$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c29393c0-6f80-476e-b89a-346f05d1f7e4.roa File: c29393c0-6f80-476e-b89a-346f05d1f7e4.roa (raw, json) Hash identifier: VZLMhELDUwDQ8dvyv2IEpqO5ASZvnOCtC/9tDq6pLlU= Subject key identifier: A2:B9:2C:8B:1D:1F:45:54:9B:B0:EF:10:2B:9C:7B:63:20:2B:E2:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3350D57A4C4D1E5B34B569837482414FAE5CEF20 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c29393c0-6f80-476e-b89a-346f05d1f7e4.roa Signing time: Fri 25 Apr 2025 21:22:53 +0000 ROA not before: Fri 25 Apr 2025 21:22:53 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.171.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:50:d5:7a:4c:4d:1e:5b:34:b5:69:83:74:82:41:4f:ae:5c:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 21:22:53 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=3aa9759222438f7828b4255d3dd37e68cb41e4f7b839fed9d79cd095d2e08344, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a0:ec:2d:a5:17:e7:d4:95:9a:f8:03:f0:a3: 99:1f:66:a4:8f:74:3e:b3:b0:11:76:02:7e:56:43: 35:f3:b6:d5:c1:b5:4c:25:3a:f7:0a:91:22:8e:34: 76:d0:1e:db:f9:9e:c4:2c:a3:f2:dd:33:c0:d4:01: 6b:a4:52:18:4a:6d:4d:37:8d:55:2d:ad:52:93:28: aa:03:99:a3:96:f1:02:24:74:40:32:8b:f2:96:99: 39:26:ea:55:bd:6c:3f:30:0b:96:72:3d:e6:c2:19: 6a:68:36:7c:56:ad:0b:f7:e2:a2:59:7a:4c:5d:66: 59:61:c1:76:21:a9:f8:9d:90:c2:08:78:f4:53:1f: 52:99:e5:ea:f4:a4:47:56:3f:08:89:bd:d7:0b:53: 07:a8:db:06:ea:a4:8a:d6:86:cc:2b:ab:8b:a7:9a: 35:e5:5f:53:7b:ec:91:08:28:27:a8:8f:04:8b:f6: 24:c7:f0:64:8e:99:1a:d6:4e:e4:60:0d:30:eb:bb: a1:8d:1d:00:c3:94:23:84:b9:4d:d3:24:3e:19:16: 64:82:8d:10:eb:98:9c:55:1a:01:9c:5e:28:78:b1: 26:65:d0:f8:0a:4d:29:26:d0:5e:96:66:03:7e:17: ad:ee:7c:70:fb:f3:71:20:0c:a4:f7:5d:28:71:7a: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B9:2C:8B:1D:1F:45:54:9B:B0:EF:10:2B:9C:7B:63:20:2B:E2:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c29393c0-6f80-476e-b89a-346f05d1f7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption bb:ac:9f:45:d0:67:70:89:68:9c:2c:e9:88:12:75:82:c5:2c: 44:39:be:bf:4a:dc:11:1a:0d:f3:2b:6f:4a:59:30:0a:0f:08: 28:72:96:89:3e:de:64:8c:bd:fc:20:31:1a:10:21:c1:f1:af: 39:02:88:a9:dc:57:7f:98:05:5e:81:76:62:20:a4:8d:92:94: 2c:cc:f1:57:2f:8e:c2:c5:6e:a1:0f:6b:88:03:dd:2d:20:3f: a0:54:25:e1:e6:45:a6:aa:19:85:52:c6:dc:25:56:42:c0:de: 6f:8f:9f:ae:4f:4f:bc:df:00:2c:0a:98:32:c0:5d:82:e8:05: 54:e3:c9:10:70:5d:a9:4a:6e:9a:ca:89:f2:65:ca:7a:5d:45: 73:54:5a:d0:04:be:02:1f:6d:aa:9b:5c:f5:5e:9d:4f:0d:ca: c5:30:79:ed:ed:44:e7:58:18:07:32:a5:b8:1e:3a:be:08:83: fa:4f:64:2a:af:69:ce:c8:0b:06:38:41:61:58:45:4f:5f:d5: 39:a9:63:1e:ab:22:91:02:fe:d8:d1:4c:cb:41:17:de:7d:a0: 4b:4f:85:ca:89:40:bb:f6:45:f0:96:4f:06:8e:24:81:98:6d: a5:4b:27:20:d2:9d:89:58:e5:e2:df:97:29:c7:3a:66:e0:7e: e8:6a:a3:e7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM1DVekxNHls0tWmDdIJBT65c7yAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MjEyMjUzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWE5NzU5MjIyNDM4Zjc4MjhiNDI1NWQzZGQzN2U2OGNi NDFlNGY3YjgzOWZlZDlkNzljZDA5NWQyZTA4MzQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpoOwtpRfn1JWa+APwo5kfZqSPdD6zsBF2An5WQzXzttXB tUwlOvcKkSKONHbQHtv5nsQso/LdM8DUAWukUhhKbU03jVUtrVKTKKoDmaOW8QIk dEAyi/KWmTkm6lW9bD8wC5ZyPebCGWpoNnxWrQv34qJZekxdZllhwXYhqfidkMII ePRTH1KZ5er0pEdWPwiJvdcLUweo2wbqpIrWhswrq4unmjXlX1N77JEIKCeojwSL 9iTH8GSOmRrWTuRgDTDru6GNHQDDlCOEuU3TJD4ZFmSCjRDrmJxVGgGcXih4sSZl 0PgKTSkm0F6WZgN+F63ufHD783EgDKT3XShxekznAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUorksix0fRVSbsO8QK5x7YyAr4qwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyOTM5M2MwLTZmODAtNDc2ZS1iODlhLTM0NmYwNWQxZjdlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4qzANBgkqhkiG9w0BAQsFAAOCAQEAu6yfRdBncIlonCzpiBJ1gsUsRDm+ v0rcERoN8ytvSlkwCg8IKHKWiT7eZIy9/CAxGhAhwfGvOQKIqdxXf5gFXoF2YiCk jZKULMzxVy+OwsVuoQ9riAPdLSA/oFQl4eZFpqoZhVLG3CVWQsDeb4+frk9PvN8A LAqYMsBdgugFVOPJEHBdqUpumsqJ8mXKel1Fc1Ra0AS+Ah9tqptc9V6dTw3KxTB5 7e1E51gYBzKluB46vgiD+k9kKq9pzsgLBjhBYVhFT1/VOaljHqsikQL+2NFMy0EX 3n2gS0+FyolAu/ZF8JZPBo4kgZhtpUsnINKdiVjl4t+XKcc6ZuB+6Gqj5w== -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:39 2025 by rpki-client