$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf53c219-4499-438d-b19e-5579548a9fbd.roa File: cf53c219-4499-438d-b19e-5579548a9fbd.roa (raw, json) Hash identifier: BtHY7aN9xr6qSofG25r07IBbsQOHavJaMFKNuvzH6ec= Subject key identifier: B0:5C:24:2D:82:2B:26:09:1A:5E:6A:AE:FB:EE:BA:EE:9F:C4:B6:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 639F9EDBF7CCC069DB6B365812EF4157B70DE1A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf53c219-4499-438d-b19e-5579548a9fbd.roa Signing time: Wed 23 Apr 2025 00:40:20 +0000 ROA not before: Wed 23 Apr 2025 00:40:20 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.213.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9f:9e:db:f7:cc:c0:69:db:6b:36:58:12:ef:41:57:b7:0d:e1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:40:20 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=496f52f1881a70f43b21cd54ef15e04d31c16df5d7b03c46755351966c02a737, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:46:b4:71:72:15:37:d5:a1:9b:79:49:30: ef:80:d7:e8:36:a4:5f:ea:41:35:c4:3f:19:94:2f: f1:a9:90:91:d8:29:c4:5a:24:10:17:b2:f0:2f:1d: 50:0a:86:c8:bc:82:f0:b4:87:bf:08:07:0c:e1:b9: 82:9c:16:d4:72:37:c7:40:3d:f2:6c:a7:84:e0:fc: da:94:ac:5f:ad:7c:ce:59:41:f3:86:b8:03:98:26: 43:a7:2d:e6:96:55:40:03:f1:46:a9:39:88:97:4f: 81:13:7e:1a:e0:15:a4:87:29:ec:e2:75:d9:6b:44: 8f:dc:49:db:60:af:e3:9d:fc:f2:60:de:14:31:97: 5f:be:f6:58:15:32:16:89:e9:ae:b9:fa:3e:6f:78: 56:20:3c:3f:87:b0:1e:99:d2:b5:00:47:e4:7b:22: b6:9c:e2:80:bb:1f:d7:d1:6d:7f:c7:fc:63:fb:8a: f8:d9:77:b6:59:14:cd:4a:32:84:cb:c0:be:9a:bf: a4:9d:61:c9:78:20:da:cf:20:83:60:00:2a:8f:9f: 4c:23:cb:a1:c8:ed:80:16:5f:10:39:37:e7:af:f5: 87:cc:9b:05:74:d8:4b:e3:98:fe:33:e4:4a:d6:f0: c1:f2:68:79:71:12:ba:72:5f:1a:57:41:c6:f5:b4: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5C:24:2D:82:2B:26:09:1A:5E:6A:AE:FB:EE:BA:EE:9F:C4:B6:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf53c219-4499-438d-b19e-5579548a9fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.213.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:33:c1:11:8a:32:60:7f:2a:21:76:53:ac:48:47:a2:6f:86: 60:d8:96:03:fa:26:9f:9d:6d:ca:c0:08:69:25:c4:77:79:86: ad:73:99:9b:85:d0:5f:ea:c3:cd:0d:c8:a6:75:44:d6:28:d4: 99:59:d7:47:ec:6e:ac:25:18:93:08:88:20:5a:0d:89:49:9d: a8:25:d0:1b:19:bd:cd:69:6b:dc:ab:ac:ae:bc:2c:4c:08:f7: 68:96:b0:29:61:5a:04:ac:90:5a:15:10:a9:ae:88:7b:c7:66: a7:f5:29:ef:fe:98:53:ad:22:fd:09:0d:6d:4d:aa:b7:84:74: 7c:3d:0f:33:e5:c2:0b:bd:5b:ad:e8:81:4c:d0:d9:46:68:49: c6:03:4f:c7:51:36:1b:7f:f8:64:1f:a5:dc:56:b6:67:ff:14: 65:87:d4:4a:ca:b2:54:ae:6b:16:4a:02:00:08:e2:0b:57:f1: a5:81:59:ee:91:f3:f8:49:ff:0a:c2:ef:c7:f9:69:31:4f:c1: 39:b0:81:9f:73:a4:18:3a:0d:0e:e1:dd:7d:85:e4:93:c3:af: 04:a3:5e:91:83:16:00:6e:55:bb:92:a3:bc:cc:11:c4:fe:fb: c7:43:96:cb:19:fc:4f:cb:71:31:ca:97:79:d8:6b:76:a1:31: f9:8a:a4:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY5+e2/fMwGnbazZYEu9BV7cN4aIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MDIwWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTZmNTJmMTg4MWE3MGY0M2IyMWNkNTRlZjE1ZTA0ZDMx YzE2ZGY1ZDdiMDNjNDY3NTUzNTE5NjZjMDJhNzM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8OEa0cXIVN9Whm3lJMO+A1+g2pF/qQTXEPxmUL/GpkJHY KcRaJBAXsvAvHVAKhsi8gvC0h78IBwzhuYKcFtRyN8dAPfJsp4Tg/NqUrF+tfM5Z QfOGuAOYJkOnLeaWVUAD8UapOYiXT4ETfhrgFaSHKeziddlrRI/cSdtgr+Od/PJg 3hQxl1++9lgVMhaJ6a65+j5veFYgPD+HsB6Z0rUAR+R7Irac4oC7H9fRbX/H/GP7 ivjZd7ZZFM1KMoTLwL6av6SdYcl4INrPIINgACqPn0wjy6HI7YAWXxA5N+ev9YfM mwV02EvjmP4z5ErW8MHyaHlxErpyXxpXQcb1tJddAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsFwkLYIrJgkaXmqu++667p/Etl4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNTNjMjE5LTQ0OTktNDM4ZC1iMTllLTU1Nzk1NDhhOWZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKi1egwDQYJKoZIhvcNAQELBQADggEBAB0zwRGKMmB/KiF2U6xIR6JvhmDY lgP6Jp+dbcrACGklxHd5hq1zmZuF0F/qw80NyKZ1RNYo1JlZ10fsbqwlGJMIiCBa DYlJnagl0BsZvc1pa9yrrK68LEwI92iWsClhWgSskFoVEKmuiHvHZqf1Ke/+mFOt Iv0JDW1NqreEdHw9DzPlwgu9W63ogUzQ2UZoScYDT8dRNht/+GQfpdxWtmf/FGWH 1ErKslSuaxZKAgAI4gtX8aWBWe6R8/hJ/wrC78f5aTFPwTmwgZ9zpBg6DQ7h3X2F 5JPDrwSjXpGDFgBuVbuSo7zMEcT++8dDlssZ/E/LcTHKl3nYa3ahMfmKpC8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:41 2025 by rpki-client