$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fb406ba-3e23-4b9f-896a-a4e706f37126.roa File: 6fb406ba-3e23-4b9f-896a-a4e706f37126.roa (raw, json) Hash identifier: 2Aj72JtDEZxZb27eBXnYaCw98mWqnrALD4y559HKkLg= Subject key identifier: 5F:D6:DD:7A:44:33:6F:64:69:F0:C8:30:49:A2:05:7E:87:2C:11:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24E23B9F2281BEB52735FFFA0FBF61245D0EC532 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fb406ba-3e23-4b9f-896a-a4e706f37126.roa Signing time: Wed 23 Apr 2025 00:31:29 +0000 ROA not before: Wed 23 Apr 2025 00:31:29 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e2:3b:9f:22:81:be:b5:27:35:ff:fa:0f:bf:61:24:5d:0e:c5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:31:29 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=84c30db3ea7e2211d94550986100600afe0da2051decbab90c7173ba6567d780, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:ff:6b:53:d8:ca:35:76:75:d6:44:78:c8: 46:a3:17:37:ed:02:3a:1f:02:39:34:60:1e:d8:02: c1:7c:82:67:50:29:b5:3b:18:16:5e:e5:09:fa:5e: 49:6b:29:03:cc:5e:15:c8:ca:18:1c:5a:72:e2:99: d3:64:51:b0:de:ae:94:f3:f3:a7:e7:9d:07:90:c5: 70:d3:3e:d6:e3:58:d2:3b:79:67:11:9b:1a:3e:83: 47:38:a1:bf:df:52:ee:d8:99:a6:35:15:47:fb:d9: f6:14:91:20:ff:fd:19:f6:b1:89:b2:3d:be:3c:9b: a5:f0:62:5e:16:7b:7e:e1:54:30:dc:97:4f:d5:cf: 4f:c2:c8:f8:98:5c:e2:29:14:ff:72:ab:86:7b:bd: 6c:e3:e5:e7:0e:cd:dc:a3:58:e5:87:c0:a7:3c:68: 17:30:ae:71:0c:b7:06:9e:0e:31:71:1f:e1:99:56: 6a:16:c9:80:db:cc:69:b4:c2:d5:b2:e4:a1:11:6d: 63:99:a4:72:e9:0d:4f:9f:03:29:13:2f:59:3d:54: f4:39:ac:dc:51:10:98:cf:b7:63:bd:40:8a:7d:1e: 48:00:1e:68:39:d2:d5:d8:12:74:61:37:62:99:1a: 12:ac:12:f3:6d:a6:08:cf:fd:a8:07:70:14:f6:64: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D6:DD:7A:44:33:6F:64:69:F0:C8:30:49:A2:05:7E:87:2C:11:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fb406ba-3e23-4b9f-896a-a4e706f37126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.32.0/19 Signature Algorithm: sha256WithRSAEncryption d0:d2:2a:f4:0c:e4:ae:51:b9:61:ca:49:23:05:9a:7d:53:ed: db:8e:1a:d3:5f:67:c5:62:ee:da:ce:08:ea:d5:44:3b:c1:b6: 64:d7:d7:2e:a2:1e:49:cd:bf:53:14:bf:0a:46:8e:e8:db:a5: 7c:ee:ed:f2:26:06:f1:75:6e:59:2a:f9:77:cb:cd:86:9d:0d: a5:01:44:7f:e1:f7:56:45:b8:c7:f7:4f:9d:e7:4e:fe:75:12: 74:93:79:07:f1:61:45:18:51:9b:9b:f6:f3:df:50:de:67:23: 31:93:c2:19:32:0a:8f:af:86:9e:3a:8f:bd:48:61:5d:eb:87: 15:05:9f:fb:ee:d8:02:fc:94:ec:99:3b:60:6b:2e:d4:87:dc: 9e:b8:90:31:a1:36:4d:68:8a:55:ea:be:35:63:d7:cc:40:98: 4b:4b:17:4a:c6:f7:9f:ee:4c:23:f0:f3:88:52:4b:b7:74:67: b8:cb:56:50:40:7c:4e:43:85:dc:32:b0:a4:15:76:a2:8c:0f: fe:a8:20:8c:31:b6:70:72:81:4a:a6:43:17:e2:fd:82:ab:18: 43:8b:12:41:39:84:13:55:36:c2:f4:14:d9:2d:6c:5f:1c:55: b6:d7:3b:da:ee:9d:16:db:a3:91:6f:e3:88:c7:7a:e3:4c:9a: 8a:33:bf:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJOI7nyKBvrUnNf/6D79hJF0OxTIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDAzMTI5WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGMzMGRiM2VhN2UyMjExZDk0NTUwOTg2MTAwNjAwYWZl MGRhMjA1MWRlY2JhYjkwYzcxNzNiYTY1NjdkNzgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAdf9rU9jKNXZ11kR4yEajFzftAjofAjk0YB7YAsF8gmdQ KbU7GBZe5Qn6XklrKQPMXhXIyhgcWnLimdNkUbDerpTz86fnnQeQxXDTPtbjWNI7 eWcRmxo+g0c4ob/fUu7YmaY1FUf72fYUkSD//Rn2sYmyPb48m6XwYl4We37hVDDc l0/Vz0/CyPiYXOIpFP9yq4Z7vWzj5ecOzdyjWOWHwKc8aBcwrnEMtwaeDjFxH+GZ VmoWyYDbzGm0wtWy5KERbWOZpHLpDU+fAykTL1k9VPQ5rNxREJjPt2O9QIp9HkgA Hmg50tXYEnRhN2KZGhKsEvNtpgjP/agHcBT2ZO1jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX9bdekQzb2Rp8MgwSaIFfocsEY4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZmYjQwNmJhLTNlMjMtNGI5Zi04OTZhLWE0ZTcwNmYzNzEyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVsiCAwDQYJKoZIhvcNAQELBQADggEBANDSKvQM5K5RuWHKSSMFmn1T7duO GtNfZ8Vi7trOCOrVRDvBtmTX1y6iHknNv1MUvwpGjujbpXzu7fImBvF1blkq+XfL zYadDaUBRH/h91ZFuMf3T53nTv51EnSTeQfxYUUYUZub9vPfUN5nIzGTwhkyCo+v hp46j71IYV3rhxUFn/vu2AL8lOyZO2BrLtSH3J64kDGhNk1oilXqvjVj18xAmEtL F0rG95/uTCPw84hSS7d0Z7jLVlBAfE5DhdwysKQVdqKMD/6oIIwxtnBygUqmQxfi /YKrGEOLEkE5hBNVNsL0FNktbF8cVbbXO9runRbbo5Fv44jHeuNMmoozvyk= -----END CERTIFICATE-----Generated at Fri May 9 02:56:51 2025 by rpki-client