$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa File: ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa (raw, json) Hash identifier: QpWfupY3RZoSJHlp2pfcUL8y2qyuyCBCdawiODtKDPQ= Subject key identifier: 07:61:72:F3:2E:CD:FA:43:73:89:FD:61:7D:CB:88:6B:E6:67:D6:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55A52C2F656F6AA76678C344F8BDF464F3062627 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa Signing time: Mon 07 Apr 2025 15:11:34 +0000 ROA not before: Mon 07 Apr 2025 15:11:34 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a5:2c:2f:65:6f:6a:a7:66:78:c3:44:f8:bd:f4:64:f3:06:26:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:11:34 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=a3550d1889807b9b62c23ebb265f7f93135100adaaf9bb2936adff4b2e59b0a1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:3e:14:c6:1f:61:ad:cd:1b:6e:69:ae:e3: 71:3f:3e:f2:14:94:d2:cf:f5:44:32:cb:41:ed:4e: 3d:d4:a5:89:52:e7:a3:1a:2a:8a:0d:0e:7c:dc:05: 54:18:cf:ef:ab:5a:43:9e:a1:fc:1b:d3:20:fb:97: 8c:0a:c1:17:96:ed:01:72:c5:e0:c0:37:4d:3f:6e: 3e:0d:81:be:f9:e6:9e:92:20:4e:fc:16:ec:9b:66: ce:65:71:04:4d:ee:ec:f3:f2:7f:9b:4a:40:99:76: 38:27:ba:16:d0:2e:5a:7b:68:89:1d:39:27:90:c0: d6:a0:93:1d:7d:be:be:19:dc:0b:90:f8:6e:f3:30: 67:b5:08:49:b4:0f:f6:57:40:88:b2:ef:57:d9:ae: 55:69:65:08:72:a3:59:f1:6e:b2:84:54:e2:23:36: b7:a3:e5:f1:2c:63:cb:b2:b5:95:54:5d:ac:c6:d1: 3a:45:84:ed:d8:43:b2:78:42:ab:03:51:68:19:4f: e5:4c:1c:a0:e2:a3:22:02:10:e1:44:55:9d:8c:17: 73:ca:24:a1:fc:49:7c:eb:8a:0f:5f:00:63:b5:14: 2a:8d:2c:8b:a3:ff:66:09:a4:b0:54:29:80:dc:de: 89:ca:27:e0:c0:bb:6b:a6:d0:ca:25:d8:52:08:8d: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:61:72:F3:2E:CD:FA:43:73:89:FD:61:7D:CB:88:6B:E6:67:D6:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:42:d4:cc:96:b0:74:9c:3d:30:ed:c7:71:87:9f:53:4d:ac: ae:27:a0:cc:a1:50:de:c0:94:81:eb:6c:09:c6:c9:86:ab:74: 82:63:89:d2:4a:b0:99:d0:70:c9:bb:32:e6:2b:f4:93:eb:31: ec:8b:7c:18:37:fa:15:85:45:3f:b7:44:fa:1b:05:39:a0:98: 55:f5:1d:04:14:e6:18:8d:05:e5:2a:e6:96:26:d2:34:8e:74: 58:74:2f:dc:d1:d1:29:ba:06:a3:09:8b:06:16:cb:b4:66:71: e7:3e:dd:aa:14:50:ed:6b:1f:c9:b1:1c:81:35:4c:92:22:ff: 93:24:ef:9b:f8:ab:29:43:13:e7:b0:45:ea:eb:14:ad:91:4f: 8d:cc:c8:68:81:0d:10:fd:b2:40:53:6f:5d:dd:2e:57:e6:e8: 43:ba:7f:15:cc:d3:be:02:d3:1d:60:0c:44:80:da:a9:75:fd: 69:7c:a8:a9:32:74:6f:9f:8d:4f:08:07:46:d7:b3:4b:df:e9: e3:ad:31:94:6b:a8:10:b6:61:ed:5a:fc:40:45:45:da:5e:aa: 6b:59:3d:1b:8e:8e:54:34:65:23:3f:2f:80:15:fe:5a:6c:5f: 8c:84:21:49:4e:a9:a2:60:45:7a:bd:28:5f:72:ed:e7:6c:ce: 75:2c:85:69 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVaUsL2VvaqdmeMNE+L30ZPMGJicwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMTM0WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzU1MGQxODg5ODA3YjliNjJjMjNlYmIyNjVmN2Y5MzEz NTEwMGFkYWFmOWJiMjkzNmFkZmY0YjJlNTliMGExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0aT4Uxh9hrc0bbmmu43E/PvIUlNLP9UQyy0HtTj3UpYlS 56MaKooNDnzcBVQYz++rWkOeofwb0yD7l4wKwReW7QFyxeDAN00/bj4Ngb755p6S IE78FuybZs5lcQRN7uzz8n+bSkCZdjgnuhbQLlp7aIkdOSeQwNagkx19vr4Z3AuQ +G7zMGe1CEm0D/ZXQIiy71fZrlVpZQhyo1nxbrKEVOIjNrej5fEsY8uytZVUXazG 0TpFhO3YQ7J4QqsDUWgZT+VMHKDioyICEOFEVZ2MF3PKJKH8SXzrig9fAGO1FCqN LIuj/2YJpLBUKYDc3onKJ+DAu2um0Mol2FIIjUqnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUB2Fy8y7N+kNzif1hfcuIa+Zn1hwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhMGU5MjY0LWJiZDgtNDA2Yi05MzgwLTZhZjQ3YmYxZGQ4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwChDjANBgkqhkiG9w0BAQsFAAOCAQEAbELUzJawdJw9MO3HcYefU02srieg zKFQ3sCUgetsCcbJhqt0gmOJ0kqwmdBwybsy5iv0k+sx7It8GDf6FYVFP7dE+hsF OaCYVfUdBBTmGI0F5SrmlibSNI50WHQv3NHRKboGowmLBhbLtGZx5z7dqhRQ7Wsf ybEcgTVMkiL/kyTvm/irKUMT57BF6usUrZFPjczIaIENEP2yQFNvXd0uV+boQ7p/ FczTvgLTHWAMRIDaqXX9aXyoqTJ0b5+NTwgHRtezS9/p460xlGuoELZh7Vr8QEVF 2l6qa1k9G46OVDRlIz8vgBX+WmxfjIQhSU6pomBFer0oX3Lt52zOdSyFaQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:22 2025 by rpki-client