$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02754551-c321-414b-aa85-a57e7ee3442d.roa File: 02754551-c321-414b-aa85-a57e7ee3442d.roa (raw, json) Hash identifier: Etzp1y766R//qcZ4hYNgHb5oZRi3vwZ78NdLnaTGEq0= Subject key identifier: A1:E4:E6:BD:3B:52:9B:57:A1:DA:20:9C:92:5A:D1:12:ED:9E:2C:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 165F2077DEEA81B20C01324ADDE07CA0F5087549 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02754551-c321-414b-aa85-a57e7ee3442d.roa Signing time: Sat 03 May 2025 00:02:04 +0000 ROA not before: Sat 03 May 2025 00:02:04 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 7224 IP address blocks: 162.221.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5f:20:77:de:ea:81:b2:0c:01:32:4a:dd:e0:7c:a0:f5:08:75:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:02:04 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=630aeda832406fce79d2d855cd908fac15fb6a92d88866ba937c7cc0b4eecafa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:73:d4:36:04:8e:e4:d0:63:65:ac:ea:36: 6d:44:51:84:d6:af:eb:80:e5:ae:09:25:b6:f9:19: e6:d6:3d:b5:34:41:ee:f8:4e:ba:f2:54:6c:fe:e8: 3c:71:d5:6b:5d:31:9c:60:60:e9:28:97:8c:57:19: 45:e8:99:6e:1d:d9:f2:90:f6:29:20:3c:48:29:2d: 70:ea:c2:22:76:ec:00:46:10:24:89:e6:c5:00:44: df:97:c5:2d:be:18:a4:9f:a0:2e:c3:47:bb:b8:be: f9:d3:b4:b1:a0:f7:09:01:06:68:79:70:37:34:c8: 96:b4:d3:85:98:ec:4e:d4:33:8c:f9:5f:4f:90:cc: c5:bc:c3:84:fe:bf:ac:31:a2:0f:7c:c5:93:05:6f: 55:95:e1:0d:28:f3:b8:49:fe:bb:29:25:e9:1a:75: 76:01:82:16:1c:6c:b1:d3:14:9d:23:6e:e9:bb:a6: 2d:47:00:15:a9:2e:10:09:84:7a:fc:d7:a0:5b:3c: f4:63:b3:63:5b:3a:59:a1:65:f7:d7:5b:d1:35:85: d9:ea:a2:b5:d7:6f:e8:b2:8b:f3:9d:d3:25:76:4d: 1a:e8:53:63:ee:84:9a:60:6f:03:fc:b6:f3:cc:da: 21:30:1d:a5:de:4f:9a:71:e7:bc:7f:7b:ed:8a:51: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E4:E6:BD:3B:52:9B:57:A1:DA:20:9C:92:5A:D1:12:ED:9E:2C:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02754551-c321-414b-aa85-a57e7ee3442d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.221.160.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:19:75:03:92:4f:59:cc:98:cb:00:96:19:f5:ad:f5:db:9a: 65:b4:68:db:2b:d7:6c:e5:71:20:94:53:a1:e6:7d:ca:29:ff: 95:70:4b:3a:45:f4:5b:70:2b:e3:75:88:0f:69:59:cc:7a:38: 1d:a0:35:41:a8:36:44:cd:f6:fa:40:43:4d:e1:02:87:b8:ad: ab:03:ed:91:3f:0c:de:1c:a3:47:b0:57:07:d9:9f:a6:70:24: c9:fb:fd:78:f0:cb:42:a8:f6:62:eb:06:a4:40:f5:4d:78:ff: d5:db:e9:ed:cf:33:f9:66:17:38:a9:e4:89:33:3d:28:2e:6f: 43:27:16:60:19:cb:ad:60:5a:1a:d3:25:96:7b:a6:79:92:5b: 76:05:fc:22:98:e7:eb:03:89:13:81:40:d3:ac:8c:03:15:02: 50:ae:7a:e7:4d:81:3b:b3:3c:49:e7:ff:79:bf:f2:c8:76:48: e6:97:54:b6:93:79:6b:53:10:33:56:d7:93:5d:c1:75:a8:06: 14:fe:4c:c2:50:9b:2a:1e:9b:00:b8:4c:5b:5d:0f:ee:7d:51: 69:40:1e:c6:a0:20:4a:13:a0:1d:3d:0e:4a:37:b7:88:bc:6e: 31:16:09:a0:a7:08:d6:60:9f:e3:f8:1f:cf:d1:93:20:e7:ec: 0f:95:5c:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFl8gd97qgbIMATJK3eB8oPUIdUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAwMjA0WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzBhZWRhODMyNDA2ZmNlNzlkMmQ4NTVjZDkwOGZhYzE1 ZmI2YTkyZDg4ODY2YmE5MzdjN2NjMGI0ZWVjYWZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwhXPUNgSO5NBjZazqNm1EUYTWr+uA5a4JJbb5GebWPbU0 Qe74TrryVGz+6Dxx1WtdMZxgYOkol4xXGUXomW4d2fKQ9ikgPEgpLXDqwiJ27ABG ECSJ5sUARN+XxS2+GKSfoC7DR7u4vvnTtLGg9wkBBmh5cDc0yJa004WY7E7UM4z5 X0+QzMW8w4T+v6wxog98xZMFb1WV4Q0o87hJ/rspJekadXYBghYcbLHTFJ0jbum7 pi1HABWpLhAJhHr816BbPPRjs2NbOlmhZffXW9E1hdnqorXXb+iyi/Od0yV2TRro U2PuhJpgbwP8tvPM2iEwHaXeT5px57x/e+2KURe1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoeTmvTtSm1eh2iCcklrREu2eLBMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyNzU0NTUxLWMzMjEtNDE0Yi1hYTg1LWE1N2U3ZWUzNDQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOi3aAwDQYJKoZIhvcNAQELBQADggEBAFsZdQOST1nMmMsAlhn1rfXbmmW0 aNsr12zlcSCUU6Hmfcop/5VwSzpF9FtwK+N1iA9pWcx6OB2gNUGoNkTN9vpAQ03h Aoe4rasD7ZE/DN4co0ewVwfZn6ZwJMn7/Xjwy0Ko9mLrBqRA9U14/9Xb6e3PM/lm Fzip5IkzPSgub0MnFmAZy61gWhrTJZZ7pnmSW3YF/CKY5+sDiROBQNOsjAMVAlCu eudNgTuzPEnn/3m/8sh2SOaXVLaTeWtTEDNW15NdwXWoBhT+TMJQmyoemwC4TFtd D+59UWlAHsagIEoToB09Dko3t4i8bjEWCaCnCNZgn+P4H8/RkyDn7A+VXBY= -----END CERTIFICATE-----Generated at Sun May 11 18:11:06 2025 by rpki-client