$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa File: 1ec09901-70fe-41c3-8b4b-3f50242b9056.roa (raw, json) Hash identifier: aHzbkBKodydHNSh/bhBjHWg0136sECU8HzGAFTdQcZs= Subject key identifier: E5:55:34:DC:BA:36:B5:C6:97:3A:8E:6C:6E:0D:83:7C:7F:4B:2D:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45724A4050DFC95B22CAE6FA32A7E6D97D342F83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa Signing time: Tue 29 Apr 2025 00:21:03 +0000 ROA not before: Tue 29 Apr 2025 00:21:03 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:72:4a:40:50:df:c9:5b:22:ca:e6:fa:32:a7:e6:d9:7d:34:2f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:21:03 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=932d0ae1bef8d9caf0ba3b220948c7c92a5edb0c402206b365d96e5d4258e070, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:fd:2c:47:76:f8:e5:5c:9b:3b:7b:c2:b8: ba:7f:e1:23:94:cc:ea:98:45:e1:a1:ba:ea:78:42: b9:d1:09:7b:f1:ea:5a:0f:40:df:50:2e:ab:81:b2: 91:91:26:cd:07:6b:72:66:f4:aa:9a:ab:87:e5:fc: c3:68:c1:af:86:60:69:d8:2f:03:35:1a:9b:f9:ba: e6:41:32:bd:91:21:11:0e:16:5e:a1:1f:dd:5e:9d: 75:c0:01:c5:a9:f8:82:e3:00:22:e1:6d:2b:df:5a: 21:ab:91:17:cd:aa:37:2f:fb:02:16:22:a5:3c:76: 95:d5:37:a7:aa:02:c6:b3:72:99:56:ac:55:d3:10: cf:fa:42:69:4b:ca:3c:ea:fa:7d:3e:49:b8:10:a0: 84:af:82:bb:74:81:12:64:52:e9:79:61:4d:6e:43: e2:5b:28:dd:79:07:49:1a:ab:8d:1b:48:86:db:af: c4:03:c3:7a:30:fc:fa:58:ab:6a:80:b5:d9:11:bf: b5:0e:c3:8c:7f:d5:c7:75:08:ba:ef:c1:30:f4:ba: ef:7d:90:6d:6d:ce:04:ef:98:b7:09:f2:d8:5b:7f: 8a:cc:02:c3:56:2f:1e:a7:05:2a:65:dd:24:ad:c8: c9:82:20:9a:0d:5e:51:79:bd:e2:83:bb:c6:6a:d7: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:55:34:DC:BA:36:B5:C6:97:3A:8E:6C:6E:0D:83:7C:7F:4B:2D:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec09901-70fe-41c3-8b4b-3f50242b9056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.16.0/21 Signature Algorithm: sha256WithRSAEncryption 53:2b:3e:02:8f:f3:65:c4:63:05:8e:e8:29:03:e1:60:be:6c: c1:20:28:78:26:85:d5:c9:35:32:51:de:65:aa:8b:f0:c5:c1: f3:80:51:9c:da:00:d2:64:9f:ba:30:34:0b:cd:86:1c:78:0a: 96:01:20:72:95:a7:3a:78:42:bf:a3:50:ee:2e:0e:02:46:19: 6f:9c:89:cb:34:5f:e7:a7:2e:09:22:7f:fb:86:f0:d8:0d:26: 4c:6d:9c:47:9c:62:aa:5a:e5:05:d0:f1:ee:6c:cf:82:d4:7f: ff:18:a1:37:8a:ce:b1:f8:b9:fc:17:4a:50:39:7d:a4:7a:d7: c8:ab:84:24:7f:1f:9b:3a:21:59:6d:b8:cc:8d:ae:35:f3:1b: d6:fb:cf:24:87:1a:12:65:7e:dd:9e:36:0e:3f:e4:10:c6:ee: 1a:96:d9:c9:cc:a9:85:d9:3c:d9:4b:05:60:b8:3a:a1:34:b3: 0b:70:f5:1c:13:be:ab:4a:f1:2b:16:bf:8d:e3:46:44:2b:27: 81:c1:d6:41:2c:56:0b:2b:3e:94:65:0a:e1:6d:d1:ba:6c:75: 38:fb:09:b4:fc:66:02:c7:f6:c9:e2:63:25:5e:34:c9:9c:ee: 65:d7:9e:90:98:94:6b:84:9f:ef:5b:95:50:fb:7f:af:e8:fe: 38:62:58:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURXJKQFDfyVsiyub6Mqfm2X00L4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAyMTAzWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzJkMGFlMWJlZjhkOWNhZjBiYTNiMjIwOTQ4YzdjOTJh NWVkYjBjNDAyMjA2YjM2NWQ5NmU1ZDQyNThlMDcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHgv0sR3b45VybO3vCuLp/4SOUzOqYReGhuup4QrnRCXvx 6loPQN9QLquBspGRJs0Ha3Jm9Kqaq4fl/MNowa+GYGnYLwM1Gpv5uuZBMr2RIREO Fl6hH91enXXAAcWp+ILjACLhbSvfWiGrkRfNqjcv+wIWIqU8dpXVN6eqAsazcplW rFXTEM/6QmlLyjzq+n0+SbgQoISvgrt0gRJkUul5YU1uQ+JbKN15B0kaq40bSIbb r8QDw3ow/PpYq2qAtdkRv7UOw4x/1cd1CLrvwTD0uu99kG1tzgTvmLcJ8thbf4rM AsNWLx6nBSpl3SStyMmCIJoNXlF5veKDu8Zq1xhnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5VU03Lo2tcaXOo5sbg2DfH9LLcYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlYzA5OTAxLTcwZmUtNDFjMy04YjRiLTNmNTAyNDJiOTA1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgABAwDQYJKoZIhvcNAQELBQADggEBAFMrPgKP82XEYwWO6CkD4WC+bMEg KHgmhdXJNTJR3mWqi/DFwfOAUZzaANJkn7owNAvNhhx4CpYBIHKVpzp4Qr+jUO4u DgJGGW+cics0X+enLgkif/uG8NgNJkxtnEecYqpa5QXQ8e5sz4LUf/8YoTeKzrH4 ufwXSlA5faR618irhCR/H5s6IVltuMyNrjXzG9b7zySHGhJlft2eNg4/5BDG7hqW 2cnMqYXZPNlLBWC4OqE0swtw9RwTvqtK8SsWv43jRkQrJ4HB1kEsVgsrPpRlCuFt 0bpsdTj7CbT8ZgLH9sniYyVeNMmc7mXXnpCYlGuEn+9blVD7f6/o/jhiWLY= -----END CERTIFICATE-----Generated at Sun May 11 04:18:49 2025 by rpki-client