$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa File: bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa (raw, json) Hash identifier: Z/fXoCnuVqXFXw7qdBs3u9WXY6J4nYp/2fI3WsZP0sk= Subject key identifier: 13:6A:98:B2:17:F5:8E:05:C8:F9:C7:8D:E5:EA:2C:3A:89:7A:65:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B3202089033FE6B230DF21C1503AC5FD638BBAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa Signing time: Fri 25 Apr 2025 15:01:49 +0000 ROA not before: Fri 25 Apr 2025 15:01:49 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:32:02:08:90:33:fe:6b:23:0d:f2:1c:15:03:ac:5f:d6:38:bb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:01:49 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2a8d83a3a6edb82f44b30517a5bc10a50420d8eb0aab9b8bfcd67748010d0b4f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:ce:5a:c1:31:de:73:cd:cd:a1:66:62:b2: 19:ff:04:b9:2c:fa:e2:58:5f:96:96:53:7b:d1:e7: 03:b5:63:28:b7:0f:d7:62:a6:29:4f:b1:93:ab:dc: 34:07:b4:e0:82:5b:93:55:4b:52:a1:bd:2c:34:5d: 07:47:51:c8:49:fd:a8:a3:42:8e:8d:2b:1d:14:38: 3a:5f:e9:4e:5c:1c:2f:82:52:93:d3:e6:cf:3e:63: b5:08:38:5a:39:a0:4c:09:8e:f9:5f:5f:7e:9a:59: 64:ef:f4:5d:ea:ac:c2:d0:a6:8b:3e:27:97:a6:6f: 13:5f:c4:93:c8:5a:5a:c2:45:52:cb:b9:06:52:ae: a8:9d:24:77:92:ff:79:b3:e4:8d:e3:b5:62:64:8c: 8e:fb:0a:d4:8f:eb:91:5e:cd:78:bf:ff:89:32:5d: 4d:2a:ec:61:1d:e7:75:70:66:9f:a0:3c:ad:16:0c: ce:07:6e:c1:45:ea:f7:30:ce:65:c2:f4:48:8c:94: 9c:0f:b3:f5:30:3b:d4:f5:8e:a9:db:13:76:a9:6b: ad:57:76:4c:28:31:17:a1:b9:92:5c:c6:61:52:ff: 73:42:48:df:15:33:70:f1:49:ae:2c:07:35:f6:ef: b2:2b:a4:72:19:d1:8e:76:3e:6a:d2:2d:f3:9c:93: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6A:98:B2:17:F5:8E:05:C8:F9:C7:8D:E5:EA:2C:3A:89:7A:65:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.224.0/19 Signature Algorithm: sha256WithRSAEncryption 92:83:20:1d:e3:03:0e:5e:00:20:ab:d5:dd:52:7b:8f:83:7e: 4c:b7:5d:eb:61:ab:03:2a:2c:a3:e8:cf:39:8e:f2:c0:cd:ea: 26:49:b5:be:6d:dd:cb:2f:e1:f3:25:6f:e7:55:30:79:48:90: 22:d8:86:65:c0:c2:83:54:5e:36:aa:83:6b:46:8a:6c:15:be: 98:53:0e:a1:6f:af:f3:21:cf:cb:95:3e:d6:dc:d6:3c:fd:fb: 2a:f2:de:f9:80:98:bf:ca:a5:8a:78:b7:f7:69:fb:13:f9:72: 31:b0:69:66:2e:66:de:b0:61:85:09:ed:f1:06:e7:0a:f1:bb: de:4c:1e:3a:34:ef:41:f7:84:b2:8f:37:a5:26:1f:75:69:a0: a2:0e:1c:d2:42:74:0e:de:da:ab:95:da:15:34:32:d9:f7:63: 53:40:ba:96:fd:6b:75:a2:38:bf:ca:a8:1d:e6:e3:f8:de:c8: ff:8a:ce:29:c7:22:4f:b9:28:b5:e1:83:4e:1f:f6:77:74:22: 50:61:b9:06:96:4d:f2:92:be:55:ff:ff:77:c9:3f:70:e6:19: b5:1a:0b:63:19:f6:88:88:3f:f9:58:39:1f:ba:59:6f:95:dc: 41:59:00:12:33:81:3f:13:40:c5:6d:f4:f7:ee:55:07:0e:ba: 64:ff:03:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGzICCJAz/msjDfIcFQOsX9Y4u68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUwMTQ5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYThkODNhM2E2ZWRiODJmNDRiMzA1MTdhNWJjMTBhNTA0 MjBkOGViMGFhYjliOGJmY2Q2Nzc0ODAxMGQwYjRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5Lc5awTHec83NoWZishn/BLks+uJYX5aWU3vR5wO1Yyi3 D9dipilPsZOr3DQHtOCCW5NVS1KhvSw0XQdHUchJ/aijQo6NKx0UODpf6U5cHC+C UpPT5s8+Y7UIOFo5oEwJjvlfX36aWWTv9F3qrMLQpos+J5embxNfxJPIWlrCRVLL uQZSrqidJHeS/3mz5I3jtWJkjI77CtSP65FezXi//4kyXU0q7GEd53VwZp+gPK0W DM4HbsFF6vcwzmXC9EiMlJwPs/UwO9T1jqnbE3apa61XdkwoMRehuZJcxmFS/3NC SN8VM3DxSa4sBzX277IrpHIZ0Y52PmrSLfOckzy3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE2qYshf1jgXI+ceN5eosOol6ZdkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjNjUzZTk2LTBkOTUtNGVlZi1hM2M4LThlNDYyYmRlOTllNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVG4OAwDQYJKoZIhvcNAQELBQADggEBAJKDIB3jAw5eACCr1d1Se4+Dfky3 XethqwMqLKPozzmO8sDN6iZJtb5t3csv4fMlb+dVMHlIkCLYhmXAwoNUXjaqg2tG imwVvphTDqFvr/Mhz8uVPtbc1jz9+yry3vmAmL/KpYp4t/dp+xP5cjGwaWYuZt6w YYUJ7fEG5wrxu95MHjo070H3hLKPN6UmH3VpoKIOHNJCdA7e2quV2hU0Mtn3Y1NA upb9a3WiOL/KqB3m4/jeyP+KzinHIk+5KLXhg04f9nd0IlBhuQaWTfKSvlX//3fJ P3DmGbUaC2MZ9oiIP/lYOR+6WW+V3EFZABIzgT8TQMVt9PfuVQcOumT/A+U= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:46 2025 by rpki-client