$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa File: db1f2730-0f56-434b-aea7-5265e3cade65.roa (raw, json) Hash identifier: ez6DJO6/I2WH9UVYy4BhxVqiR0uZRr+KByt++VB6IGM= Subject key identifier: B1:87:58:24:C9:38:A8:F5:47:C0:24:4A:3A:70:2E:B7:48:0E:89:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34368D0B92E0A84FE67AD7941F5D53CC65515807 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa Signing time: Mon 07 Apr 2025 15:10:17 +0000 ROA not before: Mon 07 Apr 2025 15:10:17 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:36:8d:0b:92:e0:a8:4f:e6:7a:d7:94:1f:5d:53:cc:65:51:58:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 7 15:10:17 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=682d944540c7f0f80f86b7d78a158c9a45de0b0d07e7705068f4ee05bafad6ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:51:8f:ed:22:96:9c:e4:9f:81:f0:72:bc: b3:62:c7:b3:47:4f:d6:9f:df:e4:87:2d:36:b7:af: 5e:f2:fa:1f:d4:42:c9:a2:12:ff:aa:18:95:f0:cf: d8:14:0c:0e:5f:b0:8b:b9:8d:c9:12:98:91:f6:39: 0f:8e:3d:33:ea:09:08:37:7d:ba:96:8a:2a:09:7b: a0:3e:11:e6:94:dd:30:65:d9:e3:56:09:84:6e:17: a7:06:f7:dc:59:16:2a:21:ef:c3:5c:75:fc:09:5f: d5:c3:b7:9e:04:8d:df:01:ed:16:7d:12:64:a3:38: f9:2a:bf:bf:3d:8d:04:0d:0a:17:11:81:c9:a9:c8: 9f:44:e5:1a:2a:98:c3:6f:5c:57:79:7e:df:ec:98: f9:ec:2c:83:2a:1d:cd:03:47:a0:aa:cf:20:b3:8f: 1c:db:d0:7c:b8:bc:46:7a:76:28:66:5b:58:b1:75: aa:4e:51:c2:4f:7c:4e:ca:ea:52:d0:c0:f6:6f:bf: 22:a4:36:d3:fb:0f:b7:82:b8:1f:0b:12:10:06:b7: fe:6c:d2:f6:43:3b:2e:01:0b:0e:1d:30:92:8d:bd: 1f:64:da:ce:37:e4:32:99:5d:db:7e:60:66:a4:e1: c4:8c:d2:26:4d:c7:1d:bf:4d:a1:e2:46:43:cb:8d: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:87:58:24:C9:38:A8:F5:47:C0:24:4A:3A:70:2E:B7:48:0E:89:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1f2730-0f56-434b-aea7-5265e3cade65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:0f:73:f0:04:61:2a:4a:1c:f9:e3:e9:4c:25:b5:95:a9:90: 36:db:49:9b:42:22:b3:a6:c9:e6:6e:0d:33:c0:72:2c:c2:b1: 14:fe:91:6e:c0:07:7c:bb:87:5d:27:5f:63:67:42:9d:b6:2e: c9:2b:35:40:a3:39:64:27:0c:e4:d5:40:b5:4c:0c:67:13:cb: 3f:2b:dd:0a:b8:e0:c3:e4:69:d3:00:78:19:e6:05:58:c9:ac: f7:25:7c:12:d8:3c:12:c6:d3:b4:bd:9b:4d:93:d7:dd:57:39: f4:46:37:20:06:57:e8:c8:e5:9f:18:40:84:17:6f:ce:a8:e7: 50:5c:f0:f0:6b:e7:2e:3b:09:31:5b:47:91:82:17:0f:01:88: e6:68:79:db:04:9e:78:e2:0d:8a:3c:bb:27:00:d5:9a:5e:3c: ac:84:9d:cc:dd:f3:2f:68:05:1d:b3:12:1f:a7:bd:e6:51:c8: 91:ed:92:46:54:d4:18:c6:b2:86:ad:d9:c1:22:cc:72:8c:41: 16:b8:7e:f2:3a:8f:ae:e3:d9:92:7e:cd:fa:e4:78:23:d9:e5: e4:a5:57:95:bb:48:82:0a:b7:42:ec:52:7d:3f:ae:b7:a2:3f: 60:31:51:d8:6b:7a:c1:f8:61:f2:91:1d:1d:e9:a7:85:8a:b5: c1:df:b2:fc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNDaNC5LgqE/meteUH11TzGVRWAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA3MTUxMDE3WhcNMjUwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODJkOTQ0NTQwYzdmMGY4MGY4NmI3ZDc4YTE1OGM5YTQ1 ZGUwYjBkMDdlNzcwNTA2OGY0ZWUwNWJhZmFkNmFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhJFGP7SKWnOSfgfByvLNix7NHT9af3+SHLTa3r17y+h/U QsmiEv+qGJXwz9gUDA5fsIu5jckSmJH2OQ+OPTPqCQg3fbqWiioJe6A+EeaU3TBl 2eNWCYRuF6cG99xZFioh78NcdfwJX9XDt54Ejd8B7RZ9EmSjOPkqv789jQQNChcR gcmpyJ9E5RoqmMNvXFd5ft/smPnsLIMqHc0DR6CqzyCzjxzb0Hy4vEZ6dihmW1ix dapOUcJPfE7K6lLQwPZvvyKkNtP7D7eCuB8LEhAGt/5s0vZDOy4BCw4dMJKNvR9k 2s435DKZXdt+YGak4cSM0iZNxx2/TaHiRkPLjekpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsYdYJMk4qPVHwCRKOnAut0gOiY4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiMWYyNzMwLTBmNTYtNDM0Yi1hZWE3LTUyNjVlM2NhZGU2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQkDANBgkqhkiG9w0BAQsFAAOCAQEAHQ9z8ARhKkoc+ePpTCW1lamQNttJ m0Iis6bJ5m4NM8ByLMKxFP6RbsAHfLuHXSdfY2dCnbYuySs1QKM5ZCcM5NVAtUwM ZxPLPyvdCrjgw+Rp0wB4GeYFWMms9yV8Etg8EsbTtL2bTZPX3Vc59EY3IAZX6Mjl nxhAhBdvzqjnUFzw8GvnLjsJMVtHkYIXDwGI5mh52wSeeOINijy7JwDVml48rISd zN3zL2gFHbMSH6e95lHIke2SRlTUGMayhq3ZwSLMcoxBFrh+8jqPruPZkn7N+uR4 I9nl5KVXlbtIggq3QuxSfT+ut6I/YDFR2Gt6wfhh8pEdHemnhYq1wd+y/A== -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:52 2025 by rpki-client