$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa File: 2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa (raw, json) Hash identifier: 7Cg8Rb45xEUqbJB3mXvc/MHnzkI9gj42YaWa+a1BnJM= Subject key identifier: 86:3D:F5:42:37:ED:FC:4C:86:E4:BF:9F:02:42:A5:E6:9C:3C:FA:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CCBB134311845CACB4A8B0ABAAD7FC22CE11B96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa Signing time: Fri 02 May 2025 00:20:15 +0000 ROA not before: Fri 02 May 2025 00:20:15 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.148.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cb:b1:34:31:18:45:ca:cb:4a:8b:0a:ba:ad:7f:c2:2c:e1:1b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:20:15 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=9e9e9be1a62f053c8ac9a973f00d071c5dfb070d7178f2dddbdb55aa9babc326, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:f1:8f:ab:82:3a:c8:01:55:c3:04:f2:30: 68:2b:0b:f6:50:79:7e:81:f5:a4:82:d3:e0:51:d9: 10:76:4f:5c:f8:70:ae:f2:8f:d5:f4:ee:75:9b:19: 01:5b:c8:21:47:4b:eb:dc:ce:cc:48:94:06:0e:10: c2:30:f0:6b:d9:58:a4:e0:6c:73:1e:ef:13:34:21: ba:3e:67:ff:cd:05:23:8d:78:5e:1e:eb:01:d1:22: 5e:f7:6f:b9:3e:47:09:16:05:f7:d8:f7:8c:f8:4d: f7:71:c9:c1:7d:6a:d6:bd:d6:af:2f:a4:30:c1:0e: bb:e6:ab:16:d3:83:b2:67:ef:47:63:68:58:7e:fa: 65:e6:54:92:e5:19:b7:da:10:e1:07:63:e1:ca:15: ea:b2:5b:21:9d:9b:34:35:e9:78:67:3f:c8:8e:fe: 07:78:fe:4d:76:e7:ec:48:96:ff:54:dc:ab:4b:40: eb:f2:4c:22:c4:06:ce:c7:2b:68:c1:bf:80:08:fc: 54:58:e4:c5:19:5d:c5:2d:85:83:74:a1:5b:d6:dd: 47:55:f5:e0:62:f5:31:83:86:d7:88:8c:70:e4:1b: 1d:d4:71:d6:2e:54:9b:c2:d5:ab:73:0e:72:fc:63: 0e:bd:ed:f1:d9:00:3c:41:b9:96:cb:49:5b:2f:c2: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3D:F5:42:37:ED:FC:4C:86:E4:BF:9F:02:42:A5:E6:9C:3C:FA:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d1713fa-e5de-4cea-9a76-a0e0dcf6c83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption b7:d6:48:25:5e:ed:c2:65:dd:3f:cc:f0:a9:86:2b:c2:98:5b: 15:69:f3:e6:96:ad:6a:73:f5:46:47:52:a1:4f:89:a6:ed:0c: 43:52:ba:2e:a0:43:b1:3a:e4:5c:56:05:20:1f:87:10:05:40: 97:35:86:a2:48:e1:68:b7:5e:de:43:83:63:a1:38:46:64:af: ec:e4:be:54:3f:fb:d7:ba:59:8b:0b:ad:fd:3c:6b:33:fb:4a: bc:55:d5:65:48:60:5b:05:71:28:66:0b:6c:b5:0b:f2:7d:4e: da:e4:48:2b:78:5c:fb:c7:ae:dc:49:f7:ca:85:1c:81:fd:a3: 2e:5e:68:a4:a5:73:6a:43:b1:56:d7:bb:c4:33:7c:48:ff:51: b0:f7:fe:5b:f0:20:3d:df:d6:1e:41:02:a6:23:69:57:ea:b7: 95:0e:d8:3e:37:40:25:07:38:34:07:01:a4:b7:5d:b9:2d:fd: 27:fe:ff:69:23:49:7e:02:25:40:6a:fa:32:21:37:b5:f3:34: 14:8e:02:c3:67:4a:a5:c6:a0:dc:96:a4:d5:21:74:4f:0e:e5: 48:1d:91:dc:a0:96:7b:9b:1b:f6:58:fc:96:d9:0d:98:9b:0b: 85:c7:aa:e5:20:5d:04:46:a2:f4:79:5a:10:04:c4:1b:d7:8c: 41:4d:2c:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfMuxNDEYRcrLSosKuq1/wizhG5YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAyMDE1WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTllOWJlMWE2MmYwNTNjOGFjOWE5NzNmMDBkMDcxYzVk ZmIwNzBkNzE3OGYyZGRkYmRiNTVhYTliYWJjMzI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4s/GPq4I6yAFVwwTyMGgrC/ZQeX6B9aSC0+BR2RB2T1z4 cK7yj9X07nWbGQFbyCFHS+vczsxIlAYOEMIw8GvZWKTgbHMe7xM0Ibo+Z//NBSON eF4e6wHRIl73b7k+RwkWBffY94z4TfdxycF9ata91q8vpDDBDrvmqxbTg7Jn70dj aFh++mXmVJLlGbfaEOEHY+HKFeqyWyGdmzQ16XhnP8iO/gd4/k125+xIlv9U3KtL QOvyTCLEBs7HK2jBv4AI/FRY5MUZXcUthYN0oVvW3UdV9eBi9TGDhteIjHDkGx3U cdYuVJvC1atzDnL8Yw697fHZADxBuZbLSVsvwrcvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhj31Qjft/EyG5L+fAkKl5pw8+h8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMTcxM2ZhLWU1ZGUtNGNlYS05YTc2LWEwZTBkY2Y2YzgzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXClEAwDQYJKoZIhvcNAQELBQADggEBALfWSCVe7cJl3T/M8KmGK8KYWxVp 8+aWrWpz9UZHUqFPiabtDENSui6gQ7E65FxWBSAfhxAFQJc1hqJI4Wi3Xt5Dg2Oh OEZkr+zkvlQ/+9e6WYsLrf08azP7SrxV1WVIYFsFcShmC2y1C/J9TtrkSCt4XPvH rtxJ98qFHIH9oy5eaKSlc2pDsVbXu8QzfEj/UbD3/lvwID3f1h5BAqYjaVfqt5UO 2D43QCUHODQHAaS3Xbkt/Sf+/2kjSX4CJUBq+jIhN7XzNBSOAsNnSqXGoNyWpNUh dE8O5UgdkdyglnubG/ZY/JbZDZibC4XHquUgXQRGovR5WhAExBvXjEFNLCI= -----END CERTIFICATE-----Generated at Wed May 7 13:44:14 2025 by rpki-client