$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa File: 5ca6bffe-b0c2-452a-ba04-285ef047a139.roa (raw, json) Hash identifier: VAuLhxv3mZ40FgtMSxDhCGjMxhvsxzopLNfyKqWifog= Subject key identifier: 77:2A:13:F1:12:BD:3C:5C:9A:E2:65:78:14:D5:89:25:51:F6:3A:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17B6B2E33715EE203F8BEA891FEBBCE52F8785F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa Signing time: Mon 05 May 2025 15:22:04 +0000 ROA not before: Mon 05 May 2025 15:22:04 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b6:b2:e3:37:15:ee:20:3f:8b:ea:89:1f:eb:bc:e5:2f:87:85:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:22:04 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=b54990c9b11adaeffce1a77c927e8c2901adeb32cf6ee27206015af6ddf3bfa2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:82:91:a3:d2:bb:b6:85:65:a9:81:6a:85: a4:14:55:f7:26:d7:66:13:60:0a:bd:02:98:52:45: 88:17:a5:fa:83:99:ee:ce:90:ac:67:c1:38:f4:a1: 83:a8:1e:9b:94:d6:2a:11:3d:90:fc:64:ae:26:3d: a2:c0:98:da:47:06:72:d8:af:ca:9f:e7:2e:6d:1e: db:6c:a2:db:d5:5f:13:0e:7f:8b:93:85:45:19:36: 99:ab:69:8f:dd:ba:79:4e:49:d6:a4:0d:2e:8a:e9: 5c:c3:67:74:05:a4:70:95:01:09:8c:32:c3:7c:07: 5b:01:28:0e:37:38:0f:a6:72:c6:88:67:4c:48:ca: 6c:38:41:94:f6:71:9f:68:ce:bc:1c:86:b4:bf:ca: e4:b2:82:7f:d7:f5:dd:c3:81:3f:5a:4f:c6:51:a4: 41:a7:67:c4:0b:d9:43:9c:da:71:59:d7:6f:ef:ee: c2:fe:46:41:fb:49:d8:7b:b0:b7:e9:df:89:df:8b: 80:6f:64:6d:58:78:25:3a:7b:04:6f:d8:50:9c:70: ac:1a:3f:92:63:bf:01:f3:e1:b1:50:96:05:fd:33: 25:82:8e:7a:8b:a3:c6:4d:71:f0:03:b1:71:74:b7: 14:5c:8c:40:0f:41:62:80:89:26:e8:e1:fa:2b:d8: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2A:13:F1:12:BD:3C:5C:9A:E2:65:78:14:D5:89:25:51:F6:3A:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:44:13:ee:58:64:53:b2:dc:a6:07:ad:f6:cc:48:df:8d:eb: 8b:96:bd:72:e7:be:3b:44:53:ed:bd:6a:b0:0f:48:5a:2f:f1: f8:f6:36:67:56:23:c1:e5:08:30:d4:6b:83:cf:ac:f3:a8:eb: 80:5d:5e:ef:9f:f6:e9:78:1f:38:2a:3d:c2:30:4f:f1:57:b6: e9:0e:5d:85:78:09:f9:1f:f5:63:1d:da:80:b9:ec:e6:de:18: b9:ab:03:f5:80:da:9c:87:83:14:01:34:08:c0:ec:f7:ba:a1: 60:f3:a0:ca:48:de:61:ad:5f:96:cc:0a:82:09:84:c0:ff:ba: ea:8a:ab:47:9d:9c:ca:97:36:2d:23:1a:94:d0:fc:ad:4b:80: 5e:1d:64:68:1f:34:aa:1d:6c:7b:90:78:55:42:8a:94:8c:3f: 84:69:d3:cf:9b:be:d6:84:0f:86:21:16:d4:7c:76:ba:e8:75: 22:82:34:6b:0a:1d:c4:ba:2f:d6:5f:9a:e9:3d:a1:d3:3d:1e: c2:66:12:0e:bb:a1:b3:ae:79:7e:df:9e:22:fa:65:e1:dc:3c: ac:65:cb:49:13:c7:eb:f6:e4:a3:bc:80:5d:41:22:c5:a1:0c: f3:8b:53:a3:83:79:eb:d8:7a:5b:c1:8f:fe:5a:2c:b8:65:7b: 66:94:36:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF7ay4zcV7iA/i+qJH+u85S+HhfEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUyMjA0WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTQ5OTBjOWIxMWFkYWVmZmNlMWE3N2M5MjdlOGMyOTAx YWRlYjMyY2Y2ZWUyNzIwNjAxNWFmNmRkZjNiZmEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGvYKRo9K7toVlqYFqhaQUVfcm12YTYAq9AphSRYgXpfqD me7OkKxnwTj0oYOoHpuU1ioRPZD8ZK4mPaLAmNpHBnLYr8qf5y5tHttsotvVXxMO f4uThUUZNpmraY/dunlOSdakDS6K6VzDZ3QFpHCVAQmMMsN8B1sBKA43OA+mcsaI Z0xIymw4QZT2cZ9ozrwchrS/yuSygn/X9d3DgT9aT8ZRpEGnZ8QL2UOc2nFZ12/v 7sL+RkH7Sdh7sLfp34nfi4BvZG1YeCU6ewRv2FCccKwaP5JjvwHz4bFQlgX9MyWC jnqLo8ZNcfADsXF0txRcjEAPQWKAiSbo4for2Dk/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdyoT8RK9PFya4mV4FNWJJVH2OogwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjYTZiZmZlLWIwYzItNDUyYS1iYTA0LTI4NWVmMDQ3YTEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MTANBgkqhkiG9w0BAQsFAAOCAQEAgEQT7lhkU7Lcpget9sxI343ri5a9 cue+O0RT7b1qsA9IWi/x+PY2Z1YjweUIMNRrg8+s86jrgF1e75/26XgfOCo9wjBP 8Ve26Q5dhXgJ+R/1Yx3agLns5t4YuasD9YDanIeDFAE0CMDs97qhYPOgykjeYa1f lswKggmEwP+66oqrR52cypc2LSMalND8rUuAXh1kaB80qh1se5B4VUKKlIw/hGnT z5u+1oQPhiEW1Hx2uuh1IoI0awodxLov1l+a6T2h0z0ewmYSDruhs655ft+eIvpl 4dw8rGXLSRPH6/bko7yAXUEixaEM84tTo4N569h6W8GP/losuGV7ZpQ2RQ== -----END CERTIFICATE-----Generated at Sun May 11 01:22:11 2025 by rpki-client