$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa File: b856ae51-66ec-4600-b64a-768473b00d4c.roa (raw, json) Hash identifier: LkLP6RjdEtFJ/Clc2q7ZDVMHl3+yk8q+5go3SIKLnLs= Subject key identifier: 8A:AC:90:1E:BD:77:AE:FD:D2:EF:4A:95:21:1A:BC:F9:97:ED:51:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4773823EC8401EDC28948C38FC4D9E3EE4E3C813 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa Signing time: Wed 09 Apr 2025 00:30:17 +0000 ROA not before: Wed 09 Apr 2025 00:30:17 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:73:82:3e:c8:40:1e:dc:28:94:8c:38:fc:4d:9e:3e:e4:e3:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:30:17 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=0f5881af8cfac131cfd332b4fb1a2cddf89bd3610c66da9ef4f30db49c37de28, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:0b:8e:c1:10:7e:58:98:56:4b:d2:5b:4e: 28:7b:92:66:df:33:a4:ad:48:7b:51:02:75:35:fd: 1e:90:d7:8f:ba:4f:b7:35:22:9a:1d:48:ba:19:e9: 45:f5:c5:9b:86:98:17:a2:97:f4:d5:d7:11:12:f1: 2e:af:66:d8:2f:7f:f9:22:b2:c9:cd:74:79:2d:0d: 9e:1a:28:63:ad:2c:94:7d:2b:5a:65:66:1d:e2:b0: 92:88:a2:ae:c7:58:70:b2:83:6c:97:de:e4:da:03: a4:81:a5:22:a7:67:be:79:ee:43:d9:4e:5a:4b:de: f5:26:0b:5e:dd:bb:94:c9:3a:be:c8:95:e6:ae:f0: 4a:21:93:6e:a5:45:67:ce:17:a8:5d:50:78:5e:f0: 8c:cb:00:d8:f0:f5:78:77:65:18:2b:42:58:68:07: e0:ef:7d:f8:9a:4b:8a:b6:68:cb:bd:22:5c:42:7f: 8c:cf:e8:8f:53:02:84:68:27:59:02:9b:4a:fe:7c: dd:5c:c3:c0:77:4a:57:27:a3:05:aa:fc:0a:45:34: cc:80:8e:30:6e:2e:85:30:0d:de:dd:39:5d:3a:39: 19:71:f1:da:3d:1b:72:b1:e6:1f:43:01:5c:2b:3b: c7:79:d7:0d:55:ee:f9:78:82:36:61:90:86:77:db: f8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:90:1E:BD:77:AE:FD:D2:EF:4A:95:21:1A:BC:F9:97:ED:51:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b856ae51-66ec-4600-b64a-768473b00d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.123.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:92:59:27:fc:ef:44:ed:fe:40:06:af:0c:74:0a:16:2e:9a: 70:54:c5:34:d5:99:0b:2c:e9:e6:f4:60:b7:dd:3f:0f:1c:fd: 2e:97:7a:f8:2d:83:3b:5f:96:1b:bc:c5:22:46:3d:b7:83:79: 6e:0e:d1:fb:67:22:ef:41:20:d3:6c:95:c6:46:91:84:ff:7b: 0a:24:b0:2f:76:5d:6a:f8:08:b8:05:e7:49:b2:7b:63:f0:14: 2b:cd:74:fe:54:8a:ba:db:d1:eb:e5:68:1b:a2:10:92:9c:2c: 96:55:ba:f8:b1:32:23:10:9d:32:11:00:19:8b:ae:af:ff:37: 6a:ea:e6:b9:f0:0a:5a:e6:c1:88:7b:a2:10:3e:7d:ff:b0:36: 93:3a:70:66:b8:64:e6:c7:90:85:54:08:74:ab:62:c4:72:fa: 7b:1d:b9:cc:f7:02:87:9b:b6:8a:04:b0:aa:e7:aa:41:64:35: 5d:3e:8a:d1:9c:9b:69:da:b9:be:d7:cf:7c:2b:1e:82:6b:91: ae:17:45:b3:4e:dc:2d:a9:00:fe:6a:6a:74:98:c4:96:d1:68: 7a:4f:3d:7c:88:1a:e6:0d:60:5a:fd:db:59:5c:6a:64:26:21: f5:46:dd:b4:05:1d:2f:48:4b:c1:ac:22:be:f5:8e:89:38:47: 69:8f:cf:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR3OCPshAHtwolIw4/E2ePuTjyBMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAzMDE3WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjU4ODFhZjhjZmFjMTMxY2ZkMzMyYjRmYjFhMmNkZGY4 OWJkMzYxMGM2NmRhOWVmNGYzMGRiNDljMzdkZTI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFGQuOwRB+WJhWS9JbTih7kmbfM6StSHtRAnU1/R6Q14+6 T7c1IpodSLoZ6UX1xZuGmBeil/TV1xES8S6vZtgvf/kissnNdHktDZ4aKGOtLJR9 K1plZh3isJKIoq7HWHCyg2yX3uTaA6SBpSKnZ7557kPZTlpL3vUmC17du5TJOr7I leau8Eohk26lRWfOF6hdUHhe8IzLANjw9Xh3ZRgrQlhoB+DvffiaS4q2aMu9IlxC f4zP6I9TAoRoJ1kCm0r+fN1cw8B3SlcnowWq/ApFNMyAjjBuLoUwDd7dOV06ORlx 8do9G3Kx5h9DAVwrO8d51w1V7vl4gjZhkIZ32/hHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiqyQHr13rv3S70qVIRq8+ZftUc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4NTZhZTUxLTY2ZWMtNDYwMC1iNjRhLTc2ODQ3M2IwMGQ0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HswDQYJKoZIhvcNAQELBQADggEBAJ6SWSf870Tt/kAGrwx0ChYumnBU xTTVmQss6eb0YLfdPw8c/S6Xevgtgztflhu8xSJGPbeDeW4O0ftnIu9BINNslcZG kYT/ewoksC92XWr4CLgF50mye2PwFCvNdP5Uirrb0evlaBuiEJKcLJZVuvixMiMQ nTIRABmLrq//N2rq5rnwClrmwYh7ohA+ff+wNpM6cGa4ZObHkIVUCHSrYsRy+nsd ucz3AoebtooEsKrnqkFkNV0+itGcm2naub7Xz3wrHoJrka4XRbNO3C2pAP5qanSY xJbRaHpPPXyIGuYNYFr921lcamQmIfVG3bQFHS9IS8GsIr71jok4R2mPz58= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:59 2025 by rpki-client