$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa File: d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa (raw, json) Hash identifier: 3HVMWqYt2DlBxOEUyhPfocmvi2gBrtmZhRdlGqhZmig= Subject key identifier: 0D:A1:94:C6:51:2D:67:E7:1D:D8:ED:90:C1:4A:C5:3E:2E:43:D0:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11F02E709409D295FBE541F17D5B06A5F280D57E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa Signing time: Mon 07 Apr 2025 15:01:34 +0000 ROA not before: Mon 07 Apr 2025 15:01:34 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 144.168.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f0:2e:70:94:09:d2:95:fb:e5:41:f1:7d:5b:06:a5:f2:80:d5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:01:34 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=3a9e18a7006fe122985033f12df3dad4488a54e1e1fc466f925fdeb433108f0b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:8b:02:72:79:16:a1:1a:c0:ed:ce:4c:e0: a6:12:21:d7:c4:36:e4:2e:ad:33:1f:37:0c:3d:72: d3:5f:c5:63:19:a6:1d:29:02:3d:2c:45:65:be:48: f8:5e:66:93:ff:37:1e:6c:f5:30:37:36:3d:c1:40: 29:6c:24:53:7d:b5:31:09:14:01:d7:8f:b9:ee:d7: 3b:c0:4e:cc:c0:2a:74:12:36:29:09:71:bc:f4:ca: 3f:13:37:c9:1e:18:24:70:43:65:a2:2f:1a:13:48: 2a:2b:45:5d:71:6a:69:98:5d:92:fa:d8:1b:d3:ec: a1:75:b3:f0:37:8c:e5:32:e0:47:19:a6:9d:79:4f: f7:a9:2c:d9:4c:a3:d3:35:3f:00:19:67:cc:fd:c9: 47:be:89:75:9a:00:b1:d3:aa:41:dd:7d:17:64:5c: 99:d2:ee:59:8b:13:78:9e:81:03:ce:8b:f7:87:b0: 2f:c5:0a:c9:29:22:7d:0a:79:2f:62:54:55:66:0c: be:09:8e:ba:14:c7:49:2e:2d:ce:61:41:d1:28:50: 2a:e2:8b:dd:6b:88:58:43:d2:87:ad:dc:38:19:44: 7f:3f:11:95:cc:12:ea:38:ee:7d:8f:6a:a8:2f:1a: 0b:1f:b6:79:2e:77:ab:91:94:49:d3:7e:d8:53:9d: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A1:94:C6:51:2D:67:E7:1D:D8:ED:90:C1:4A:C5:3E:2E:43:D0:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4f:92:5d:97:e6:ba:28:a6:74:16:2b:e2:60:c3:79:95:93:0e: 6c:ba:0f:56:10:54:b2:93:5a:33:c5:5d:15:09:3a:84:e3:50: 8e:93:42:38:40:e1:dc:7b:dc:1a:90:21:01:7a:34:f3:5d:ca: 03:87:7c:13:b1:a2:a4:7c:eb:58:c8:50:05:c4:ac:26:3f:29: 72:60:07:07:76:b3:16:b4:da:4a:33:c9:3d:fb:94:a0:ec:cb: 0a:12:3c:fb:d1:81:74:3f:e0:2b:4c:04:52:ff:6d:1a:f5:69: 6e:37:86:e8:3a:23:5b:bd:72:8b:89:2d:c1:8d:cb:ee:68:6b: 4d:f8:2e:bb:01:fb:83:71:f8:5d:5a:1d:6b:f0:39:bf:4e:2c: 2a:19:82:48:16:89:1d:30:66:8c:29:a6:72:28:8c:7a:42:5c: fd:3f:ae:41:fa:ff:63:1f:05:33:7b:fe:98:01:5d:4f:fa:3e: 9b:4f:d1:d8:78:36:11:20:2b:3c:fc:05:b5:22:7c:05:0f:27: a7:4f:e9:40:de:88:12:b1:4f:f9:97:c5:19:21:d6:b2:59:f7: a2:1e:7d:34:1c:2c:b2:99:bb:f5:bd:77:0a:8f:e4:a7:21:93: 70:6c:9f:32:0c:43:dd:5c:bf:46:97:df:86:a9:a7:49:c5:02: 2b:62:65:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEfAucJQJ0pX75UHxfVsGpfKA1X4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUwMTM0WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTllMThhNzAwNmZlMTIyOTg1MDMzZjEyZGYzZGFkNDQ4 OGE1NGUxZTFmYzQ2NmY5MjVmZGViNDMzMTA4ZjBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEBIsCcnkWoRrA7c5M4KYSIdfENuQurTMfNww9ctNfxWMZ ph0pAj0sRWW+SPheZpP/Nx5s9TA3Nj3BQClsJFN9tTEJFAHXj7nu1zvATszAKnQS NikJcbz0yj8TN8keGCRwQ2WiLxoTSCorRV1xammYXZL62BvT7KF1s/A3jOUy4EcZ pp15T/epLNlMo9M1PwAZZ8z9yUe+iXWaALHTqkHdfRdkXJnS7lmLE3iegQPOi/eH sC/FCskpIn0KeS9iVFVmDL4JjroUx0kuLc5hQdEoUCrii91riFhD0oet3DgZRH8/ EZXMEuo47n2PaqgvGgsftnkud6uRlEnTfthTndVnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDaGUxlEtZ+cd2O2QwUrFPi5D0HgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2MjI2MmUwLWRmNzUtNGRjOC05ZWQyLTUzMGY2YjdjZDk1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeQqIAwDQYJKoZIhvcNAQELBQADggEBAE+SXZfmuiimdBYr4mDDeZWTDmy6 D1YQVLKTWjPFXRUJOoTjUI6TQjhA4dx73BqQIQF6NPNdygOHfBOxoqR861jIUAXE rCY/KXJgBwd2sxa02kozyT37lKDsywoSPPvRgXQ/4CtMBFL/bRr1aW43hug6I1u9 couJLcGNy+5oa034LrsB+4Nx+F1aHWvwOb9OLCoZgkgWiR0wZowppnIojHpCXP0/ rkH6/2MfBTN7/pgBXU/6PptP0dh4NhEgKzz8BbUifAUPJ6dP6UDeiBKxT/mXxRkh 1rJZ96IefTQcLLKZu/W9dwqP5Kchk3BsnzIMQ91cv0aX34app0nFAitiZXc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:36 2025 by rpki-client