$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e49ddb89-6ea9-431c-a9e4-1c41172f03f9.roa File: e49ddb89-6ea9-431c-a9e4-1c41172f03f9.roa (raw, json) Hash identifier: M/ZJHAiRkkaJKK4sSoCzQqIHOmXAnjSAI12uhrajZQM= Subject key identifier: 26:EF:8D:73:FC:94:63:6C:36:42:BB:12:FD:31:E0:29:C7:7A:5F:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 076C35D66796EF7EEB3DC7D475F017EAF9ABF3FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e49ddb89-6ea9-431c-a9e4-1c41172f03f9.roa Signing time: Wed 23 Apr 2025 00:32:08 +0000 ROA not before: Wed 23 Apr 2025 00:32:08 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6c:35:d6:67:96:ef:7e:eb:3d:c7:d4:75:f0:17:ea:f9:ab:f3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:32:08 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=f3b985425f3316e6b2cb9468747b3ed691df1cd3e5c94b8a564085c25328f76a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:27:b4:fa:50:42:fe:89:4d:ef:3d:e0:bc: 18:33:d1:88:c6:75:31:b2:d9:48:af:be:b7:b4:51: 96:80:7f:4c:a9:4e:dc:08:f2:b5:12:84:6a:5a:1d: 15:dd:be:2f:ef:49:fe:94:df:95:9a:1a:ae:23:35: 84:7d:85:ed:cf:fd:29:49:a0:b7:25:08:1c:51:9b: 7c:58:e1:e9:4f:0d:b7:77:66:20:2d:39:43:38:2c: 2d:e3:a6:f4:9b:3f:ea:1a:b7:f8:69:54:fb:fe:cd: 02:1d:fb:d6:43:71:b7:f5:28:9d:da:7e:a9:bf:8a: 8e:6d:92:fd:a8:05:43:ad:ad:c1:d1:da:f9:31:6a: 51:3c:da:b1:58:17:ef:77:1b:ad:52:a4:2b:ad:eb: ac:38:9c:6e:5f:7e:b8:8a:6e:0a:b7:25:f9:0d:02: 4e:8d:e3:3d:24:49:1f:94:ca:3c:1b:06:16:34:f6: 19:ce:eb:75:48:48:92:14:29:04:23:91:95:49:cf: e4:ef:27:0f:1b:9d:a2:f8:cf:fd:8f:7a:c4:03:1d: 54:d3:e2:f2:b7:ae:cf:8d:9e:64:e5:d0:53:ae:2e: 62:45:df:31:40:95:4b:1c:fa:e0:50:a0:c7:3b:f1: 49:bc:a8:ec:62:76:af:86:76:9b:28:fe:e8:2e:d0: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EF:8D:73:FC:94:63:6C:36:42:BB:12:FD:31:E0:29:C7:7A:5F:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e49ddb89-6ea9-431c-a9e4-1c41172f03f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.160.0/19 Signature Algorithm: sha256WithRSAEncryption 7e:34:14:44:76:3a:61:08:85:6f:69:4f:c8:9c:0c:37:0f:8e: 41:9f:5e:66:83:6a:68:e6:0d:0b:17:8b:66:1c:14:e2:c4:3c: e3:5b:b8:d2:4c:3e:30:c4:4a:5a:da:a7:3d:55:d5:c8:2d:03: 7f:93:3d:0d:46:09:98:3a:9a:c5:fa:85:4e:7f:79:5e:3c:1a: 6e:13:1d:18:2d:ec:22:f7:a2:a6:e1:19:1d:cd:af:99:e0:12: 7a:4e:36:ee:7b:ae:dc:fe:8c:a0:f1:96:fb:5c:7e:82:93:93: 77:40:17:95:3e:a0:38:66:a0:14:04:0f:d5:7d:d7:33:f3:f9: 71:44:2f:d4:f8:e6:59:c7:83:44:ba:31:13:ff:fe:60:9a:b5: 14:b3:75:1c:ef:ea:7d:02:0d:28:93:dd:3c:3c:98:85:99:03: 6c:03:31:9a:fd:01:aa:b8:ba:f0:33:9b:19:ce:94:80:01:93: 41:72:af:18:ce:37:6c:05:d6:4b:31:23:df:51:89:e8:24:11: dc:73:5b:02:a2:82:f6:51:a4:b9:bc:59:87:58:b0:fa:c9:0d: e8:00:86:d1:44:0a:3e:b0:d1:49:7c:97:d8:fd:b8:be:be:79: 9a:e3:8e:1b:25:04:0f:7a:f3:b0:88:55:a7:0f:57:da:ee:f1: 4f:e6:93:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB2w11meW737rPcfUdfAX6vmr8/wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAzMjA4WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2I5ODU0MjVmMzMxNmU2YjJjYjk0Njg3NDdiM2VkNjkx ZGYxY2QzZTVjOTRiOGE1NjQwODVjMjUzMjhmNzZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRYCe0+lBC/olN7z3gvBgz0YjGdTGy2Uivvre0UZaAf0yp TtwI8rUShGpaHRXdvi/vSf6U35WaGq4jNYR9he3P/SlJoLclCBxRm3xY4elPDbd3 ZiAtOUM4LC3jpvSbP+oat/hpVPv+zQId+9ZDcbf1KJ3afqm/io5tkv2oBUOtrcHR 2vkxalE82rFYF+93G61SpCut66w4nG5ffriKbgq3JfkNAk6N4z0kSR+UyjwbBhY0 9hnO63VISJIUKQQjkZVJz+TvJw8bnaL4z/2PesQDHVTT4vK3rs+NnmTl0FOuLmJF 3zFAlUsc+uBQoMc78Um8qOxidq+Gdpso/ugu0B07AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJu+Nc/yUY2w2QrsS/THgKcd6X4YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0OWRkYjg5LTZlYTktNDMxYy1hOWU0LTFjNDExNzJmMDNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOKAwDQYJKoZIhvcNAQELBQADggEBAH40FER2OmEIhW9pT8icDDcPjkGf XmaDamjmDQsXi2YcFOLEPONbuNJMPjDESlrapz1V1cgtA3+TPQ1GCZg6msX6hU5/ eV48Gm4THRgt7CL3oqbhGR3Nr5ngEnpONu57rtz+jKDxlvtcfoKTk3dAF5U+oDhm oBQED9V91zPz+XFEL9T45lnHg0S6MRP//mCatRSzdRzv6n0CDSiT3Tw8mIWZA2wD MZr9Aaq4uvAzmxnOlIABk0FyrxjON2wF1ksxI99RiegkEdxzWwKigvZRpLm8WYdY sPrJDegAhtFECj6w0Ul8l9j9uL6+eZrjjhslBA9687CIVacPV9ru8U/mk2E= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:03 2025 by rpki-client