$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa File: ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa (raw, json) Hash identifier: 5ss9IZw+ckZlxpyaJ9yxXsRt8MEvyngC6PTPzFtxkiY= Subject key identifier: 81:11:F6:32:F7:C5:FD:7E:0B:DA:57:0F:D6:9E:45:2E:84:AD:AA:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16AFFB13956D3F533EBFD0161D4BED264385B807 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa Signing time: Mon 21 Apr 2025 17:11:07 +0000 ROA not before: Mon 21 Apr 2025 17:11:07 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 147.106.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:af:fb:13:95:6d:3f:53:3e:bf:d0:16:1d:4b:ed:26:43:85:b8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:11:07 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=17806e07d65570e3cc1c51d0b2d5353d3f2fa8c5c6a1b7db70010524ac214d81, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:57:50:7b:7e:9c:7f:63:e7:f8:17:07:3f: 26:36:b9:a6:91:b2:58:db:45:cb:f1:77:ef:9a:7e: 0f:5c:5e:b8:69:92:91:e0:59:fa:5e:cb:77:b0:39: e2:49:dd:13:8f:3f:73:da:e2:e4:fa:8c:dc:71:a6: 9a:b6:e6:50:99:06:62:3a:96:04:66:e3:05:9d:b1: 42:91:35:d0:0e:ae:89:c0:1d:02:ef:53:0e:9d:ae: 76:b5:4d:01:54:34:b3:9c:79:82:82:76:5b:08:c4: 5d:f7:f1:27:d1:77:29:5f:21:17:c4:07:0b:17:51: 4f:95:3b:9b:4e:93:45:f0:f9:bc:9e:46:c9:f4:36: e7:a6:43:61:46:f1:12:dc:e1:19:6b:ab:69:0b:33: e7:60:46:f4:ce:55:a7:be:73:9e:03:58:20:5c:01: 1f:9b:d5:84:8a:f0:84:39:82:13:99:01:a2:11:82: e2:40:03:01:f5:b8:74:b2:39:48:ba:7f:95:e9:2e: 80:5b:7b:ba:ae:2d:f0:b2:b3:20:7d:c6:05:e9:0e: 14:7b:dd:49:a3:e9:1f:b8:69:66:a3:e0:d7:f7:55: b5:17:96:f9:8c:1c:12:9a:a3:93:0e:15:e0:89:e5: bf:70:1a:52:8a:a2:19:b4:50:d1:7a:09:e2:0a:f3: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:F6:32:F7:C5:FD:7E:0B:DA:57:0F:D6:9E:45:2E:84:AD:AA:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.106.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9f:2d:12:84:ed:c1:84:3f:ac:6f:61:ae:b5:14:0d:2f:7a:fb: 7a:63:79:43:74:c6:f5:39:63:ad:1e:bb:07:9b:9f:17:a0:d0: 62:ef:82:f5:05:c6:b0:33:b1:db:62:71:14:5b:5b:39:03:d0: 2a:65:04:56:fb:15:27:72:f1:03:ff:1b:57:97:0d:cd:7e:9a: c4:f1:c6:19:cc:75:18:4f:bb:65:f2:b0:bf:21:d5:de:f1:12: 27:39:23:70:58:5e:d4:80:c1:ca:5b:d2:1f:d7:80:02:37:71: 73:d0:0a:e3:ef:89:b2:d8:9c:71:62:27:f7:f5:05:6c:c5:18: bc:e0:02:98:22:e8:a5:d2:d1:58:01:94:6e:49:7f:ef:2f:f6: db:41:86:b9:7b:04:66:61:40:4c:df:6d:d7:a6:83:07:5c:98: fb:36:04:c8:29:a4:27:c2:71:db:4a:35:aa:23:53:27:f4:f3: ca:17:ce:b2:2c:18:48:0a:cd:ab:e2:62:ff:f3:df:a9:13:c7: 1a:bc:42:4f:8e:00:4b:66:88:3f:b0:87:55:9c:3f:3c:10:4d: ff:3a:6a:8c:dc:21:ad:9b:f6:e4:a1:42:b2:f2:ff:c7:84:29: d9:94:df:0b:f5:01:a0:ac:29:1a:77:7d:d0:e5:d4:5c:d5:91: f7:5f:13:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFq/7E5VtP1M+v9AWHUvtJkOFuAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcxMTA3WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzgwNmUwN2Q2NTU3MGUzY2MxYzUxZDBiMmQ1MzUzZDNm MmZhOGM1YzZhMWI3ZGI3MDAxMDUyNGFjMjE0ZDgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsM1dQe36cf2Pn+BcHPyY2uaaRsljbRcvxd++afg9cXrhp kpHgWfpey3ewOeJJ3ROPP3Pa4uT6jNxxppq25lCZBmI6lgRm4wWdsUKRNdAOronA HQLvUw6drna1TQFUNLOceYKCdlsIxF338SfRdylfIRfEBwsXUU+VO5tOk0Xw+bye Rsn0NuemQ2FG8RLc4Rlrq2kLM+dgRvTOVae+c54DWCBcAR+b1YSK8IQ5ghOZAaIR guJAAwH1uHSyOUi6f5XpLoBbe7quLfCysyB9xgXpDhR73Umj6R+4aWaj4Nf3VbUX lvmMHBKao5MOFeCJ5b9wGlKKohm0UNF6CeIK87ohAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgRH2MvfF/X4L2lcP1p5FLoStqp0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiNWI4ZDEwLTVmMTctNGM0Yi1hYWU4LWEyNjUzOTk3NzBjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaTasAwDQYJKoZIhvcNAQELBQADggEBAJ8tEoTtwYQ/rG9hrrUUDS96+3pj eUN0xvU5Y60euwebnxeg0GLvgvUFxrAzsdticRRbWzkD0CplBFb7FSdy8QP/G1eX Dc1+msTxxhnMdRhPu2XysL8h1d7xEic5I3BYXtSAwcpb0h/XgAI3cXPQCuPvibLY nHFiJ/f1BWzFGLzgApgi6KXS0VgBlG5Jf+8v9ttBhrl7BGZhQEzfbdemgwdcmPs2 BMgppCfCcdtKNaojUyf088oXzrIsGEgKzaviYv/z36kTxxq8Qk+OAEtmiD+wh1Wc PzwQTf86aozcIa2b9uShQrLy/8eEKdmU3wv1AaCsKRp3fdDl1FzVkfdfE2g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:30 2025 by rpki-client