$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb04be52-0a94-4148-a196-c6ebf466a304.roa File: fb04be52-0a94-4148-a196-c6ebf466a304.roa (raw, json) Hash identifier: L2UPjq1eUsPmMuaC54NDzNN7IDgm6sW23V1zCQcK+vM= Subject key identifier: 36:6D:EE:0A:CE:07:DD:16:B9:5B:E2:28:39:77:1A:1F:B4:B6:0D:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E58176C65074FB6C74BE3170930FB98A4A1D086 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb04be52-0a94-4148-a196-c6ebf466a304.roa Signing time: Tue 08 Apr 2025 00:52:03 +0000 ROA not before: Tue 08 Apr 2025 00:52:03 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.252.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:58:17:6c:65:07:4f:b6:c7:4b:e3:17:09:30:fb:98:a4:a1:d0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:52:03 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=e28f4e15131aa27de3b8884607da00212576f1b22ef7d3aa47a508c614009dd4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:14:d0:4d:39:89:7b:64:61:01:23:94:b6: 2c:e1:8e:62:04:39:37:07:8c:bd:fd:e7:93:3b:5d: 3b:75:7d:0e:68:f7:7f:be:b2:ef:b5:38:4f:98:bd: 45:e6:92:a8:76:76:3e:9a:8b:01:61:e2:27:a8:b0: 57:59:08:09:9b:9c:8e:36:7f:6d:79:72:3c:9f:ff: 88:31:dd:f9:d1:0e:db:1e:45:b7:09:3a:69:c1:a9: 9f:bc:76:5e:06:19:c2:2c:ce:7a:a8:61:26:8a:d6: 7a:34:d8:54:d4:3a:cc:3c:8f:bc:e6:ad:41:2b:03: e2:c1:b1:ed:b4:86:16:b7:9f:47:37:c3:51:c8:e9: 9f:17:e3:19:57:5e:e6:df:c2:78:e5:ac:8b:54:49: cf:c9:c1:a2:5f:90:d8:3f:ca:15:be:32:c9:21:75: 1d:a3:44:9a:2d:06:bc:09:e7:40:fb:92:47:4d:92: 21:48:79:56:15:20:16:75:3f:9d:41:3e:d8:cc:11: aa:4f:01:bc:f0:90:0a:df:29:23:08:64:3c:8c:03: 3b:51:4b:50:47:07:49:23:48:03:f5:d5:77:8a:0f: a2:82:ea:54:29:0a:bd:d8:6f:6b:01:3b:90:04:3a: 48:56:2a:0a:85:22:a3:a9:11:e3:36:02:e3:87:ea: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6D:EE:0A:CE:07:DD:16:B9:5B:E2:28:39:77:1A:1F:B4:B6:0D:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb04be52-0a94-4148-a196-c6ebf466a304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.252.0.0/18 Signature Algorithm: sha256WithRSAEncryption 77:a9:c7:2d:49:21:b8:60:80:b0:1f:db:f2:4d:27:a4:b0:6d: a7:8b:a9:68:8d:35:47:ac:c0:b2:7b:b0:4f:05:a2:79:3e:f9: fd:05:64:df:43:e9:4b:26:c8:16:4e:7d:2a:18:99:ef:77:ce: 9b:b2:25:9d:ec:ef:05:7a:ba:54:3c:11:49:8e:cb:0c:b0:f2: a9:a4:72:99:db:80:c6:76:18:6f:cc:aa:a2:84:56:06:db:2d: d2:ef:52:4b:2f:7a:9e:05:ae:b0:ab:21:60:e1:78:51:89:1c: 88:7c:94:6f:f9:09:bd:b5:f8:cc:c5:58:e5:6e:e5:47:d7:61: cc:a8:b6:a8:25:e9:69:76:87:7a:56:59:96:87:47:51:76:65: ee:6d:7a:51:67:a1:4a:e3:af:4a:48:bc:f2:5d:7b:46:39:9d: 46:ad:c0:f0:8d:d9:d6:8d:c2:ad:d6:ac:ea:74:20:65:96:39: 7e:1c:5a:c2:08:c5:26:44:24:ac:0e:5e:21:7c:d9:9d:c4:ad: 7b:21:77:ed:43:9a:77:14:9b:87:4b:86:ec:ae:c1:f0:0b:94: 73:50:3e:32:42:f7:02:8d:bc:7f:b7:34:42:20:a4:2b:14:77: ce:b2:1e:d4:2b:d1:bb:2b:57:db:05:70:30:3a:f5:a5:6e:c9: d8:06:eb:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHlgXbGUHT7bHS+MXCTD7mKSh0IYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDA1MjAzWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjhmNGUxNTEzMWFhMjdkZTNiODg4NDYwN2RhMDAyMTI1 NzZmMWIyMmVmN2QzYWE0N2E1MDhjNjE0MDA5ZGQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZNBTQTTmJe2RhASOUtizhjmIEOTcHjL3955M7XTt1fQ5o 93++su+1OE+YvUXmkqh2dj6aiwFh4ieosFdZCAmbnI42f215cjyf/4gx3fnRDtse RbcJOmnBqZ+8dl4GGcIsznqoYSaK1no02FTUOsw8j7zmrUErA+LBse20hha3n0c3 w1HI6Z8X4xlXXubfwnjlrItUSc/JwaJfkNg/yhW+MskhdR2jRJotBrwJ50D7kkdN kiFIeVYVIBZ1P51BPtjMEapPAbzwkArfKSMIZDyMAztRS1BHB0kjSAP11XeKD6KC 6lQpCr3Yb2sBO5AEOkhWKgqFIqOpEeM2AuOH6lW5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNm3uCs4H3Ra5W+IoOXcaH7S2DTowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiMDRiZTUyLTBhOTQtNDE0OC1hMTk2LWM2ZWJmNDY2YTMwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZM/AAwDQYJKoZIhvcNAQELBQADggEBAHepxy1JIbhggLAf2/JNJ6SwbaeL qWiNNUeswLJ7sE8Fonk++f0FZN9D6UsmyBZOfSoYme93zpuyJZ3s7wV6ulQ8EUmO ywyw8qmkcpnbgMZ2GG/MqqKEVgbbLdLvUksvep4FrrCrIWDheFGJHIh8lG/5Cb21 +MzFWOVu5UfXYcyotqgl6Wl2h3pWWZaHR1F2Ze5telFnoUrjr0pIvPJde0Y5nUat wPCN2daNwq3WrOp0IGWWOX4cWsIIxSZEJKwOXiF82Z3ErXshd+1DmncUm4dLhuyu wfALlHNQPjJC9wKNvH+3NEIgpCsUd86yHtQr0bsrV9sFcDA69aVuydgG61E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:17 2025 by rpki-client