$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa File: 52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa (raw, json) Hash identifier: vBm+18NrjkcResjV7sCwI1evI7sr7Ye1/Au81feqrAA= Subject key identifier: DD:C8:A3:5B:C3:7C:D3:5C:C8:64:B0:C7:E7:89:01:C5:7B:C1:A4:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15204DC73CF4D6551750A13928DC8D7C10B90CF9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa Signing time: Fri 02 May 2025 00:11:01 +0000 ROA not before: Fri 02 May 2025 00:11:01 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:20:4d:c7:3c:f4:d6:55:17:50:a1:39:28:dc:8d:7c:10:b9:0c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:11:01 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=676ec971ecef93d621d7aaaa560fb646acd00ef0866c5aabb34e68148e822892, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:65:85:ae:59:c3:22:a4:82:a2:b2:c1:3f: 71:12:2d:c9:0b:f8:f8:35:38:69:aa:ce:13:52:9f: 22:5d:be:84:8c:5e:a2:12:bd:30:fc:af:76:2b:0a: 75:a3:7f:99:c5:4f:06:5d:6e:f4:d8:95:4a:ea:fa: 42:22:05:61:8a:fd:67:b3:23:34:4c:8e:94:62:8e: bb:d6:13:90:4a:59:2e:6f:df:5b:56:ef:7a:66:32: 5e:cd:14:db:f3:8f:d0:49:d9:68:70:2a:6c:9d:ee: cb:43:e3:d3:bf:3c:76:2d:4c:4d:f4:f5:f5:30:52: 65:79:18:a8:c4:3d:58:b0:be:3d:58:04:40:84:42: fc:5f:78:e2:bb:ab:6a:97:a1:39:0f:92:a2:0c:5b: 1f:fc:f7:89:14:93:2b:77:c3:89:a6:ed:f3:b9:fb: 70:36:76:dd:ec:5d:2e:e8:26:45:5c:d6:12:7a:6e: 2a:07:6b:ed:54:1f:19:3a:61:42:5d:0b:f7:c3:af: 23:7c:27:75:61:13:1e:d8:e9:ef:37:66:58:f3:d4: d3:26:27:5d:38:88:a5:88:83:7d:87:56:48:04:84: 45:3a:36:67:a9:c4:3a:c9:d1:05:2f:da:16:b6:94: da:66:c3:e7:6e:2b:b3:c3:75:d5:a8:e3:46:2c:52: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C8:A3:5B:C3:7C:D3:5C:C8:64:B0:C7:E7:89:01:C5:7B:C1:A4:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52603c05-86e8-4ac0-94f4-815b7fc6fca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:3a:67:21:07:43:21:bf:f9:25:4b:e0:eb:72:fb:b7:b1:7a: d3:3a:99:c9:e0:e9:03:03:2d:53:cc:e7:74:08:49:fd:18:33: 18:21:22:a2:b1:6e:24:bb:2a:6e:47:1d:5f:76:1a:78:79:73: 5e:cf:f3:d0:c3:be:f9:1c:3a:5d:68:5e:d4:04:cd:7b:be:b6: d2:de:8d:f4:c4:60:26:4f:f2:8e:64:0f:ee:0e:82:c7:2c:98: 9f:4a:8e:43:5e:ea:44:4b:17:82:b4:d7:72:0d:8d:9f:b9:93: 0e:d6:83:41:fe:95:f9:ec:cf:07:eb:f7:88:b4:43:34:f7:0d: 29:d5:9c:19:21:ab:50:66:66:d5:46:06:62:55:08:0f:d0:3f: b4:27:f7:4f:25:c9:03:98:48:bd:c7:89:f7:20:c7:d6:b8:69: 1a:0c:12:b0:9c:11:35:0a:a0:e2:2e:2b:c8:40:58:18:c5:8e: 81:61:99:3c:12:be:f8:0e:14:65:7a:50:f1:a3:d3:ce:be:e7: 07:e4:5d:65:35:ae:e0:f7:9f:e9:95:9c:81:c1:7e:7e:c7:37: 07:2c:5b:ad:d2:3b:87:d1:7d:03:58:49:21:7a:d5:16:ec:72: 36:cf:89:89:af:e7:70:a6:78:ec:15:6e:9d:0e:1c:d1:66:11: b9:d3:95:56 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFSBNxzz01lUXUKE5KNyNfBC5DPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAxMTAxWhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzZlYzk3MWVjZWY5M2Q2MjFkN2FhYWE1NjBmYjY0NmFj ZDAwZWYwODY2YzVhYWJiMzRlNjgxNDhlODIyODkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC79GWFrlnDIqSCorLBP3ESLckL+Pg1OGmqzhNSnyJdvoSM XqISvTD8r3YrCnWjf5nFTwZdbvTYlUrq+kIiBWGK/WezIzRMjpRijrvWE5BKWS5v 31tW73pmMl7NFNvzj9BJ2WhwKmyd7stD49O/PHYtTE309fUwUmV5GKjEPViwvj1Y BECEQvxfeOK7q2qXoTkPkqIMWx/894kUkyt3w4mm7fO5+3A2dt3sXS7oJkVc1hJ6 bioHa+1UHxk6YUJdC/fDryN8J3VhEx7Y6e83Zljz1NMmJ104iKWIg32HVkgEhEU6 NmepxDrJ0QUv2ha2lNpmw+duK7PDddWo40YsUvBfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3cijW8N801zIZLDH54kBxXvBpJ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyNjAzYzA1LTg2ZTgtNGFjMC05NGY0LTgxNWI3ZmM2ZmNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQFjANBgkqhkiG9w0BAQsFAAOCAQEASDpnIQdDIb/5JUvg63L7t7F60zqZ yeDpAwMtU8zndAhJ/RgzGCEiorFuJLsqbkcdX3YaeHlzXs/z0MO++Rw6XWhe1ATN e7620t6N9MRgJk/yjmQP7g6CxyyYn0qOQ17qREsXgrTXcg2Nn7mTDtaDQf6V+ezP B+v3iLRDNPcNKdWcGSGrUGZm1UYGYlUID9A/tCf3TyXJA5hIvceJ9yDH1rhpGgwS sJwRNQqg4i4ryEBYGMWOgWGZPBK++A4UZXpQ8aPTzr7nB+RdZTWu4Pef6ZWcgcF+ fsc3ByxbrdI7h9F9A1hJIXrVFuxyNs+Jia/ncKZ47BVunQ4c0WYRudOVVg== -----END CERTIFICATE-----Generated at Mon May 5 10:26:21 2025 by rpki-client