$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e76626-c10b-4ce2-9398-d624166f3171.roa File: 18e76626-c10b-4ce2-9398-d624166f3171.roa (raw, json) Hash identifier: cvnALGCqWQ4aMSu/v6+fonMfPWu52gGLs1wtZ1Zf8hA= Subject key identifier: 8B:20:26:B7:F9:1D:37:68:CC:FF:EA:92:6F:5C:A2:EE:1E:CF:A6:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: D79DB698454FCDAF9BFC445039B5C0A40D32EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e76626-c10b-4ce2-9398-d624166f3171.roa Signing time: Wed 30 Apr 2025 00:02:12 +0000 ROA not before: Wed 30 Apr 2025 00:02:12 +0000 ROA not after: Wed 04 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 74.232.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d7:9d:b6:98:45:4f:cd:af:9b:fc:44:50:39:b5:c0:a4:0d:32:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:02:12 2025 GMT Not After : Jun 4 23:59:59 2025 GMT Subject: serialNumber=ef9d11af8f7ff627bbd258fd72ef92a3d7eda9d78807f80941e7422a3b71468f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:c1:3d:14:9a:23:7c:3d:e2:b1:32:6f:3f: cc:d9:3c:c5:a6:08:0a:3e:2c:28:74:07:3e:28:85: 44:53:8e:55:ae:de:6d:18:f5:51:78:fe:96:66:aa: 04:e8:8f:d3:c4:05:7e:10:2c:75:40:56:97:57:ff: 4d:e5:b3:07:21:9f:ac:2e:57:e7:20:a4:e1:d0:c0: 8a:48:b4:37:6a:64:83:87:55:04:de:e9:aa:82:d0: d8:a2:0e:cd:3f:2b:23:ef:35:61:5a:82:c2:a9:ab: fd:9d:8e:1f:9f:62:3d:2d:c5:43:3f:a0:bb:90:e1: e3:c9:de:ca:d2:af:b2:68:bf:39:22:7a:50:de:6c: 81:e3:31:aa:f7:e5:35:b2:cf:f3:41:60:e3:ac:b8: 7f:0b:47:8a:0a:0e:f1:8b:d8:f2:f4:5e:23:64:17: ab:95:97:b1:3f:c3:1c:ba:ad:ea:81:ee:d7:40:b9: f6:e8:21:18:fe:6f:59:ec:9b:98:5b:cd:c2:c0:35: 16:d6:64:41:87:ec:70:8e:7d:c4:62:c4:be:e7:0a: 89:47:35:18:0c:50:52:0e:dd:32:76:0e:8a:16:c5: 62:20:ff:48:f8:c1:0a:f3:a5:e1:30:4c:74:16:6f: 0d:81:65:ed:59:bd:44:2a:49:73:14:78:6f:a5:ca: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:26:B7:F9:1D:37:68:CC:FF:EA:92:6F:5C:A2:EE:1E:CF:A6:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e76626-c10b-4ce2-9398-d624166f3171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:32:c6:a9:c4:b6:ba:fa:a8:72:14:6c:d6:8e:cc:b5:83:fd: ca:3f:3f:fc:03:5a:f4:0b:69:25:0f:b1:cf:74:0b:8f:5c:1f: 90:55:80:6d:87:6f:1e:14:96:3a:92:a0:42:f1:b3:21:42:68: fd:f0:56:a3:d6:2e:44:06:da:ff:66:ce:2b:c0:6d:15:43:8e: 4e:20:12:ff:20:0e:ee:91:39:c6:96:09:8d:13:88:af:3c:08: 2d:84:c6:24:85:9b:12:4b:71:73:d6:ba:c1:f6:91:cf:06:cf: d7:e0:54:b0:95:ad:9b:f6:dc:95:7b:ad:a0:29:17:47:80:21: f5:7b:de:21:72:b2:5d:03:00:b9:f5:21:93:cc:0d:e4:89:d1: 57:4d:8c:e7:60:c5:72:22:7e:44:24:f9:1a:8d:79:24:e3:5d: e0:68:32:c1:55:58:b4:fb:ec:01:86:e9:a3:3a:b6:b9:fd:dd: 0f:a0:17:b2:5e:22:b5:07:fb:7f:4f:af:77:3e:27:60:82:fd: 84:64:ac:be:bb:bf:d9:c1:8b:f3:b2:08:a8:74:7f:22:58:f1: 59:78:15:04:64:69:00:25:ca:08:1b:f0:2f:64:f5:40:63:75: 7c:58:22:ea:f6:1d:53:a4:bf:b0:77:17:df:70:a5:31:77:a8: 7c:74:10:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUANedtphFT82vm/xEUDm1wKQNMu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDMwMDAwMjEyWhcNMjUwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjlkMTFhZjhmN2ZmNjI3YmJkMjU4ZmQ3MmVmOTJhM2Q3 ZWRhOWQ3ODgwN2Y4MDk0MWU3NDIyYTNiNzE0NjhmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQy8E9FJojfD3isTJvP8zZPMWmCAo+LCh0Bz4ohURTjlWu 3m0Y9VF4/pZmqgToj9PEBX4QLHVAVpdX/03lswchn6wuV+cgpOHQwIpItDdqZIOH VQTe6aqC0NiiDs0/KyPvNWFagsKpq/2djh+fYj0txUM/oLuQ4ePJ3srSr7Jovzki elDebIHjMar35TWyz/NBYOOsuH8LR4oKDvGL2PL0XiNkF6uVl7E/wxy6reqB7tdA ufboIRj+b1nsm5hbzcLANRbWZEGH7HCOfcRixL7nColHNRgMUFIO3TJ2DooWxWIg /0j4wQrzpeEwTHQWbw2BZe1ZvUQqSXMUeG+lyrrhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiyAmt/kdN2jM/+qSb1yi7h7PpmIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4ZTc2NjI2LWMxMGItNGNlMi05Mzk4LWQ2MjQxNjZmMzE3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBK6DANBgkqhkiG9w0BAQsFAAOCAQEAfTLGqcS2uvqochRs1o7MtYP9yj8/ /ANa9AtpJQ+xz3QLj1wfkFWAbYdvHhSWOpKgQvGzIUJo/fBWo9YuRAba/2bOK8Bt FUOOTiAS/yAO7pE5xpYJjROIrzwILYTGJIWbEktxc9a6wfaRzwbP1+BUsJWtm/bc lXutoCkXR4Ah9XveIXKyXQMAufUhk8wN5InRV02M52DFciJ+RCT5Go15JONd4Ggy wVVYtPvsAYbpozq2uf3dD6AXsl4itQf7f0+vdz4nYIL9hGSsvru/2cGL87IIqHR/ IljxWXgVBGRpACXKCBvwL2T1QGN1fFgi6vYdU6S/sHcX33ClMXeofHQQmQ== -----END CERTIFICATE-----Generated at Sun May 11 10:36:13 2025 by rpki-client