$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa File: 7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa (raw, json) Hash identifier: Po0vxrQawun9g2B2jxftG3RtmRGTl1YYBlo1NFa/pHA= Subject key identifier: A3:2E:30:76:15:56:19:9C:0C:15:66:B0:42:7B:96:24:D2:41:2E:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C6E97CF172A92924589FEC1830BCD348E50E1C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa Signing time: Wed 23 Apr 2025 00:41:26 +0000 ROA not before: Wed 23 Apr 2025 00:41:26 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6e:97:cf:17:2a:92:92:45:89:fe:c1:83:0b:cd:34:8e:50:e1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:26 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=c1bd84ba5329f1103c569dbe99c0f32ba3250f672a6d61de09cfab255eb8e175, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:b3:41:63:55:f0:0d:47:69:f0:b3:f6:1b: 7a:85:79:74:18:da:ea:37:62:5f:d7:5d:ec:a2:f7: 19:fa:9c:75:23:5d:87:8c:89:7d:4f:18:02:2a:5f: b6:cb:c1:52:cc:fb:a7:30:df:91:c7:9f:98:6a:13: 49:79:9e:e2:0b:fd:a8:93:26:80:da:9c:38:50:a2: 66:de:16:39:dd:44:ad:28:03:04:db:8f:3d:af:e3: 2b:de:21:77:68:a2:a1:96:00:6c:83:60:4f:57:7d: 2f:8a:4f:fe:8c:7c:2b:5a:e6:ab:26:65:23:8e:13: e7:3f:83:ce:f6:d8:80:32:ce:2a:0c:c8:4e:8a:d4: b9:a1:b9:92:d8:ce:a0:08:76:23:66:bd:5b:b6:a7: d9:bf:a9:79:7b:d9:9f:30:96:24:51:8f:8e:5f:26: d6:6b:60:48:d3:f5:46:db:38:b7:88:8a:72:e7:be: cc:07:5b:2e:e9:32:bc:55:63:b7:2e:08:f9:e1:b9: 06:fc:91:92:e4:b7:84:2e:f7:b4:40:26:87:1a:8b: 7a:2f:f9:ae:59:e6:c6:4e:d3:e6:ea:e9:7e:5c:9e: 12:59:af:45:6f:f7:b3:88:0f:25:22:28:19:fa:c4: dc:e3:da:d0:a7:d5:e5:ef:b8:8a:40:a5:16:6b:b0: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2E:30:76:15:56:19:9C:0C:15:66:B0:42:7B:96:24:D2:41:2E:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aa0904e-f2c8-4b9d-917f-872e24dc4d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.0.0/18 Signature Algorithm: sha256WithRSAEncryption ac:08:00:db:80:44:6b:f6:f1:73:92:b2:31:c5:bb:6b:01:fd: af:55:ec:d8:e6:07:4e:22:ce:45:b5:00:58:30:8d:f2:0e:fd: a1:e1:ea:1a:7a:2d:7c:b6:b4:ef:2d:cc:1e:d0:1c:7e:c6:ba: dc:7d:93:14:ad:08:25:12:56:56:a9:3e:c9:e0:10:92:d3:ee: 29:52:b3:13:b3:ba:aa:bc:12:4b:4c:1e:5b:05:23:6a:2c:95: db:43:7c:47:4a:70:c4:13:b4:60:b6:72:87:47:72:74:7d:96: 43:ec:98:f3:49:42:01:5a:40:74:1c:7e:6d:54:e1:ae:89:f6: fd:8f:f0:ab:56:a2:d8:73:9d:81:f4:ba:61:0b:7a:6a:4b:82: 40:9e:3a:10:f0:39:8a:9d:e0:76:b4:fc:e8:00:4c:a8:e7:65: 3f:c7:27:a4:23:37:0b:d5:d4:e1:25:9b:a2:7c:aa:23:c4:20: ae:8e:cb:82:04:75:7f:62:50:96:87:5f:02:4d:0d:dc:21:35: 42:69:4d:6e:ec:b0:f2:26:0d:c1:14:39:a9:57:c0:76:c0:d4: fd:65:6a:4a:7e:9f:56:ff:5f:29:de:07:b8:ec:c4:de:5a:2a: 9a:83:f7:45:ed:91:06:4f:bb:52:80:7e:3e:ac:0f:14:74:d8: 4d:de:64:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTG6XzxcqkpJFif7BgwvNNI5Q4cgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTI2WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWJkODRiYTUzMjlmMTEwM2M1NjlkYmU5OWMwZjMyYmEz MjUwZjY3MmE2ZDYxZGUwOWNmYWIyNTVlYjhlMTc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRzrNBY1XwDUdp8LP2G3qFeXQY2uo3Yl/XXeyi9xn6nHUj XYeMiX1PGAIqX7bLwVLM+6cw35HHn5hqE0l5nuIL/aiTJoDanDhQombeFjndRK0o AwTbjz2v4yveIXdooqGWAGyDYE9XfS+KT/6MfCta5qsmZSOOE+c/g8722IAyzioM yE6K1LmhuZLYzqAIdiNmvVu2p9m/qXl72Z8wliRRj45fJtZrYEjT9UbbOLeIinLn vswHWy7pMrxVY7cuCPnhuQb8kZLkt4Qu97RAJocai3ov+a5Z5sZO0+bq6X5cnhJZ r0Vv97OIDyUiKBn6xNzj2tCn1eXvuIpApRZrsGXDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoy4wdhVWGZwMFWawQnuWJNJBLscwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhYTA5MDRlLWYyYzgtNGI5ZC05MTdmLTg3MmUyNGRjNGQ5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOAAwDQYJKoZIhvcNAQELBQADggEBAKwIANuARGv28XOSsjHFu2sB/a9V 7NjmB04izkW1AFgwjfIO/aHh6hp6LXy2tO8tzB7QHH7Gutx9kxStCCUSVlapPsng EJLT7ilSsxOzuqq8EktMHlsFI2osldtDfEdKcMQTtGC2codHcnR9lkPsmPNJQgFa QHQcfm1U4a6J9v2P8KtWothznYH0umELempLgkCeOhDwOYqd4Ha0/OgATKjnZT/H J6QjNwvV1OElm6J8qiPEIK6Oy4IEdX9iUJaHXwJNDdwhNUJpTW7ssPImDcEUOalX wHbA1P1lakp+n1b/XyneB7jsxN5aKpqD90XtkQZPu1KAfj6sDxR02E3eZP8= -----END CERTIFICATE-----Generated at Tue May 6 23:41:30 2025 by rpki-client