$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa File: caf74530-3650-41ac-a970-9da97a34ad52.roa (raw, json) Hash identifier: GaW2+zNLv87WbM/CZe+cEfyrm8JE90VTJhXXmo9kXGg= Subject key identifier: 9D:39:76:AF:29:27:D1:49:38:EE:C9:AD:9F:93:09:13:CE:2A:07:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AAD3EE1DDF4BDA1986AAA761E9CB489FAA3A9D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa Signing time: Mon 14 Apr 2025 15:21:28 +0000 ROA not before: Mon 14 Apr 2025 15:21:28 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ad:3e:e1:dd:f4:bd:a1:98:6a:aa:76:1e:9c:b4:89:fa:a3:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:21:28 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=b414cba0d8125b4d8f82ebe9f23d59b722f419316059e112bb876354b04e64e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:3f:16:0a:bb:12:a4:53:f7:0d:db:48:5c: f0:80:92:fc:c1:75:69:4b:f3:5e:d2:6b:68:10:a7: 09:8b:3b:22:17:75:5b:49:f8:75:07:eb:6b:28:01: e2:e5:6e:67:68:3c:5f:f0:fc:ac:0a:5d:8b:dc:db: b8:98:f2:0f:0b:17:b7:1b:22:99:f2:b4:27:df:53: 48:70:40:de:18:0f:37:2d:83:c1:f8:a6:70:c0:20: 8b:cb:f7:2d:2d:9a:28:47:39:fa:64:fb:7e:7a:78: 69:cd:99:a1:8d:ea:00:aa:bc:a1:75:b4:37:e1:ee: 80:68:19:aa:2c:77:3f:f0:00:65:83:38:bf:db:27: 4d:a5:a1:b7:96:e8:1e:fa:89:fe:1a:c6:bc:a4:0e: 0c:bd:73:d8:08:4c:2c:8c:e0:2f:72:1d:6e:6f:03: 34:d0:28:c4:cd:01:83:b5:d3:af:a1:a3:d3:25:b7: 10:14:af:58:1f:92:45:79:98:73:a4:93:7c:8b:7f: e5:87:f9:5e:b4:20:f4:fd:60:86:ba:50:c1:2e:4f: 1b:fd:3b:f2:9f:25:c4:17:49:29:a1:13:2e:ed:d4: e7:19:be:af:79:a8:8b:93:e1:ae:0c:48:10:54:ad: 5e:c8:59:e2:7a:51:9e:a3:f2:fc:10:c5:73:64:8b: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:39:76:AF:29:27:D1:49:38:EE:C9:AD:9F:93:09:13:CE:2A:07:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.96.0/19 Signature Algorithm: sha256WithRSAEncryption 46:5f:2c:f3:d4:35:45:b9:03:82:ca:e3:b3:85:bd:ed:b2:3d: 50:75:0e:ff:a0:49:26:90:00:c8:c5:4b:a7:57:11:7f:b3:69: 36:e0:86:8d:c0:70:f7:73:1e:51:04:c4:f8:77:6a:3d:08:42: 78:d3:be:1e:e1:8f:3b:29:d1:d3:66:40:ee:72:27:df:ff:40: 4d:ef:d6:45:34:c6:89:16:28:fe:f9:84:9e:45:5b:08:ab:c8: 9c:93:97:88:87:11:06:24:fc:76:52:8f:16:1f:a7:48:e7:76: 7c:4e:33:86:31:69:31:86:0b:3d:94:75:63:7c:cd:ff:21:8a: 03:ab:4e:4e:b5:45:46:6e:47:80:a6:f7:32:0d:fb:28:2d:82: 1f:2d:2f:8a:34:d7:7d:3a:90:ee:b8:ee:f8:c4:d7:c0:d1:88: 64:81:3a:0f:b0:9c:73:b3:a5:44:e6:67:87:94:2a:4b:12:88: 75:4e:87:38:88:e3:22:42:ee:7d:98:a1:80:c1:8c:a6:d2:05: cc:d4:73:f4:86:46:a9:e4:ea:ee:d9:8b:53:d7:45:83:35:69: 89:21:f0:42:c8:86:6f:11:44:6b:5f:db:db:a1:e5:a1:4e:a8: fe:9c:67:0f:d9:dc:67:85:9d:2e:bd:f5:64:32:af:46:2a:b6: 75:26:fb:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeq0+4d30vaGYaqp2Hpy0ifqjqdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUyMTI4WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDE0Y2JhMGQ4MTI1YjRkOGY4MmViZTlmMjNkNTliNzIy ZjQxOTMxNjA1OWUxMTJiYjg3NjM1NGIwNGU2NGU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBiD8WCrsSpFP3DdtIXPCAkvzBdWlL817Sa2gQpwmLOyIX dVtJ+HUH62soAeLlbmdoPF/w/KwKXYvc27iY8g8LF7cbIpnytCffU0hwQN4YDzct g8H4pnDAIIvL9y0tmihHOfpk+356eGnNmaGN6gCqvKF1tDfh7oBoGaosdz/wAGWD OL/bJ02lobeW6B76if4axrykDgy9c9gITCyM4C9yHW5vAzTQKMTNAYO106+ho9Ml txAUr1gfkkV5mHOkk3yLf+WH+V60IPT9YIa6UMEuTxv9O/KfJcQXSSmhEy7t1OcZ vq95qIuT4a4MSBBUrV7IWeJ6UZ6j8vwQxXNkixZxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnTl2rykn0Uk47smtn5MJE84qB0kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhZjc0NTMwLTM2NTAtNDFhYy1hOTcwLTlkYTk3YTM0YWQ1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW4SGAwDQYJKoZIhvcNAQELBQADggEBAEZfLPPUNUW5A4LK47OFve2yPVB1 Dv+gSSaQAMjFS6dXEX+zaTbgho3AcPdzHlEExPh3aj0IQnjTvh7hjzsp0dNmQO5y J9//QE3v1kU0xokWKP75hJ5FWwiryJyTl4iHEQYk/HZSjxYfp0jndnxOM4YxaTGG Cz2UdWN8zf8higOrTk61RUZuR4Cm9zIN+ygtgh8tL4o01306kO647vjE18DRiGSB Og+wnHOzpUTmZ4eUKksSiHVOhziI4yJC7n2YoYDBjKbSBczUc/SGRqnk6u7Zi1PX RYM1aYkh8ELIhm8RRGtf29uh5aFOqP6cZw/Z3GeFnS699WQyr0YqtnUm+8c= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:53 2025 by rpki-client