$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa File: c7e48273-d97f-45e2-9820-48c08d0db4f5.roa (raw, json) Hash identifier: Ng2+mNd/SJMzNqTCvIW3JWhEkkb3kq4tvcoYKTjdAVo= Subject key identifier: 42:77:44:9F:6C:70:A9:BA:DB:65:A7:4B:D3:AE:EA:C2:8F:CB:0F:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 640694A92074D06FF6727D0275A06414933D0D35 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa Signing time: Mon 14 Apr 2025 15:00:21 +0000 ROA not before: Mon 14 Apr 2025 15:00:21 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:06:94:a9:20:74:d0:6f:f6:72:7d:02:75:a0:64:14:93:3d:0d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:00:21 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=faedcc9ee589798e2d3d48b62d82680861d0f512291b9584773e1face5fcaf6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:6e:74:ac:2b:de:80:ad:19:45:b6:52:00: ca:d0:12:ab:c9:5f:17:3c:7e:e3:97:59:d9:68:f8: e2:d8:42:3a:19:fc:ec:67:8d:c2:d5:91:6d:e5:95: 2c:6d:ca:cf:cc:95:27:e3:d8:27:24:8f:f7:9c:5f: 6b:d5:68:21:c0:27:a5:91:49:34:8e:c6:c6:b9:5e: b6:5e:bd:5a:fa:68:2a:cf:e4:cb:6f:ea:f7:4b:c4: 4c:2b:db:70:c5:ed:07:3b:48:da:4f:c3:9f:18:20: ec:fc:22:6b:73:17:c4:33:da:18:b8:31:47:36:f1: 59:e8:74:e2:d5:74:65:03:db:6c:e7:1c:6d:3d:54: 6f:b0:a1:1a:a7:0e:37:a7:80:fd:61:38:16:73:36: bc:0f:58:35:6f:54:2b:7d:66:bf:a4:66:a0:e1:af: fe:0a:a7:41:55:ae:d1:1d:2b:8e:6e:c6:11:6c:ed: f1:ce:b5:50:cc:51:85:15:12:dd:12:39:1d:1b:8a: 47:91:ff:94:37:c3:b9:08:23:4f:0f:b3:5e:d3:e6: 36:82:d4:09:ba:8d:06:d5:79:73:8d:4f:db:a5:dc: 2b:29:71:bd:c6:2c:fe:85:df:1a:c9:24:0f:78:76: c7:fb:62:82:8e:e7:c8:7f:ac:92:0a:bd:a3:b4:5f: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:77:44:9F:6C:70:A9:BA:DB:65:A7:4B:D3:AE:EA:C2:8F:CB:0F:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.254.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b0:8d:57:60:af:4b:c3:c6:d4:e1:0d:b1:d3:8c:42:0b:4c: f0:4f:a2:e9:40:e2:14:ab:ed:21:dc:f1:11:51:3d:8f:9f:4d: cd:40:a2:fa:20:db:44:b2:28:18:d4:17:7d:fb:d1:06:1f:5c: a9:4c:ef:15:1d:6c:28:e4:87:5f:a7:8f:f7:37:73:36:d4:02: c6:a0:6f:09:61:e2:e3:47:ff:d9:89:b4:db:16:72:cd:19:47: 37:3c:35:d4:2a:16:a7:f3:d5:4b:26:8e:10:53:97:15:db:c9: ad:0e:15:35:5a:67:49:b3:da:a1:6c:e2:22:77:9b:e9:d0:76: 49:4b:b2:20:b2:fa:27:d9:71:c4:53:0c:3c:c3:ea:ed:77:79: d7:b3:7d:ec:53:f6:bf:53:c2:68:7b:8a:3a:b0:2e:86:a2:e7: 44:1c:2a:3d:bb:b1:d9:f0:59:d2:89:1e:37:1f:97:fa:f1:e9: fd:89:77:3b:41:1d:ab:e5:60:c4:65:93:f3:d6:0a:c5:50:85: e0:bc:1d:a3:8b:38:e8:d7:58:0e:07:c9:21:6e:99:41:6d:7b: 42:33:9f:91:19:64:02:05:50:06:b6:95:41:1b:46:b9:ae:43: a8:31:67:55:c7:69:8a:30:e1:96:4b:1e:c4:f8:72:0f:17:78: e1:08:97:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZAaUqSB00G/2cn0CdaBkFJM9DTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUwMDIxWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWVkY2M5ZWU1ODk3OThlMmQzZDQ4YjYyZDgyNjgwODYx ZDBmNTEyMjkxYjk1ODQ3NzNlMWZhY2U1ZmNhZjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJL250rCvegK0ZRbZSAMrQEqvJXxc8fuOXWdlo+OLYQjoZ /OxnjcLVkW3llSxtys/MlSfj2Cckj/ecX2vVaCHAJ6WRSTSOxsa5XrZevVr6aCrP 5Mtv6vdLxEwr23DF7Qc7SNpPw58YIOz8ImtzF8Qz2hi4MUc28VnodOLVdGUD22zn HG09VG+woRqnDjengP1hOBZzNrwPWDVvVCt9Zr+kZqDhr/4Kp0FVrtEdK45uxhFs 7fHOtVDMUYUVEt0SOR0bikeR/5Q3w7kII08Ps17T5jaC1Am6jQbVeXONT9ul3Csp cb3GLP6F3xrJJA94dsf7YoKO58h/rJIKvaO0X2S5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQndEn2xwqbrbZadL067qwo/LD1EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ZTQ4MjczLWQ5N2YtNDVlMi05ODIwLTQ4YzA4ZDBkYjRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEv4wDQYJKoZIhvcNAQELBQADggEBAEywjVdgr0vDxtThDbHTjEILTPBP oulA4hSr7SHc8RFRPY+fTc1Aovog20SyKBjUF3370QYfXKlM7xUdbCjkh1+nj/c3 czbUAsagbwlh4uNH/9mJtNsWcs0ZRzc8NdQqFqfz1UsmjhBTlxXbya0OFTVaZ0mz 2qFs4iJ3m+nQdklLsiCy+ifZccRTDDzD6u13edezfexT9r9Twmh7ijqwLoai50Qc Kj27sdnwWdKJHjcfl/rx6f2JdztBHavlYMRlk/PWCsVQheC8HaOLOOjXWA4HySFu mUFte0Izn5EZZAIFUAa2lUEbRrmuQ6gxZ1XHaYow4ZZLHsT4cg8XeOEIl3U= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:10 2025 by rpki-client