$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9bc786-f823-4990-9a7a-7d78437b3ae2.roa File: 1f9bc786-f823-4990-9a7a-7d78437b3ae2.roa (raw, json) Hash identifier: BOE2i8TdNWFzprBrslp4d9pXnOHjiTpaN2+CDC5z9uY= Subject key identifier: 83:86:79:55:76:97:C9:C6:45:69:F4:14:E8:71:21:9D:75:86:A9:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69FABDA05BAAFF9D9F51A545EC51FD369FBE8D65 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9bc786-f823-4990-9a7a-7d78437b3ae2.roa Signing time: Mon 28 Apr 2025 15:11:52 +0000 ROA not before: Mon 28 Apr 2025 15:11:52 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.112.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:bd:a0:5b:aa:ff:9d:9f:51:a5:45:ec:51:fd:36:9f:be:8d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:11:52 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=806a4e48e3032b5c98082577a2d6cd7b35cc457abbed92eb2efdab910d22e89e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:f2:14:4e:5f:3a:c1:6e:b7:b2:a8:3d:83: 76:d3:df:ac:46:0d:f7:c3:bd:b7:3e:f0:e9:b4:7f: 8d:2d:2f:0a:b2:2b:c8:67:03:77:80:29:db:46:28: be:78:4f:66:8c:d3:42:e1:6d:9c:c5:0e:51:a0:73: 8f:e3:35:2f:53:99:73:b1:99:07:44:c1:ea:e1:c0: 97:62:6d:00:3c:c2:85:a3:95:f5:e2:a1:b6:09:42: 01:62:3d:02:9c:e5:7c:11:d6:b2:df:3f:fc:83:fb: 42:b6:16:84:e3:23:8a:c0:f4:57:ee:ae:f7:4a:6d: b7:c2:ce:09:70:36:34:86:ef:88:f5:3a:ab:0c:15: 53:d5:d3:0e:6d:91:c1:11:71:41:5c:22:e2:f1:1a: 82:37:42:7d:7a:7a:3b:62:ed:fd:b3:ad:b7:19:96: 67:06:f5:9b:91:00:db:a3:cc:e0:63:16:21:d5:e0: 18:71:59:39:09:a6:fc:14:cd:f5:1b:0a:ff:52:0f: 96:22:86:05:11:61:dd:c5:06:52:51:09:fd:88:95: ae:7f:86:a0:b4:62:bd:72:cd:a8:5d:f3:14:3a:c8: b9:bf:9d:44:7e:bd:2c:e4:43:89:a0:59:05:2b:a2: 19:6f:a3:71:e3:ab:2f:e7:f5:85:57:2d:1c:a6:19: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:86:79:55:76:97:C9:C6:45:69:F4:14:E8:71:21:9D:75:86:A9:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9bc786-f823-4990-9a7a-7d78437b3ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:a8:70:24:09:46:ab:06:ad:7f:b1:f9:25:6c:70:ad:6b:e7: 39:2a:50:dd:49:40:2f:a0:b4:5d:b1:53:c1:41:88:6e:4f:44: 85:56:08:41:f0:ea:57:1b:ce:fc:e2:3a:1a:c5:22:d1:d6:29: d4:ec:c0:bc:47:91:f3:df:cf:ce:73:95:13:8b:45:3c:37:34: 2d:23:ec:d0:cc:a5:c9:4c:17:1d:2b:34:cf:04:60:78:1a:37: c9:dd:26:f7:16:d4:02:00:ce:9c:87:05:51:05:74:59:74:4c: e9:c9:40:55:d5:93:da:d2:c3:1f:fe:03:11:15:03:5f:4d:9e: 35:d7:e3:8a:22:81:3d:f4:90:de:d0:92:83:e5:ea:00:47:e4: a1:23:b4:84:1a:5b:93:dd:92:92:f9:ea:ae:8c:2d:88:fc:fc: 24:52:e0:86:c4:5e:72:e2:ca:71:b3:52:d2:2b:8b:02:38:fc: da:74:e9:cc:2d:89:32:9b:f2:b3:6a:0f:e4:0f:61:06:9e:71: e2:36:d1:98:d0:53:59:64:d2:62:eb:5d:66:ac:55:fd:f4:c6: e9:33:f5:7f:df:86:ee:b5:56:e0:9f:b9:79:36:77:a2:f3:12: cd:22:e3:c0:14:39:61:86:2c:ee:6f:46:5d:59:65:66:45:d6: 1d:2a:f7:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUafq9oFuq/52fUaVF7FH9Np++jWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMTUyWhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDZhNGU0OGUzMDMyYjVjOTgwODI1NzdhMmQ2Y2Q3YjM1 Y2M0NTdhYmJlZDkyZWIyZWZkYWI5MTBkMjJlODllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC1PIUTl86wW63sqg9g3bT36xGDffDvbc+8Om0f40tLwqy K8hnA3eAKdtGKL54T2aM00LhbZzFDlGgc4/jNS9TmXOxmQdEwerhwJdibQA8woWj lfXiobYJQgFiPQKc5XwR1rLfP/yD+0K2FoTjI4rA9FfurvdKbbfCzglwNjSG74j1 OqsMFVPV0w5tkcERcUFcIuLxGoI3Qn16ejti7f2zrbcZlmcG9ZuRANujzOBjFiHV 4BhxWTkJpvwUzfUbCv9SD5YihgURYd3FBlJRCf2Ila5/hqC0Yr1yzahd8xQ6yLm/ nUR+vSzkQ4mgWQUrohlvo3Hjqy/n9YVXLRymGc6bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUg4Z5VXaXycZFafQU6HEhnXWGqSEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmOWJjNzg2LWY4MjMtNDk5MC05YTdhLTdkNzg0MzdiM2FlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQcDANBgkqhkiG9w0BAQsFAAOCAQEAMqhwJAlGqwatf7H5JWxwrWvnOSpQ 3UlAL6C0XbFTwUGIbk9EhVYIQfDqVxvO/OI6GsUi0dYp1OzAvEeR89/PznOVE4tF PDc0LSPs0MylyUwXHSs0zwRgeBo3yd0m9xbUAgDOnIcFUQV0WXRM6clAVdWT2tLD H/4DERUDX02eNdfjiiKBPfSQ3tCSg+XqAEfkoSO0hBpbk92SkvnqrowtiPz8JFLg hsRecuLKcbNS0iuLAjj82nTpzC2JMpvys2oP5A9hBp5x4jbRmNBTWWTSYutdZqxV /fTG6TP1f9+G7rVW4J+5eTZ3ovMSzSLjwBQ5YYYs7m9GXVllZkXWHSr3Zw== -----END CERTIFICATE-----Generated at Sun May 11 12:02:03 2025 by rpki-client