$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa File: b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa (raw, json) Hash identifier: w3TgXrJDz2+umPtmVW+5eJd4sa8RNqe+PL19JVuCbEA= Subject key identifier: AF:65:11:0A:75:46:0E:20:5A:7E:9C:AA:4B:C3:CF:CA:D1:61:8A:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C33C38D4ED2763E36A26223FF417E98FD11645F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa Signing time: Fri 18 Apr 2025 00:42:08 +0000 ROA not before: Fri 18 Apr 2025 00:42:08 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.52.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:33:c3:8d:4e:d2:76:3e:36:a2:62:23:ff:41:7e:98:fd:11:64:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:42:08 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=a2363ba4df368b9f0cc3c9aef4ee7233054a5908b329e31108116105f0b562bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:e0:25:cb:71:a7:4f:96:5e:48:72:c6:aa: 07:0f:d4:36:05:99:c0:a5:5a:49:41:1c:26:d7:c2: 59:b1:08:3a:ed:e2:6e:13:ba:1b:76:ef:4b:e9:d2: 17:47:fd:40:2a:0a:a8:a4:2a:1f:af:f6:52:b0:be: 36:bb:18:46:ab:c3:88:e3:e2:c6:7f:57:9f:ae:b5: 91:99:42:7a:12:5d:a6:da:b0:85:a9:5d:50:e9:95: 63:4e:98:15:a9:f3:02:ca:2a:2a:36:b3:32:3b:78: 71:69:3b:37:ce:02:d8:92:cb:cd:b2:58:a4:aa:56: 76:6d:90:6f:e1:89:62:97:fa:15:31:b4:b9:11:bd: 09:a1:38:dd:e6:eb:ee:ed:41:3a:eb:81:f8:58:ba: 59:bc:e2:ff:d9:3f:3f:97:42:ab:3b:9a:dd:0e:19: ba:e4:bf:cf:db:9f:35:d1:35:f4:08:cb:af:61:57: 3d:02:8e:5d:bc:9a:85:53:89:25:8d:56:c9:a0:43: a2:37:a5:9c:57:e6:77:26:81:70:3b:67:47:1c:cb: 08:d4:5b:05:ba:19:f6:26:1c:eb:9c:ca:7d:1e:98: e9:ba:0d:a0:ba:80:81:1b:c0:0b:23:1b:e8:83:c1: c2:37:9b:4f:00:88:9c:df:72:c9:49:7d:1d:b1:2e: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:65:11:0A:75:46:0E:20:5A:7E:9C:AA:4B:C3:CF:CA:D1:61:8A:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6a3d4f1-4012-46aa-82b4-dbbf7dcdb991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.52.101.0/24 Signature Algorithm: sha256WithRSAEncryption c2:52:d4:b5:d7:d0:5c:72:f1:78:82:9a:fe:5e:c0:2c:bb:90: b9:de:d2:39:30:67:95:e5:54:07:89:46:98:a3:9f:f1:39:ef: e9:95:6b:5e:19:fc:d8:38:7a:73:ee:63:0e:ee:d5:9f:83:38: a8:d5:e4:e5:12:8f:00:4e:88:9d:b6:4a:c4:90:44:68:65:9d: ba:5b:2d:99:a2:ce:89:fc:44:d6:64:71:8d:8f:63:22:c7:58: 07:b2:a4:78:e9:b4:ed:6c:84:36:4d:da:43:9b:c3:72:58:52: 3d:8c:8d:22:3c:c5:bf:ba:22:70:f0:e9:25:90:5f:64:f7:9a: 4a:64:e6:cd:51:6b:40:d8:36:3f:ac:0d:0b:85:be:d0:4c:60: 20:44:73:a4:9b:35:a9:26:f6:78:6b:a7:25:82:3e:2c:5d:bf: 96:e2:8e:8e:78:73:e9:a7:b5:73:75:c2:8f:26:0a:e7:db:79: 98:3d:18:29:d0:e1:9e:14:53:35:2a:c1:c8:c5:f8:c2:14:3c: db:fb:c7:ef:a7:bb:0c:78:b6:7c:bc:0a:b3:d9:e5:47:7a:9b: 0a:4b:86:f2:66:70:b3:71:c1:29:70:c3:49:64:69:84:60:a7: 63:87:0f:97:9d:49:f9:13:5d:a9:1e:dd:9e:03:0e:ec:3e:27: 7e:eb:86:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXDPDjU7Sdj42omIj/0F+mP0RZF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MjA4WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjM2M2JhNGRmMzY4YjlmMGNjM2M5YWVmNGVlNzIzMzA1 NGE1OTA4YjMyOWUzMTEwODExNjEwNWYwYjU2MmJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR1OAly3GnT5ZeSHLGqgcP1DYFmcClWklBHCbXwlmxCDrt 4m4Tuht270vp0hdH/UAqCqikKh+v9lKwvja7GEarw4jj4sZ/V5+utZGZQnoSXaba sIWpXVDplWNOmBWp8wLKKio2szI7eHFpOzfOAtiSy82yWKSqVnZtkG/hiWKX+hUx tLkRvQmhON3m6+7tQTrrgfhYulm84v/ZPz+XQqs7mt0OGbrkv8/bnzXRNfQIy69h Vz0Cjl28moVTiSWNVsmgQ6I3pZxX5ncmgXA7Z0ccywjUWwW6GfYmHOucyn0emOm6 DaC6gIEbwAsjG+iDwcI3m08AiJzfcslJfR2xLvqbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr2URCnVGDiBafpyqS8PPytFhih4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2YTNkNGYxLTQwMTItNDZhYS04MmI0LWRiYmY3ZGNkYjk5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABANGUwDQYJKoZIhvcNAQELBQADggEBAMJS1LXX0Fxy8XiCmv5ewCy7kLne 0jkwZ5XlVAeJRpijn/E57+mVa14Z/Ng4enPuYw7u1Z+DOKjV5OUSjwBOiJ22SsSQ RGhlnbpbLZmizon8RNZkcY2PYyLHWAeypHjptO1shDZN2kObw3JYUj2MjSI8xb+6 InDw6SWQX2T3mkpk5s1Ra0DYNj+sDQuFvtBMYCBEc6SbNakm9nhrpyWCPixdv5bi jo54c+mntXN1wo8mCufbeZg9GCnQ4Z4UUzUqwcjF+MIUPNv7x++nuwx4tny8CrPZ 5Ud6mwpLhvJmcLNxwSlww0lkaYRgp2OHD5edSfkTXake3Z4DDuw+J37rhoQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:51 2025 by rpki-client