$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1c2b8be-ce70-4e43-89bb-dacaa6ad5228.roa File: d1c2b8be-ce70-4e43-89bb-dacaa6ad5228.roa (raw, json) Hash identifier: MoU0ji1SFJh/cS5B5/FePiHXpVH2ujmnLZo6TyQAacA= Subject key identifier: CF:3E:89:96:45:76:16:4F:3D:21:D1:60:CB:C3:43:6F:23:89:98:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 440BD9341CFC670955EECDBDC863B6E3DCD1B483 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1c2b8be-ce70-4e43-89bb-dacaa6ad5228.roa Signing time: Wed 23 Apr 2025 00:41:35 +0000 ROA not before: Wed 23 Apr 2025 00:41:35 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0b:d9:34:1c:fc:67:09:55:ee:cd:bd:c8:63:b6:e3:dc:d1:b4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:35 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=35d6ee597cd3930a0da4acbfebf4d0e944042bc668cbd656c36dfd7185f39ea9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:04:3c:5e:a9:2a:d3:d3:21:ed:27:f4:34: d5:af:a9:55:33:92:6c:60:5f:71:d9:e8:c3:0f:21: c8:15:18:ea:eb:4e:45:11:01:57:d1:21:5f:68:8d: bd:35:62:a1:4d:34:01:16:1a:10:62:1e:f7:8f:1a: 90:35:08:e3:13:e9:21:19:9a:4d:90:88:ce:f3:32: 0d:e5:08:ec:0c:37:cf:b1:20:13:6b:93:36:08:e0: d9:af:6d:e8:1b:f5:b6:b8:b2:0a:3d:50:8b:76:bc: 1a:4b:43:87:2e:53:52:af:cb:f1:f7:08:6b:04:31: 7a:40:23:d5:67:3f:63:74:48:f2:41:f3:31:7c:e6: 06:27:fa:21:94:e6:ed:79:27:21:b1:7f:b4:c4:0e: 3d:55:30:e8:6f:7b:95:97:c4:c3:f6:23:ae:71:b9: 98:8d:74:5e:ba:b5:6b:eb:b6:e9:8b:10:72:b8:83: 3c:42:41:4c:40:c0:f9:af:3a:66:ca:1f:8e:bd:47: 2e:55:ed:f8:1c:70:b4:0a:51:ae:f8:b8:b5:15:d9: 3c:54:fb:d6:de:6a:d2:87:5e:7e:57:5e:f1:f3:d7: 5a:9f:ea:91:01:2c:cc:a9:83:24:ab:8d:5f:65:e1: 25:3b:cf:87:f2:46:f0:da:fe:a8:1e:17:e5:e0:83: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:89:96:45:76:16:4F:3D:21:D1:60:CB:C3:43:6F:23:89:98:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1c2b8be-ce70-4e43-89bb-dacaa6ad5228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.32.0/19 Signature Algorithm: sha256WithRSAEncryption 17:bc:88:eb:68:42:9a:e6:2a:ef:6d:46:8b:8a:7b:8c:a9:54: 83:2e:ad:95:3c:71:c7:3b:1c:4c:5b:65:ac:a4:0c:46:d3:de: 50:32:3e:02:c3:37:30:06:9a:db:7b:ba:b5:d6:7f:f3:b5:ff: 03:23:f5:80:a0:09:48:6a:86:bf:12:36:11:9f:ab:d3:a2:b7: 85:41:9f:50:6f:ab:08:4e:aa:50:99:68:e8:f3:5d:7a:a6:6b: 97:7f:2e:df:08:75:1a:51:f3:bd:bc:ca:c1:75:c5:46:e6:55: 11:e2:5b:f3:89:8e:43:ef:a9:cc:2d:af:a3:e8:98:91:6b:0f: 08:18:40:0f:91:4e:c7:71:95:7a:b0:a7:1a:c0:1b:06:f1:cc: 28:2a:27:02:9a:51:17:f9:54:ea:75:66:04:29:d2:11:30:28: 55:cc:5a:2e:3f:15:f3:3f:0d:6d:57:79:97:9f:6c:a9:8a:20: 63:85:28:2b:df:2c:4c:ac:42:c4:c1:3e:ce:1c:62:5c:5f:60: c7:9b:bf:3b:c7:cc:f3:70:56:3c:34:4f:a0:98:ed:b8:8a:03: 15:89:48:fc:f2:ef:ef:65:51:c2:eb:f2:fa:df:0d:b6:3e:6a: d1:79:a9:58:46:67:3d:71:61:bc:fc:fd:5e:0a:ea:57:17:52: 05:f9:48:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURAvZNBz8ZwlV7s29yGO249zRtIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTM1WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWQ2ZWU1OTdjZDM5MzBhMGRhNGFjYmZlYmY0ZDBlOTQ0 MDQyYmM2NjhjYmQ2NTZjMzZkZmQ3MTg1ZjM5ZWE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR9QQ8Xqkq09Mh7Sf0NNWvqVUzkmxgX3HZ6MMPIcgVGOrr TkURAVfRIV9ojb01YqFNNAEWGhBiHvePGpA1COMT6SEZmk2QiM7zMg3lCOwMN8+x IBNrkzYI4Nmvbegb9ba4sgo9UIt2vBpLQ4cuU1Kvy/H3CGsEMXpAI9VnP2N0SPJB 8zF85gYn+iGU5u15JyGxf7TEDj1VMOhve5WXxMP2I65xuZiNdF66tWvrtumLEHK4 gzxCQUxAwPmvOmbKH469Ry5V7fgccLQKUa74uLUV2TxU+9beatKHXn5XXvHz11qf 6pEBLMypgySrjV9l4SU7z4fyRvDa/qgeF+Xgg5IjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzz6JlkV2Fk89IdFgy8NDbyOJmK0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxYzJiOGJlLWNlNzAtNGU0My04OWJiLWRhY2FhNmFkNTIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOSAwDQYJKoZIhvcNAQELBQADggEBABe8iOtoQprmKu9tRouKe4ypVIMu rZU8ccc7HExbZaykDEbT3lAyPgLDNzAGmtt7urXWf/O1/wMj9YCgCUhqhr8SNhGf q9Oit4VBn1BvqwhOqlCZaOjzXXqma5d/Lt8IdRpR8728ysF1xUbmVRHiW/OJjkPv qcwtr6PomJFrDwgYQA+RTsdxlXqwpxrAGwbxzCgqJwKaURf5VOp1ZgQp0hEwKFXM Wi4/FfM/DW1XeZefbKmKIGOFKCvfLEysQsTBPs4cYlxfYMebvzvHzPNwVjw0T6CY 7biKAxWJSPzy7+9lUcLr8vrfDbY+atF5qVhGZz1xYbz8/V4K6lcXUgX5SFg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:14 2025 by rpki-client