$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa File: 58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa (raw, json) Hash identifier: AvAsIp1s4ZDd2jCwqyKc0eHC9905+MQ4QteUvr9jvBg= Subject key identifier: 13:53:D7:A5:F8:DA:C7:05:0D:AF:35:02:44:0E:AC:ED:A2:95:A7:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24B4A33BB3CCA57147806AF13C36AB76E8D3BC4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa Signing time: Sat 03 May 2025 00:30:14 +0000 ROA not before: Sat 03 May 2025 00:30:14 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b4:a3:3b:b3:cc:a5:71:47:80:6a:f1:3c:36:ab:76:e8:d3:bc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:30:14 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=dafd2beaaa3e86a779e9690306c19829c2ff793be2ffec18d4b28faf8e4714da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:28:74:21:50:6a:9f:e2:7d:7a:38:3c:2e:cf: 38:76:a8:d7:00:0d:a4:e0:c6:1d:20:7b:b9:94:2a: c7:5f:80:33:50:1f:d3:c2:54:f8:03:cb:24:59:5c: ab:8b:3d:fe:89:57:aa:26:df:97:82:92:14:25:f5: 30:16:e2:cd:97:d9:ef:e3:d0:e8:03:1c:aa:0c:74: 3c:eb:89:f8:15:6b:ed:e9:a4:f1:7a:13:b2:f6:15: ce:09:18:72:1b:87:f0:9e:46:7c:39:de:cd:1d:ff: ee:14:33:3e:3c:aa:bb:ee:80:72:56:db:dc:0a:cc: 11:6e:6d:9f:c6:e5:7b:38:18:ca:0e:38:fa:24:ab: 9e:87:1c:f5:f9:20:86:22:75:ff:f2:91:47:6a:25: 14:b9:07:1c:4c:79:3a:14:85:d0:1f:39:88:81:5f: 65:fa:20:38:ab:6f:c6:64:de:53:8c:4f:78:6a:72: e1:d7:ad:dc:ca:68:60:ea:4a:95:9f:01:08:10:31: dd:04:97:df:55:3c:48:2b:05:6c:09:69:6e:8a:e1: 77:d3:1c:7a:20:c2:8b:f6:86:3b:f5:dd:9c:9e:9c: 70:bc:91:1b:72:13:97:01:b8:9d:70:20:99:2a:28: 67:86:82:b7:9c:7f:cf:7a:ec:6d:cb:ab:b0:b5:cf: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:53:D7:A5:F8:DA:C7:05:0D:AF:35:02:44:0E:AC:ED:A2:95:A7:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9c:b7:db:0e:f5:90:66:26:86:70:30:3f:14:93:79:2e:1b:f9: 40:77:9d:c7:55:7b:17:bb:db:55:46:14:c3:00:9f:05:a6:01: 1b:b2:b0:3e:17:3a:2a:8a:8a:1f:28:35:6d:8a:e4:01:fe:e3: 04:3f:bb:b7:0c:49:d7:de:18:92:41:b7:43:2e:e0:ca:79:8f: 69:2c:85:76:b4:1f:b0:c0:96:10:0d:f7:3a:8f:df:3a:aa:78: 3e:53:0a:4c:b9:ed:cc:22:15:0f:24:e2:8f:00:3a:37:4a:bb: 42:fa:e9:ec:f2:c6:49:92:8e:bd:d4:61:ce:ff:18:35:4a:ca: 4b:d0:b6:53:67:5c:60:87:85:2c:12:6e:8c:b4:c8:4d:82:e1: 16:b4:c4:ec:d7:e7:9f:63:75:69:bd:13:e0:0b:9c:88:49:8c: 58:9c:f9:b1:55:fd:51:c5:cb:35:22:2d:2e:05:f9:1a:7a:03: 0b:35:a4:26:a3:c3:1c:6d:01:28:04:a2:ad:fa:25:d0:4e:04: 1f:72:14:bf:a2:42:5a:ae:1b:59:bc:10:cc:67:14:54:fe:3b: a6:6a:94:32:d0:3c:88:27:df:46:f9:ae:7d:28:a2:f3:40:16: 4a:b3:74:18:37:9b:49:6d:11:18:d9:c5:a6:a0:22:a3:d8:77: 48:6d:c8:9a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJLSjO7PMpXFHgGrxPDardujTvEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAzMDE0WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWZkMmJlYWFhM2U4NmE3NzllOTY5MDMwNmMxOTgyOWMy ZmY3OTNiZTJmZmVjMThkNGIyOGZhZjhlNDcxNGRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5KHQhUGqf4n16ODwuzzh2qNcADaTgxh0ge7mUKsdfgDNQ H9PCVPgDyyRZXKuLPf6JV6om35eCkhQl9TAW4s2X2e/j0OgDHKoMdDzrifgVa+3p pPF6E7L2Fc4JGHIbh/CeRnw53s0d/+4UMz48qrvugHJW29wKzBFubZ/G5Xs4GMoO OPokq56HHPX5IIYidf/ykUdqJRS5BxxMeToUhdAfOYiBX2X6IDirb8Zk3lOMT3hq cuHXrdzKaGDqSpWfAQgQMd0El99VPEgrBWwJaW6K4XfTHHogwov2hjv13ZyenHC8 kRtyE5cBuJ1wIJkqKGeGgrecf8967G3Lq7C1z2vjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE1PXpfjaxwUNrzUCRA6s7aKVp98wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yjk2Yzc4LTk1NGItNDFjMi04N2ZmLTRjZjhmN2JlOWUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4cjANBgkqhkiG9w0BAQsFAAOCAQEAnLfbDvWQZiaGcDA/FJN5Lhv5QHed x1V7F7vbVUYUwwCfBaYBG7KwPhc6KoqKHyg1bYrkAf7jBD+7twxJ194YkkG3Qy7g ynmPaSyFdrQfsMCWEA33Oo/fOqp4PlMKTLntzCIVDyTijwA6N0q7Qvrp7PLGSZKO vdRhzv8YNUrKS9C2U2dcYIeFLBJujLTITYLhFrTE7Nfnn2N1ab0T4AuciEmMWJz5 sVX9UcXLNSItLgX5GnoDCzWkJqPDHG0BKASirfol0E4EH3IUv6JCWq4bWbwQzGcU VP47pmqUMtA8iCffRvmufSii80AWSrN0GDebSW0RGNnFpqAio9h3SG3Img== -----END CERTIFICATE-----Generated at Sat May 10 21:41:07 2025 by rpki-client