$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa File: b1374a67-dfa3-499e-88a9-33619dcae730.roa (raw, json) Hash identifier: bD4QI7eGVYu2YiAT6ombWvfKh8f754PTdNNV2z7zcj8= Subject key identifier: B3:06:94:AF:93:C0:9C:85:FE:12:78:ED:0B:56:C8:D5:1F:EF:99:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65D1F59D5183526B7F8220DA6F1A181F894EB3C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa Signing time: Sat 12 Apr 2025 00:01:02 +0000 ROA not before: Sat 12 Apr 2025 00:01:02 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d1:f5:9d:51:83:52:6b:7f:82:20:da:6f:1a:18:1f:89:4e:b3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:01:02 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=a2f704466d82b53d34c9de86e3b65c6d10047a1dbc424a605c0111fbffb3c7ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:29:32:1f:ef:1e:dd:7a:61:b3:7c:ad:81: c1:ef:ec:2c:88:ff:99:f5:ef:1b:82:1d:d5:d2:8b: 44:97:ab:b6:20:4b:42:72:36:dd:d1:e5:45:d1:15: e3:0e:5e:bd:77:c2:5a:d2:5e:08:3d:4d:83:44:92: 10:a4:79:52:bd:8a:16:86:f6:83:22:3b:72:43:27: e0:6b:8b:4b:93:26:30:7b:b8:31:d1:87:39:06:9f: 94:72:26:11:58:ea:e1:2c:31:b8:ca:85:d2:84:9d: 8b:60:c5:b2:51:a0:55:a5:cc:4e:ae:58:72:28:39: 0a:f8:1b:17:4e:98:ce:f5:1c:25:0e:8e:0c:97:e7: 43:2d:6e:0e:d6:71:70:1d:42:d9:2a:9a:ad:49:83: c0:50:e3:06:8e:25:e4:41:5c:6e:c5:00:4e:c1:43: f3:fd:f6:66:87:1b:6a:20:81:2b:eb:2b:6e:e8:89: 9b:fa:a6:6a:08:53:9e:2a:68:c6:d6:11:87:70:02: e6:58:02:b7:59:a9:69:54:8f:83:81:7b:f4:12:9a: 05:0a:2a:03:b6:37:77:4b:55:3e:0f:82:c4:38:34: eb:84:fc:66:d4:15:94:d3:37:da:88:56:6f:34:ac: 44:ae:91:e8:06:85:be:b8:45:af:89:8d:e6:dd:eb: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:94:AF:93:C0:9C:85:FE:12:78:ED:0B:56:C8:D5:1F:EF:99:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption bd:14:10:24:db:45:4d:55:95:77:f9:ca:6e:5f:c8:e5:01:82: 45:75:49:c4:68:de:44:af:c6:ce:34:90:83:62:cd:f5:cd:d0: 78:f1:b4:ae:f1:d3:31:da:17:5d:d7:a7:6a:3f:c9:de:7d:6f: 27:5d:4e:28:d6:5e:bb:ca:31:60:08:14:89:42:7e:a5:e7:f6: 7e:6e:6f:1a:84:2a:4c:14:aa:06:52:6f:7f:47:43:b7:50:e5: 3b:9f:53:1a:08:09:46:11:c0:ad:5d:f8:ed:41:34:e7:8e:ae: a7:92:84:e4:bb:14:1d:6b:f5:d7:f6:40:fd:5a:f0:07:88:a1: 32:19:4e:07:bd:d2:5c:05:29:61:14:04:e4:f8:53:9c:e4:14: cf:7c:2a:1a:0e:ad:a5:c8:ed:52:5c:8d:dc:a1:b1:94:a8:a8: c1:4a:64:a0:eb:4c:bd:7d:87:32:41:fd:f8:c2:01:72:f0:8a: f6:13:33:75:30:c6:22:14:5d:e2:92:64:2f:3a:87:ac:b6:4d: 2f:b3:99:27:06:24:6d:53:3c:83:f1:a4:28:33:a5:13:5f:18: ca:6f:63:d4:f1:2c:ab:af:d4:78:7a:fd:52:1c:0f:87:ee:24: 6e:f9:31:50:48:9c:10:a6:0d:1b:12:84:60:a7:b9:a1:0c:3b: 7d:6d:96:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZdH1nVGDUmt/giDabxoYH4lOs8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAwMTAyWhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmY3MDQ0NjZkODJiNTNkMzRjOWRlODZlM2I2NWM2ZDEw MDQ3YTFkYmM0MjRhNjA1YzAxMTFmYmZmYjNjN2NlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQComSkyH+8e3Xphs3ytgcHv7CyI/5n17xuCHdXSi0SXq7Yg S0JyNt3R5UXRFeMOXr13wlrSXgg9TYNEkhCkeVK9ihaG9oMiO3JDJ+Bri0uTJjB7 uDHRhzkGn5RyJhFY6uEsMbjKhdKEnYtgxbJRoFWlzE6uWHIoOQr4GxdOmM71HCUO jgyX50Mtbg7WcXAdQtkqmq1Jg8BQ4waOJeRBXG7FAE7BQ/P99maHG2oggSvrK27o iZv6pmoIU54qaMbWEYdwAuZYArdZqWlUj4OBe/QSmgUKKgO2N3dLVT4PgsQ4NOuE /GbUFZTTN9qIVm80rESukegGhb64Ra+Jjebd6+uzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUswaUr5PAnIX+EnjtC1bI1R/vmSAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxMzc0YTY3LWRmYTMtNDk5ZS04OGE5LTMzNjE5ZGNhZTczMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANgDANBgkqhkiG9w0BAQsFAAOCAQEAvRQQJNtFTVWVd/nKbl/I5QGCRXVJ xGjeRK/GzjSQg2LN9c3QePG0rvHTMdoXXdenaj/J3n1vJ11OKNZeu8oxYAgUiUJ+ pef2fm5vGoQqTBSqBlJvf0dDt1DlO59TGggJRhHArV347UE0546up5KE5LsUHWv1 1/ZA/VrwB4ihMhlOB73SXAUpYRQE5PhTnOQUz3wqGg6tpcjtUlyN3KGxlKiowUpk oOtMvX2HMkH9+MIBcvCK9hMzdTDGIhRd4pJkLzqHrLZNL7OZJwYkbVM8g/GkKDOl E18Yym9j1PEsq6/UeHr9UhwPh+4kbvkxUEicEKYNGxKEYKe5oQw7fW2WDQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:55 2025 by rpki-client