$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa File: c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa (raw, json) Hash identifier: o8tLHN2u4DkaxFsSuoq0EKU4IIZ9qSjyxHIhbqxDG98= Subject key identifier: 48:65:3B:41:1F:EB:5A:BB:63:D7:2D:D2:F0:B9:51:0F:3C:2D:3C:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6468327217175BBDF24228F8856EAA71DE905DA0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa Signing time: Fri 25 Apr 2025 00:31:13 +0000 ROA not before: Fri 25 Apr 2025 00:31:13 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:68:32:72:17:17:5b:bd:f2:42:28:f8:85:6e:aa:71:de:90:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:31:13 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2f16cfe68eb8473d18f07e6d659b52ca7448306fba5f7a8f2721f10238ceaf79, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:b0:33:c4:10:76:e3:7b:99:48:54:2b:8f: 9f:d1:ea:d1:f2:76:e5:ec:30:82:4e:d3:d6:e6:7b: 9f:94:74:5e:08:a4:e7:bc:f9:5e:bb:c7:f1:36:5c: 71:a7:ab:08:d1:7a:b8:cd:cd:09:22:53:55:f2:ee: 8d:b1:cd:8a:16:d1:2a:10:d4:d1:0a:d6:df:6b:e2: 61:ef:63:d4:7b:ae:85:21:b7:92:cf:75:41:3b:55: 4a:9c:95:0f:17:d8:4e:12:25:e3:f6:09:c3:02:5e: 91:4f:f4:59:b7:95:d1:47:f1:f2:5a:92:06:bb:4e: 7f:f7:c1:34:da:ff:bc:b5:0f:69:62:1a:c6:b6:4e: fb:b1:fb:ca:49:46:63:6c:be:1a:24:96:1f:8c:d5: 1e:8c:d1:41:74:d4:e9:1b:6e:a7:72:86:e3:8c:88: b1:3f:23:c0:23:8a:8c:e8:57:2d:68:c1:d8:0a:b3: c0:ca:14:af:8f:1d:b4:92:a8:b7:35:2b:04:f5:ea: 0b:62:ee:81:16:87:f0:19:64:c9:2a:8d:71:f9:5e: dc:03:d3:1b:a0:1e:25:43:27:74:4b:07:fd:b0:d8: 39:ca:c0:da:1f:f0:9a:62:d1:e3:0a:72:20:a2:74: a7:7d:e0:f8:3b:50:0d:f7:89:e1:7f:33:ce:c3:9e: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:65:3B:41:1F:EB:5A:BB:63:D7:2D:D2:F0:B9:51:0F:3C:2D:3C:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86bc9f9-dc6b-47eb-9431-aae70aaf54ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption a8:98:1c:81:21:c3:80:bc:e5:62:88:0f:c0:fc:5b:16:e7:3c: 43:ca:53:3b:a6:38:88:57:6d:f7:d9:30:2d:25:bc:b4:a6:ee: e4:29:07:70:18:16:b3:aa:c8:9f:e5:03:de:2b:2d:57:fc:ca: 8a:34:34:b0:c4:0e:3c:3a:c2:e2:b9:e3:d5:9d:b7:e6:5c:21: 0e:bb:7c:33:3f:5e:63:a9:2d:80:85:86:75:b3:61:cf:63:8d: 17:59:f1:0c:5d:0d:4c:6e:cd:7f:9d:77:d8:e1:18:99:4c:9c: bc:4e:e5:b3:a7:64:df:b5:45:c7:0e:75:2d:94:e2:2d:bc:25: d6:40:67:65:38:65:65:3b:5b:06:c7:30:9a:40:f9:7f:e6:12: c3:bd:82:74:cf:6f:98:85:a7:d8:2d:01:35:ce:b3:07:15:f6: fe:17:3d:ea:e4:f3:c0:56:0a:63:07:1b:e7:ee:6e:63:42:d7: 93:14:f6:8d:6a:ff:aa:98:68:87:27:58:7f:03:e7:9f:ee:e6: 5a:7b:f5:ce:13:5c:4c:72:61:cf:2d:eb:59:0f:c3:5f:4a:ea: e3:50:30:b6:55:69:a7:dc:33:df:b8:46:f2:58:d2:d5:f9:7a: 72:0f:5c:b6:f3:e6:6a:b6:e1:6a:5d:87:a9:d6:d5:72:3c:53: fe:b6:d3:0e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZGgychcXW73yQij4hW6qcd6QXaAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAzMTEzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjE2Y2ZlNjhlYjg0NzNkMThmMDdlNmQ2NTliNTJjYTc0 NDgzMDZmYmE1ZjdhOGYyNzIxZjEwMjM4Y2VhZjc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsprAzxBB243uZSFQrj5/R6tHyduXsMIJO09bme5+UdF4I pOe8+V67x/E2XHGnqwjRerjNzQkiU1Xy7o2xzYoW0SoQ1NEK1t9r4mHvY9R7roUh t5LPdUE7VUqclQ8X2E4SJeP2CcMCXpFP9Fm3ldFH8fJakga7Tn/3wTTa/7y1D2li Gsa2Tvux+8pJRmNsvhoklh+M1R6M0UF01OkbbqdyhuOMiLE/I8AjiozoVy1owdgK s8DKFK+PHbSSqLc1KwT16gti7oEWh/AZZMkqjXH5XtwD0xugHiVDJ3RLB/2w2DnK wNof8Jpi0eMKciCidKd94Pg7UA33ieF/M87DnrLvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSGU7QR/rWrtj1y3S8LlRDzwtPM0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4NmJjOWY5LWRjNmItNDdlYi05NDMxLWFhZTcwYWFmNTRlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIXFDANBgkqhkiG9w0BAQsFAAOCAQEAqJgcgSHDgLzlYogPwPxbFuc8Q8pT O6Y4iFdt99kwLSW8tKbu5CkHcBgWs6rIn+UD3istV/zKijQ0sMQOPDrC4rnj1Z23 5lwhDrt8Mz9eY6ktgIWGdbNhz2ONF1nxDF0NTG7Nf5132OEYmUycvE7ls6dk37VF xw51LZTiLbwl1kBnZThlZTtbBscwmkD5f+YSw72CdM9vmIWn2C0BNc6zBxX2/hc9 6uTzwFYKYwcb5+5uY0LXkxT2jWr/qphohydYfwPnn+7mWnv1zhNcTHJhzy3rWQ/D X0rq41AwtlVpp9wz37hG8ljS1fl6cg9ctvPmarbhal2HqdbVcjxT/rbTDg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:29 2025 by rpki-client