$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf1475a7-89e7-4508-9ca0-83599deec6f1.roa File: bf1475a7-89e7-4508-9ca0-83599deec6f1.roa (raw, json) Hash identifier: K9dFkccsYfn3UQ14ss3eUXC0MJivQBIFvfti6xhhvpM= Subject key identifier: 16:13:B1:ED:05:AA:51:D0:64:20:FB:91:16:09:E4:2F:32:C1:2D:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7590639C96ECDC0A3E910F9C150DC58CE89B09F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf1475a7-89e7-4508-9ca0-83599deec6f1.roa Signing time: Tue 22 Apr 2025 00:01:29 +0000 ROA not before: Tue 22 Apr 2025 00:01:29 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:90:63:9c:96:ec:dc:0a:3e:91:0f:9c:15:0d:c5:8c:e8:9b:09:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:01:29 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=2a3a5fde3fb777f55fb2a67e38391db03bfa8779a219a82b429c23aa5f0a18fd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:a2:be:06:48:a8:89:0b:b7:20:26:87:67: 8d:8f:06:ea:a5:0d:01:bf:97:f6:fd:26:03:6f:25: a1:9d:8a:8b:0c:db:8c:f1:0b:9c:92:f2:a8:13:61: d6:a6:d0:9b:68:24:10:3e:d8:cf:dc:3e:3b:51:3d: 6d:6e:3b:c9:af:04:70:ce:84:35:3c:e6:d0:0c:01: 2e:34:f4:17:9a:ab:8f:c9:5a:15:09:00:64:19:16: c8:5d:2a:1f:1b:45:0d:4f:19:db:0f:72:de:5e:39: fa:21:32:ba:df:b4:ab:77:37:dc:ee:e8:a9:a2:4d: d9:be:2a:40:4f:6b:ac:53:81:d4:d5:0d:27:3c:dd: e2:49:6b:63:41:31:46:00:68:56:a6:3d:2c:03:ce: 48:86:7c:af:62:ea:20:3f:37:40:3b:5a:1f:76:d7: 75:e6:10:94:21:99:34:dc:97:70:41:ce:c2:5f:27: 7b:81:0b:82:93:00:b6:d9:bc:55:a4:f4:1c:27:34: b1:1f:32:87:d8:e8:81:ed:94:f9:55:06:68:83:d9: dd:96:d1:50:ac:07:d2:a9:1b:32:df:80:b3:44:6e: 8b:cb:bf:98:9b:aa:73:ec:ac:9f:0b:54:72:0f:14: 00:af:db:a7:2b:f0:ed:9b:11:20:ca:8d:d1:4a:7c: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:13:B1:ED:05:AA:51:D0:64:20:FB:91:16:09:E4:2F:32:C1:2D:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf1475a7-89e7-4508-9ca0-83599deec6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.56.0/22 Signature Algorithm: sha256WithRSAEncryption 18:1b:9a:57:22:87:be:bf:97:91:8e:f1:2c:9b:c1:31:58:8f: 21:5a:0e:39:a0:4b:ad:78:2b:b0:62:4e:ef:00:64:4e:f5:d6: 17:6a:41:f9:ce:32:06:b4:6c:1b:bd:09:ff:54:43:bc:9d:e7: 1e:74:55:72:1a:56:e9:0a:2d:b2:c8:f7:63:b1:c7:1a:0b:f0: 37:82:12:d3:58:20:99:cd:7b:20:ab:6c:e8:5f:73:dc:8e:22: 33:51:35:62:8c:69:07:c3:60:40:78:b8:02:56:45:07:4d:dc: 08:43:4b:7a:a9:bf:ac:1f:03:de:46:e3:f7:88:f0:87:34:dd: 16:57:08:b7:b3:9a:2f:41:fd:d4:b3:b7:09:a3:4f:9b:50:40: 40:d7:b6:fd:25:8d:59:2b:1b:a8:3b:2c:54:a7:a5:44:87:3b: 9e:43:9c:54:21:d7:fe:e4:f4:02:35:d9:c5:51:a7:cd:29:c4: d8:fe:cd:41:7a:b2:a2:6c:6c:1d:fb:77:3f:d5:59:56:1a:65: 61:fd:3c:9e:c7:b7:11:f4:e6:ca:44:b2:b3:33:03:b6:a3:a9: 04:7d:1b:3c:09:9d:8d:e3:c7:41:ea:9d:e9:bf:0a:6e:ec:73: 39:c4:53:73:45:22:71:81:46:cc:bb:48:df:14:95:e7:e0:86: 10:0a:a8:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdZBjnJbs3Ao+kQ+cFQ3FjOibCfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAwMTI5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTNhNWZkZTNmYjc3N2Y1NWZiMmE2N2UzODM5MWRiMDNi ZmE4Nzc5YTIxOWE4MmI0MjljMjNhYTVmMGExOGZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI26K+BkioiQu3ICaHZ42PBuqlDQG/l/b9JgNvJaGdiosM 24zxC5yS8qgTYdam0JtoJBA+2M/cPjtRPW1uO8mvBHDOhDU85tAMAS409Beaq4/J WhUJAGQZFshdKh8bRQ1PGdsPct5eOfohMrrftKt3N9zu6KmiTdm+KkBPa6xTgdTV DSc83eJJa2NBMUYAaFamPSwDzkiGfK9i6iA/N0A7Wh9213XmEJQhmTTcl3BBzsJf J3uBC4KTALbZvFWk9BwnNLEfMofY6IHtlPlVBmiD2d2W0VCsB9KpGzLfgLNEbovL v5ibqnPsrJ8LVHIPFACv26cr8O2bESDKjdFKfBq3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFhOx7QWqUdBkIPuRFgnkLzLBLdMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmMTQ3NWE3LTg5ZTctNDUwOC05Y2EwLTgzNTk5ZGVlYzZmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBszgwDQYJKoZIhvcNAQELBQADggEBABgbmlcih76/l5GO8SybwTFYjyFa DjmgS614K7BiTu8AZE711hdqQfnOMga0bBu9Cf9UQ7yd5x50VXIaVukKLbLI92Ox xxoL8DeCEtNYIJnNeyCrbOhfc9yOIjNRNWKMaQfDYEB4uAJWRQdN3AhDS3qpv6wf A95G4/eI8Ic03RZXCLezmi9B/dSztwmjT5tQQEDXtv0ljVkrG6g7LFSnpUSHO55D nFQh1/7k9AI12cVRp80pxNj+zUF6sqJsbB37dz/VWVYaZWH9PJ7HtxH05spEsrMz A7ajqQR9GzwJnY3jx0Hqnem/Cm7scznEU3NFInGBRsy7SN8UlefghhAKqNE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:50 2025 by rpki-client