$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2bc09ec-bc3f-46cd-924f-89f533661764.roa File: a2bc09ec-bc3f-46cd-924f-89f533661764.roa (raw, json) Hash identifier: yvyB1tScFtQGaJ+Dwn1g0rbM/yOthga41Vf5LZdM5Yk= Subject key identifier: 88:D9:AD:03:3E:B3:D5:EC:6F:14:C4:3D:5B:02:D0:38:9A:DA:96:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69B3B65D0CB6744EAF097F5379EE6A5060169221 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2bc09ec-bc3f-46cd-924f-89f533661764.roa Signing time: Fri 18 Apr 2025 00:31:16 +0000 ROA not before: Fri 18 Apr 2025 00:31:16 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b3:b6:5d:0c:b6:74:4e:af:09:7f:53:79:ee:6a:50:60:16:92:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:31:16 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=f711c9a0dc86f5ee5b8431ba0b7e0d625208e44fb57a7af3257b4449c490215f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:af:eb:61:d9:8d:34:be:ad:0c:c0:4e:75:35: 06:5f:49:9f:20:41:af:70:e9:0f:32:4b:a8:26:0e: e1:18:df:c6:0b:ee:c0:59:01:2a:b7:8b:49:41:f9: 98:cd:e0:f4:39:d9:a7:a7:5c:0b:c1:45:8b:3d:08: 9b:72:27:e3:6b:9d:f9:a1:d5:4c:12:44:78:b6:7f: 50:4c:09:2a:2e:0f:96:00:c9:50:48:5d:7d:ed:2a: 62:b2:60:cf:59:53:e5:5d:52:d2:05:69:7c:1c:a0: cc:92:99:41:86:c8:a2:ca:4b:50:3c:58:ad:5b:1d: 16:6e:93:f0:4d:d2:03:7d:4d:e3:6a:a1:be:ed:7a: d1:db:19:d4:e5:ac:04:3b:ca:b6:be:e4:12:70:ab: 3f:12:8b:4f:56:b2:d2:59:70:f7:2f:4d:d9:68:9b: a5:0c:8d:5a:cf:5e:40:69:4e:5e:39:79:6e:84:98: 7f:d6:ee:37:2a:28:db:f8:f2:16:f9:47:8f:80:fd: e7:1d:4f:a9:9f:03:4c:a9:45:e8:34:a0:4e:2f:fa: 7c:bc:99:68:a2:8b:db:a0:73:0e:2f:c9:d2:50:00: 3c:50:e8:89:19:c3:2b:6c:21:1e:5b:92:1d:f5:de: 5e:a6:7c:97:b9:69:e1:51:b7:11:81:26:a8:35:fc: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D9:AD:03:3E:B3:D5:EC:6F:14:C4:3D:5B:02:D0:38:9A:DA:96:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2bc09ec-bc3f-46cd-924f-89f533661764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.18.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:99:e6:0f:9b:6f:99:ee:43:04:69:e9:9a:f9:8d:2e:37:28: e4:bf:5f:96:5c:3f:79:c2:02:da:63:4d:6b:88:49:72:79:fa: c2:90:aa:ef:12:25:27:79:5a:cc:6e:6c:24:ac:79:59:1a:c8: 3a:4b:b6:0c:d3:eb:95:14:17:0e:9a:da:ae:2f:ff:4d:a9:16: 6b:fa:76:29:08:1e:be:e8:23:49:46:b6:0f:95:41:b2:12:1a: 33:f8:1f:2f:cf:ff:0d:a1:66:21:61:ce:2c:32:fb:43:1c:a6: 42:fa:ef:99:ef:6a:d8:0d:d6:19:da:d5:7b:72:59:65:8b:5e: ab:70:6c:a9:39:32:2f:8c:88:b8:89:6f:1d:75:1d:d5:c7:79: b3:fd:4e:cf:27:a7:d6:a3:43:0b:8b:a7:31:ac:03:6a:ee:27: 52:9c:db:03:4f:a9:1e:dd:c5:39:32:2b:fc:ed:3c:54:34:64: ee:d8:78:e7:96:91:4f:dd:23:bf:eb:e7:94:83:ce:05:9b:f4: 53:81:cf:a0:db:af:65:9b:7c:17:28:f6:e0:4d:5c:3d:4b:31: b9:34:17:90:87:56:ab:9d:47:a1:7d:f7:fb:ac:5b:66:ce:e1: 2b:af:ed:b1:0d:93:84:09:d4:e9:a5:ed:9c:2b:1d:c9:ec:2a: 45:61:2d:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUabO2XQy2dE6vCX9Tee5qUGAWkiEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDAzMTE2WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzExYzlhMGRjODZmNWVlNWI4NDMxYmEwYjdlMGQ2MjUy MDhlNDRmYjU3YTdhZjMyNTdiNDQ0OWM0OTAyMTVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDer+th2Y00vq0MwE51NQZfSZ8gQa9w6Q8yS6gmDuEY38YL 7sBZASq3i0lB+ZjN4PQ52aenXAvBRYs9CJtyJ+Nrnfmh1UwSRHi2f1BMCSouD5YA yVBIXX3tKmKyYM9ZU+VdUtIFaXwcoMySmUGGyKLKS1A8WK1bHRZuk/BN0gN9TeNq ob7tetHbGdTlrAQ7yra+5BJwqz8Si09WstJZcPcvTdlom6UMjVrPXkBpTl45eW6E mH/W7jcqKNv48hb5R4+A/ecdT6mfA0ypReg0oE4v+ny8mWiii9ugcw4vydJQADxQ 6IkZwytsIR5bkh313l6mfJe5aeFRtxGBJqg1/HOhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiNmtAz6z1exvFMQ9WwLQOJralugwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyYmMwOWVjLWJjM2YtNDZjZC05MjRmLTg5ZjUzMzY2MTc2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYnRIwDQYJKoZIhvcNAQELBQADggEBAJ2Z5g+bb5nuQwRp6Zr5jS43KOS/ X5ZcP3nCAtpjTWuISXJ5+sKQqu8SJSd5WsxubCSseVkayDpLtgzT65UUFw6a2q4v /02pFmv6dikIHr7oI0lGtg+VQbISGjP4Hy/P/w2hZiFhziwy+0McpkL675nvatgN 1hna1XtyWWWLXqtwbKk5Mi+MiLiJbx11HdXHebP9Ts8np9ajQwuLpzGsA2ruJ1Kc 2wNPqR7dxTkyK/ztPFQ0ZO7YeOeWkU/dI7/r55SDzgWb9FOBz6Dbr2WbfBco9uBN XD1LMbk0F5CHVqudR6F99/usW2bO4Suv7bENk4QJ1Oml7ZwrHcnsKkVhLbk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:55 2025 by rpki-client