$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fac2932-bc67-4322-b578-c260d2fa66e7.roa File: 2fac2932-bc67-4322-b578-c260d2fa66e7.roa (raw, json) Hash identifier: uKQplqpAp4OHNV2sRp+phWdenOHEnKQj0g2Rvrq1zAw= Subject key identifier: D0:F7:A4:81:2C:41:4F:55:C4:95:D5:39:82:D8:2C:9F:B9:20:CF:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36D97DA23AFE1C0A257110D24ADDA05B7009B0AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fac2932-bc67-4322-b578-c260d2fa66e7.roa Signing time: Sat 03 May 2025 00:10:18 +0000 ROA not before: Sat 03 May 2025 00:10:18 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.91.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d9:7d:a2:3a:fe:1c:0a:25:71:10:d2:4a:dd:a0:5b:70:09:b0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:10:18 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=d9a13bc4bc007d759a786b44bd0e9d2b9d51b2def17b367f9177122ea96176f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:b2:68:b6:95:3f:71:07:c1:d5:1c:ad:34: f3:e1:38:c8:b2:20:f9:1d:f4:ca:26:4b:67:18:4d: de:55:94:ea:44:02:c4:1f:e9:7f:c4:74:6c:19:a3: 7d:05:3f:22:3e:ef:69:f8:0b:2e:80:04:e4:c1:f1: 3b:13:10:05:27:93:98:85:9a:76:5b:00:72:8b:13: 42:18:9b:ae:f8:b4:70:08:6b:de:71:df:1b:4e:e3: e1:26:98:22:ba:84:78:3c:96:a6:62:0c:2f:a6:fb: bc:7e:49:d7:d8:b4:74:ed:e6:a8:d4:01:c4:30:76: 7e:d5:33:37:90:10:cd:90:0d:f6:17:42:43:0d:7e: 91:61:d2:82:69:3f:03:e8:fb:a4:76:0f:98:1b:c0: 52:8f:17:1b:b2:6e:ee:d3:b3:2d:a3:6d:35:c3:f8: dc:c1:03:6c:da:a0:12:43:ad:93:18:43:9b:f0:00: d6:75:e6:21:16:18:58:3b:8b:dd:73:50:75:c2:64: 29:8a:0f:c1:ea:79:33:fc:83:64:4b:6b:bc:d3:b9: 6b:34:04:51:a0:47:8a:83:4d:3c:e1:86:5a:3c:67: d4:69:8c:53:5c:c0:18:95:3d:4f:22:b5:b1:92:ba: a7:55:55:99:77:69:1b:0d:fb:77:57:39:ae:28:fd: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:A4:81:2C:41:4F:55:C4:95:D5:39:82:D8:2C:9F:B9:20:CF:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fac2932-bc67-4322-b578-c260d2fa66e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.91.0.0/18 Signature Algorithm: sha256WithRSAEncryption 27:55:a6:59:98:90:9e:b2:af:d0:c6:3f:84:b6:97:97:05:80: 32:df:30:0b:f8:06:d7:55:e0:2f:fe:53:fd:13:01:d8:fd:82: a4:f5:a1:1e:a9:1c:68:f7:5e:8e:85:c0:de:e3:e4:5e:4f:bb: 75:fe:07:95:da:07:3a:f5:5f:80:c3:70:4c:4c:3e:60:22:a9: 4c:20:64:83:ca:c9:ce:b4:5a:f5:d6:e3:fc:f0:37:1c:00:95: fa:81:13:89:86:a3:88:6c:f0:9c:27:3d:59:f9:d8:5b:f2:1d: fe:64:95:91:b2:4a:69:ef:e7:71:b8:b3:1c:fc:4b:9d:a8:01: 08:99:20:64:75:1d:a1:eb:65:e7:d2:3f:cb:d8:82:4b:60:35: f2:bc:3d:49:fb:b9:a4:11:b2:ef:fc:d0:d8:77:e2:ec:df:10: 4c:5b:0f:3d:b4:59:9b:05:cd:06:5f:62:0e:51:96:05:ac:d9: 82:02:fc:48:fa:10:b3:a3:77:8a:e2:13:db:0e:1a:15:20:d6: 29:72:34:cb:68:6f:01:16:07:5e:46:3a:cc:a1:fe:55:9e:56: 2e:a4:1d:ae:e3:ee:e4:67:6f:3f:c1:e7:f1:38:18:c1:07:49: ae:7a:9a:41:68:52:9f:04:3c:37:e4:0b:4b:92:43:ae:d5:4f: 89:ba:e4:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNtl9ojr+HAolcRDSSt2gW3AJsK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAxMDE4WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWExM2JjNGJjMDA3ZDc1OWE3ODZiNDRiZDBlOWQyYjlk NTFiMmRlZjE3YjM2N2Y5MTc3MTIyZWE5NjE3NmY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCufbJotpU/cQfB1RytNPPhOMiyIPkd9MomS2cYTd5VlOpE AsQf6X/EdGwZo30FPyI+72n4Cy6ABOTB8TsTEAUnk5iFmnZbAHKLE0IYm674tHAI a95x3xtO4+EmmCK6hHg8lqZiDC+m+7x+SdfYtHTt5qjUAcQwdn7VMzeQEM2QDfYX QkMNfpFh0oJpPwPo+6R2D5gbwFKPFxuybu7Tsy2jbTXD+NzBA2zaoBJDrZMYQ5vw ANZ15iEWGFg7i91zUHXCZCmKD8HqeTP8g2RLa7zTuWs0BFGgR4qDTTzhhlo8Z9Rp jFNcwBiVPU8itbGSuqdVVZl3aRsN+3dXOa4o/alHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0PekgSxBT1XEldU5gtgsn7kgz7swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmYWMyOTMyLWJjNjctNDMyMi1iNTc4LWMyNjBkMmZhNjZlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRWwAwDQYJKoZIhvcNAQELBQADggEBACdVplmYkJ6yr9DGP4S2l5cFgDLf MAv4BtdV4C/+U/0TAdj9gqT1oR6pHGj3Xo6FwN7j5F5Pu3X+B5XaBzr1X4DDcExM PmAiqUwgZIPKyc60WvXW4/zwNxwAlfqBE4mGo4hs8JwnPVn52FvyHf5klZGySmnv 53G4sxz8S52oAQiZIGR1HaHrZefSP8vYgktgNfK8PUn7uaQRsu/80Nh34uzfEExb Dz20WZsFzQZfYg5RlgWs2YIC/Ej6ELOjd4riE9sOGhUg1ilyNMtobwEWB15GOsyh /lWeVi6kHa7j7uRnbz/B5/E4GMEHSa56mkFoUp8EPDfkC0uSQ67VT4m65O8= -----END CERTIFICATE-----Generated at Sat May 10 06:59:44 2025 by rpki-client