$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa File: 4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa (raw, json) Hash identifier: wNZNlDt3z5R52/WdPaxFQ/8uTX04zNbmItQjze9eXOw= Subject key identifier: E4:23:A1:27:5F:FA:7B:7B:F8:5E:FC:4E:7C:84:D8:66:A1:9A:29:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F126D0825EED2344A339BE49AB3EABA176CE9C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa Signing time: Tue 29 Apr 2025 00:20:57 +0000 ROA not before: Tue 29 Apr 2025 00:20:57 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 77.112.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:12:6d:08:25:ee:d2:34:4a:33:9b:e4:9a:b3:ea:ba:17:6c:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:20:57 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=c24affd968a9c4e8e564cf7a51c419a36a39aada3a7979eab1dbc836601a3dca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:eb:ae:07:86:0c:c3:33:e7:a8:0d:e7:98: fa:94:ab:7b:ca:c3:48:da:f8:10:37:99:43:4c:c9: 0d:61:22:b6:96:90:48:23:43:46:0a:05:a0:1b:b7: 1c:fd:64:d5:1e:ae:97:74:6d:ec:e2:63:52:5a:39: 16:ce:28:83:73:84:3b:74:f3:5b:56:72:3a:65:93: 81:ac:08:a3:26:f6:f4:a4:2f:22:84:2b:6b:3e:0e: 84:63:50:0e:c4:d4:c0:fe:af:25:f0:60:b0:fb:69: bc:cf:66:61:7e:14:0a:9b:97:d3:1a:1f:8c:2b:cd: 5d:29:e8:68:aa:00:d4:5f:d2:fa:68:d8:7c:04:6d: ce:8d:80:f1:5f:42:27:b4:da:b3:bb:50:34:4d:67: f9:cf:03:32:3a:b0:a6:f1:26:4e:86:9b:9a:c5:2f: f7:e6:c1:de:8a:9d:69:7a:f1:97:ff:b3:8d:55:74: 17:02:dc:23:96:60:e1:91:15:ab:40:e2:c6:0d:3a: 97:bd:32:8f:99:4a:3b:24:d3:50:73:1a:23:e2:c8: 1a:75:06:a1:a7:f0:81:cc:b8:e8:72:cb:08:03:e7: 0f:65:1f:11:70:95:dc:ce:b9:99:d5:b0:ea:f6:5c: f9:2b:e2:75:42:4e:e2:10:33:89:78:f3:ce:2e:7f: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:A1:27:5F:FA:7B:7B:F8:5E:FC:4E:7C:84:D8:66:A1:9A:29:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.112.0.0/14 Signature Algorithm: sha256WithRSAEncryption 9d:df:84:7a:fa:05:b4:4c:59:46:f2:14:9c:2f:5f:6e:79:7b: cb:2b:86:8e:0d:e4:68:0d:41:2d:f0:f8:70:07:51:db:15:b6: 0c:45:05:bc:6e:15:cd:c7:9f:e8:ec:7b:be:82:0c:d8:2d:b1: 34:1c:3b:e9:e0:3e:9e:d6:ab:c4:ab:2f:3f:8b:42:99:be:1b: 18:3b:a2:19:1e:e5:07:b2:6e:c0:48:f8:60:5b:5b:92:3e:9a: 73:45:15:56:9d:15:fe:c0:67:04:cf:29:a2:64:33:99:24:91: 5e:a8:53:50:cc:8f:86:eb:95:c2:ca:55:7a:7a:68:55:00:87: 24:f5:66:87:c2:87:c9:cb:ed:c3:b6:88:ff:57:80:ce:89:69: 4d:96:62:99:b9:a7:5b:71:44:2f:22:cf:ed:ac:b1:89:1d:6d: d8:f0:f6:0f:af:05:b5:dc:c5:4d:59:cb:c8:9b:9b:2e:fa:93: f3:6a:d7:ed:4d:91:de:d3:8f:80:36:c7:1d:56:32:85:01:e2: c0:88:e7:43:12:a5:cf:8c:c5:e6:71:79:54:64:67:be:2a:ca: a4:9f:6f:31:21:76:2b:8d:eb:52:3d:2f:1f:6e:a6:ae:45:bb: 0d:89:ac:8e:82:4c:cd:1c:b7:7e:7f:98:01:28:db:1f:59:d0: a3:91:5a:a0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfxJtCCXu0jRKM5vkmrPquhds6cAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAyMDU3WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjRhZmZkOTY4YTljNGU4ZTU2NGNmN2E1MWM0MTlhMzZh MzlhYWRhM2E3OTc5ZWFiMWRiYzgzNjYwMWEzZGNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGWeuuB4YMwzPnqA3nmPqUq3vKw0ja+BA3mUNMyQ1hIraW kEgjQ0YKBaAbtxz9ZNUerpd0beziY1JaORbOKINzhDt081tWcjplk4GsCKMm9vSk LyKEK2s+DoRjUA7E1MD+ryXwYLD7abzPZmF+FAqbl9MaH4wrzV0p6GiqANRf0vpo 2HwEbc6NgPFfQie02rO7UDRNZ/nPAzI6sKbxJk6Gm5rFL/fmwd6KnWl68Zf/s41V dBcC3COWYOGRFatA4sYNOpe9Mo+ZSjsk01BzGiPiyBp1BqGn8IHMuOhyywgD5w9l HxFwldzOuZnVsOr2XPkr4nVCTuIQM4l4884ufyDvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5COhJ1/6e3v4XvxOfITYZqGaKREwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjM2M5N2ZhLWM2MTUtNDZlMy04MGYwLWI3ZDBiOGEwOTRiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJNcDANBgkqhkiG9w0BAQsFAAOCAQEAnd+EevoFtExZRvIUnC9fbnl7yyuG jg3kaA1BLfD4cAdR2xW2DEUFvG4Vzcef6Ox7voIM2C2xNBw76eA+ntarxKsvP4tC mb4bGDuiGR7lB7JuwEj4YFtbkj6ac0UVVp0V/sBnBM8pomQzmSSRXqhTUMyPhuuV wspVenpoVQCHJPVmh8KHycvtw7aI/1eAzolpTZZimbmnW3FELyLP7ayxiR1t2PD2 D68FtdzFTVnLyJubLvqT82rX7U2R3tOPgDbHHVYyhQHiwIjnQxKlz4zF5nF5VGRn virKpJ9vMSF2K43rUj0vH26mrkW7DYmsjoJMzRy3fn+YASjbH1nQo5FaoA== -----END CERTIFICATE-----Generated at Fri May 9 20:54:19 2025 by rpki-client