$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa File: a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa (raw, json) Hash identifier: ZHgOy7/qEMtkH+lmAcmhqHczgWRbx1/2i08VjyvXHfM= Subject key identifier: DE:CF:88:AF:BA:E8:BA:D1:83:E4:14:C0:1C:AC:EA:A1:00:7E:12:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0845EA7C351341D0CC2EDD6F7C3190D3AF25F51C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa Signing time: Fri 18 Apr 2025 00:50:30 +0000 ROA not before: Fri 18 Apr 2025 00:50:30 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.15.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:45:ea:7c:35:13:41:d0:cc:2e:dd:6f:7c:31:90:d3:af:25:f5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:50:30 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=13c467d06b36821e76dda36670d7f5a0b2c20fbe375c279646abc9eff84ee4c7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:f6:24:44:82:91:8c:14:d7:d1:69:ee:b4: cf:cf:83:c9:71:45:9c:37:e6:34:68:6b:04:ad:b9: 03:1b:f7:28:74:f6:82:74:b8:38:37:52:b8:3c:89: 38:39:a3:66:17:8a:31:08:74:26:b0:76:bd:61:e7: 14:c2:ed:13:32:32:23:69:e8:44:5d:db:7e:19:c7: 8b:0d:69:9d:5a:1d:0a:68:38:ac:82:3c:66:84:27: d0:79:72:47:ea:23:e2:10:d0:65:3e:ed:68:9a:40: 52:54:24:f7:fb:28:19:b0:27:71:3d:36:67:11:71: 00:a3:94:07:0b:c1:af:83:e5:52:d2:b0:92:ec:d0: e2:68:ef:fa:ec:53:a0:a8:6d:f3:e9:91:ff:7a:ae: bd:3c:b5:cf:ba:01:ab:ad:4a:47:07:10:c1:8c:83: 46:6e:70:5d:90:71:c5:a6:6a:6c:40:d6:db:21:23: 5d:86:17:3e:ec:5b:21:c5:3d:01:a0:ed:3c:99:44: 3e:05:c7:d8:b5:d0:42:c7:3c:40:ec:7e:fe:7d:79: 91:72:64:82:85:80:3a:98:42:5f:3b:8a:1c:57:70: 26:a0:07:10:55:29:d2:0f:de:d4:09:11:7c:71:86: ab:10:03:b6:ae:d2:33:5e:ed:00:f6:bc:50:a0:0f: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:88:AF:BA:E8:BA:D1:83:E4:14:C0:1C:AC:EA:A1:00:7E:12:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a97e5ba8-6ce9-4cb7-b232-d2a98c0fe3c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:9f:01:e7:33:a3:0c:52:00:2d:c1:b7:62:33:25:8f:23:47: 73:e0:c8:9a:e7:19:e9:0e:fa:f9:a6:e4:a6:4d:73:3a:a8:96: 41:86:c1:f2:cd:77:51:dc:b9:ae:48:31:3a:b4:c0:c8:78:93: f0:69:31:82:9b:20:fd:eb:dc:ac:0c:20:af:bc:56:0f:00:7f: db:0a:6e:30:7f:4b:16:9d:5e:7b:8e:e4:ac:49:1a:85:48:0a: c6:4a:21:8c:dd:56:60:46:e3:40:db:c0:eb:64:90:de:05:ba: 3a:e0:6d:7f:79:00:e2:28:b3:fd:24:c0:62:1a:75:0f:34:88: dc:a8:a4:ee:fa:9a:ca:0f:69:d1:da:b7:df:da:09:54:2e:b7: 18:3f:e3:a0:cb:a0:b9:b0:33:b4:28:39:b0:b6:55:52:2b:23: d5:c1:e0:6f:90:24:03:c4:d2:37:21:a2:d5:74:32:c9:36:2a: eb:a5:53:e3:17:0d:88:ed:88:0b:0e:1c:85:88:68:07:85:d7: 80:7c:2a:2c:79:cd:c2:ae:b3:23:b8:18:55:3c:4b:47:f5:f4: b6:61:54:53:79:3c:c8:d3:69:5b:4d:f1:10:50:c0:a3:d9:15: 9c:7a:b3:9f:56:b4:3f:e2:16:28:48:5b:ba:c2:df:37:8c:27: d3:33:35:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCEXqfDUTQdDMLt1vfDGQ068l9RwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA1MDMwWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2M0NjdkMDZiMzY4MjFlNzZkZGEzNjY3MGQ3ZjVhMGIy YzIwZmJlMzc1YzI3OTY0NmFiYzllZmY4NGVlNGM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzbvYkRIKRjBTX0WnutM/Pg8lxRZw35jRoawStuQMb9yh0 9oJ0uDg3Urg8iTg5o2YXijEIdCawdr1h5xTC7RMyMiNp6ERd234Zx4sNaZ1aHQpo OKyCPGaEJ9B5ckfqI+IQ0GU+7WiaQFJUJPf7KBmwJ3E9NmcRcQCjlAcLwa+D5VLS sJLs0OJo7/rsU6CobfPpkf96rr08tc+6AautSkcHEMGMg0ZucF2QccWmamxA1tsh I12GFz7sWyHFPQGg7TyZRD4Fx9i10ELHPEDsfv59eZFyZIKFgDqYQl87ihxXcCag BxBVKdIP3tQJEXxxhqsQA7au0jNe7QD2vFCgD8jZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3s+Ir7routGD5BTAHKzqoQB+EpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5N2U1YmE4LTZjZTktNGNiNy1iMjMyLWQyYTk4YzBmZTNjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBMDzANBgkqhkiG9w0BAQsFAAOCAQEAyJ8B5zOjDFIALcG3YjMljyNHc+DI mucZ6Q76+abkpk1zOqiWQYbB8s13Udy5rkgxOrTAyHiT8Gkxgpsg/evcrAwgr7xW DwB/2wpuMH9LFp1ee47krEkahUgKxkohjN1WYEbjQNvA62SQ3gW6OuBtf3kA4iiz /STAYhp1DzSI3Kik7vqayg9p0dq339oJVC63GD/joMugubAztCg5sLZVUisj1cHg b5AkA8TSNyGi1XQyyTYq66VT4xcNiO2ICw4chYhoB4XXgHwqLHnNwq6zI7gYVTxL R/X0tmFUU3k8yNNpW03xEFDAo9kVnHqzn1a0P+IWKEhbusLfN4wn0zM1Sw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:02 2025 by rpki-client