$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa File: b077c7f9-666e-471a-9d7f-878e8767a601.roa (raw, json) Hash identifier: bPUinN6+yqxA/eyr+XVu9kfpVRp9M8PdQ0egGAhdBaw= Subject key identifier: D4:CE:3F:99:5F:37:49:1D:8B:55:B0:AE:60:58:CB:17:5D:BB:A4:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16827E8C806ECD53FAA7B091F9063D9348603F0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa Signing time: Wed 23 Apr 2025 00:21:42 +0000 ROA not before: Wed 23 Apr 2025 00:21:42 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:82:7e:8c:80:6e:cd:53:fa:a7:b0:91:f9:06:3d:93:48:60:3f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:21:42 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=d2373cfcd09c0ea8c38208796849c2fee8fff1ca6b474357a716887261ae8fa9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:16:af:18:19:d4:35:04:61:5a:08:90:0d: e2:65:7c:9b:a8:bf:7f:09:42:0f:89:b8:e5:cf:1e: e1:99:55:8f:e6:bc:e1:0b:da:e2:5a:91:55:4b:78: 3a:0a:d6:8b:11:4e:68:2b:bf:df:75:6a:59:4f:31: fe:67:8a:b7:17:2c:15:43:a5:cd:6c:c4:33:62:17: a9:c8:6c:d0:0d:88:b6:42:a8:0d:13:a8:47:3c:b1: 89:ad:6f:91:a9:11:a3:b1:3f:68:32:74:6f:4a:88: 83:40:d9:61:30:05:94:a6:c6:a0:f6:35:1d:4d:ad: 64:64:55:28:eb:eb:09:3e:76:8e:a2:ae:53:9c:b7: b2:a1:0b:a7:83:3a:d9:e6:d5:b5:d2:b1:9b:85:d7: 5a:ab:bf:4a:d9:f0:81:8d:6e:4f:a4:6e:23:20:ae: b4:7c:98:36:fd:cb:c3:7e:cd:26:0d:0b:fa:43:7d: e7:fd:c3:14:8a:83:df:3b:fc:6a:da:d2:72:66:52: d1:57:7d:5b:98:dd:1d:47:3f:32:c6:78:95:00:4c: 33:a7:34:27:45:08:fb:50:b6:ff:18:1c:95:54:66: fb:ea:b4:61:7c:b7:ee:82:15:28:60:0a:3a:00:f0: 7c:40:1c:ef:46:99:68:ed:18:5d:d5:91:8e:23:b6: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:3F:99:5F:37:49:1D:8B:55:B0:AE:60:58:CB:17:5D:BB:A4:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:b8:a0:55:82:2e:7d:01:e8:e3:e6:6b:a0:19:ec:a0:6d:81: 17:58:5c:9a:82:4b:28:cf:c2:c0:32:5c:80:2e:02:53:f2:1d: f3:9d:e6:67:a5:81:52:e7:e5:b6:9c:05:05:95:d9:0b:e9:3d: 0d:40:88:e9:d5:20:9b:92:16:1b:77:c2:8a:93:24:aa:38:3a: b9:0c:fc:6e:b7:ab:1a:c5:99:11:2e:a7:2e:54:1c:d3:70:6d: c2:a7:f5:d1:bf:0a:57:c0:6e:2e:b7:08:50:ff:c3:ad:1e:37: e6:63:f1:b4:0f:ef:a3:24:3e:ca:ed:ef:9c:a5:ea:a9:cc:2e: 58:1e:d1:50:ff:63:5b:ac:48:25:6b:46:ff:44:08:03:ad:60: 32:22:74:c6:b6:2b:96:7c:ca:4a:a8:1f:a0:ef:9a:fa:35:ad: 1e:94:78:bb:5b:3f:6f:a6:59:74:fd:22:b5:0e:9c:e7:b4:04: e5:a5:a0:0e:9d:e6:b8:8e:dd:5b:e7:83:89:82:fd:d7:f0:d8: 74:51:41:4d:e8:d4:ac:e8:86:27:c8:f5:d3:e0:b7:15:c5:50: b8:23:f3:1d:dd:45:04:01:d5:96:90:0c:f6:d0:8d:4a:6d:c9: ec:a5:5e:72:41:31:69:89:a5:17:79:79:96:2e:26:ba:e6:6b: a6:2a:2f:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFoJ+jIBuzVP6p7CR+QY9k0hgPw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAyMTQyWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjM3M2NmY2QwOWMwZWE4YzM4MjA4Nzk2ODQ5YzJmZWU4 ZmZmMWNhNmI0NzQzNTdhNzE2ODg3MjYxYWU4ZmE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9DRavGBnUNQRhWgiQDeJlfJuov38JQg+JuOXPHuGZVY/m vOEL2uJakVVLeDoK1osRTmgrv991allPMf5nircXLBVDpc1sxDNiF6nIbNANiLZC qA0TqEc8sYmtb5GpEaOxP2gydG9KiINA2WEwBZSmxqD2NR1NrWRkVSjr6wk+do6i rlOct7KhC6eDOtnm1bXSsZuF11qrv0rZ8IGNbk+kbiMgrrR8mDb9y8N+zSYNC/pD fef9wxSKg987/Gra0nJmUtFXfVuY3R1HPzLGeJUATDOnNCdFCPtQtv8YHJVUZvvq tGF8t+6CFShgCjoA8HxAHO9GmWjtGF3VkY4jtnDNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1M4/mV83SR2LVbCuYFjLF127pHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwNzdjN2Y5LTY2NmUtNDcxYS05ZDdmLTg3OGU4NzY3YTYwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBrFDANBgkqhkiG9w0BAQsFAAOCAQEAILigVYIufQHo4+ZroBnsoG2BF1hc moJLKM/CwDJcgC4CU/Id853mZ6WBUufltpwFBZXZC+k9DUCI6dUgm5IWG3fCipMk qjg6uQz8brerGsWZES6nLlQc03Btwqf10b8KV8BuLrcIUP/DrR435mPxtA/voyQ+ yu3vnKXqqcwuWB7RUP9jW6xIJWtG/0QIA61gMiJ0xrYrlnzKSqgfoO+a+jWtHpR4 u1s/b6ZZdP0itQ6c57QE5aWgDp3muI7dW+eDiYL91/DYdFFBTejUrOiGJ8j10+C3 FcVQuCPzHd1FBAHVlpAM9tCNSm3J7KVeckExaYmlF3l5li4muuZrpiovpA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:26 2025 by rpki-client