$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55b9bfb9-9739-4445-bad9-8cb474563aa7.roa File: 55b9bfb9-9739-4445-bad9-8cb474563aa7.roa (raw, json) Hash identifier: aQuxXUgU0phlN/8sxWW14Azt2pNFRvqeqNma/4BnEXE= Subject key identifier: 64:16:D3:C9:90:EC:61:00:EF:0E:7A:55:13:AE:1B:B8:E9:F1:FE:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03FB4DAF1A4E45B8E9969F1FBAC2C3B481617B1D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55b9bfb9-9739-4445-bad9-8cb474563aa7.roa Signing time: Fri 25 Apr 2025 15:01:56 +0000 ROA not before: Fri 25 Apr 2025 15:01:56 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 72.44.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fb:4d:af:1a:4e:45:b8:e9:96:9f:1f:ba:c2:c3:b4:81:61:7b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:01:56 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=d43f09d7c4818ba6d86b4fe8ae105352716de2d1559d73a9839669b009067d6f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:8a:0e:d9:7a:9f:6a:3a:20:19:a9:73:22: db:7b:7e:da:9b:89:08:86:46:1e:cd:94:c1:c5:93: c0:14:d9:2f:24:e3:6a:e6:67:c9:be:26:af:4b:c0: 94:44:2b:d6:9a:53:63:f1:6a:8c:f8:ea:20:ac:93: 20:68:52:c7:cd:5d:32:7f:10:56:74:00:d0:fb:60: 23:96:0a:86:9a:99:72:e7:05:13:44:25:c9:3d:c1: 02:83:83:3b:d8:2a:4d:f7:0e:aa:fc:62:f7:d5:32: 17:c4:87:2d:57:b6:e5:01:5b:a3:1a:87:a3:94:83: 6d:09:a2:39:cf:cb:89:18:82:eb:f8:bb:4c:71:30: 17:b1:3e:ce:b7:00:16:b6:75:27:58:fc:da:d4:91: 16:4e:30:c9:75:ab:bf:53:45:0b:8b:6c:be:fe:02: 1e:82:75:b3:a7:84:f3:76:8c:1d:4e:97:33:ed:e8: ac:1b:10:e3:5f:43:87:24:95:ad:8a:82:23:1a:f1: bc:f7:02:19:ae:c6:39:21:22:c2:4b:68:22:2c:3f: ac:89:91:49:08:7f:c3:d7:fb:11:03:b9:1f:24:0a: c7:00:71:a6:83:96:97:b9:a7:cd:23:eb:99:2a:bf: 75:8d:4c:d8:ec:3e:e1:84:b7:3e:3f:ac:55:3b:51: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:16:D3:C9:90:EC:61:00:EF:0E:7A:55:13:AE:1B:B8:E9:F1:FE:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55b9bfb9-9739-4445-bad9-8cb474563aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.32.0/24 Signature Algorithm: sha256WithRSAEncryption b8:9d:ad:7b:ec:3f:5e:0b:17:22:08:38:7d:5c:43:95:42:d0: 15:e9:c7:c4:98:ed:41:3a:31:e5:b8:3f:88:f1:7f:ba:d1:75: da:b7:0e:0f:bf:4e:9a:9e:61:48:c3:a0:54:0c:05:77:d6:b9: 06:df:08:67:e3:7d:5b:0a:48:57:3e:ce:cf:8c:0f:fc:e4:4d: f7:fa:3f:51:31:44:e4:35:a3:7a:13:33:8a:f7:09:f6:76:5e: 99:23:23:b7:26:61:36:c9:1a:ed:33:2e:08:2e:93:ef:e6:75: 83:88:37:7b:bc:5d:73:b5:ee:fb:1e:ea:32:18:2d:fa:6a:11: ad:b1:3f:66:30:c4:13:12:d0:bd:09:31:0e:7e:18:14:8e:ef: 27:c3:14:d9:a6:4e:19:51:fe:2e:02:93:96:c9:d1:3f:59:b5: ef:c7:ce:5f:0c:21:7d:a1:83:e7:46:4a:a7:cd:3b:1d:38:6f: 56:97:04:ae:75:e2:65:24:5c:f1:e5:f8:b4:82:b9:d4:50:a4: c9:a7:a2:1a:da:2c:cb:bd:62:da:e8:d2:47:65:22:18:c0:ab: 28:ce:a4:db:6c:ce:91:f5:f7:0c:d4:9f:c3:39:7d:0c:6f:fe: 20:87:c3:24:34:57:92:50:3b:19:e1:21:97:0b:2d:a6:77:c4: ab:a8:90:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA/tNrxpORbjplp8fusLDtIFhex0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUwMTU2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDNmMDlkN2M0ODE4YmE2ZDg2YjRmZThhZTEwNTM1Mjcx NmRlMmQxNTU5ZDczYTk4Mzk2NjliMDA5MDY3ZDZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf4YoO2XqfajogGalzItt7ftqbiQiGRh7NlMHFk8AU2S8k 42rmZ8m+Jq9LwJREK9aaU2Pxaoz46iCskyBoUsfNXTJ/EFZ0AND7YCOWCoaamXLn BRNEJck9wQKDgzvYKk33Dqr8YvfVMhfEhy1XtuUBW6Mah6OUg20JojnPy4kYguv4 u0xxMBexPs63ABa2dSdY/NrUkRZOMMl1q79TRQuLbL7+Ah6CdbOnhPN2jB1OlzPt 6KwbEONfQ4ckla2KgiMa8bz3AhmuxjkhIsJLaCIsP6yJkUkIf8PX+xEDuR8kCscA caaDlpe5p80j65kqv3WNTNjsPuGEtz4/rFU7UdmvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZBbTyZDsYQDvDnpVE64buOnx/iYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1YjliZmI5LTk3MzktNDQ0NS1iYWQ5LThjYjQ3NDU2M2FhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABILCAwDQYJKoZIhvcNAQELBQADggEBALidrXvsP14LFyIIOH1cQ5VC0BXp x8SY7UE6MeW4P4jxf7rRddq3Dg+/TpqeYUjDoFQMBXfWuQbfCGfjfVsKSFc+zs+M D/zkTff6P1ExROQ1o3oTM4r3CfZ2XpkjI7cmYTbJGu0zLgguk+/mdYOIN3u8XXO1 7vse6jIYLfpqEa2xP2YwxBMS0L0JMQ5+GBSO7yfDFNmmThlR/i4Ck5bJ0T9Zte/H zl8MIX2hg+dGSqfNOx04b1aXBK514mUkXPHl+LSCudRQpMmnohraLMu9Ytro0kdl IhjAqyjOpNtszpH19wzUn8M5fQxv/iCHwyQ0V5JQOxnhIZcLLaZ3xKuokPk= -----END CERTIFICATE-----Generated at Sun May 11 13:50:01 2025 by rpki-client