$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/121a5400-f940-428a-9bc9-2251735f0c70.roa File: 121a5400-f940-428a-9bc9-2251735f0c70.roa (raw, json) Hash identifier: /KMhDMziVcgnZi8nhKOAeI0zTdHvimbWdG/1mHU5HfM= Subject key identifier: 42:F9:2D:C2:FC:85:99:D1:DA:48:6D:F9:23:36:B8:78:4F:9D:32:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79DEFF1A8F7329E55BF247CD78C056BD90277A4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/121a5400-f940-428a-9bc9-2251735f0c70.roa Signing time: Mon 05 May 2025 15:22:11 +0000 ROA not before: Mon 05 May 2025 15:22:11 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 57.204.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:de:ff:1a:8f:73:29:e5:5b:f2:47:cd:78:c0:56:bd:90:27:7a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:22:11 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=d74fe2e3a1725409593fffad0894afc27ee8e685db051afaeb5edf03824b8169, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:b1:71:03:db:ca:e1:f6:1e:6f:32:f6:a4: ed:31:8f:b9:f1:07:67:2c:56:66:e0:5f:00:5f:ad: aa:84:21:58:88:71:92:2c:cb:7f:e2:8e:41:94:f0: 22:2b:d2:6e:78:bc:8d:90:38:1d:e6:34:71:88:c0: 3b:fb:58:3a:83:42:95:bf:a5:6b:3f:0a:34:ab:80: a4:89:f3:46:98:aa:fb:30:4e:f8:1c:70:17:49:1e: 22:d1:a0:a1:7e:0f:30:08:cf:81:e4:21:51:d1:2b: 90:6d:24:72:37:b2:13:2f:8e:68:a1:0f:d8:1a:79: 9d:82:c2:60:83:6f:f8:ff:c2:e9:f6:7b:69:c1:20: 70:8a:34:03:18:21:18:4e:2a:cf:0a:72:b6:d6:f3: 65:fc:29:16:23:74:c2:09:0b:e0:42:c5:dc:ce:2e: a0:6d:48:6b:4c:b7:50:35:17:62:45:cf:2e:8e:4e: 43:df:42:5e:c9:07:5b:b2:60:03:7d:2a:69:ab:d0: 80:9f:1e:92:05:1a:73:41:57:ff:50:fa:94:f9:41: e0:a8:73:74:68:36:20:d3:8f:ab:85:34:1f:7d:81: b6:19:c0:ee:c4:1e:0a:d3:8c:74:8f:8a:bb:d6:7e: ae:c3:29:ad:37:71:99:0e:77:50:37:31:64:58:65: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F9:2D:C2:FC:85:99:D1:DA:48:6D:F9:23:36:B8:78:4F:9D:32:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/121a5400-f940-428a-9bc9-2251735f0c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:d4:d1:a8:56:38:0a:c6:20:98:56:34:65:c3:1d:c3:12:57: 0c:c2:8e:b1:35:4a:50:04:a9:6c:4f:6c:73:89:3f:dc:d7:19: 74:7b:29:30:bf:48:e5:59:f8:ae:1e:a7:12:53:ac:86:a7:a1: dd:1c:de:63:6c:7e:42:fb:4f:37:20:90:32:41:79:3a:11:e2: af:9e:ca:34:6c:d0:09:aa:a7:db:54:66:57:39:c1:0a:64:67: 89:36:5d:9f:ee:8f:6c:1a:c2:69:ae:79:cc:03:8a:45:53:c0: cd:3a:38:93:1a:2d:bc:76:7c:89:4b:36:69:42:b6:03:50:33: 03:d9:56:e7:39:11:3f:d8:1d:72:62:56:35:ab:b9:50:b7:bf: 9d:53:af:79:45:93:34:82:2c:55:be:e9:77:23:3e:49:fd:7f: 23:98:31:a5:40:cd:07:79:d5:8f:38:62:25:fd:af:59:8d:76: af:49:50:4e:37:a2:b2:7c:06:38:6f:a3:62:6b:20:5b:1d:39: f1:ae:3f:4c:d2:43:ce:84:cb:9e:a3:7e:be:9d:44:92:e7:fa: 4b:b0:a2:e7:6a:35:74:9b:7c:18:c5:5c:6f:8d:c3:67:b0:4d: 08:3e:03:35:92:cc:c1:28:d8:df:44:02:02:d8:b1:51:fb:cc: b2:f7:9f:5c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUed7/Go9zKeVb8kfNeMBWvZAnekwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUyMjExWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzRmZTJlM2ExNzI1NDA5NTkzZmZmYWQwODk0YWZjMjdl ZThlNjg1ZGIwNTFhZmFlYjVlZGYwMzgyNGI4MTY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrZ7FxA9vK4fYebzL2pO0xj7nxB2csVmbgXwBfraqEIViI cZIsy3/ijkGU8CIr0m54vI2QOB3mNHGIwDv7WDqDQpW/pWs/CjSrgKSJ80aYqvsw TvgccBdJHiLRoKF+DzAIz4HkIVHRK5BtJHI3shMvjmihD9gaeZ2CwmCDb/j/wun2 e2nBIHCKNAMYIRhOKs8KcrbW82X8KRYjdMIJC+BCxdzOLqBtSGtMt1A1F2JFzy6O TkPfQl7JB1uyYAN9Kmmr0ICfHpIFGnNBV/9Q+pT5QeCoc3RoNiDTj6uFNB99gbYZ wO7EHgrTjHSPirvWfq7DKa03cZkOd1A3MWRYZQLNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQvktwvyFmdHaSG35Iza4eE+dMoswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyMWE1NDAwLWY5NDAtNDI4YS05YmM5LTIyNTE3MzVmMGM3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA5zDANBgkqhkiG9w0BAQsFAAOCAQEAGNTRqFY4CsYgmFY0ZcMdwxJXDMKO sTVKUASpbE9sc4k/3NcZdHspML9I5Vn4rh6nElOshqeh3RzeY2x+QvtPNyCQMkF5 OhHir57KNGzQCaqn21RmVznBCmRniTZdn+6PbBrCaa55zAOKRVPAzTo4kxotvHZ8 iUs2aUK2A1AzA9lW5zkRP9gdcmJWNau5ULe/nVOveUWTNIIsVb7pdyM+Sf1/I5gx pUDNB3nVjzhiJf2vWY12r0lQTjeisnwGOG+jYmsgWx058a4/TNJDzoTLnqN+vp1E kuf6S7Ci52o1dJt8GMVcb43DZ7BNCD4DNZLMwSjY30QCAtixUfvMsvefXA== -----END CERTIFICATE-----Generated at Tue May 13 16:08:26 2025 by rpki-client