$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b579afc-1a5f-46b5-a673-597d5bb34598.roa File: 2b579afc-1a5f-46b5-a673-597d5bb34598.roa (raw, json) Hash identifier: hygyqRzWGGRrpgk8Sh98N5Sc6HpceX09uwyYEwn0li0= Subject key identifier: C4:C2:6F:AD:46:70:C7:02:89:BE:2E:7F:07:3A:20:29:7D:4E:FD:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B2070F211536C73421BD3DC6FBD7ADE78117E52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b579afc-1a5f-46b5-a673-597d5bb34598.roa Signing time: Wed 07 May 2025 00:00:17 +0000 ROA not before: Wed 07 May 2025 00:00:17 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:20:70:f2:11:53:6c:73:42:1b:d3:dc:6f:bd:7a:de:78:11:7e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:17 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=99b605de34bf5944795a9a4bc8960822e682fc70126341dfd90452658472307a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:11:c9:14:c9:61:2a:5c:a9:a7:55:64:61: 18:f4:c6:bd:c3:a1:8f:e8:46:e3:8d:b5:5a:eb:66: d6:55:e5:c9:38:f3:4f:8e:0a:1a:39:fd:55:27:4d: 61:0f:2c:90:d4:95:cf:ff:e5:fe:a9:4d:b8:01:cf: 27:b8:9d:cd:6b:2f:90:4b:53:51:9c:eb:49:96:89: 68:09:f3:51:b3:42:29:01:a3:18:33:b6:84:35:3d: c7:fd:7d:97:ee:fa:57:2b:78:90:e6:2c:73:53:4b: 5b:6e:da:04:fc:db:76:cc:3d:ab:72:e5:8b:ab:8a: 08:ca:4f:f4:37:5b:01:58:e7:ab:a6:c1:25:7b:5d: 5d:29:1d:52:1d:5d:e9:1f:fe:d1:29:83:98:06:63: 69:f2:05:62:ea:90:ef:07:2b:7c:86:e7:84:04:1a: ca:9f:27:5e:7a:a7:57:38:b5:04:f0:cf:e9:b9:81: e7:a3:2e:96:62:ce:9b:33:af:ff:13:3d:86:58:61: cf:b2:b3:90:2a:76:76:a6:d1:f6:83:35:f9:51:8e: a7:6a:42:67:79:0a:3c:59:39:38:14:e1:c7:43:d2: 21:be:11:3d:f4:8e:e3:9d:cd:fe:2d:30:6b:82:8c: 1e:01:6e:ad:0b:0a:d0:b7:7b:9c:9c:c7:48:59:d4: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C2:6F:AD:46:70:C7:02:89:BE:2E:7F:07:3A:20:29:7D:4E:FD:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b579afc-1a5f-46b5-a673-597d5bb34598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:5b:d4:46:61:7e:c5:dd:89:34:ea:a9:3b:90:db:55:24:81: 42:b2:72:75:14:a2:06:ad:9d:ba:d1:17:e0:b6:c3:46:00:7e: d1:b6:49:5d:ab:69:54:1d:11:3d:d8:60:85:f7:c1:27:a6:49: 60:34:6f:f1:0b:25:61:12:d8:9b:f7:98:57:8d:cb:e0:4c:5f: ff:83:18:27:78:75:70:fd:02:16:35:c9:f9:4b:33:f8:ce:2f: cf:22:a0:b4:97:82:7f:23:75:0a:15:60:64:81:6b:49:61:a8: 6e:fe:82:93:f1:3a:cc:36:e3:d6:3f:84:ad:f5:eb:36:c3:3f: d3:0e:39:ce:06:3e:24:4f:a7:fc:2f:1a:22:ca:a2:62:03:a4: d4:fb:d8:b6:30:76:54:ad:89:8a:1a:3c:dc:91:aa:13:40:69: 2b:4e:50:e6:b6:b8:dc:1d:d9:7d:1e:2e:e8:b8:5e:0f:ea:44: 21:7e:11:b7:17:2b:6c:9b:93:df:96:d8:37:b9:e4:64:c7:d2: a3:c1:21:99:dc:57:90:d2:83:c8:16:a0:d7:17:e7:7d:74:9f: 0b:2a:36:fb:eb:33:ff:e1:c5:fb:4f:eb:74:a9:28:01:ed:ce: 8c:f7:dc:21:a7:fe:58:c3:b3:84:8d:f9:3f:52:75:e4:58:1f: 09:9b:3f:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSyBw8hFTbHNCG9Pcb7163ngRflIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAwMDE3WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWI2MDVkZTM0YmY1OTQ0Nzk1YTlhNGJjODk2MDgyMmU2 ODJmYzcwMTI2MzQxZGZkOTA0NTI2NTg0NzIzMDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtXhHJFMlhKlypp1VkYRj0xr3DoY/oRuONtVrrZtZV5ck4 80+OCho5/VUnTWEPLJDUlc//5f6pTbgBzye4nc1rL5BLU1Gc60mWiWgJ81GzQikB oxgztoQ1Pcf9fZfu+lcreJDmLHNTS1tu2gT823bMPaty5YurigjKT/Q3WwFY56um wSV7XV0pHVIdXekf/tEpg5gGY2nyBWLqkO8HK3yG54QEGsqfJ156p1c4tQTwz+m5 geejLpZizpszr/8TPYZYYc+ys5Aqdnam0faDNflRjqdqQmd5CjxZOTgU4cdD0iG+ ET30juOdzf4tMGuCjB4Bbq0LCtC3e5ycx0hZ1FGpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxMJvrUZwxwKJvi5/BzogKX1O/cowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiNTc5YWZjLTFhNWYtNDZiNS1hNjczLTU5N2Q1YmIzNDU5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANgjANBgkqhkiG9w0BAQsFAAOCAQEAj1vURmF+xd2JNOqpO5DbVSSBQrJy dRSiBq2dutEX4LbDRgB+0bZJXatpVB0RPdhghffBJ6ZJYDRv8QslYRLYm/eYV43L 4Exf/4MYJ3h1cP0CFjXJ+Usz+M4vzyKgtJeCfyN1ChVgZIFrSWGobv6Ck/E6zDbj 1j+ErfXrNsM/0w45zgY+JE+n/C8aIsqiYgOk1PvYtjB2VK2Jiho83JGqE0BpK05Q 5ra43B3ZfR4u6LheD+pEIX4RtxcrbJuT35bYN7nkZMfSo8EhmdxXkNKDyBag1xfn fXSfCyo2++sz/+HF+0/rdKkoAe3OjPfcIaf+WMOzhI35P1J15FgfCZs/Jw== -----END CERTIFICATE-----Generated at Sat May 10 06:32:13 2025 by rpki-client