$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab14272b-8d62-463c-9830-7c5b41bb76ca.roa File: ab14272b-8d62-463c-9830-7c5b41bb76ca.roa (raw, json) Hash identifier: g50Ydbd+hJU/7JNOAy3dFOPbh7OY27oaMdVg8iKAFG4= Subject key identifier: B5:9F:CB:43:96:03:CB:72:7D:BD:27:88:51:57:7C:AC:19:C7:B1:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A349E00E52BEF86B4F9ED7433EAAFB07C2AEAAE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab14272b-8d62-463c-9830-7c5b41bb76ca.roa Signing time: Mon 07 Apr 2025 15:01:03 +0000 ROA not before: Mon 07 Apr 2025 15:01:03 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.102.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:34:9e:00:e5:2b:ef:86:b4:f9:ed:74:33:ea:af:b0:7c:2a:ea:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:01:03 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=03f80eccfb60eb95a9a8cca05316405e4d2633fcaff94f53c2164dd6f27d031d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:2d:a1:f3:c6:d1:8b:20:99:e8:98:c1:9d: 91:9c:03:74:ae:73:e4:25:d6:a1:51:91:5f:99:31: 16:17:cd:73:c0:ea:4f:fd:b6:10:ac:0a:80:f7:49: c5:70:bc:e8:b2:74:da:04:c7:b4:3b:45:fa:7e:e2: 16:fc:1f:6b:16:ff:53:72:15:2e:67:79:fe:2f:6e: e4:cd:14:9f:a0:30:d5:93:b9:df:b4:f7:d0:03:ea: b6:ca:0d:c2:d7:17:f7:62:e6:31:18:24:94:63:a2: e4:98:b0:d7:62:bc:12:c9:f7:c6:97:a6:fb:07:11: 53:80:e8:60:da:b1:61:16:60:9d:31:de:6a:e8:39: 2f:ca:3b:61:bb:99:34:7c:b2:5a:59:5f:23:c8:4b: d3:91:52:0a:a7:f0:33:88:a6:21:6c:e4:e6:20:e7: 8c:45:f7:f4:33:bf:45:27:f1:72:fd:59:82:da:ea: 65:41:dc:40:ff:da:cb:c1:22:dc:70:21:88:3b:17: 70:2c:a3:0b:b3:e6:c9:19:5d:61:59:a1:eb:51:a5: cc:bd:f6:39:b3:c1:cc:35:94:3a:da:80:d6:e6:0f: e1:77:a8:24:5d:cb:e9:97:9f:16:2c:66:ae:27:0c: 49:f6:cf:37:94:76:64:2a:66:31:a1:85:36:21:1c: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:CB:43:96:03:CB:72:7D:BD:27:88:51:57:7C:AC:19:C7:B1:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab14272b-8d62-463c-9830-7c5b41bb76ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:4f:97:f0:52:6c:36:24:0b:58:f7:a3:09:8f:df:09:dd:83: 8c:8d:a0:7f:51:42:a8:9e:a3:93:f1:eb:3f:b0:d1:c3:f6:ef: 5f:3b:ae:54:8c:0a:9b:f3:b8:17:80:d3:e1:80:92:a3:a0:61: 42:a4:ce:52:01:a9:9c:2d:af:c6:13:40:aa:68:06:0e:5a:a4: 5d:af:38:73:6d:6f:a8:d4:96:98:d3:d5:37:1f:6f:5b:f5:1a: 67:c9:72:c3:e2:98:7a:75:5c:a4:2a:e9:5f:91:49:b9:60:4e: 48:0e:f1:55:d4:f2:7c:75:0b:0b:b3:bd:8f:32:4d:c1:10:c6: cc:51:87:87:36:35:48:77:90:fb:2c:9c:d9:97:df:3f:1e:f7: 8d:bd:82:23:24:bb:15:f1:df:3c:28:b8:9d:42:bd:69:9b:cd: 71:2b:a7:02:96:ce:a8:b9:ee:6b:10:a1:47:42:e1:6e:f2:13: 64:6e:7e:a4:0a:9b:02:5d:6e:94:82:61:ea:cd:0d:2a:bb:ef: fe:8b:dc:94:b1:b3:46:39:f3:fd:9b:13:c0:b9:13:0c:21:3d: a6:e4:2c:82:f8:14:fd:7d:da:ad:29:34:03:15:86:f9:5b:d9: 65:41:26:c4:c7:4c:4d:d8:ae:10:bf:32:b0:ac:8e:56:47:30: df:75:23:66 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOjSeAOUr74a0+e10M+qvsHwq6q4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUwMTAzWhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2Y4MGVjY2ZiNjBlYjk1YTlhOGNjYTA1MzE2NDA1ZTRk MjYzM2ZjYWZmOTRmNTNjMjE2NGRkNmYyN2QwMzFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCBC2h88bRiyCZ6JjBnZGcA3Suc+Ql1qFRkV+ZMRYXzXPA 6k/9thCsCoD3ScVwvOiydNoEx7Q7Rfp+4hb8H2sW/1NyFS5nef4vbuTNFJ+gMNWT ud+099AD6rbKDcLXF/di5jEYJJRjouSYsNdivBLJ98aXpvsHEVOA6GDasWEWYJ0x 3mroOS/KO2G7mTR8slpZXyPIS9ORUgqn8DOIpiFs5OYg54xF9/Qzv0Un8XL9WYLa 6mVB3ED/2svBItxwIYg7F3Asowuz5skZXWFZoetRpcy99jmzwcw1lDragNbmD+F3 qCRdy+mXnxYsZq4nDEn2zzeUdmQqZjGhhTYhHGTxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtZ/LQ5YDy3J9vSeIUVd8rBnHsRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiMTQyNzJiLThkNjItNDYzYy05ODMwLTdjNWI0MWJiNzZjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQZjANBgkqhkiG9w0BAQsFAAOCAQEAR0+X8FJsNiQLWPejCY/fCd2DjI2g f1FCqJ6jk/HrP7DRw/bvXzuuVIwKm/O4F4DT4YCSo6BhQqTOUgGpnC2vxhNAqmgG DlqkXa84c21vqNSWmNPVNx9vW/UaZ8lyw+KYenVcpCrpX5FJuWBOSA7xVdTyfHUL C7O9jzJNwRDGzFGHhzY1SHeQ+yyc2ZffPx73jb2CIyS7FfHfPCi4nUK9aZvNcSun ApbOqLnuaxChR0LhbvITZG5+pAqbAl1ulIJh6s0NKrvv/ovclLGzRjnz/ZsTwLkT DCE9puQsgvgU/X3arSk0AxWG+VvZZUEmxMdMTdiuEL8ysKyOVkcw33UjZg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:52 2025 by rpki-client