$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa File: 6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa (raw, json) Hash identifier: papo+kIJJkyoa3xU2f8aXAsp0T9TaOC50kBhDJf4tnI= Subject key identifier: E8:E8:89:8B:A2:60:85:A3:76:44:94:AD:F6:B9:5F:F9:A0:87:70:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F27045C5C984FEC85BBD833B7AE3CAB09973A02 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa Signing time: Fri 02 May 2025 00:00:51 +0000 ROA not before: Fri 02 May 2025 00:00:51 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:27:04:5c:5c:98:4f:ec:85:bb:d8:33:b7:ae:3c:ab:09:97:3a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:00:51 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=71e18b85f1d09df4ad25fb7b266e2b600f10e9f8a08c42488855fb71580d11bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:c4:0e:55:6b:84:d0:71:ea:ce:68:4e:f2: 20:82:57:16:6d:0a:01:24:0c:62:6e:b2:e2:2f:e3: 8d:9b:ec:af:20:60:9d:22:b6:6f:d8:05:6a:e2:40: c8:20:eb:df:7c:66:2d:da:49:a6:1f:e6:9b:ff:f6: ee:d9:2a:d4:4c:38:3c:1b:c1:b8:e7:2a:64:74:7a: de:89:5b:0b:5b:d7:b4:17:e9:4e:a0:f0:24:f2:2b: f6:6f:2a:4b:06:f7:58:8d:41:ee:d2:06:73:65:d4: 36:1c:53:37:34:cf:e1:f3:0a:30:64:5d:50:df:1a: 94:df:bd:bf:26:3d:49:8f:b3:f7:64:d9:2a:cf:64: da:0c:b6:86:f8:29:41:d2:c5:0f:8f:5e:36:d9:52: 8a:ba:ab:8f:c0:0a:35:65:20:e9:92:b4:56:8a:31: 08:92:1e:7a:ab:5b:f5:bf:f1:3f:ce:00:a9:4f:da: e1:d0:26:c8:33:77:d0:e8:22:e4:6f:6e:ce:30:59: 36:b8:0f:4d:e8:71:c4:f1:a9:32:b8:1d:07:3f:96: 99:89:61:1a:76:34:7f:bf:ad:69:20:10:fe:97:5d: 1c:6a:fa:70:7d:49:aa:36:c3:e9:1c:34:f1:34:fb: 96:a1:36:56:68:31:41:cd:7b:6f:b3:8c:31:fb:91: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:89:8B:A2:60:85:A3:76:44:94:AD:F6:B9:5F:F9:A0:87:70:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 78:95:76:9c:f2:eb:b2:ea:5a:f5:6d:a0:6f:ac:a5:f8:5a:65: 58:3c:be:3c:ea:4b:23:2a:2b:06:77:ed:68:31:d1:79:04:63: 59:6a:d7:0e:6c:9e:a7:90:d4:98:d9:6d:2f:22:47:0c:ee:8d: f3:51:21:92:a9:05:9a:3e:c9:e1:4f:95:8d:47:ae:1f:b3:12: 1a:a9:b6:a9:10:cb:66:16:ed:53:b6:c2:fd:82:4e:92:6f:b9: ce:47:3d:de:53:7f:19:5e:72:05:78:85:e8:59:56:b8:ed:7e: 42:f0:21:36:94:e0:d4:7c:18:57:12:1a:8e:cc:31:62:fe:ed: f5:a8:8f:6c:71:40:19:f5:2c:bb:c9:11:59:37:96:bd:65:dd: a5:9a:db:0f:b5:13:97:d3:ec:74:3f:22:5d:ab:75:77:bb:d0: bf:8a:f1:3c:d6:7f:08:77:66:c4:51:b0:3d:00:9e:02:b0:5a: 5c:8d:85:3d:9e:d9:5c:03:03:98:bd:14:b9:97:ba:a4:97:02: 2d:d3:53:56:d2:e5:6a:11:6c:a6:1d:12:a2:a2:4a:46:4e:47: 0c:4b:84:65:53:8a:8b:cd:c0:49:5d:2a:44:e2:a8:62:f6:b6: ba:4e:44:17:27:d8:b2:2e:8f:18:17:62:50:77:3e:f6:c1:31: a4:ed:89:58 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULycEXFyYT+yFu9gzt648qwmXOgIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMDUxWhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWUxOGI4NWYxZDA5ZGY0YWQyNWZiN2IyNjZlMmI2MDBm MTBlOWY4YTA4YzQyNDg4ODU1ZmI3MTU4MGQxMWJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP5MQOVWuE0HHqzmhO8iCCVxZtCgEkDGJusuIv442b7K8g YJ0itm/YBWriQMgg6998Zi3aSaYf5pv/9u7ZKtRMODwbwbjnKmR0et6JWwtb17QX 6U6g8CTyK/ZvKksG91iNQe7SBnNl1DYcUzc0z+HzCjBkXVDfGpTfvb8mPUmPs/dk 2SrPZNoMtob4KUHSxQ+PXjbZUoq6q4/ACjVlIOmStFaKMQiSHnqrW/W/8T/OAKlP 2uHQJsgzd9DoIuRvbs4wWTa4D03occTxqTK4HQc/lpmJYRp2NH+/rWkgEP6XXRxq +nB9Sao2w+kcNPE0+5ahNlZoMUHNe2+zjDH7kXEzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6OiJi6JghaN2RJSt9rlf+aCHcGswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiYTAyMmU3LTFjYjYtNGZlOC1iNTYxLTZlNzdhYmI3M2RkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEAeJV2nPLrsupa9W2gb6yl+FplWDy+ POpLIyorBnftaDHReQRjWWrXDmyep5DUmNltLyJHDO6N81EhkqkFmj7J4U+VjUeu H7MSGqm2qRDLZhbtU7bC/YJOkm+5zkc93lN/GV5yBXiF6FlWuO1+QvAhNpTg1HwY VxIajswxYv7t9aiPbHFAGfUsu8kRWTeWvWXdpZrbD7UTl9PsdD8iXat1d7vQv4rx PNZ/CHdmxFGwPQCeArBaXI2FPZ7ZXAMDmL0UuZe6pJcCLdNTVtLlahFsph0SoqJK Rk5HDEuEZVOKi83ASV0qROKoYva2uk5EFyfYsi6PGBdiUHc+9sExpO2JWA== -----END CERTIFICATE-----Generated at Wed May 7 11:13:09 2025 by rpki-client