$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa File: d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa (raw, json) Hash identifier: lRxOwsYaaC5v70XsFD4qDxZoZJV99yzimcXg7218geo= Subject key identifier: 8C:EF:CF:6D:5E:BF:89:B9:BC:7B:11:3E:C5:BA:3F:29:D2:25:57:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BC92DD2F54BA1AEDCD4B3767FD901D3E78038FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa Signing time: Wed 23 Apr 2025 00:41:39 +0000 ROA not before: Wed 23 Apr 2025 00:41:39 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.63.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c9:2d:d2:f5:4b:a1:ae:dc:d4:b3:76:7f:d9:01:d3:e7:80:38:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:39 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=7183f4f1c46e5424d82fcdb6b5592f746065533bedebab69dc0c20743717056c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3d:97:e9:f5:0b:f2:a6:df:52:45:da:2a:9a: bd:97:7a:65:c3:64:73:a2:2b:07:06:b1:5e:8b:b2: 33:c0:56:07:e4:00:22:a2:21:07:e3:d2:46:21:77: c4:3e:f6:d6:25:ac:50:97:8a:c3:42:e4:95:11:c4: 00:df:d8:cb:03:96:dd:d0:05:3d:31:ba:28:ef:6c: 62:5b:26:31:e8:4f:0b:ae:ed:53:45:0e:4d:38:f2: d0:dc:b4:fa:7c:a2:95:12:ab:97:ac:24:e6:86:ff: 6a:58:31:4c:66:3a:c0:25:6d:08:4d:19:ee:5f:d2: eb:f0:df:d2:eb:c7:da:c0:bd:1a:18:52:c5:35:b0: 8b:de:8b:d9:36:62:f2:b7:c0:68:c5:e6:6d:cb:ba: f7:b0:9e:4c:3b:6d:1c:21:7e:46:b2:a0:03:ef:47: 38:22:96:2a:d4:07:d9:35:f0:b9:ce:8d:a2:fb:b4: 5a:46:41:5d:65:d2:5d:db:47:42:15:32:36:26:e9: 4c:c6:e1:2a:f7:5f:20:ac:96:ef:ed:2d:64:a6:2d: db:9c:62:9e:46:81:8b:a8:69:8a:13:f7:4b:12:ef: 12:55:4b:5f:a0:5b:b3:3e:bf:e5:6e:d4:98:32:ff: 49:1d:39:87:54:c8:d4:5e:5c:fc:66:15:4c:47:2c: 29:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:CF:6D:5E:BF:89:B9:BC:7B:11:3E:C5:BA:3F:29:D2:25:57:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2868e30-21b4-4516-a63c-fc76c09bb7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.63.92.0/23 Signature Algorithm: sha256WithRSAEncryption 27:98:ff:06:5b:1d:fb:25:04:12:ac:a3:8d:69:87:c5:d7:e8: 0e:2d:95:57:a1:e9:72:6e:2b:24:ab:68:a3:59:d7:af:7e:14: db:c4:03:7f:9f:03:df:1d:9d:53:4a:f6:1c:bd:97:db:09:7f: ee:e4:5c:cb:17:91:40:ac:51:c2:ad:af:44:7e:01:66:0d:8c: 8a:6b:90:ec:19:4f:dd:a4:49:25:99:06:db:8b:a6:7b:cc:57: c5:9a:d9:f1:4c:4d:af:df:89:69:94:a2:3e:68:b1:4f:bf:ad: c5:5b:1b:ea:08:a0:b0:d3:6e:ee:e5:e5:09:31:1f:4b:08:d0: 22:2d:b7:af:e9:ac:62:0f:17:9b:b3:da:cf:f4:62:77:24:f9: c5:08:10:c4:1a:35:01:d1:86:35:77:bb:78:1b:47:d1:2b:65: 0e:93:55:2e:19:d2:e4:b1:87:20:12:57:76:43:dc:2a:b2:40: 98:27:42:8f:78:9e:c7:cc:99:fb:d8:73:42:c8:d3:61:0e:91: 3c:38:d5:02:1a:b8:f6:4e:f6:fd:e3:e9:c9:32:ee:47:90:3d: 2e:0e:ff:ef:3b:85:5a:46:d5:fd:d4:09:9e:0f:d6:23:b9:08: 43:d3:78:62:11:30:4c:89:2b:a9:0f:86:bf:78:d8:16:1f:b5: b1:51:99:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC8kt0vVLoa7c1LN2f9kB0+eAOPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTM5WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTgzZjRmMWM0NmU1NDI0ZDgyZmNkYjZiNTU5MmY3NDYw NjU1MzNiZWRlYmFiNjlkYzBjMjA3NDM3MTcwNTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSPZfp9Qvypt9SRdoqmr2XemXDZHOiKwcGsV6LsjPAVgfk ACKiIQfj0kYhd8Q+9tYlrFCXisNC5JURxADf2MsDlt3QBT0xuijvbGJbJjHoTwuu 7VNFDk048tDctPp8opUSq5esJOaG/2pYMUxmOsAlbQhNGe5f0uvw39Lrx9rAvRoY UsU1sIvei9k2YvK3wGjF5m3Luvewnkw7bRwhfkayoAPvRzgilirUB9k18LnOjaL7 tFpGQV1l0l3bR0IVMjYm6UzG4Sr3XyCslu/tLWSmLducYp5GgYuoaYoT90sS7xJV S1+gW7M+v+Vu1Jgy/0kdOYdUyNReXPxmFUxHLCkPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjO/PbV6/ibm8exE+xbo/KdIlV/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyODY4ZTMwLTIxYjQtNDUxNi1hNjNjLWZjNzZjMDliYjdkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQP1wwDQYJKoZIhvcNAQELBQADggEBACeY/wZbHfslBBKso41ph8XX6A4t lVeh6XJuKySraKNZ169+FNvEA3+fA98dnVNK9hy9l9sJf+7kXMsXkUCsUcKtr0R+ AWYNjIprkOwZT92kSSWZBtuLpnvMV8Wa2fFMTa/fiWmUoj5osU+/rcVbG+oIoLDT bu7l5QkxH0sI0CItt6/prGIPF5uz2s/0Ynck+cUIEMQaNQHRhjV3u3gbR9ErZQ6T VS4Z0uSxhyASV3ZD3CqyQJgnQo94nsfMmfvYc0LI02EOkTw41QIauPZO9v3j6cky 7keQPS4O/+87hVpG1f3UCZ4P1iO5CEPTeGIRMEyJK6kPhr942BYftbFRmRQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:10 2025 by rpki-client