$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/460cc7e7-ae2c-4e35-aca3-e1243483a8f4.roa File: 460cc7e7-ae2c-4e35-aca3-e1243483a8f4.roa (raw, json) Hash identifier: NHIRy6hdVEufQ9jSYRfa1idkX4YFsWGVC7Ecsd344Bk= Subject key identifier: 2E:2D:92:C6:89:D1:79:81:70:5E:12:0A:BB:BE:C4:83:A4:2B:F6:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AC8BA5DA9F3477E016CA29BA6E08B7FA91541FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/460cc7e7-ae2c-4e35-aca3-e1243483a8f4.roa Signing time: Fri 09 May 2025 00:01:09 +0000 ROA not before: Fri 09 May 2025 00:01:09 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c8:ba:5d:a9:f3:47:7e:01:6c:a2:9b:a6:e0:8b:7f:a9:15:41:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:01:09 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=01dfeff3bf366d36bba334137e37c4f202ce6fadfcfe4a051adbabe1f1507615, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:e7:f8:b3:0c:54:8f:f7:5f:af:57:dd:7b: cd:d3:8b:d3:8a:7e:96:78:20:16:0d:be:fc:54:9d: 79:95:61:51:be:ff:74:ec:33:f0:30:07:47:2a:a9: ff:fa:81:99:75:06:4f:91:c1:a8:59:98:c7:ca:eb: e9:74:87:6d:0b:d6:7d:24:30:20:75:b0:8f:83:f4: 60:54:97:43:6d:db:c8:cc:dc:ae:33:01:7a:5f:ca: b4:a8:f4:50:a7:16:b1:c3:e4:35:6b:3c:24:c1:57: 30:60:a9:18:3a:72:5b:72:97:10:ac:5d:d9:0d:29: 2d:4e:38:78:03:9a:28:5d:ba:f4:6c:8f:75:a5:9c: 74:70:10:06:59:e0:6c:3a:74:75:78:51:13:66:c3: 61:2e:09:4f:5d:8f:15:9f:42:79:e4:73:da:ad:b0: a6:be:b8:7a:37:fa:42:4a:63:11:60:f5:54:e4:96: 29:b4:34:65:f2:95:08:c9:d8:a3:40:f7:a7:ba:14: 65:1b:d8:d0:a4:e3:9a:44:3e:97:1d:44:ac:c9:83: 71:a0:f6:5f:92:a7:18:4f:24:06:5c:fa:24:95:8f: 44:13:e9:9d:08:a1:e7:67:a8:98:c6:9b:d1:b8:f9: bc:d6:a3:38:9c:fa:bc:74:a0:56:98:65:ef:5f:ab: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2D:92:C6:89:D1:79:81:70:5E:12:0A:BB:BE:C4:83:A4:2B:F6:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/460cc7e7-ae2c-4e35-aca3-e1243483a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.138.0/23 Signature Algorithm: sha256WithRSAEncryption 09:9c:35:f1:b1:11:1b:e9:f1:ee:26:4e:cc:ce:45:d9:50:31: 01:e4:c5:6e:da:de:93:db:1c:b3:11:37:b5:81:9c:26:7f:b3: 5a:03:95:14:57:ba:52:5a:51:8c:a2:e8:82:0c:fe:79:14:43: 38:9c:cd:02:44:cd:54:81:ef:7d:31:17:e0:c5:36:9a:57:62: 73:23:06:b1:66:8b:d1:d2:a3:69:2d:28:03:a8:2d:c3:2f:44: 32:f4:2e:03:26:b9:cb:63:b8:24:e3:a9:f4:42:f0:6d:e2:2c: 61:af:c6:10:b7:e7:d3:b2:75:3c:42:03:65:a9:16:02:e3:40: a0:c6:4c:93:69:52:4a:a2:ca:9b:10:f0:a0:c5:12:43:a3:40: 70:89:72:41:71:aa:33:41:0f:97:0b:4a:83:ad:82:fe:2f:3d: 5b:5e:81:a8:ff:5d:31:72:cd:59:9b:e5:d0:17:c8:62:21:8f: 87:48:e3:61:a2:2b:8c:8c:2b:17:2b:4e:29:52:71:b3:3b:2e: 4e:f7:25:06:43:26:99:53:ae:5f:74:54:fb:ad:33:a1:06:29: 4d:8e:5b:0a:0c:ee:f8:e3:ee:3d:a7:62:ac:2d:be:33:55:30: 72:96:87:96:c5:db:5a:ca:c1:db:88:23:65:1e:64:cd:c5:a6: 75:84:fa:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSsi6XanzR34BbKKbpuCLf6kVQf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAwMTA5WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWRmZWZmM2JmMzY2ZDM2YmJhMzM0MTM3ZTM3YzRmMjAy Y2U2ZmFkZmNmZTRhMDUxYWRiYWJlMWYxNTA3NjE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClVuf4swxUj/dfr1fde83Ti9OKfpZ4IBYNvvxUnXmVYVG+ /3TsM/AwB0cqqf/6gZl1Bk+RwahZmMfK6+l0h20L1n0kMCB1sI+D9GBUl0Nt28jM 3K4zAXpfyrSo9FCnFrHD5DVrPCTBVzBgqRg6cltylxCsXdkNKS1OOHgDmihduvRs j3WlnHRwEAZZ4Gw6dHV4URNmw2EuCU9djxWfQnnkc9qtsKa+uHo3+kJKYxFg9VTk lim0NGXylQjJ2KNA96e6FGUb2NCk45pEPpcdRKzJg3Gg9l+SpxhPJAZc+iSVj0QT 6Z0IoednqJjGm9G4+bzWozic+rx0oFaYZe9fqxKbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULi2SxonReYFwXhIKu77Eg6Qr9oEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2MGNjN2U3LWFlMmMtNGUzNS1hY2EzLWUxMjQzNDgzYThmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoowDQYJKoZIhvcNAQELBQADggEBAAmcNfGxERvp8e4mTszORdlQMQHk xW7a3pPbHLMRN7WBnCZ/s1oDlRRXulJaUYyi6IIM/nkUQziczQJEzVSB730xF+DF NppXYnMjBrFmi9HSo2ktKAOoLcMvRDL0LgMmuctjuCTjqfRC8G3iLGGvxhC359Oy dTxCA2WpFgLjQKDGTJNpUkqiypsQ8KDFEkOjQHCJckFxqjNBD5cLSoOtgv4vPVte gaj/XTFyzVmb5dAXyGIhj4dI42GiK4yMKxcrTilScbM7Lk73JQZDJplTrl90VPut M6EGKU2OWwoM7vjj7j2nYqwtvjNVMHKWh5bF21rKwduII2UeZM3FpnWE+tg= -----END CERTIFICATE-----Generated at Sat May 10 13:22:20 2025 by rpki-client