$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c3626ea-beb2-4c48-8e8a-2f134e3eb361.roa File: 9c3626ea-beb2-4c48-8e8a-2f134e3eb361.roa (raw, json) Hash identifier: hx3tRbwWC1aeHtcIta3cLL0bH77+aI2ZNUxhHKREEnM= Subject key identifier: 68:13:82:84:26:79:13:73:48:30:6E:F4:DA:16:54:ED:50:2E:D5:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13BBD1DEB3073FA97E956FB60D913EC5D31E6AFF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c3626ea-beb2-4c48-8e8a-2f134e3eb361.roa Signing time: Sat 26 Apr 2025 00:01:14 +0000 ROA not before: Sat 26 Apr 2025 00:01:14 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bb:d1:de:b3:07:3f:a9:7e:95:6f:b6:0d:91:3e:c5:d3:1e:6a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:01:14 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=ec9ee12664e3b789e07a50b77b317f3502ac8a880b636f36c287acec12ab227f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:c0:48:74:29:99:0e:f1:e2:f8:38:86:42: 88:7c:4b:a0:f5:a0:75:f0:16:dd:83:32:fd:66:7b: 80:4b:f3:ae:65:84:67:e4:bc:5f:b7:c5:4a:28:8e: 78:3a:e9:75:ac:4e:49:47:b2:00:87:f2:fe:3b:2a: 3f:f7:70:4e:1d:0a:e3:0e:95:ab:2b:e7:00:0c:bd: 85:d6:de:26:33:a4:d2:de:aa:0e:22:b5:0d:9f:a1: ff:f3:46:5e:bc:78:54:ac:9a:e3:f0:a2:b4:43:a6: c3:89:ab:e9:3f:ad:34:46:8e:78:6a:90:97:65:c8: 91:91:16:2d:77:90:89:58:83:8a:d2:8b:bb:6d:95: 43:cf:df:cf:50:fc:4d:60:81:bf:be:9f:8c:c5:2a: 15:82:bf:34:9a:36:6e:2b:b3:87:a0:cb:76:3f:b2: fe:9e:b5:d7:6b:36:8c:24:fe:23:30:16:84:67:30: 79:e6:c1:c9:8a:40:57:02:03:e4:49:f7:c5:92:3d: 5b:8a:54:fe:4d:66:df:a0:a3:26:48:be:84:b0:e3: 17:ee:9d:9b:67:41:c6:5b:39:17:7a:5e:82:45:29: 89:a1:1f:86:bb:ca:d2:61:22:ae:69:f1:04:c8:6f: ea:27:e2:16:cd:89:70:06:00:35:0a:b6:e9:c0:a8: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:13:82:84:26:79:13:73:48:30:6E:F4:DA:16:54:ED:50:2E:D5:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c3626ea-beb2-4c48-8e8a-2f134e3eb361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.216.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:7c:48:cc:61:1e:e9:65:ed:00:25:d9:82:57:ec:ad:66:01: c6:72:80:54:45:e6:6d:91:62:0a:b5:7b:02:89:a7:d8:4a:83: 88:72:81:b5:95:68:df:5f:d0:0e:7e:98:c7:6d:f3:f8:b6:e5: ab:b2:a7:c7:17:f6:e1:3c:72:ea:92:43:33:ce:9b:f6:ce:53: 5c:a1:31:5c:ff:98:03:1e:ff:c0:2d:87:90:52:af:52:36:2b: 2a:9b:52:50:d0:00:cd:1c:10:9c:d7:2b:c8:94:0c:b5:b3:e0: e8:c3:2c:cb:f0:d4:6b:cc:6b:88:88:c0:74:83:3e:fa:ef:c0: 61:79:71:a7:17:66:ab:87:64:f2:5c:de:d6:81:df:fe:ba:ca: c2:ea:51:36:38:23:8a:32:5f:2c:50:aa:c6:a6:cd:af:9e:cf: 3c:31:27:63:da:6a:c0:88:fd:ea:53:c5:2f:b4:9d:c4:bf:dc: de:ee:91:a8:d3:2b:97:b6:6c:ee:93:7b:4e:a0:ec:93:b5:ee: 63:d3:28:44:56:3a:9f:9f:bf:b9:d6:fd:7d:a2:45:60:3f:a8: 8b:df:04:ee:e2:4a:b8:f9:a6:01:17:d4:8e:c8:8b:13:3e:ab: b5:ad:b6:8e:8e:eb:9a:6c:06:49:09:bb:2a:97:0c:43:2a:93: c2:95:79:16 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE7vR3rMHP6l+lW+2DZE+xdMeav8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMTE0WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzllZTEyNjY0ZTNiNzg5ZTA3YTUwYjc3YjMxN2YzNTAy YWM4YTg4MGI2MzZmMzZjMjg3YWNlYzEyYWIyMjdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKq8BIdCmZDvHi+DiGQoh8S6D1oHXwFt2DMv1me4BL865l hGfkvF+3xUoojng66XWsTklHsgCH8v47Kj/3cE4dCuMOlasr5wAMvYXW3iYzpNLe qg4itQ2fof/zRl68eFSsmuPworRDpsOJq+k/rTRGjnhqkJdlyJGRFi13kIlYg4rS i7ttlUPP389Q/E1ggb++n4zFKhWCvzSaNm4rs4egy3Y/sv6etddrNowk/iMwFoRn MHnmwcmKQFcCA+RJ98WSPVuKVP5NZt+goyZIvoSw4xfunZtnQcZbORd6XoJFKYmh H4a7ytJhIq5p8QTIb+on4hbNiXAGADUKtunAqJ6hAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaBOChCZ5E3NIMG702hZU7VAu1XkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljMzYyNmVhLWJlYjItNGM0OC04ZThhLTJmMTM0ZTNlYjM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP2DANBgkqhkiG9w0BAQsFAAOCAQEAIHxIzGEe6WXtACXZglfsrWYBxnKA VEXmbZFiCrV7Aomn2EqDiHKBtZVo31/QDn6Yx23z+Lblq7Knxxf24Txy6pJDM86b 9s5TXKExXP+YAx7/wC2HkFKvUjYrKptSUNAAzRwQnNcryJQMtbPg6MMsy/DUa8xr iIjAdIM++u/AYXlxpxdmq4dk8lze1oHf/rrKwupRNjgjijJfLFCqxqbNr57PPDEn Y9pqwIj96lPFL7SdxL/c3u6RqNMrl7Zs7pN7TqDsk7XuY9MoRFY6n5+/udb9faJF YD+oi98E7uJKuPmmARfUjsiLEz6rta22jo7rmmwGSQm7KpcMQyqTwpV5Fg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:03 2025 by rpki-client