$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa File: f5549e53-ed77-4bbe-b75d-2559b91cb973.roa (raw, json) Hash identifier: Tn/MVLuLxcsvfDNE/+0J3siN3iQpJMhBrx/lAToj+Rg= Subject key identifier: CD:DA:06:80:6D:0C:A3:A9:2A:AA:A5:39:0F:42:8A:B6:27:F6:61:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50E55259F8BDB749CC2C9B55046A613A3A1AF78D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa Signing time: Wed 23 Apr 2025 00:51:08 +0000 ROA not before: Wed 23 Apr 2025 00:51:08 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e5:52:59:f8:bd:b7:49:cc:2c:9b:55:04:6a:61:3a:3a:1a:f7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:51:08 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=349ca024de2d4eee0b03df40ad4ddb1d3ee460018f532d3b0ad11ffca3f52c53, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:28:5b:6f:cc:6a:93:2c:e5:eb:e6:00:45: 95:fe:0d:76:d5:0d:10:9d:ef:cb:e8:b7:f5:2a:7f: a2:3a:ad:f9:3c:5f:2b:23:39:c3:aa:63:81:83:0e: d4:bf:ba:c0:dd:52:c5:10:09:08:20:27:15:cf:6d: ef:aa:43:0f:1c:61:2d:46:96:b9:ea:9e:c2:6a:f6: 4e:95:63:c9:12:35:bc:9e:6d:84:55:89:8e:8f:1e: 77:a6:a3:a4:6e:48:ff:ef:da:0c:85:f3:41:8a:41: d1:6d:7c:b9:b9:39:df:13:6d:38:58:6e:f6:58:ed: 3c:83:0a:77:0c:9e:42:0b:c8:55:4b:b7:85:37:7b: 9d:9f:bd:1d:2e:47:ba:22:e9:41:b1:1b:85:f4:fa: da:02:80:3e:15:50:0a:41:a1:a9:3e:a2:0a:9c:f4: ce:03:64:36:7f:bb:53:24:91:41:65:b9:e6:42:c9: 79:5f:14:8d:d2:f2:f3:ba:f1:3f:1f:04:d6:26:92: 66:66:93:79:9f:53:d9:88:d0:b8:35:c2:04:a4:fb: 7a:18:77:bc:93:e3:2d:ca:af:c0:62:e3:17:8e:b3: 86:bf:d0:9d:c9:1b:ca:06:76:2a:b1:52:ed:32:1e: d3:38:f7:6a:7f:aa:81:96:8a:02:f5:a0:76:c3:21: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:06:80:6D:0C:A3:A9:2A:AA:A5:39:0F:42:8A:B6:27:F6:61:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.240.0/20 Signature Algorithm: sha256WithRSAEncryption 19:fb:16:2b:97:87:8b:84:85:69:cd:bf:68:59:da:68:8c:ce: 00:63:89:a2:51:c1:98:8e:3f:c9:6e:15:3a:6c:88:a6:d1:a6: 2e:aa:b1:f1:cc:9c:87:a9:14:fa:f9:c2:ed:2d:7f:e6:cc:0a: 12:94:c5:44:a0:39:f3:ef:29:d2:7c:ff:97:59:73:1e:ec:5b: 22:7d:ac:98:2c:20:92:e3:b1:4c:c3:f6:b5:31:50:f1:83:93: 00:a7:67:00:a7:f8:0e:29:68:b3:be:10:dc:f6:60:0b:5c:ec: c4:3a:0c:e8:f0:f5:8b:06:0d:5e:29:86:23:5a:50:3c:71:e9: 6f:5d:68:a0:f1:12:62:ac:f2:43:4b:07:4f:f8:ea:c2:f8:50: 6a:21:0e:1e:b4:54:07:73:4c:c3:d8:b1:f4:9b:16:a2:b5:06: 0e:a0:97:1b:a7:e9:b8:de:c0:d5:75:4e:c2:11:77:6f:e2:73: 56:f4:c5:0a:8e:cf:0f:2b:86:74:82:3e:4a:f1:96:84:e4:69: 8f:69:44:12:71:49:8c:fe:41:06:87:5a:51:b8:cd:a5:68:75: 2c:ba:d3:54:8b:b6:4b:ff:e6:ae:a0:0a:ef:28:20:94:58:e9: da:8e:4f:d3:d8:ff:15:88:8a:ad:bd:d7:2e:98:cc:b1:17:be: 01:60:21:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUOVSWfi9t0nMLJtVBGphOjoa940wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA1MTA4WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDljYTAyNGRlMmQ0ZWVlMGIwM2RmNDBhZDRkZGIxZDNl ZTQ2MDAxOGY1MzJkM2IwYWQxMWZmY2EzZjUyYzUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCroChbb8xqkyzl6+YARZX+DXbVDRCd78vot/Uqf6I6rfk8 XysjOcOqY4GDDtS/usDdUsUQCQggJxXPbe+qQw8cYS1GlrnqnsJq9k6VY8kSNbye bYRViY6PHnemo6RuSP/v2gyF80GKQdFtfLm5Od8TbThYbvZY7TyDCncMnkILyFVL t4U3e52fvR0uR7oi6UGxG4X0+toCgD4VUApBoak+ogqc9M4DZDZ/u1MkkUFlueZC yXlfFI3S8vO68T8fBNYmkmZmk3mfU9mI0Lg1wgSk+3oYd7yT4y3Kr8Bi4xeOs4a/ 0J3JG8oGdiqxUu0yHtM492p/qoGWigL1oHbDIQJrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzdoGgG0Mo6kqqqU5D0KKtif2YaAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NTQ5ZTUzLWVkNzctNGJiZS1iNzVkLTI1NTliOTFjYjk3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7PAwDQYJKoZIhvcNAQELBQADggEBABn7FiuXh4uEhWnNv2hZ2miMzgBj iaJRwZiOP8luFTpsiKbRpi6qsfHMnIepFPr5wu0tf+bMChKUxUSgOfPvKdJ8/5dZ cx7sWyJ9rJgsIJLjsUzD9rUxUPGDkwCnZwCn+A4paLO+ENz2YAtc7MQ6DOjw9YsG DV4phiNaUDxx6W9daKDxEmKs8kNLB0/46sL4UGohDh60VAdzTMPYsfSbFqK1Bg6g lxun6bjewNV1TsIRd2/ic1b0xQqOzw8rhnSCPkrxloTkaY9pRBJxSYz+QQaHWlG4 zaVodSy601SLtkv/5q6gCu8oIJRY6dqOT9PY/xWIiq291y6YzLEXvgFgIQs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:59 2025 by rpki-client