:b9:74:7c:cc:bd:fa:c0:37:40: ce:a2:99:2d:8c:91:b4:45:ab:46:fc:ed:53:3c:25:65:3d:29: 17:b5:04:59:48:ef:82:1b:8c:38:2b:5e:de:d5:68:69:94:5f: f4:af:a0:7e:39:47:86:ae:4b:52:9d:3e:80:6c:6c:63:bc:76: 31:37:af:fa:a7:bb:45:9a:b8:9e:94:6d:e7:9c:d7:fa:87:e3: ce:00:61:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTEt5cS8cYXaWp1yXTfl3TJCyWf0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAxMDU3WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjA4ZTdkYzUwMWUxNWExOGE3ZDAzOWU4MDI5ZDFmNzVj NWRmNGFmZGY2ZDAyNjRjM2RmM2U5ZTllOWZkY2FmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6/TJe2MXtdJ5cU8ixub1om3DcQxMSO1p5CiBhslCJ7B0/ Knz8SObr6e8fOmhTzUqGsXd1+fE5EdIxRzr1RAH0vaiIlkjFrZ1WrvmxLCrBfD8V 4tqR+Q8lwIY+qQ50WiKr/h2zY//R8YfAXVJXOJdXVwSF0RWnsabda+zWl83MGkLM n9gHl8Rl1fuKSu3ZGhzmRSNBctlztBHCwmEjN4JoBtb5BAU22JCR6qS1ccktMQ2E mYDg+vfKLS2EyAmABoGCTa9F6C/pYH7sEbgZ2JTsl6zsuY8ZEP0LOusXotTwBqo+ S/Ad+oF+Pk70nCLg173En4N+CJ76ZVEoWHtHLO21AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrKsz1iG4ILmTTNh8kAtJcisPMAIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1N2VhN2M2LTMwOTAtNDM4Mi05ZWY1LTI0YmZiOTM5MGNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRpEAwDQYJKoZIhvcNAQELBQADggEBAAGTxmqP02JNZ7t+Sr2eUKexgecp aLQKInE9yeBaHMe7I/qmvErNzjfjqLRykVE5I6dUW9gz/YiEh+JyrV+fgmo7PBnl 1ZChzoBdL0Qfqo6kCmLRuDXU9A9zRNGlt+wRXVXHMy3w1JbtDS5pziMgTU2jcsOW AV0nrQCFd+imQfzJAORAwguIoH1ZKSYGPU4qMI46YhLeRYzjMQA5lqZYNbglQEcJ lgh0AsPDBbl0fMy9+sA3QM6imS2MkbRFq0b87VM8JWU9KRe1BFlI74IbjDgrXt7V aGmUX/SvoH45R4auS1KdPoBsbGO8djE3r/qnu0WauJ6Ubeec1/qH484AYWM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:07 2025 by rpki-client