$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa File: d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa (raw, json) Hash identifier: mHp8DaZKl5lOl0QfoXaf2/K/iVdYTDgNEU3EJfp00Gg= Subject key identifier: 9D:8B:75:F9:72:83:C0:61:6F:84:8B:98:3E:58:F0:4A:C1:A7:34:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61D75F9BDB9473901332C13153BBBB8DABA571C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa Signing time: Fri 18 Apr 2025 00:41:38 +0000 ROA not before: Fri 18 Apr 2025 00:41:38 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d7:5f:9b:db:94:73:90:13:32:c1:31:53:bb:bb:8d:ab:a5:71:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:41:38 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=09589c85b74e491b60f5a1b9d8b4dbb802a2cf9feef994323639733fe238c1fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:02:80:c4:4b:7c:b1:13:c8:0f:84:bf:53:84: 07:b0:d4:93:b3:ad:f4:90:0a:54:75:70:e8:74:41: bd:fe:46:33:72:1a:dc:3d:c5:e2:3f:84:56:13:9c: 48:ea:b5:1b:ea:49:31:f2:c5:f5:59:92:b7:77:de: 49:fb:99:61:0a:31:7d:6c:70:77:c7:75:5f:07:ba: 6a:77:59:3c:df:d4:69:a5:f6:86:04:e1:19:e1:5a: 09:e9:39:69:6f:b8:54:26:7f:c5:90:29:22:fe:d5: ff:30:9f:ff:0b:1f:d6:79:c7:4b:ea:a0:0e:a6:1f: 6f:1d:55:42:a5:26:d5:b9:b2:1e:6c:fb:23:00:81: b3:a9:8b:9e:da:f3:10:4e:d5:ff:8f:13:b1:ee:aa: 17:78:26:a4:d4:40:a1:7e:3b:4d:89:6e:e1:3f:9f: 1a:97:c9:58:96:f7:1e:63:41:d6:f6:0a:7d:8a:88: d8:cb:d0:ef:dd:72:89:b8:4f:35:62:3d:bb:b3:42: a6:00:d8:0d:97:50:5a:2c:5f:24:ac:c1:67:54:ea: 01:ef:02:fc:53:e0:37:40:98:95:7d:68:ec:f0:64: 22:52:57:71:64:cb:22:55:cc:8a:8b:6c:c1:de:aa: 60:ab:e0:d7:b6:40:00:4b:08:da:42:0b:0f:46:0c: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8B:75:F9:72:83:C0:61:6F:84:8B:98:3E:58:F0:4A:C1:A7:34:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.84.0/22 Signature Algorithm: sha256WithRSAEncryption 36:ff:9c:26:2a:0f:f1:e0:45:b6:0b:7e:82:3b:ba:a6:90:76: c8:92:a1:ef:28:f8:5f:fc:f8:c6:6f:f5:d9:0d:0c:d4:a4:5b: 73:5a:75:db:b9:f5:61:96:06:5d:56:7f:d1:38:7f:7b:45:53: 74:e9:5d:4a:29:4c:74:49:15:c4:87:56:1e:84:85:ba:af:d3: 85:a0:5c:b0:72:e7:2c:7a:82:fc:c5:35:b7:5c:a7:a3:6f:fe: 8c:c3:97:d8:ac:d0:28:47:95:5e:f9:c4:f0:8a:23:76:ac:75: 6f:a4:a9:ec:13:fe:0b:5e:43:74:ba:0c:f3:fa:28:45:8d:24: 85:a0:dd:37:6b:44:f8:64:d4:72:87:c6:54:bc:d4:77:9c:79: 75:46:86:07:0c:28:d8:55:95:d5:ee:49:30:d1:52:c8:a6:90: da:ee:89:a3:e9:99:8f:35:ae:07:de:2b:9e:5f:7b:80:14:17: 5a:e5:38:bf:64:21:cd:80:61:e6:6b:88:c7:65:40:5e:a7:bd: fd:84:ef:3c:60:c1:ed:88:f1:e1:2b:26:e6:2e:e0:58:bf:9b: 0e:d2:2a:15:3f:4b:38:26:2a:4f:4c:2b:09:aa:e6:fe:db:65: 79:09:81:68:57:0f:42:e8:59:81:72:3d:7b:95:25:70:e0:07: 3c:0f:72:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYddfm9uUc5ATMsExU7u7jaulccEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MTM4WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTU4OWM4NWI3NGU0OTFiNjBmNWExYjlkOGI0ZGJiODAy YTJjZjlmZWVmOTk0MzIzNjM5NzMzZmUyMzhjMWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxAoDES3yxE8gPhL9ThAew1JOzrfSQClR1cOh0Qb3+RjNy Gtw9xeI/hFYTnEjqtRvqSTHyxfVZkrd33kn7mWEKMX1scHfHdV8Hump3WTzf1Gml 9oYE4RnhWgnpOWlvuFQmf8WQKSL+1f8wn/8LH9Z5x0vqoA6mH28dVUKlJtW5sh5s +yMAgbOpi57a8xBO1f+PE7Huqhd4JqTUQKF+O02JbuE/nxqXyViW9x5jQdb2Cn2K iNjL0O/dcom4TzViPbuzQqYA2A2XUFosXySswWdU6gHvAvxT4DdAmJV9aOzwZCJS V3FkyyJVzIqLbMHeqmCr4Ne2QABLCNpCCw9GDBqLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnYt1+XKDwGFvhIuYPljwSsGnNLswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NzUyYWEzLTE3MzYtNDZhNi1hZjA4LTFmZjFhMTA3YzZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAvlQwDQYJKoZIhvcNAQELBQADggEBADb/nCYqD/HgRbYLfoI7uqaQdsiS oe8o+F/8+MZv9dkNDNSkW3Naddu59WGWBl1Wf9E4f3tFU3TpXUopTHRJFcSHVh6E hbqv04WgXLBy5yx6gvzFNbdcp6Nv/ozDl9is0ChHlV75xPCKI3asdW+kqewT/gte Q3S6DPP6KEWNJIWg3TdrRPhk1HKHxlS81HeceXVGhgcMKNhVldXuSTDRUsimkNru iaPpmY81rgfeK55fe4AUF1rlOL9kIc2AYeZriMdlQF6nvf2E7zxgwe2I8eErJuYu 4Fi/mw7SKhU/SzgmKk9MKwmq5v7bZXkJgWhXD0LoWYFyPXuVJXDgBzwPcg8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:41 2025 by rpki-client