$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa File: 1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa (raw, json) Hash identifier: LAhX7/c7HHKdnShwmp1+ROTAF3XDeHGrIsvL6KwN0/0= Subject key identifier: A8:60:7B:A1:38:F2:0B:74:BE:5C:76:CE:F0:22:92:5D:93:54:D1:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1405324A8ED7A0B57B27D77E6237EB95754E5E94 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa Signing time: Tue 29 Apr 2025 00:11:52 +0000 ROA not before: Tue 29 Apr 2025 00:11:52 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.5.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:05:32:4a:8e:d7:a0:b5:7b:27:d7:7e:62:37:eb:95:75:4e:5e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:11:52 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=0d89a309c50000c4a81b853bf4cad070016dfd6bcc0953bfe0ae072b398c5b7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:45:cf:87:16:2e:64:83:2c:6f:11:48:35: bf:e6:88:98:ea:dd:9a:20:2a:fd:75:fa:80:de:9b: f2:44:e3:35:62:1e:32:9f:d3:fc:43:2e:87:55:29: 10:ae:7c:f7:4d:ee:65:00:a5:d0:20:02:fd:c7:17: 31:fe:de:dd:48:61:63:09:1e:a3:1c:2c:83:2b:f2: 48:57:7e:08:d4:0c:b6:52:36:86:53:62:5e:39:e2: 7a:4e:eb:17:11:15:65:de:33:0c:39:6a:b6:bf:50: 75:ce:e3:fd:42:59:e6:5d:5c:c6:5e:40:74:75:56: cb:69:04:8d:d0:b7:3a:5c:17:d9:fc:a8:6c:18:95: ac:5f:3f:07:6d:f2:c1:fb:c1:b9:e6:da:93:6c:5f: 3e:d6:bf:f5:a8:81:55:4c:a4:0c:55:0c:6b:8e:7c: 15:29:12:c2:f2:27:cd:d1:75:64:d4:8a:f0:86:86: 1a:84:51:87:6f:70:25:a2:58:8c:ba:82:51:64:f9: 2d:d0:4f:95:7f:0e:d1:6b:06:6f:d0:be:f9:8b:7e: f5:80:e6:a2:ff:1f:99:22:19:b6:d9:cc:e1:81:20: da:72:61:53:b8:01:be:8b:2d:26:ff:b7:7f:f6:2e: 49:97:97:58:ee:af:9a:9d:4f:33:03:fd:80:fd:e7: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:7B:A1:38:F2:0B:74:BE:5C:76:CE:F0:22:92:5D:93:54:D1:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b0ff1f9-66c6-4238-908d-78ef5bab20b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.5.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:8e:d4:c0:5c:1e:e1:a2:1f:f5:97:a2:9e:1a:f7:35:bc:42: db:b3:0e:75:53:1e:eb:fe:90:7d:e1:9b:1f:5b:b3:63:40:4a: 32:7b:24:17:80:12:d8:13:26:54:d3:5c:55:be:d2:d8:1a:67: ca:da:66:34:3f:48:3b:a2:4d:1c:27:8b:e3:a4:43:f5:d1:c0: c1:6a:5c:d7:28:41:ad:b6:18:3c:39:9d:de:32:a4:52:12:65: 8e:e5:d2:6b:1a:79:13:f0:60:90:be:da:61:3f:9c:29:40:ec: 2a:29:1f:15:36:30:06:ba:ca:d9:1a:3a:f0:ba:f0:72:e6:03: 9e:81:08:48:c7:0e:47:2c:b4:b6:87:27:a1:22:48:69:74:be: fd:69:c1:21:22:d2:eb:63:70:b4:4a:c1:74:96:54:54:bd:b3: 6c:f9:ff:4d:92:86:98:fd:1c:5f:b7:19:91:c4:e8:20:3d:0f: 54:07:a6:3a:b6:06:77:7a:1e:cf:79:5d:89:99:1c:61:76:94: e8:d6:80:b7:81:31:56:a9:39:84:bc:e0:fb:4c:a5:dc:49:7b: a2:d0:ef:b2:15:09:94:16:15:44:11:07:02:4e:16:f4:95:96: 93:3e:df:d5:c5:80:89:ac:6a:1b:19:e2:80:d5:a8:3f:35:49: 0d:57:06:00 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFAUySo7XoLV7J9d+YjfrlXVOXpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAxMTUyWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDg5YTMwOWM1MDAwMGM0YTgxYjg1M2JmNGNhZDA3MDAx NmRmZDZiY2MwOTUzYmZlMGFlMDcyYjM5OGM1YjdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm3EXPhxYuZIMsbxFINb/miJjq3ZogKv11+oDem/JE4zVi HjKf0/xDLodVKRCufPdN7mUApdAgAv3HFzH+3t1IYWMJHqMcLIMr8khXfgjUDLZS NoZTYl454npO6xcRFWXeMww5ara/UHXO4/1CWeZdXMZeQHR1VstpBI3QtzpcF9n8 qGwYlaxfPwdt8sH7wbnm2pNsXz7Wv/WogVVMpAxVDGuOfBUpEsLyJ83RdWTUivCG hhqEUYdvcCWiWIy6glFk+S3QT5V/DtFrBm/QvvmLfvWA5qL/H5kiGbbZzOGBINpy YVO4Ab6LLSb/t3/2LkmXl1jur5qdTzMD/YD956N1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqGB7oTjyC3S+XHbO8CKSXZNU0RowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiMGZmMWY5LTY2YzYtNDIzOC05MDhkLTc4ZWY1YmFiMjBiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2BTANBgkqhkiG9w0BAQsFAAOCAQEAr47UwFwe4aIf9Zeinhr3NbxC27MO dVMe6/6QfeGbH1uzY0BKMnskF4AS2BMmVNNcVb7S2BpnytpmND9IO6JNHCeL46RD 9dHAwWpc1yhBrbYYPDmd3jKkUhJljuXSaxp5E/BgkL7aYT+cKUDsKikfFTYwBrrK 2Ro68LrwcuYDnoEISMcORyy0tocnoSJIaXS+/WnBISLS62NwtErBdJZUVL2zbPn/ TZKGmP0cX7cZkcToID0PVAemOrYGd3oez3ldiZkcYXaU6NaAt4ExVqk5hLzg+0yl 3El7otDvshUJlBYVRBEHAk4W9JWWkz7f1cWAiaxqGxnigNWoPzVJDVcGAA== -----END CERTIFICATE-----Generated at Mon May 5 12:40:42 2025 by rpki-client