$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145d5432-1426-4a63-9bed-c2784088be52.roa File: 145d5432-1426-4a63-9bed-c2784088be52.roa (raw, json) Hash identifier: 6WE2GZmnFhBBviHj34novq9qpMS3G0b4rPC+Aai4qt0= Subject key identifier: B5:33:21:00:5B:28:28:A9:29:3B:D0:4A:C7:AC:46:BA:70:64:B1:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5716686FA0712E05D60BEDD8DCB1B33C9586FE14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145d5432-1426-4a63-9bed-c2784088be52.roa Signing time: Sat 03 May 2025 00:41:20 +0000 ROA not before: Sat 03 May 2025 00:41:20 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.37.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:16:68:6f:a0:71:2e:05:d6:0b:ed:d8:dc:b1:b3:3c:95:86:fe:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:41:20 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=2d83563223c85f16a6f8261e4bc6e856123692d243846829884d9f0d10402c7c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:08:f6:f1:b4:fe:ca:13:fa:5d:9c:68:86: ab:4f:dc:06:cf:90:bf:67:00:82:4c:f7:b8:29:fe: f3:14:82:1a:ad:91:ef:5b:2f:42:ad:ac:62:4c:e9: c4:66:6b:5f:c0:5b:46:a6:8f:c9:c5:71:22:e2:b2: 9a:11:51:3c:0b:ac:85:d7:c9:38:ec:d1:77:f5:2f: d7:7c:c0:49:b9:55:76:10:bb:ff:8f:59:cd:e3:d7: 03:95:16:87:c2:91:aa:f0:9c:19:90:a8:ae:92:f4: e5:e8:e5:cc:4c:5b:1f:04:e6:f2:5d:13:49:b3:6c: f7:10:47:ef:a4:a0:a2:84:8c:e3:94:da:8e:95:c9: d3:a9:1d:02:2e:eb:3d:32:44:40:bb:35:d5:b9:dd: 99:73:b0:b2:f3:7b:f9:4a:4e:79:75:a1:f4:6e:1e: ee:2d:4e:d8:d5:1e:9b:8d:71:9e:64:e4:9b:59:95: 26:76:5d:57:93:ad:b7:aa:7a:1f:5d:43:bb:97:7c: 20:62:07:f8:31:1b:f1:ad:f0:a2:9a:7a:a7:f6:40: 45:92:ac:b2:5f:7a:bf:eb:f7:37:31:76:79:13:c2: 1b:94:bc:66:b4:de:c7:a6:52:eb:64:2d:22:d1:4f: ee:c5:c6:97:ba:48:1e:8f:b1:35:61:1e:1f:65:ec: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:33:21:00:5B:28:28:A9:29:3B:D0:4A:C7:AC:46:BA:70:64:B1:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/145d5432-1426-4a63-9bed-c2784088be52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.37.64.0/18 Signature Algorithm: sha256WithRSAEncryption c1:69:29:a4:96:d7:71:92:c6:fa:ed:97:05:cf:11:9d:98:62: 11:45:1f:f4:da:8a:4c:57:23:ef:7a:38:17:c8:a1:d0:bc:ab: bf:94:59:29:f2:60:d7:48:91:15:73:95:53:d6:50:16:f2:df: 65:5b:4e:29:90:a1:0c:5a:27:fc:cb:cb:b6:85:e7:2c:b0:64: fc:2d:2b:00:08:16:23:1f:ac:0e:9c:cb:80:a6:e7:d9:49:98: 95:9c:c6:f6:24:42:1f:6f:4a:e6:7a:a7:3f:b6:3f:cf:12:4b: d2:99:7e:87:5d:6c:23:da:66:99:4b:76:5d:c9:30:0d:d6:3c: bd:6c:19:a1:74:0c:6e:53:26:28:41:78:23:c8:a2:39:dc:8c: aa:3b:e8:a1:f1:6b:8e:90:9b:83:fc:75:0f:d7:58:d9:c4:cb: d7:01:0b:84:0b:42:22:5a:44:bc:09:61:ab:c6:cc:a4:e7:bd: bd:d0:3b:38:37:06:ad:06:70:7b:3a:fd:19:26:be:43:e1:c8: 2e:c3:e3:24:1d:c2:f7:99:58:f9:c6:8d:97:2f:05:aa:66:f4: 5f:7f:5f:1e:33:8a:6f:c5:10:cd:33:c5:25:45:8b:2a:0d:00: 3b:6f:54:48:60:73:89:59:3c:d8:af:e4:20:08:fc:bd:85:99: 41:c5:71:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVxZob6BxLgXWC+3Y3LGzPJWG/hQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA0MTIwWhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDgzNTYzMjIzYzg1ZjE2YTZmODI2MWU0YmM2ZTg1NjEy MzY5MmQyNDM4NDY4Mjk4ODRkOWYwZDEwNDAyYzdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiHQj28bT+yhP6XZxohqtP3AbPkL9nAIJM97gp/vMUghqt ke9bL0KtrGJM6cRma1/AW0amj8nFcSLispoRUTwLrIXXyTjs0Xf1L9d8wEm5VXYQ u/+PWc3j1wOVFofCkarwnBmQqK6S9OXo5cxMWx8E5vJdE0mzbPcQR++koKKEjOOU 2o6VydOpHQIu6z0yREC7NdW53ZlzsLLze/lKTnl1ofRuHu4tTtjVHpuNcZ5k5JtZ lSZ2XVeTrbeqeh9dQ7uXfCBiB/gxG/Gt8KKaeqf2QEWSrLJfer/r9zcxdnkTwhuU vGa03semUutkLSLRT+7Fxpe6SB6PsTVhHh9l7LrnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtTMhAFsoKKkpO9BKx6xGunBksRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE0NWQ1NDMyLTE0MjYtNGE2My05YmVkLWMyNzg0MDg4YmU1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAJUAwDQYJKoZIhvcNAQELBQADggEBAMFpKaSW13GSxvrtlwXPEZ2YYhFF H/TaikxXI+96OBfIodC8q7+UWSnyYNdIkRVzlVPWUBby32VbTimQoQxaJ/zLy7aF 5yywZPwtKwAIFiMfrA6cy4Cm59lJmJWcxvYkQh9vSuZ6pz+2P88SS9KZfoddbCPa ZplLdl3JMA3WPL1sGaF0DG5TJihBeCPIojncjKo76KHxa46Qm4P8dQ/XWNnEy9cB C4QLQiJaRLwJYavGzKTnvb3QOzg3Bq0GcHs6/RkmvkPhyC7D4yQdwveZWPnGjZcv Bapm9F9/Xx4zim/FEM0zxSVFiyoNADtvVEhgc4lZPNiv5CAI/L2FmUHFcSg= -----END CERTIFICATE-----Generated at Thu May 15 03:31:01 2025 by rpki-client