$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa File: d48d001a-d755-4177-9837-96a2f0404b1f.roa (raw, json) Hash identifier: h0fjFl7HGEQ/EzEHOhBc9ZK3chvPYwrgm0VB5OD1yKQ= Subject key identifier: D7:81:D1:1B:BE:F7:6D:3A:98:95:14:14:1B:4F:CF:E1:C6:64:05:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35E31002A8D66E996585A5FFB16134F16228B210 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa Signing time: Wed 23 Apr 2025 00:41:32 +0000 ROA not before: Wed 23 Apr 2025 00:41:32 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:10:02:a8:d6:6e:99:65:85:a5:ff:b1:61:34:f1:62:28:b2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:32 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=39a7ed48821d8d6615ddeb57be372aa8f75724d47ee4ddedccd9a210ee5bcb6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d5:1a:d7:74:bb:25:08:c1:8a:30:60:8f:e3: 28:eb:3d:af:2a:0d:4d:1c:f0:25:d3:e4:9e:c5:be: c0:49:24:22:e9:1d:4f:c3:53:bd:f3:d4:2d:c6:3b: 91:9c:9a:00:95:af:6b:11:53:8a:94:1c:16:21:69: 11:69:8a:ed:fa:f8:85:6d:c1:f3:26:02:36:41:d5: 3c:e1:b8:70:0e:9b:fe:4f:48:5f:33:86:cb:07:75: 92:fb:f3:ca:96:3f:04:2e:ba:b1:39:08:9c:3a:01: b0:7c:ae:a0:1c:86:58:d4:14:bb:06:5e:6f:3e:c4: 11:f5:ff:26:86:84:ec:63:7e:48:92:5b:da:29:83: 29:ec:d0:55:69:f2:60:cc:fd:79:49:5e:c5:a9:e5: b8:d8:c8:30:46:6c:af:3c:77:ea:69:82:ba:c8:14: ea:ff:90:84:3b:f5:7d:72:4d:69:3a:1a:bd:c7:67: 7f:9e:c8:82:90:f8:a8:45:c3:da:ac:f3:f5:9b:ae: 9f:2f:7c:6c:53:32:d4:87:7d:80:84:df:81:16:10: 37:af:01:73:76:ea:f7:0e:80:47:e3:f5:90:39:c4: c3:a5:0b:36:6c:db:11:5b:d5:4e:6d:5e:43:1b:e7: 57:f5:9d:3c:de:ed:19:7b:08:3e:90:50:d1:c0:e0: f2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:81:D1:1B:BE:F7:6D:3A:98:95:14:14:1B:4F:CF:E1:C6:64:05:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d48d001a-d755-4177-9837-96a2f0404b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.0.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:ca:54:d6:04:18:66:92:ba:44:7d:05:10:99:f7:40:01:3a: a0:2a:19:f9:1e:8b:ad:f0:94:54:49:0a:9c:93:30:96:b9:7a: 72:57:b4:42:13:df:80:85:f0:a1:fe:2e:b2:d5:15:db:a5:da: c9:7d:45:9f:a7:c9:4d:37:9d:c0:bc:db:8e:e2:4c:cd:d3:6a: 1f:a9:67:d0:13:29:d0:4c:74:3f:04:cd:9d:2b:c2:06:93:64: 51:fb:35:ce:23:7b:cd:42:1f:b9:03:12:3e:01:1d:cc:a5:4c: 88:1f:74:ac:dc:ff:0e:d2:40:a1:29:30:ff:6d:8b:0e:79:f5: b5:5d:61:98:6e:81:e7:1e:71:83:7b:16:23:dd:cd:7b:21:85: 7a:2d:74:08:fb:78:1b:3b:b3:2a:8e:99:7c:9d:89:78:28:ab: a3:ae:ac:19:6b:c5:d8:70:a7:dc:15:40:a4:f9:82:d4:b2:71: 39:40:ee:71:e7:29:b8:bc:f0:61:b2:71:0a:43:cd:d7:2a:3e: 93:18:6c:0b:28:38:97:38:df:b5:2c:60:83:76:72:50:c5:1d: a4:5c:68:c9:89:17:e3:76:33:85:fc:fb:2b:88:0a:96:ed:ca: 41:5e:03:45:a0:c1:15:3a:18:7f:eb:ab:c7:82:e7:f2:7e:2d: 7e:a5:2c:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNeMQAqjWbpllhaX/sWE08WIoshAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTMyWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWE3ZWQ0ODgyMWQ4ZDY2MTVkZGViNTdiZTM3MmFhOGY3 NTcyNGQ0N2VlNGRkZWRjY2Q5YTIxMGVlNWJjYjZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDw1RrXdLslCMGKMGCP4yjrPa8qDU0c8CXT5J7FvsBJJCLp HU/DU73z1C3GO5GcmgCVr2sRU4qUHBYhaRFpiu36+IVtwfMmAjZB1TzhuHAOm/5P SF8zhssHdZL788qWPwQuurE5CJw6AbB8rqAchljUFLsGXm8+xBH1/yaGhOxjfkiS W9opgyns0FVp8mDM/XlJXsWp5bjYyDBGbK88d+ppgrrIFOr/kIQ79X1yTWk6Gr3H Z3+eyIKQ+KhFw9qs8/Wbrp8vfGxTMtSHfYCE34EWEDevAXN26vcOgEfj9ZA5xMOl CzZs2xFb1U5tXkMb51f1nTze7Rl7CD6QUNHA4PKBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU14HRG773bTqYlRQUG0/P4cZkBWAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0OGQwMDFhLWQ3NTUtNDE3Ny05ODM3LTk2YTJmMDQwNGIxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOQAwDQYJKoZIhvcNAQELBQADggEBAGvKVNYEGGaSukR9BRCZ90ABOqAq Gfkei63wlFRJCpyTMJa5enJXtEIT34CF8KH+LrLVFdul2sl9RZ+nyU03ncC8247i TM3Tah+pZ9ATKdBMdD8EzZ0rwgaTZFH7Nc4je81CH7kDEj4BHcylTIgfdKzc/w7S QKEpMP9tiw559bVdYZhugececYN7FiPdzXshhXotdAj7eBs7syqOmXydiXgoq6Ou rBlrxdhwp9wVQKT5gtSycTlA7nHnKbi88GGycQpDzdcqPpMYbAsoOJc437UsYIN2 clDFHaRcaMmJF+N2M4X8+yuICpbtykFeA0WgwRU6GH/rq8eC5/J+LX6lLIU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:59 2025 by rpki-client