$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa File: d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa (raw, json) Hash identifier: qnxbdx7XUGWvhhqcZfokNyN4lyBYQfYP1YC7kUkYSa8= Subject key identifier: 5B:C8:10:69:73:63:88:02:E0:51:33:DE:10:48:F5:D9:EB:C4:B2:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 322C61CDCA42FA4C6F2D64850711E724DD10310E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa Signing time: Sat 12 Apr 2025 00:20:28 +0000 ROA not before: Sat 12 Apr 2025 00:20:28 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.17.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2c:61:cd:ca:42:fa:4c:6f:2d:64:85:07:11:e7:24:dd:10:31:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:20:28 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=05b0c1cb27dc280067d97508c6045c1a0aace7f4428e106131dc04e24a5ae1f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:15:b6:66:d2:12:71:3b:47:36:32:a1:72: b3:2b:ab:d6:9c:50:41:10:4e:e9:3d:9b:5a:90:bc: e1:e4:a4:ba:b2:d9:e2:2f:ac:70:cc:e4:e2:96:e7: 90:cf:d9:24:56:ed:3f:dd:76:70:b8:ee:f3:05:2b: 63:87:73:27:52:05:8c:72:1b:e8:a6:a2:ca:4b:3e: 88:cf:a6:44:b6:3e:36:4c:3b:7c:fa:84:33:1e:32: 76:36:21:fd:22:13:11:7c:86:30:5c:82:d3:90:9a: 45:07:88:ca:0d:7c:93:cd:c6:57:ba:0e:3e:ec:6e: 9c:6f:43:b0:9d:f6:ae:e3:44:25:8f:8f:87:bd:ac: 2f:5b:61:86:c2:50:02:d1:dd:cc:b3:4b:09:2a:73: 56:a3:22:7b:d9:37:64:52:24:df:5c:10:9e:35:a8: 54:13:83:0e:ba:62:da:f3:98:49:8e:5f:50:34:87: 6b:07:79:dc:a3:d1:50:ca:9a:ed:b9:6b:e9:28:bb: 17:c8:3c:15:f8:23:ed:44:58:95:26:e1:51:fc:29: dc:76:7c:48:d9:f9:29:2a:d4:9e:31:f5:38:f1:7f: eb:05:6c:5e:ed:2b:f5:bb:cf:8a:87:a0:04:0b:b2: 3e:c3:e4:84:b9:a0:a6:6a:3a:4f:5f:a8:a2:cc:c0: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C8:10:69:73:63:88:02:E0:51:33:DE:10:48:F5:D9:EB:C4:B2:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7ed2d95-f40c-4ed1-bc7f-f83a81197fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.176.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:ee:76:dd:81:af:cc:74:73:6d:f6:01:de:28:c6:b1:08:c7: b8:3e:b7:41:3a:74:df:b3:0b:8e:50:89:91:16:ce:6f:ce:82: f9:e4:c7:42:eb:05:73:58:1f:12:bb:8c:32:6a:fd:11:db:2d: 65:c7:e8:04:c0:5f:e9:38:4e:de:a8:7e:9e:19:38:1b:d2:c7: 67:51:03:8e:39:86:ad:9b:b8:cc:f6:0f:a1:52:5e:66:b8:58: 9d:e6:30:f1:55:5d:45:70:88:32:9f:31:db:84:07:f6:14:29: 45:f5:e9:8f:80:b0:7f:f1:4a:66:ac:7b:03:53:4e:20:be:c6: 33:0a:7e:d0:df:00:4a:eb:9d:10:b9:fe:52:bd:6d:61:5c:04: df:14:b7:7e:c8:e7:75:a0:25:52:d3:f0:ef:14:e1:5e:0b:c1: 5d:ff:92:cf:e1:45:2f:d5:42:b8:01:49:7c:df:86:89:42:71: f0:f4:0a:60:14:65:2f:2d:b6:4c:2b:6c:8b:7a:48:ee:52:6b: 58:c2:79:77:f9:ab:71:2c:94:a3:af:0a:50:a2:58:de:f7:75: 76:df:d5:a5:83:44:b7:d3:43:92:70:f5:91:13:88:95:9e:32: 08:89:ce:32:54:33:9e:73:b7:9e:46:7b:c6:fd:db:50:76:37: 36:3f:ca:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMixhzcpC+kxvLWSFBxHnJN0QMQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAyMDI4WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNWIwYzFjYjI3ZGMyODAwNjdkOTc1MDhjNjA0NWMxYTBh YWNlN2Y0NDI4ZTEwNjEzMWRjMDRlMjRhNWFlMWYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI8RW2ZtIScTtHNjKhcrMrq9acUEEQTuk9m1qQvOHkpLqy 2eIvrHDM5OKW55DP2SRW7T/ddnC47vMFK2OHcydSBYxyG+imospLPojPpkS2PjZM O3z6hDMeMnY2If0iExF8hjBcgtOQmkUHiMoNfJPNxle6Dj7sbpxvQ7Cd9q7jRCWP j4e9rC9bYYbCUALR3cyzSwkqc1ajInvZN2RSJN9cEJ41qFQTgw66YtrzmEmOX1A0 h2sHedyj0VDKmu25a+kouxfIPBX4I+1EWJUm4VH8Kdx2fEjZ+Skq1J4x9Tjxf+sF bF7tK/W7z4qHoAQLsj7D5IS5oKZqOk9fqKLMwH+9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW8gQaXNjiALgUTPeEEj12evEsh4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3ZWQyZDk1LWY0MGMtNGVkMS1iYzdmLWY4M2E4MTE5N2ZlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIyEbAwDQYJKoZIhvcNAQELBQADggEBACrudt2Br8x0c232Ad4oxrEIx7g+ t0E6dN+zC45QiZEWzm/Ogvnkx0LrBXNYHxK7jDJq/RHbLWXH6ATAX+k4Tt6ofp4Z OBvSx2dRA445hq2buMz2D6FSXma4WJ3mMPFVXUVwiDKfMduEB/YUKUX16Y+AsH/x SmasewNTTiC+xjMKftDfAErrnRC5/lK9bWFcBN8Ut37I53WgJVLT8O8U4V4LwV3/ ks/hRS/VQrgBSXzfholCcfD0CmAUZS8ttkwrbIt6SO5Sa1jCeXf5q3EslKOvClCi WN73dXbf1aWDRLfTQ5Jw9ZETiJWeMgiJzjJUM55zt55Ge8b921B2NzY/yr8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:51 2025 by rpki-client