$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa File: bc98b8a4-19f3-4303-9456-ca95391c61c5.roa (raw, json) Hash identifier: IlV7NgRp/t86IhGHlHK+ZN4UT5oC0Wt9dEoUITqhqgI= Subject key identifier: B7:58:D1:4F:2B:3F:7F:1C:68:17:7C:20:5E:1C:1F:AD:35:61:D2:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66C77A681D33DF70D5C50A6D4F5FAB83EA10BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa Signing time: Fri 25 Apr 2025 00:31:27 +0000 ROA not before: Fri 25 Apr 2025 00:31:27 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c7:7a:68:1d:33:df:70:d5:c5:0a:6d:4f:5f:ab:83:ea:10:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:31:27 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=0d68c8afae0a1748983ba2467a7af9ceae5a7bb165b52084f14561acf2a2eea1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:5e:17:5f:48:e6:ba:37:92:76:cd:f2:10: 87:35:2e:e1:98:7a:dc:16:f6:a7:f8:c2:45:45:1d: b6:c8:d9:b2:8e:1e:c7:25:d3:34:37:b3:bc:e8:22: e3:64:ae:69:9b:9f:cf:02:8e:df:b0:9f:c5:80:49: 56:4e:9f:db:fa:f2:60:47:06:85:51:9e:90:fd:9e: 06:98:41:91:b8:66:1e:d5:fb:e3:df:19:c8:9e:73: ef:ea:56:55:83:42:56:31:c4:e0:d3:34:54:7e:f5: cd:9b:24:b1:d8:8b:55:a0:d0:50:84:75:8f:4a:c8: 3d:d1:74:1d:dd:2f:29:68:df:9b:23:bf:1c:de:c4: cc:85:5b:e2:a1:53:2a:29:0a:08:a4:d3:60:28:ff: 31:45:f5:10:f7:2f:35:8d:f1:11:67:18:9f:43:f0: 9d:c1:6f:cb:7a:55:9c:ac:41:15:77:e3:ce:f1:fa: 0b:47:36:da:43:b2:19:b9:0b:5e:18:ea:e7:e3:01: 67:55:4f:1d:82:00:17:68:11:7b:8e:9f:fc:ae:50: 1c:c3:ab:42:e7:89:93:2b:85:81:6b:63:2f:77:b1: ff:e7:76:29:18:2d:10:f1:42:b3:26:14:0f:39:fa: 52:ab:94:38:14:e0:4f:55:fd:23:8e:57:c7:4b:7a: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:58:D1:4F:2B:3F:7F:1C:68:17:7C:20:5E:1C:1F:AD:35:61:D2:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7b:a8:30:21:4a:5c:60:83:3f:6e:c1:2d:fe:bd:30:85:fa:86: ed:30:68:af:3a:88:15:7c:cb:38:c3:5d:02:28:02:1d:67:0f: 5e:e4:f1:b1:7a:3f:53:8d:cf:50:63:eb:2d:3e:21:f2:b6:9b: 23:e8:43:82:ee:e3:33:e1:33:a9:ff:0e:a6:7e:2c:f0:a0:2a: 47:7e:f3:f1:e2:a6:ce:ae:3a:62:6d:c3:f1:00:de:e5:69:fa: 1a:c6:0a:4b:13:84:79:ed:5d:e0:a5:47:e0:fb:26:bf:9f:5b: 39:2c:25:73:fe:90:9d:c7:b1:14:16:06:9d:42:b7:25:72:b5: 86:8c:30:1c:b1:b6:61:12:e0:0b:99:21:93:ed:6d:b7:0f:d8: ed:ff:38:44:f0:c8:f1:3e:9c:c8:e2:33:8f:32:c5:6c:29:e0: a5:e2:d1:de:e9:fc:4d:f3:c9:8a:e8:ea:96:56:b8:76:be:ed: 37:cd:c5:49:db:36:40:46:57:0e:d1:eb:56:ad:39:07:ef:b9: f3:de:41:a9:33:61:d9:8a:8d:0b:0b:a5:0e:89:78:c7:5b:c3: dd:28:ff:79:ed:28:87:13:13:d6:23:2b:9a:7b:f4:e0:82:64: 7a:0a:1d:5b:4b:f4:c0:13:53:b2:01:e4:ef:fa:3b:82:4a:c5: 9e:86:21:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITZsd6aB0z33DVxQptT1+rg+oQuzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA0MjUwMDMxMjdaFw0yNTA1MzAyMzU5NTla MHoxSTBHBgNVBAUTQDBkNjhjOGFmYWUwYTE3NDg5ODNiYTI0NjdhN2FmOWNlYWU1 YTdiYjE2NWI1MjA4NGYxNDU2MWFjZjJhMmVlYTExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJHSXhdfSOa6N5J2zfIQhzUu4Zh63Bb2p/jCRUUdtsjZso4e xyXTNDezvOgi42SuaZufzwKO37CfxYBJVk6f2/ryYEcGhVGekP2eBphBkbhmHtX7 498ZyJ5z7+pWVYNCVjHE4NM0VH71zZsksdiLVaDQUIR1j0rIPdF0Hd0vKWjfmyO/ HN7EzIVb4qFTKikKCKTTYCj/MUX1EPcvNY3xEWcYn0PwncFvy3pVnKxBFXfjzvH6 C0c22kOyGbkLXhjq5+MBZ1VPHYIAF2gRe46f/K5QHMOrQueJkyuFgWtjL3ex/+d2 KRgtEPFCsyYUDzn6UquUOBTgT1X9I45Xx0t6ejsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBS3WNFPKz9/HGgXfCBeHB+tNWHSujAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYmM5OGI4YTQtMTlmMy00MzAzLTk0NTYtY2E5NTM5MWM2MWM1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBhcWADANBgkqhkiG9w0BAQsFAAOCAQEAe6gwIUpcYIM/bsEt/r0whfqG7TBo rzqIFXzLOMNdAigCHWcPXuTxsXo/U43PUGPrLT4h8rabI+hDgu7jM+Ezqf8Opn4s 8KAqR37z8eKmzq46Ym3D8QDe5Wn6GsYKSxOEee1d4KVH4Psmv59bOSwlc/6Qncex FBYGnUK3JXK1howwHLG2YRLgC5khk+1ttw/Y7f84RPDI8T6cyOIzjzLFbCngpeLR 3un8TfPJiujqlla4dr7tN83FSds2QEZXDtHrVq05B++5895BqTNh2YqNCwulDol4 x1vD3Sj/ee0ohxMT1iMrmnv04IJkegodW0v0wBNTsgHk7/o7gkrFnoYhYA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:43 2025 by rpki-client