$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627b7923-e2c4-4ec0-a157-a61e484f88f7.roa File: 627b7923-e2c4-4ec0-a157-a61e484f88f7.roa (raw, json) Hash identifier: fSAuYEcfiVe+DlLQMwWJ7Vn5ZJajYUiQvKgyggZiBBc= Subject key identifier: 3A:94:86:0E:88:9D:00:A0:7A:29:02:66:57:AE:E1:0D:8A:42:74:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E0C26D4B6C421E5A3CC1193CA5BF6F49D38C908 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627b7923-e2c4-4ec0-a157-a61e484f88f7.roa Signing time: Mon 28 Apr 2025 15:10:28 +0000 ROA not before: Mon 28 Apr 2025 15:10:28 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 182.24.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0c:26:d4:b6:c4:21:e5:a3:cc:11:93:ca:5b:f6:f4:9d:38:c9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:10:28 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=9f3fb219bcf00fa8e4f367dcbccd9921fb1f2722577515dad45ee8bc4c944110, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:40:4f:6f:3b:7c:dd:79:81:10:80:59:37: 6f:da:3f:5a:88:01:de:3a:0a:2f:17:72:6f:f3:ac: 2e:01:b4:90:ca:9e:a1:33:75:72:df:a0:08:40:c4: 2a:74:73:90:aa:e4:19:ad:43:97:40:a4:52:44:ec: 74:bb:59:16:4a:7d:b0:22:0a:7e:e7:75:99:fb:88: e3:85:a6:04:97:ab:55:f5:71:93:85:b5:b2:94:c8: d2:e3:89:6e:13:a5:e0:90:67:ab:39:bf:ca:54:b9: 7a:72:2e:bc:e8:4d:47:f6:16:d4:5e:43:81:a6:5e: 45:c0:c6:16:fa:05:04:5d:dd:35:aa:02:13:c9:bf: 90:cb:8b:79:24:6c:5f:8f:a8:96:5e:8c:0d:4b:00: a7:e8:2b:7e:8f:c0:54:73:63:6f:df:e3:38:92:1f: 1b:b7:cb:33:34:34:5f:a3:3d:1f:c1:7a:5f:fe:74: fb:c4:48:64:bb:66:16:de:9d:5d:43:d1:82:ca:2f: f4:ff:13:63:5c:8c:99:d1:d0:68:ca:7d:d1:57:fd: 41:27:58:36:55:e7:47:bf:a0:d8:49:e2:a7:ee:59: b8:86:4f:0e:be:9b:db:cb:f3:f9:7f:f1:5b:3c:ea: 1b:5e:36:56:d9:66:3d:4c:63:7b:be:53:2a:b7:42: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:86:0E:88:9D:00:A0:7A:29:02:66:57:AE:E1:0D:8A:42:74:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627b7923-e2c4-4ec0-a157-a61e484f88f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.24.0.0/14 Signature Algorithm: sha256WithRSAEncryption 1a:8b:49:0e:7b:77:93:11:96:9d:f2:b6:2e:5e:c2:de:d5:fa: f7:d2:10:df:c2:ab:0a:26:5c:fb:8d:29:dc:6e:81:22:0a:dc: b4:e8:5d:74:f5:81:c6:39:0f:c6:c1:45:41:0f:d0:ec:f5:b4: e7:59:4b:79:a4:61:a1:0a:6c:2f:69:c2:a4:ee:31:df:1b:1e: ec:21:c5:fe:ba:46:d1:f9:a4:42:e6:0d:db:d7:6d:e4:65:6f: f4:60:67:b6:5a:fa:42:2c:a4:21:2c:41:2f:65:da:0c:e9:7c: d3:b9:ea:aa:fc:bf:cf:c4:4c:1c:d2:a1:7f:90:44:e4:4d:4f: 19:d9:e5:50:fa:c9:a5:cf:09:fe:84:5b:22:93:b7:73:30:d6: c0:0c:22:fa:07:92:8c:df:8c:a4:86:0b:69:f6:d3:5f:63:0e: 08:a8:5e:81:ba:15:6c:ff:9c:99:4b:e6:36:ff:e5:a5:87:8f: b5:70:d4:20:60:73:3f:3a:cc:c5:8f:c8:22:19:b2:22:d3:d3: 4a:c8:32:e2:a2:c6:22:9b:66:2a:e1:d4:06:81:50:7a:aa:54: db:0f:a3:71:09:e1:98:31:d3:5e:ed:b1:ba:02:d2:9c:2e:8c: 4a:d6:bb:50:9f:fc:01:d5:73:84:f2:10:2e:90:62:1f:ff:6d: f7:25:ab:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULgwm1LbEIeWjzBGTylv29J04yQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMDI4WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjNmYjIxOWJjZjAwZmE4ZTRmMzY3ZGNiY2NkOTkyMWZi MWYyNzIyNTc3NTE1ZGFkNDVlZThiYzRjOTQ0MTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC77EBPbzt83XmBEIBZN2/aP1qIAd46Ci8Xcm/zrC4BtJDK nqEzdXLfoAhAxCp0c5Cq5BmtQ5dApFJE7HS7WRZKfbAiCn7ndZn7iOOFpgSXq1X1 cZOFtbKUyNLjiW4TpeCQZ6s5v8pUuXpyLrzoTUf2FtReQ4GmXkXAxhb6BQRd3TWq AhPJv5DLi3kkbF+PqJZejA1LAKfoK36PwFRzY2/f4ziSHxu3yzM0NF+jPR/Bel/+ dPvESGS7ZhbenV1D0YLKL/T/E2NcjJnR0GjKfdFX/UEnWDZV50e/oNhJ4qfuWbiG Tw6+m9vL8/l/8Vs86hteNlbZZj1MY3u+Uyq3QnmzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOpSGDoidAKB6KQJmV67hDYpCdHswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyN2I3OTIzLWUyYzQtNGVjMC1hMTU3LWE2MWU0ODRmODhmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwK2GDANBgkqhkiG9w0BAQsFAAOCAQEAGotJDnt3kxGWnfK2Ll7C3tX699IQ 38KrCiZc+40p3G6BIgrctOhddPWBxjkPxsFFQQ/Q7PW051lLeaRhoQpsL2nCpO4x 3xse7CHF/rpG0fmkQuYN29dt5GVv9GBntlr6QiykISxBL2XaDOl807nqqvy/z8RM HNKhf5BE5E1PGdnlUPrJpc8J/oRbIpO3czDWwAwi+geSjN+MpIYLafbTX2MOCKhe gboVbP+cmUvmNv/lpYePtXDUIGBzPzrMxY/IIhmyItPTSsgy4qLGIptmKuHUBoFQ eqpU2w+jcQnhmDHTXu2xugLSnC6MSta7UJ/8AdVzhPIQLpBiH/9t9yWrSg== -----END CERTIFICATE-----Generated at Sat May 10 07:16:19 2025 by rpki-client