$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbf11fda-5243-4f5a-af9e-0c2ce4402a4a.roa File: cbf11fda-5243-4f5a-af9e-0c2ce4402a4a.roa (raw, json) Hash identifier: uO58v5GnWjUzXzKAsqY8nVPghfk+RUtLNjeMFCQ8KTE= Subject key identifier: C8:C4:EC:E3:1C:B1:D9:1B:39:F4:26:AC:A8:7F:50:50:8C:32:AF:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A33364F6CAF44DECA29EF5AD18D8D1C037B054F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbf11fda-5243-4f5a-af9e-0c2ce4402a4a.roa Signing time: Mon 21 Apr 2025 17:00:45 +0000 ROA not before: Mon 21 Apr 2025 17:00:45 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:33:36:4f:6c:af:44:de:ca:29:ef:5a:d1:8d:8d:1c:03:7b:05:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:00:45 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=96733929f19526e9afb2ebac7d77da9aa1b9b3b665048de8cad90790ac073265, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:b6:8e:98:53:24:8a:b5:39:72:37:4d:cd: be:e1:fc:c2:8c:78:31:16:ea:82:e1:e9:1a:11:d9: c2:49:99:6d:31:14:a4:04:62:44:6b:ff:d9:d6:5c: 12:e5:c7:91:c0:61:d1:6d:a1:f8:53:67:0a:22:4d: 84:50:0f:38:05:14:a1:47:68:27:e9:a5:09:d7:f5: 00:3f:91:be:f3:9d:b3:73:8a:5e:25:4b:90:11:f6: e4:ac:ba:7c:f9:59:bc:5d:5a:e6:24:73:81:24:f5: 54:58:da:4a:7a:91:95:8b:f6:99:37:72:89:38:1d: 45:b4:f8:e3:c7:a8:4e:43:e8:36:85:f0:48:df:88: 0f:52:41:7e:2a:95:ca:b6:58:79:32:9d:d3:73:c4: 40:90:a1:a2:e8:6b:35:8c:d8:84:7b:40:0d:a2:a6: 39:9a:4b:2f:a9:b5:ef:31:45:06:df:aa:e4:4b:0c: 5a:f9:10:ac:3f:6e:ca:a7:15:a7:0a:9e:67:e4:4c: 7d:9a:72:69:d4:bc:96:92:36:08:67:22:4a:50:8f: fa:d0:a1:ad:38:f6:f1:48:c0:33:83:71:20:9b:2b: ae:1e:3b:c6:44:93:9a:a1:dc:4d:f4:e4:5a:f0:c7: 07:f0:e6:79:ac:ca:5b:2c:94:47:af:c7:13:fb:90: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C4:EC:E3:1C:B1:D9:1B:39:F4:26:AC:A8:7F:50:50:8C:32:AF:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbf11fda-5243-4f5a-af9e-0c2ce4402a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.32.0/24 Signature Algorithm: sha256WithRSAEncryption ab:c9:ab:0e:3b:5f:ea:6d:bb:e4:fd:38:37:bb:96:a7:a0:54: 46:5f:1f:a4:31:95:df:24:e7:50:61:03:56:3b:71:27:61:be: 80:5a:23:9f:55:ce:77:66:85:9c:9e:67:1e:7a:81:ba:fb:91: 7b:9b:6e:52:27:c5:db:be:80:18:84:9c:42:9e:bf:dc:50:79: a1:18:67:5b:9b:0b:d0:a8:a7:cb:9f:f0:f6:fb:c6:67:54:55: 75:32:99:22:9d:12:05:69:75:ee:b9:b3:35:9a:6f:1d:fe:7c: a7:7c:5a:10:76:73:4f:ad:2f:00:b1:9d:70:31:f4:70:05:cc: 71:3d:70:4e:c8:a1:28:c4:59:7c:b6:43:96:b6:6d:43:22:02: b6:87:2a:6b:9e:30:63:f1:c6:b9:51:68:00:9c:ab:fd:df:fc: 85:1b:0b:37:e8:57:80:dc:63:ac:d1:f1:c5:74:71:75:39:0c: e5:df:b5:b7:3b:35:d9:b8:9b:68:d4:a5:97:73:f8:59:a7:58: d7:80:1c:10:f2:f2:75:4b:b4:ea:d7:36:ff:c0:87:6b:0b:91: 8a:b9:da:ca:b7:cd:58:f7:06:88:60:4f:6f:78:83:37:02:3c: d9:27:01:67:4b:37:a3:69:ab:8e:d0:2a:47:fa:36:a9:4c:33: 13:e4:08:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGjM2T2yvRN7KKe9a0Y2NHAN7BU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcwMDQ1WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjczMzkyOWYxOTUyNmU5YWZiMmViYWM3ZDc3ZGE5YWEx YjliM2I2NjUwNDhkZThjYWQ5MDc5MGFjMDczMjY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWDLaOmFMkirU5cjdNzb7h/MKMeDEW6oLh6RoR2cJJmW0x FKQEYkRr/9nWXBLlx5HAYdFtofhTZwoiTYRQDzgFFKFHaCfppQnX9QA/kb7znbNz il4lS5AR9uSsunz5WbxdWuYkc4Ek9VRY2kp6kZWL9pk3cok4HUW0+OPHqE5D6DaF 8EjfiA9SQX4qlcq2WHkyndNzxECQoaLoazWM2IR7QA2ipjmaSy+pte8xRQbfquRL DFr5EKw/bsqnFacKnmfkTH2acmnUvJaSNghnIkpQj/rQoa049vFIwDODcSCbK64e O8ZEk5qh3E305Frwxwfw5nmsylsslEevxxP7kHSVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyMTs4xyx2Rs59CasqH9QUIwyr7wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiZjExZmRhLTUyNDMtNGY1YS1hZjllLTBjMmNlNDQwMmE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEiAwDQYJKoZIhvcNAQELBQADggEBAKvJqw47X+ptu+T9ODe7lqegVEZf H6Qxld8k51BhA1Y7cSdhvoBaI59VzndmhZyeZx56gbr7kXubblInxdu+gBiEnEKe v9xQeaEYZ1ubC9Cop8uf8Pb7xmdUVXUymSKdEgVpde65szWabx3+fKd8WhB2c0+t LwCxnXAx9HAFzHE9cE7IoSjEWXy2Q5a2bUMiAraHKmueMGPxxrlRaACcq/3f/IUb CzfoV4DcY6zR8cV0cXU5DOXftbc7Ndm4m2jUpZdz+FmnWNeAHBDy8nVLtOrXNv/A h2sLkYq52sq3zVj3BohgT294gzcCPNknAWdLN6Npq47QKkf6NqlMMxPkCBw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:52 2025 by rpki-client