$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa File: 0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa (raw, json) Hash identifier: NnPx1RkiFeR9mQiNTDkmjbH9uBxWViAp9l5S+HTjJ4Q= Subject key identifier: A1:18:3B:F4:A5:D4:2D:D5:4C:9F:62:B0:E8:91:BF:F8:80:70:7B:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 306C6292D18F3C992B0E43462775AACEC30499F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa Signing time: Mon 28 Apr 2025 15:21:24 +0000 ROA not before: Mon 28 Apr 2025 15:21:24 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.116.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6c:62:92:d1:8f:3c:99:2b:0e:43:46:27:75:aa:ce:c3:04:99:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:21:24 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=5f9dfe247210154172b4cd24bdd341e5a7ee6f53d2ec0891989a226d2ee41234, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:ee:ac:8d:0a:99:cd:12:27:10:67:27:5d: 2c:d5:fc:e9:2e:db:5e:f2:08:75:3c:43:61:b1:87: e8:fa:7e:8a:2d:5a:1d:f7:3d:bf:e0:87:d8:ca:f7: 57:86:19:a8:51:a3:17:ae:dc:f4:02:33:08:e8:7d: 8f:05:9d:21:7c:6e:6a:10:63:5d:4e:44:f9:b6:28: 22:5d:ac:3d:90:92:3d:94:10:30:2b:05:f8:8b:6a: 3c:b9:a8:f0:73:95:b3:11:be:1f:7d:ee:50:a2:6d: 13:00:39:3b:b9:77:a6:09:61:a5:5f:b2:98:1e:be: e0:34:f9:a6:06:13:72:a7:46:9f:9e:27:6d:d8:79: ee:78:28:1e:4d:e8:a0:f1:c1:52:5d:91:87:c5:b9: d6:19:95:f5:80:54:2d:9d:2e:7d:6f:a4:34:3b:26: 01:e0:88:18:0f:e2:ac:15:3e:2a:90:60:15:49:d0: c4:19:3c:8e:a2:c2:8b:ec:15:2e:f7:58:80:06:14: e5:8c:ec:2a:1a:93:68:ab:75:b5:b1:cb:50:2a:2c: ec:91:11:95:fe:3d:29:2d:06:cd:fe:aa:d8:e7:4c: 5c:0f:de:a5:07:2a:e7:04:04:5d:c0:d8:4e:f6:ee: 15:52:4f:94:d0:06:84:cf:12:26:18:ea:2b:c2:4d: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:3B:F4:A5:D4:2D:D5:4C:9F:62:B0:E8:91:BF:F8:80:70:7B:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0186970e-89aa-4c95-ae6f-6bb7b45d5b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.116.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:67:09:81:a4:34:d7:09:8b:45:81:17:ad:dd:a7:97:5f:b1: 64:0b:ef:fe:76:78:0e:3c:13:ea:32:81:19:aa:35:66:ba:cc: 2d:7a:e6:a4:b8:d6:b2:64:f3:cd:49:ee:1e:ce:c3:47:0c:ec: 5c:e7:0d:0a:6b:4f:8a:b7:fe:65:a2:c2:e4:92:26:a3:f3:9c: d1:94:88:76:83:8a:07:aa:e2:db:7c:9c:bc:27:32:a1:e7:b1: b3:71:cb:59:e9:8c:83:96:05:94:86:28:bd:c0:27:98:e9:94: 2c:31:b1:ab:65:9a:6f:96:0a:82:6c:0c:10:62:81:2f:97:34: 13:7d:73:a8:43:66:6e:24:ba:5a:9b:c2:19:7c:3b:e4:b5:8c: 2c:c9:24:0d:3d:6c:6e:f2:99:3a:43:85:24:4a:55:67:14:8b: f2:23:c1:ca:1f:47:05:bc:dc:92:09:74:e7:c3:ae:2e:31:ed: b1:10:c4:82:78:b9:93:7e:1d:f0:0f:8f:78:1b:92:cd:d5:01: ab:59:bf:d4:31:72:5e:07:7d:bf:d9:c8:1b:57:5a:93:74:75: ea:b6:02:a0:3a:77:31:81:e8:94:62:b8:a2:7d:bf:26:53:1a: 70:b5:4d:b9:43:7b:1d:e7:81:16:70:9f:c3:01:d1:2c:b0:c8: a9:36:d6:ac -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMGxiktGPPJkrDkNGJ3WqzsMEmfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUyMTI0WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjlkZmUyNDcyMTAxNTQxNzJiNGNkMjRiZGQzNDFlNWE3 ZWU2ZjUzZDJlYzA4OTE5ODlhMjI2ZDJlZTQxMjM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvVe6sjQqZzRInEGcnXSzV/Oku217yCHU8Q2Gxh+j6foot Wh33Pb/gh9jK91eGGahRoxeu3PQCMwjofY8FnSF8bmoQY11ORPm2KCJdrD2Qkj2U EDArBfiLajy5qPBzlbMRvh997lCibRMAOTu5d6YJYaVfspgevuA0+aYGE3KnRp+e J23Yee54KB5N6KDxwVJdkYfFudYZlfWAVC2dLn1vpDQ7JgHgiBgP4qwVPiqQYBVJ 0MQZPI6iwovsFS73WIAGFOWM7Coak2irdbWxy1AqLOyREZX+PSktBs3+qtjnTFwP 3qUHKucEBF3A2E727hVST5TQBoTPEiYY6ivCTc+JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoRg79KXULdVMn2Kw6JG/+IBwexswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxODY5NzBlLTg5YWEtNGM5NS1hZTZmLTZiYjdiNDVkNWIyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4dDANBgkqhkiG9w0BAQsFAAOCAQEAcWcJgaQ01wmLRYEXrd2nl1+xZAvv /nZ4DjwT6jKBGao1ZrrMLXrmpLjWsmTzzUnuHs7DRwzsXOcNCmtPirf+ZaLC5JIm o/Oc0ZSIdoOKB6ri23ycvCcyoeexs3HLWemMg5YFlIYovcAnmOmULDGxq2Wab5YK gmwMEGKBL5c0E31zqENmbiS6WpvCGXw75LWMLMkkDT1sbvKZOkOFJEpVZxSL8iPB yh9HBbzckgl058OuLjHtsRDEgni5k34d8A+PeBuSzdUBq1m/1DFyXgd9v9nIG1da k3R16rYCoDp3MYHolGK4on2/JlMacLVNuUN7HeeBFnCfwwHRLLDIqTbWrA== -----END CERTIFICATE-----Generated at Mon May 5 05:35:18 2025 by rpki-client