$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa File: ca57515a-3058-4353-ab16-a7d94657f8f8.roa (raw, json) Hash identifier: /nU/nkNGKle25WvW+CwXL12znQuiqy0/qVM0+qDojcc= Subject key identifier: 95:60:7A:CB:34:FF:06:BC:A5:5D:07:31:18:9E:A3:49:52:5B:89:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 790F286491CA6B681449246317F84E3F87EF48EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa Signing time: Fri 25 Apr 2025 00:40:12 +0000 ROA not before: Fri 25 Apr 2025 00:40:12 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0f:28:64:91:ca:6b:68:14:49:24:63:17:f8:4e:3f:87:ef:48:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:40:12 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=fd187d4d292803af5d5dc7daef3967d8ccd49df89a92aa7a2f12a1d90789dc8b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:39:9b:91:88:cb:29:a0:78:31:1c:78:df: e0:e8:c7:5d:f9:22:02:0a:7c:f8:af:d8:75:18:9e: f1:e5:9f:1d:fe:cb:5f:05:19:aa:0e:cc:1d:81:ba: f4:66:34:e5:2e:ed:e9:bd:66:79:c1:fd:e2:fb:9b: 59:8b:15:50:a9:fb:cc:24:c7:3d:b0:42:be:fb:75: 05:bc:7c:67:62:18:02:34:69:a4:dc:cd:b1:23:8d: e4:1d:dc:fc:26:1b:1b:91:67:6e:43:a2:62:ae:1b: 18:b7:94:74:7c:e7:1b:1a:6f:76:ca:00:b7:fb:8b: 99:4c:7d:d0:26:ee:67:45:f8:5a:a1:8a:0f:a3:2e: 95:2d:9c:b7:df:67:a0:fe:41:c3:79:54:7a:57:c5: ec:3e:f9:64:42:f9:f8:3a:97:22:88:72:6b:36:d5: 0f:8c:18:27:09:32:7b:bf:c8:f6:b0:db:45:1f:12: ae:10:ee:fe:81:8e:b7:e5:d3:1c:9b:65:6e:49:ce: c7:72:36:b8:02:49:54:a5:4e:aa:d8:23:58:2f:5a: 30:8a:2d:21:88:eb:df:fc:f4:dd:93:66:93:bc:f3: 7f:e5:ba:09:56:9b:20:b8:c6:ab:8d:b4:2e:90:8b: 23:cc:be:37:9c:fd:5d:7b:1c:e3:18:8c:83:1a:4a: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:7A:CB:34:FF:06:BC:A5:5D:07:31:18:9E:A3:49:52:5B:89:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca57515a-3058-4353-ab16-a7d94657f8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:30:00:62:e6:aa:30:f4:c2:8e:c1:a6:3e:ba:a3:e8:33:ce: 52:24:2c:9f:48:87:e4:00:51:82:f9:c4:23:77:11:6a:d6:71: 41:6d:b0:ee:10:15:8d:39:e4:ff:7a:75:3b:91:7f:70:ff:ed: 3d:e1:1e:84:31:5c:84:6f:1e:7f:25:28:70:5c:32:71:51:8a: 99:35:09:20:b1:b7:7a:05:08:c3:29:cc:72:8c:cd:86:50:d7: 52:c0:78:14:04:87:69:fd:50:33:95:41:84:18:7f:12:1a:4b: 35:c2:2e:b7:98:84:fc:e6:7a:c2:89:01:e4:bd:1e:65:76:0c: ce:48:59:11:b7:1b:8a:9a:e6:08:ff:ce:ab:93:a9:37:9b:11: 37:c3:70:69:90:2a:28:9d:9e:5c:5d:55:12:2c:34:e8:da:ff: 2b:e1:aa:14:ee:54:db:87:8d:1b:2f:46:dc:6c:72:3b:31:c7: b0:50:1d:5e:fb:14:b6:d2:94:d1:dc:6a:1a:53:d9:35:ad:13: fc:be:ca:8c:99:fd:31:b4:eb:24:b1:b8:c7:be:18:a6:2d:38: 51:bc:d2:7f:bc:2a:89:f5:ed:0b:ac:a8:cf:93:ea:28:01:6f: 81:be:77:c4:bf:fe:85:1d:37:84:eb:b0:68:1a:84:85:0c:3c: 80:19:86:8e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeQ8oZJHKa2gUSSRjF/hOP4fvSOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDA0MDEyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDE4N2Q0ZDI5MjgwM2FmNWQ1ZGM3ZGFlZjM5NjdkOGNj ZDQ5ZGY4OWE5MmFhN2EyZjEyYTFkOTA3ODlkYzhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdrDmbkYjLKaB4MRx43+Dox135IgIKfPiv2HUYnvHlnx3+ y18FGaoOzB2BuvRmNOUu7em9ZnnB/eL7m1mLFVCp+8wkxz2wQr77dQW8fGdiGAI0 aaTczbEjjeQd3PwmGxuRZ25DomKuGxi3lHR85xsab3bKALf7i5lMfdAm7mdF+Fqh ig+jLpUtnLffZ6D+QcN5VHpXxew++WRC+fg6lyKIcms21Q+MGCcJMnu/yPaw20Uf Eq4Q7v6Bjrfl0xybZW5JzsdyNrgCSVSlTqrYI1gvWjCKLSGI69/89N2TZpO883/l uglWmyC4xquNtC6QiyPMvjec/V17HOMYjIMaSlOvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUlWB6yzT/BrylXQcxGJ6jSVJbiX8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNTc1MTVhLTMwNTgtNDM1My1hYjE2LWE3ZDk0NjU3ZjhmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo/DANBgkqhkiG9w0BAQsFAAOCAQEAhDAAYuaqMPTCjsGmPrqj6DPOUiQs n0iH5ABRgvnEI3cRatZxQW2w7hAVjTnk/3p1O5F/cP/tPeEehDFchG8efyUocFwy cVGKmTUJILG3egUIwynMcozNhlDXUsB4FASHaf1QM5VBhBh/EhpLNcIut5iE/OZ6 wokB5L0eZXYMzkhZEbcbiprmCP/Oq5OpN5sRN8NwaZAqKJ2eXF1VEiw06Nr/K+Gq FO5U24eNGy9G3GxyOzHHsFAdXvsUttKU0dxqGlPZNa0T/L7KjJn9MbTrJLG4x74Y pi04UbzSf7wqifXtC6yoz5PqKAFvgb53xL/+hR03hOuwaBqEhQw8gBmGjg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:58 2025 by rpki-client