$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa File: b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa (raw, json) Hash identifier: tmOl8hj5MxxO4j7RCUwYogqCkZ6okcCzNhmsrlUh6lE= Subject key identifier: 79:15:2A:D7:8E:55:45:14:61:22:08:7F:01:E0:95:69:EA:0B:FE:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1743580EC77E48D20B4EF64D6BF3C1CECD4715BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa Signing time: Tue 08 Apr 2025 00:31:19 +0000 ROA not before: Tue 08 Apr 2025 00:31:19 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:43:58:0e:c7:7e:48:d2:0b:4e:f6:4d:6b:f3:c1:ce:cd:47:15:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:31:19 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=82706bda1d64bd2d505ec4db9c4897e248f74632e640d5e10ea2951e4c1b531a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:62:39:b4:6e:92:2c:3e:91:7b:43:53:1c: 7c:6b:fb:07:39:fe:e6:89:3e:84:b6:13:fa:b9:27: 86:e9:3c:26:bc:8a:90:80:89:b3:80:36:54:fe:ad: e8:1e:96:9b:d9:25:e2:ca:07:b6:80:ea:bc:1a:d2: 02:d8:c5:17:cf:46:ad:1a:06:c8:ce:c4:5f:19:ee: 60:90:74:84:61:60:df:a6:88:83:77:11:df:50:2e: 77:93:4e:10:83:19:c2:61:a6:d4:34:57:5f:0e:de: 83:c0:d3:ca:c4:32:88:b4:11:b6:de:16:dc:2d:75: 2a:f7:ac:cc:d7:0f:06:18:80:34:b4:60:d3:92:a5: f8:64:6b:b4:37:37:f2:c4:ec:ef:3c:ba:4a:0d:cf: 2c:2c:5f:6a:2f:b7:27:48:d2:8e:a3:68:5d:df:fb: b3:30:cb:53:e7:dd:35:e6:4f:f1:34:0f:b8:4a:bd: be:be:f8:b7:65:cc:fb:78:0c:e5:b3:49:87:65:a3: aa:7a:ac:a4:7c:12:a8:01:a6:24:29:c4:11:ca:1e: 07:aa:6d:1a:cb:66:d0:ea:57:51:4e:31:05:39:a7: de:91:e1:9b:d4:cf:b5:40:b3:f5:0e:f8:32:d3:dd: e3:44:fb:b6:56:17:47:ba:58:0d:db:9c:99:e3:c4: 9a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:2A:D7:8E:55:45:14:61:22:08:7F:01:E0:95:69:EA:0B:FE:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6208e30-3f0d-4dbc-b9d5-6011318dcba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.69.0/24 Signature Algorithm: sha256WithRSAEncryption 88:10:3d:22:cc:d9:0f:93:2d:c9:b5:c2:f8:4b:50:03:e7:74: 4b:46:21:d9:75:7a:99:ea:70:7c:50:52:07:59:0a:8f:9e:ad: 92:89:e9:34:eb:8a:ef:e7:53:c5:f2:74:85:02:ac:c8:8f:d4: 56:29:da:cb:bf:15:73:93:21:12:38:af:ff:74:15:f0:69:f8: c6:d7:b7:cc:59:3c:57:73:cd:81:b5:2a:ff:34:8e:6c:ff:04: 5c:5a:6c:b0:76:a8:04:c0:d4:61:2c:da:29:62:43:c3:df:77: 1a:b3:c3:3d:b4:ef:e2:82:6f:d0:54:29:30:67:22:b7:8c:e6: a7:41:f8:99:f2:df:db:21:29:56:a6:36:b2:2d:f9:68:d1:21: 8f:e2:c1:5b:45:d7:3e:2c:e4:36:1a:1e:6c:cf:06:24:36:bf: 54:60:8d:90:3c:78:a6:ff:b9:91:70:02:8d:91:58:5c:2d:eb: 52:48:16:5c:24:83:e6:e6:f6:ef:21:31:49:4e:79:aa:ec:a8: 0b:21:fa:0e:5e:05:83:15:f8:c8:19:25:48:50:c3:2c:5a:de: a6:86:d6:93:d1:1e:45:35:80:fb:0c:e6:18:a5:9d:2f:68:fd: 4b:40:12:43:80:97:83:ab:5e:73:4d:9f:f9:68:65:71:dc:c3: 0e:11:e7:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF0NYDsd+SNILTvZNa/PBzs1HFbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAzMTE5WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjcwNmJkYTFkNjRiZDJkNTA1ZWM0ZGI5YzQ4OTdlMjQ4 Zjc0NjMyZTY0MGQ1ZTEwZWEyOTUxZTRjMWI1MzFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc3GI5tG6SLD6Re0NTHHxr+wc5/uaJPoS2E/q5J4bpPCa8 ipCAibOANlT+regelpvZJeLKB7aA6rwa0gLYxRfPRq0aBsjOxF8Z7mCQdIRhYN+m iIN3Ed9QLneTThCDGcJhptQ0V18O3oPA08rEMoi0EbbeFtwtdSr3rMzXDwYYgDS0 YNOSpfhka7Q3N/LE7O88ukoNzywsX2ovtydI0o6jaF3f+7Mwy1Pn3TXmT/E0D7hK vb6++LdlzPt4DOWzSYdlo6p6rKR8EqgBpiQpxBHKHgeqbRrLZtDqV1FOMQU5p96R 4ZvUz7VAs/UO+DLT3eNE+7ZWF0e6WA3bnJnjxJpbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeRUq145VRRRhIgh/AeCVaeoL/jEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2MjA4ZTMwLTNmMGQtNGRiYy1iOWQ1LTYwMTEzMThkY2JhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EUwDQYJKoZIhvcNAQELBQADggEBAIgQPSLM2Q+TLcm1wvhLUAPndEtG Idl1epnqcHxQUgdZCo+erZKJ6TTriu/nU8XydIUCrMiP1FYp2su/FXOTIRI4r/90 FfBp+MbXt8xZPFdzzYG1Kv80jmz/BFxabLB2qATA1GEs2iliQ8Pfdxqzwz207+KC b9BUKTBnIreM5qdB+Jny39shKVamNrIt+WjRIY/iwVtF1z4s5DYaHmzPBiQ2v1Rg jZA8eKb/uZFwAo2RWFwt61JIFlwkg+bm9u8hMUlOearsqAsh+g5eBYMV+MgZJUhQ wyxa3qaG1pPRHkU1gPsM5hilnS9o/UtAEkOAl4OrXnNNn/loZXHcww4R55Y= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:47 2025 by rpki-client