$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edfa210f-abff-4cdc-8be9-4d95a622a227.roa File: edfa210f-abff-4cdc-8be9-4d95a622a227.roa (raw, json) Hash identifier: Y41qjeW3l2MaQMBlDDDQ4kPWFNM6K9CJPB0NVV+y6yU= Subject key identifier: EE:85:6C:E3:1C:BD:CE:9C:61:37:3B:D8:4D:0B:43:2F:15:7C:F5:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54F0BD2A152E167874D30913DD47776C16417CD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edfa210f-abff-4cdc-8be9-4d95a622a227.roa Signing time: Fri 18 Apr 2025 00:42:11 +0000 ROA not before: Fri 18 Apr 2025 00:42:11 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.52.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f0:bd:2a:15:2e:16:78:74:d3:09:13:dd:47:77:6c:16:41:7c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 18 00:42:11 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=cc4694d27567c18424d44d713808886bf6615264c51edba6fd3105a873447f14, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:11:21:22:ac:89:34:ab:e6:d8:21:6f:96: 87:f3:3e:a1:75:b5:45:e2:0d:18:4d:b7:e5:a7:44: e5:dc:23:49:62:cb:fa:cf:f3:71:39:78:92:36:ed: 96:06:2a:a0:f3:b9:85:91:e2:b4:38:52:6f:e9:9b: 92:97:06:4b:f9:12:e1:0f:24:e4:33:06:f3:b7:94: 9e:c7:fa:94:dd:38:45:c2:a5:9c:f0:02:bf:e6:f0: 8b:a1:de:83:a1:04:2a:94:93:a4:ea:db:9a:18:68: eb:19:13:31:3f:51:76:1d:b9:af:59:03:e1:8a:29: 64:84:46:87:24:a0:16:bc:a2:dd:07:62:c8:6d:ff: 2d:f3:de:1d:2c:1f:e8:a9:3b:4e:00:24:b3:46:de: 74:3f:cd:3e:b2:e8:eb:a3:9d:25:d5:9f:50:e2:02: 2a:bc:2e:bf:be:35:ef:18:a1:37:0d:19:db:db:6a: 29:eb:75:b4:41:dc:d9:4a:8f:be:d9:33:21:be:d5: 54:af:26:e4:67:ff:16:64:c3:be:b3:68:41:c6:26: 06:b8:fe:42:26:f9:39:5b:3b:4a:42:c2:0c:ed:c1: b8:47:ad:f0:50:53:4b:7a:1e:95:94:00:4c:ca:f0: cd:11:0b:5e:78:ae:95:51:77:ac:43:dd:fb:a9:94: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:6C:E3:1C:BD:CE:9C:61:37:3B:D8:4D:0B:43:2F:15:7C:F5:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edfa210f-abff-4cdc-8be9-4d95a622a227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.52.4.0/24 Signature Algorithm: sha256WithRSAEncryption 54:cc:4c:76:01:81:ad:da:f2:ef:b0:bb:88:3d:8f:96:1f:ac: e9:97:40:a1:cb:d5:de:4d:b0:93:cb:89:a0:5c:7c:98:e3:d7: 79:32:95:fd:ec:20:33:f8:34:27:b3:8b:cb:ee:7a:06:2f:d1: ee:6f:70:f2:40:1c:7e:a2:d3:8a:d0:34:87:94:a2:79:00:41: 6c:61:70:47:89:5a:c4:92:75:2b:d5:2b:11:df:c5:db:35:08: d5:5a:a7:2f:3f:b0:94:51:2c:d9:1f:7f:7b:52:b6:11:97:d1: ac:cb:9f:ab:d9:e4:6a:60:f2:1b:85:cf:d9:9d:7b:a3:79:b4: d2:b1:f6:b9:d4:a9:51:76:23:b2:34:c2:43:a5:34:b0:f1:bd: 04:28:e9:f4:83:1b:92:80:3d:25:69:d7:c1:55:a6:50:e3:36: b6:26:d8:c4:f2:e7:9f:5b:fd:89:8c:e2:95:a8:a0:d7:cf:8a: e9:de:55:54:d9:13:7f:48:ff:07:20:ed:c5:2e:c1:1a:0d:77: e9:fa:4b:07:32:11:33:f3:1d:25:b5:51:82:06:08:9d:c7:75: 24:87:fd:41:a1:d5:8f:a8:68:45:88:dd:28:0d:b7:8a:99:48: 8e:5e:73:7a:0d:25:4b:0c:e2:2d:9c:ec:9f:8d:6a:6e:d4:d4: 4a:ce:4e:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVPC9KhUuFnh00wkT3Ud3bBZBfNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE4MDA0MjExWhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzQ2OTRkMjc1NjdjMTg0MjRkNDRkNzEzODA4ODg2YmY2 NjE1MjY0YzUxZWRiYTZmZDMxMDVhODczNDQ3ZjE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzyhEhIqyJNKvm2CFvlofzPqF1tUXiDRhNt+WnROXcI0li y/rP83E5eJI27ZYGKqDzuYWR4rQ4Um/pm5KXBkv5EuEPJOQzBvO3lJ7H+pTdOEXC pZzwAr/m8Iuh3oOhBCqUk6Tq25oYaOsZEzE/UXYdua9ZA+GKKWSERockoBa8ot0H Ysht/y3z3h0sH+ipO04AJLNG3nQ/zT6y6OujnSXVn1DiAiq8Lr++Ne8YoTcNGdvb ainrdbRB3NlKj77ZMyG+1VSvJuRn/xZkw76zaEHGJga4/kIm+TlbO0pCwgztwbhH rfBQU0t6HpWUAEzK8M0RC154rpVRd6xD3fuplA/pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7oVs4xy9zpxhNzvYTQtDLxV89cUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkZmEyMTBmLWFiZmYtNGNkYy04YmU5LTRkOTVhNjIyYTIyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABANAQwDQYJKoZIhvcNAQELBQADggEBAFTMTHYBga3a8u+wu4g9j5YfrOmX QKHL1d5NsJPLiaBcfJjj13kylf3sIDP4NCezi8vuegYv0e5vcPJAHH6i04rQNIeU onkAQWxhcEeJWsSSdSvVKxHfxds1CNVapy8/sJRRLNkff3tSthGX0azLn6vZ5Gpg 8huFz9mde6N5tNKx9rnUqVF2I7I0wkOlNLDxvQQo6fSDG5KAPSVp18FVplDjNrYm 2MTy559b/YmM4pWooNfPiuneVVTZE39I/wcg7cUuwRoNd+n6SwcyETPzHSW1UYIG CJ3HdSSH/UGh1Y+oaEWI3SgNt4qZSI5ec3oNJUsM4i2c7J+Nam7U1ErOTto= -----END CERTIFICATE-----Generated at Sun Apr 27 14:14:30 2025 by rpki-client