$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa File: 28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa (raw, json) Hash identifier: gHeBNGAqh/NI5Js1H757+81Rl5MOUmszNTLjqqZcOyQ= Subject key identifier: BF:5C:57:6E:86:75:96:80:EA:69:BF:91:B5:B8:A2:48:F7:D1:1A:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56EA4E89AC1B99DCAE18BCC921BE6EF1AD69E8B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa Signing time: Thu 08 May 2025 19:08:31 +0000 ROA not before: Thu 08 May 2025 19:08:31 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.154.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ea:4e:89:ac:1b:99:dc:ae:18:bc:c9:21:be:6e:f1:ad:69:e8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 19:08:31 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=5c372e1d4f66914671c6eed3d65bae4fb4bf5b1a98f9cef748948d59e5f8e8d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:d0:ef:67:63:55:b6:d7:c5:3d:22:7c:9e: 3b:0b:e4:d9:3b:85:16:91:cc:8e:9d:f4:d0:ee:14: c3:21:3c:39:77:f0:98:9b:0b:f6:8a:72:cb:83:31: 52:b1:e6:b7:0f:26:08:3e:5d:b4:11:41:e8:c6:41: 0e:47:13:da:fb:10:06:7b:b4:95:08:08:87:1a:7a: fe:a4:b0:5a:16:2c:42:98:94:d9:46:04:56:10:71: d6:9f:bd:d3:c5:ed:51:54:c8:10:f2:9a:e4:b4:e8: 1f:dd:3c:30:48:88:6c:e1:98:42:8c:13:a7:b3:be: 37:03:1e:7f:f5:91:90:4e:1c:b8:f2:e4:8d:f7:9e: 3b:5b:a0:be:8b:d6:90:a2:31:29:1a:17:7e:36:c2: fa:32:3d:a2:fd:64:de:76:f3:2b:17:3d:5c:3d:f0: 01:99:59:70:df:be:0b:be:a4:3b:c1:d2:50:91:a5: b9:0f:65:17:ea:ac:47:c7:31:e0:6d:36:2f:26:a5: 82:9b:bb:9a:25:57:f9:39:f0:ff:57:89:07:36:62: 44:60:02:aa:36:12:eb:77:b9:36:92:8f:10:e2:3a: 48:77:5b:cf:72:e2:00:b9:f6:cb:cb:ba:60:94:55: 9d:f5:92:b6:79:37:37:a0:72:01:02:24:19:f5:11: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5C:57:6E:86:75:96:80:EA:69:BF:91:B5:B8:A2:48:F7:D1:1A:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28ae7b7d-c438-4c2e-b9d4-1a8d9e35fae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.154.0.0/20 Signature Algorithm: sha256WithRSAEncryption 57:cb:e6:25:8c:82:9f:52:65:66:67:ae:d3:a8:31:9f:7a:14: 58:51:05:ee:68:4e:d6:5b:d4:4b:1b:fe:d9:c8:31:59:58:36: 2d:ec:a3:ea:91:f8:0e:0b:3c:df:9f:95:72:33:91:f4:fd:d0: 4f:7e:d5:9e:ea:96:ae:fb:5e:03:d4:01:44:2c:14:c4:fa:56: 69:ab:4a:ad:42:08:f4:bf:39:78:85:6d:2a:38:f3:ce:5e:da: 07:eb:e4:8b:b6:1b:00:7d:ac:c4:d6:70:a6:80:8d:e4:7b:7c: cf:83:39:0b:0f:c7:91:ee:e3:41:a6:cf:65:5a:9e:f0:c2:f2: cf:b2:94:6d:85:77:9d:5d:d2:33:07:70:c9:2d:0e:69:04:29: c3:a8:7d:df:c1:3e:63:95:80:8b:fe:3e:67:78:0b:da:5f:28: 02:1e:2a:7b:5e:49:24:91:56:bc:e7:ff:47:35:e9:62:57:11: 67:60:41:52:f3:59:cc:73:0a:cb:29:82:b4:c7:d7:69:91:59: 60:61:9b:5c:2d:16:e0:19:1d:f0:1e:e4:c9:04:6f:c6:95:73: 32:0c:79:b4:4c:1f:79:92:09:18:a1:e4:74:93:f6:c5:3c:73: 99:e0:16:4b:ae:2a:32:01:1e:d0:e5:1a:6b:90:f3:40:99:91: c1:f4:6d:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVupOiawbmdyuGLzJIb5u8a1p6LQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTkwODMxWhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzM3MmUxZDRmNjY5MTQ2NzFjNmVlZDNkNjViYWU0ZmI0 YmY1YjFhOThmOWNlZjc0ODk0OGQ1OWU1ZjhlOGQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV3NDvZ2NVttfFPSJ8njsL5Nk7hRaRzI6d9NDuFMMhPDl3 8JibC/aKcsuDMVKx5rcPJgg+XbQRQejGQQ5HE9r7EAZ7tJUICIcaev6ksFoWLEKY lNlGBFYQcdafvdPF7VFUyBDymuS06B/dPDBIiGzhmEKME6ezvjcDHn/1kZBOHLjy 5I33njtboL6L1pCiMSkaF342wvoyPaL9ZN528ysXPVw98AGZWXDfvgu+pDvB0lCR pbkPZRfqrEfHMeBtNi8mpYKbu5olV/k58P9XiQc2YkRgAqo2Eut3uTaSjxDiOkh3 W89y4gC59svLumCUVZ31krZ5NzegcgECJBn1EQ+TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv1xXboZ1loDqab+RtbiiSPfRGgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4YWU3YjdkLWM0MzgtNGMyZS1iOWQ0LTFhOGQ5ZTM1ZmFlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNmgAwDQYJKoZIhvcNAQELBQADggEBAFfL5iWMgp9SZWZnrtOoMZ96FFhR Be5oTtZb1Esb/tnIMVlYNi3so+qR+A4LPN+flXIzkfT90E9+1Z7qlq77XgPUAUQs FMT6VmmrSq1CCPS/OXiFbSo4885e2gfr5Iu2GwB9rMTWcKaAjeR7fM+DOQsPx5Hu 40Gmz2VanvDC8s+ylG2Fd51d0jMHcMktDmkEKcOofd/BPmOVgIv+Pmd4C9pfKAIe KnteSSSRVrzn/0c16WJXEWdgQVLzWcxzCsspgrTH12mRWWBhm1wtFuAZHfAe5MkE b8aVczIMebRMH3mSCRih5HST9sU8c5ngFkuuKjIBHtDlGmuQ80CZkcH0bYY= -----END CERTIFICATE-----Generated at Sun May 11 17:38:01 2025 by rpki-client