$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa File: b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json) Hash identifier: TFDu0f+gkqSgAfGrBObvdy/ZIVLf2PxdrBYWt95TkRQ= Subject key identifier: A5:9D:D4:AD:E7:9A:9B:74:A0:05:22:69:30:2E:D4:FE:04:FF:62:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C686E8E642DDBE12B1EA5DC51B34F0E5AEEB6BC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa Signing time: Wed 23 Apr 2025 00:10:21 +0000 ROA not before: Wed 23 Apr 2025 00:10:21 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:68:6e:8e:64:2d:db:e1:2b:1e:a5:dc:51:b3:4f:0e:5a:ee:b6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:10:21 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=861d88855eacf636d5456cd11ce11922a56f23a9656280b59fe6265ce0010e2e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:4d:39:f8:26:ef:07:4e:bf:f6:b8:ec:8e: 8e:4d:3f:2c:de:f0:72:e5:a1:00:ab:24:e8:1d:fc: 08:bc:fe:b9:40:12:57:27:2b:56:6f:76:eb:9b:e2: c5:94:d7:4d:13:b9:21:84:59:11:be:25:d7:f2:57: a2:fe:a4:94:4c:74:dc:8f:77:48:e0:36:22:f7:10: 7d:fd:0e:a1:dc:d4:68:87:6e:e5:fa:2c:ea:c0:20: 7c:49:9b:73:93:a7:79:90:fb:f8:f1:8c:4e:01:43: db:92:f8:a8:fe:94:5c:e7:43:60:4c:56:ab:3b:13: 79:c6:29:0c:ee:c9:56:e9:df:66:99:0d:51:27:5b: 24:ae:2b:c3:80:fa:a4:6b:20:83:14:be:db:5b:ef: 41:23:43:4d:3b:83:cd:d3:57:c6:cf:e0:ab:d5:23: 31:25:88:39:cb:62:48:43:61:18:fd:e0:c3:35:aa: a7:ed:3a:e7:65:56:7d:38:29:78:e6:d3:c2:ed:5c: 9a:c3:4e:6b:33:10:9a:79:9c:76:be:d2:27:5c:aa: c4:a5:22:92:3c:b5:d3:46:5e:ca:0c:d2:d0:17:2c: de:5c:f1:3a:a3:b2:64:aa:7a:50:4d:32:1f:97:34: 74:bc:25:45:a5:85:be:10:11:8a:80:8b:10:ba:c0: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:D4:AD:E7:9A:9B:74:A0:05:22:69:30:2E:D4:FE:04:FF:62:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption 71:6c:7d:8d:0e:8e:c0:1e:1a:4c:6b:17:89:10:b3:06:bb:19: 15:8f:51:ac:af:be:c2:1b:56:ad:cf:22:21:75:82:33:c0:cf: 3b:c8:b7:bf:df:b7:17:2f:f6:34:42:f6:b0:10:00:37:fe:8d: 7a:7e:72:19:64:a5:53:fd:ed:ae:b0:97:1f:6b:c5:f0:2e:68: 7a:3e:62:ea:33:d0:ad:69:3f:34:14:b8:d5:64:bf:88:36:39: b3:d0:fb:5a:c9:9b:f1:92:71:69:92:66:31:16:2f:3d:35:60: 67:88:18:20:1e:4f:61:83:ec:17:1d:df:12:07:02:58:1e:fe: c5:b9:be:ef:60:ec:6d:40:ce:c9:82:8f:b7:a6:5c:11:37:d7: f5:14:4d:e9:ef:58:ff:68:fc:93:7f:1d:a5:8b:55:bf:cf:7a: cd:b4:7d:b2:ab:38:31:ca:ed:f4:48:46:d9:77:67:15:0a:c4: 26:97:8f:71:57:44:a7:4a:d3:28:fb:cd:13:47:73:5a:3b:ff: c9:81:9a:6c:f4:8d:30:65:7d:54:59:bf:22:03:4b:2c:b1:e7: f1:cb:51:ac:24:4d:7d:12:04:e3:d9:a7:6d:d1:4b:48:22:65: 33:14:40:d7:d4:93:ac:01:96:e8:43:c3:53:61:64:5b:77:18: 04:99:d9:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPGhujmQt2+ErHqXcUbNPDlrutrwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAxMDIxWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjFkODg4NTVlYWNmNjM2ZDU0NTZjZDExY2UxMTkyMmE1 NmYyM2E5NjU2MjgwYjU5ZmU2MjY1Y2UwMDEwZTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVS005+CbvB06/9rjsjo5NPyze8HLloQCrJOgd/Ai8/rlA ElcnK1Zvduub4sWU100TuSGEWRG+JdfyV6L+pJRMdNyPd0jgNiL3EH39DqHc1GiH buX6LOrAIHxJm3OTp3mQ+/jxjE4BQ9uS+Kj+lFznQ2BMVqs7E3nGKQzuyVbp32aZ DVEnWySuK8OA+qRrIIMUvttb70EjQ007g83TV8bP4KvVIzEliDnLYkhDYRj94MM1 qqftOudlVn04KXjm08LtXJrDTmszEJp5nHa+0idcqsSlIpI8tdNGXsoM0tAXLN5c 8TqjsmSqelBNMh+XNHS8JUWlhb4QEYqAixC6wErLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpZ3Ureeam3SgBSJpMC7U/gT/YuMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0NDgxOTViLTg0ZjMtNGUyYy1iZWI5LTMzY2VlNTMyZGNlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABrFp4wDQYJKoZIhvcNAQELBQADggEBAHFsfY0OjsAeGkxrF4kQswa7GRWP UayvvsIbVq3PIiF1gjPAzzvIt7/ftxcv9jRC9rAQADf+jXp+chlkpVP97a6wlx9r xfAuaHo+Yuoz0K1pPzQUuNVkv4g2ObPQ+1rJm/GScWmSZjEWLz01YGeIGCAeT2GD 7Bcd3xIHAlge/sW5vu9g7G1AzsmCj7emXBE31/UUTenvWP9o/JN/HaWLVb/Pes20 fbKrODHK7fRIRtl3ZxUKxCaXj3FXRKdK0yj7zRNHc1o7/8mBmmz0jTBlfVRZvyID Syyx5/HLUawkTX0SBOPZp23RS0giZTMUQNfUk6wBluhDw1NhZFt3GASZ2cI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:23 2025 by rpki-client