$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e22508-19cf-4432-8b3a-79d513cb62d8.roa File: 95e22508-19cf-4432-8b3a-79d513cb62d8.roa (raw, json) Hash identifier: 8kw5d/AXGIpedXtnk/mzQNEcIjos8dCaGw4rzKfR3HQ= Subject key identifier: ED:C2:8D:AB:7E:F3:93:AD:C2:60:23:A4:66:FC:5B:32:D3:F5:E5:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3767DB1499F59095D17A456EE559E4998D180F76 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e22508-19cf-4432-8b3a-79d513cb62d8.roa Signing time: Tue 08 Apr 2025 00:31:46 +0000 ROA not before: Tue 08 Apr 2025 00:31:46 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.254.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:67:db:14:99:f5:90:95:d1:7a:45:6e:e5:59:e4:99:8d:18:0f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:31:46 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=744f84e96f54b84de4d2960064d1910f7ef40b2a319650217d7fa29c3f0d983d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:6e:07:d7:6a:48:39:5a:3c:be:1c:30:3d: e1:c6:b2:c7:5d:b2:f6:38:37:bf:83:ae:8c:a6:f6: 0b:31:2b:1a:c3:27:27:17:77:6b:d8:5f:bc:78:e0: dc:66:c6:ae:19:b8:9f:fb:9e:fe:bd:a7:38:de:50: 55:95:3a:3b:5d:52:78:91:e1:95:09:d9:7d:2c:95: dc:30:2d:70:21:9b:e3:e4:33:18:8d:17:ad:1d:24: 77:48:9f:d5:cd:46:40:76:90:ec:e2:69:b9:c3:43: e9:f4:78:5a:14:f3:2a:dd:5f:56:9e:9a:5a:14:c8: c1:85:44:33:fa:20:d3:6e:c2:d0:f0:8f:2c:c8:b6: 4d:95:46:82:71:8a:db:2f:29:a4:e2:1f:1e:aa:b9: d1:33:46:34:3b:9a:cb:f5:e4:4a:db:21:57:2b:54: 9b:6c:fa:33:18:6a:ee:67:28:1d:29:7f:14:ce:c6: b8:b7:d7:79:19:65:11:33:82:4a:f2:37:3d:cb:d3: 83:a3:ab:2c:74:5a:49:99:cb:4c:6d:cf:e2:52:a5: fe:7f:3f:f5:d3:6d:83:9c:bf:ef:96:ec:a9:71:7f: f9:09:3f:be:d6:4d:9e:05:04:ce:5c:68:d0:33:77: 13:e1:f9:d1:05:d1:cf:47:9f:da:95:12:40:65:cf: 20:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C2:8D:AB:7E:F3:93:AD:C2:60:23:A4:66:FC:5B:32:D3:F5:E5:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e22508-19cf-4432-8b3a-79d513cb62d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.254.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:96:a8:58:a2:d7:aa:36:10:3e:e0:18:9e:ca:7b:10:cd:56: 69:54:a5:59:40:9e:50:d5:ad:12:f6:b5:ee:a8:43:76:c5:f4: ea:a4:6c:5a:f4:63:0e:8d:f8:a5:66:6d:2b:8e:a5:54:de:65: cb:53:66:2a:25:58:e7:ab:ee:a6:68:2d:c8:74:28:f9:03:25: cc:db:83:c6:ff:3b:a4:44:24:94:da:5b:e9:2b:0b:1b:57:97: 57:85:72:b7:b9:6d:0b:e9:66:45:19:dd:6f:64:d6:97:7a:ff: 62:90:3d:27:52:36:2b:b5:9b:c9:27:60:9a:f8:71:2e:f9:99: 10:e1:9a:ff:fc:85:47:08:de:6b:99:13:28:c1:b7:9a:b6:a8: b8:64:5e:6d:1e:e0:e6:a8:07:88:1f:6a:f3:5e:3d:25:d1:8c: 7b:09:92:70:1f:78:1b:67:d5:25:dc:05:2b:dd:80:de:5a:55: 94:0f:2f:8a:58:03:7f:00:62:da:9e:18:3a:78:90:56:44:94: 8f:7e:f5:c6:ed:85:88:35:af:e2:b4:41:6d:33:8a:ff:d5:ad: e4:bc:27:97:59:30:0f:ce:b4:21:a1:f0:f8:c0:8e:07:67:f8: 6d:c0:a0:29:88:c5:d2:3b:25:25:0a:2a:8e:f7:a1:e5:12:10: fd:6d:d7:b4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUN2fbFJn1kJXRekVu5VnkmY0YD3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAzMTQ2WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDRmODRlOTZmNTRiODRkZTRkMjk2MDA2NGQxOTEwZjdl ZjQwYjJhMzE5NjUwMjE3ZDdmYTI5YzNmMGQ5ODNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFam4H12pIOVo8vhwwPeHGssddsvY4N7+Droym9gsxKxrD JycXd2vYX7x44Nxmxq4ZuJ/7nv69pzjeUFWVOjtdUniR4ZUJ2X0sldwwLXAhm+Pk MxiNF60dJHdIn9XNRkB2kOziabnDQ+n0eFoU8yrdX1aemloUyMGFRDP6INNuwtDw jyzItk2VRoJxitsvKaTiHx6qudEzRjQ7msv15ErbIVcrVJts+jMYau5nKB0pfxTO xri313kZZREzgkryNz3L04Ojqyx0WkmZy0xtz+JSpf5/P/XTbYOcv++W7Klxf/kJ P77WTZ4FBM5caNAzdxPh+dEF0c9Hn9qVEkBlzyCtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7cKNq37zk63CYCOkZvxbMtP15T0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1ZTIyNTA4LTE5Y2YtNDQzMi04YjNhLTc5ZDUxM2NiNjJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4/jANBgkqhkiG9w0BAQsFAAOCAQEAQJaoWKLXqjYQPuAYnsp7EM1WaVSl WUCeUNWtEva17qhDdsX06qRsWvRjDo34pWZtK46lVN5ly1NmKiVY56vupmgtyHQo +QMlzNuDxv87pEQklNpb6SsLG1eXV4Vyt7ltC+lmRRndb2TWl3r/YpA9J1I2K7Wb ySdgmvhxLvmZEOGa//yFRwjea5kTKMG3mraouGRebR7g5qgHiB9q8149JdGMewmS cB94G2fVJdwFK92A3lpVlA8vilgDfwBi2p4YOniQVkSUj371xu2FiDWv4rRBbTOK /9Wt5Lwnl1kwD860IaHw+MCOB2f4bcCgKYjF0jslJQoqjveh5RIQ/W3XtA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:40 2025 by rpki-client