$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa File: 7511727c-3470-481c-a527-6610004e3acd.roa (raw, json) Hash identifier: lSTx94NGs06sxNH9ErJx6aHyCIW1k9JZXBV1ZOGPZQc= Subject key identifier: 2B:06:EB:FA:52:5D:87:C6:2A:D7:D7:D3:99:EF:8C:60:0C:7C:7E:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 076E48AF53C9DC4A533ADD2117CA64555F341A39 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa Signing time: Mon 05 May 2025 15:31:08 +0000 ROA not before: Mon 05 May 2025 15:31:08 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6e:48:af:53:c9:dc:4a:53:3a:dd:21:17:ca:64:55:5f:34:1a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:31:08 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=efd4412949f5168f0c26e8c8ab0408d5598bb91af982c8a8457a4ddb03fe50bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:a2:86:65:35:60:b0:c3:57:18:d2:db:06: e7:7d:9a:65:e8:e7:c9:50:01:88:e3:7d:de:45:45: bd:64:ad:43:4e:23:6f:d9:3e:9c:18:11:f2:4f:4d: 5e:54:3f:12:ee:a3:83:ea:d5:09:f2:f9:cb:5b:dd: 62:e9:db:0c:8f:ad:c1:f3:15:9b:61:2f:c8:d2:45: be:f3:00:51:fe:7c:6e:23:d2:df:83:50:78:06:24: d9:e3:49:4d:04:4f:24:8a:7f:99:02:5f:01:04:40: 81:49:4f:03:c0:32:2f:e3:4d:bf:c5:72:79:a4:5f: fa:7f:89:be:42:e0:e7:69:b7:9c:db:1a:41:a4:f8: 00:5b:ac:92:e1:20:6c:62:62:52:32:99:df:ae:e5: 14:ac:a7:4f:2d:cb:92:7f:08:d5:ee:78:f3:a7:3e: b1:86:d1:88:fd:e8:f1:2a:0f:95:cb:7c:66:b7:80: a4:0b:fb:ae:16:8b:90:39:7f:4a:84:56:63:36:9e: 75:96:a6:92:cc:7f:d4:b4:a6:9a:c0:ac:d1:37:f7: dc:06:07:63:ba:01:fe:49:aa:9c:2a:56:7e:47:d0: 56:60:20:e5:d9:d5:17:3f:11:fc:b7:60:f8:32:63: 02:d5:b9:df:4e:ad:dd:de:aa:93:18:5c:c7:06:1c: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:EB:FA:52:5D:87:C6:2A:D7:D7:D3:99:EF:8C:60:0C:7C:7E:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.124.0/24 Signature Algorithm: sha256WithRSAEncryption cd:96:a1:bb:f3:d1:eb:f9:c0:23:37:32:d2:56:47:52:a5:8b: 05:29:a5:b5:49:d9:71:3c:da:33:a7:b8:d5:54:04:18:4e:26: e2:fb:50:02:b9:a7:de:33:32:ba:ee:4e:e1:95:fd:eb:0c:72: 85:a1:e0:ce:64:1b:20:19:ab:33:34:f9:34:c4:e0:47:d0:bb: 05:21:8e:67:29:83:d2:87:dc:d6:5a:13:d8:94:d6:84:8f:f2: b5:a7:31:b5:82:bd:56:31:c0:ad:7c:70:de:ec:ef:4e:10:d0: 0a:53:ad:12:a3:b9:a2:cf:56:44:52:26:4a:d3:e3:87:f9:d7: 7e:c7:ee:e2:12:45:59:a2:20:33:e1:cf:4c:ec:a5:a1:89:f4: aa:7d:cc:41:09:ae:db:6b:2e:44:81:68:b1:b1:eb:3b:e7:e4: 4b:87:36:27:bc:66:3d:c9:b3:29:65:f4:93:ca:e7:90:ee:c5: f3:54:6b:ca:0d:45:e3:46:1e:cd:f8:26:e2:9c:50:1e:f3:9a: 46:a8:7d:16:9a:f2:b9:af:a6:5e:7f:f8:ae:31:16:82:3b:91: 52:73:77:15:96:43:d6:6c:1c:8b:06:7c:f3:96:e1:40:4b:ef: 8d:12:b9:a3:f2:ca:dc:ae:8a:b9:fe:d8:88:c3:48:d2:d6:b2: 02:04:f2:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB25Ir1PJ3EpTOt0hF8pkVV80GjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUzMTA4WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmQ0NDEyOTQ5ZjUxNjhmMGMyNmU4YzhhYjA0MDhkNTU5 OGJiOTFhZjk4MmM4YTg0NTdhNGRkYjAzZmU1MGJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgSKKGZTVgsMNXGNLbBud9mmXo58lQAYjjfd5FRb1krUNO I2/ZPpwYEfJPTV5UPxLuo4Pq1Qny+ctb3WLp2wyPrcHzFZthL8jSRb7zAFH+fG4j 0t+DUHgGJNnjSU0ETySKf5kCXwEEQIFJTwPAMi/jTb/FcnmkX/p/ib5C4Odpt5zb GkGk+ABbrJLhIGxiYlIymd+u5RSsp08ty5J/CNXuePOnPrGG0Yj96PEqD5XLfGa3 gKQL+64Wi5A5f0qEVmM2nnWWppLMf9S0pprArNE399wGB2O6Af5JqpwqVn5H0FZg IOXZ1Rc/Efy3YPgyYwLVud9Ord3eqpMYXMcGHHtRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKwbr+lJdh8Yq19fTme+MYAx8fnAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MTE3MjdjLTM0NzAtNDgxYy1hNTI3LTY2MTAwMDRlM2FjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HwwDQYJKoZIhvcNAQELBQADggEBAM2Wobvz0ev5wCM3MtJWR1KliwUp pbVJ2XE82jOnuNVUBBhOJuL7UAK5p94zMrruTuGV/esMcoWh4M5kGyAZqzM0+TTE 4EfQuwUhjmcpg9KH3NZaE9iU1oSP8rWnMbWCvVYxwK18cN7s704Q0ApTrRKjuaLP VkRSJkrT44f5137H7uISRVmiIDPhz0zspaGJ9Kp9zEEJrttrLkSBaLGx6zvn5EuH Nie8Zj3Jsyll9JPK55DuxfNUa8oNReNGHs34JuKcUB7zmkaofRaa8rmvpl5/+K4x FoI7kVJzdxWWQ9ZsHIsGfPOW4UBL740SuaPyytyuirn+2IjDSNLWsgIE8us= -----END CERTIFICATE-----Generated at Sun May 11 15:24:29 2025 by rpki-client