$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa File: 7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa (raw, json) Hash identifier: IvGculF6kziVmUC06EY4zMgUZ5DDKrKPfKoAvC8rU14= Subject key identifier: E0:7E:62:B9:5C:B4:B6:B6:22:A1:72:AA:67:4E:5C:BC:14:CD:F6:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 599EF5A146B65402A6563B6D8D4A58D7575E41CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa Signing time: Mon 28 Apr 2025 15:11:56 +0000 ROA not before: Mon 28 Apr 2025 15:11:56 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9e:f5:a1:46:b6:54:02:a6:56:3b:6d:8d:4a:58:d7:57:5e:41:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:11:56 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=6d02ec8de24ec8b778392930d34056a735763c5d6152d236eea3c2815c7ee1dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c5:76:f5:df:ec:40:5d:f4:5c:a8:96:06:ed: cf:39:59:26:2d:fa:bb:6e:e4:63:8c:9f:4f:1a:36: e6:7c:64:67:b5:35:b6:dd:e4:83:cc:4d:11:25:95: 8a:15:02:83:eb:e1:d3:f2:9f:57:76:30:ba:7c:b1: 65:5d:1a:b3:f8:a7:b5:35:c0:5b:c5:d2:0f:b6:1a: 2a:0b:1e:28:6a:d1:01:7f:b4:72:18:0e:ba:cd:08: 35:35:fa:89:89:bf:2c:8d:ce:14:1b:fd:fa:77:59: 38:fd:f4:b4:bb:2e:60:d4:26:61:cf:a2:f7:7c:49: 9f:cf:9f:c2:34:4f:f6:da:fb:2c:14:36:c0:85:3a: a2:03:ff:60:84:f4:4a:86:8e:19:fe:a2:be:a9:0f: 98:06:7e:d7:88:78:04:43:d7:ae:41:f3:31:5a:50: b7:56:72:50:c4:83:23:95:a5:42:1d:ee:3f:82:fe: 34:d7:97:fa:2b:aa:66:65:e7:38:12:ad:30:b9:3e: 39:07:56:99:17:85:e2:85:fe:df:9c:8b:d0:48:1f: 51:6b:c1:4c:3c:1b:d1:97:9f:c1:cc:c1:fa:6d:1e: f0:d7:66:6a:39:1d:2a:71:aa:97:a0:9f:b6:09:dd: 58:25:b4:83:26:70:60:51:b9:9f:91:7b:93:30:87: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:62:B9:5C:B4:B6:B6:22:A1:72:AA:67:4E:5C:BC:14:CD:F6:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d13bb70-aac8-4b1f-a3b4-b8020682a4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:d9:e9:ac:90:aa:5d:e8:21:34:92:df:d5:69:ae:8f:2e:6f: a2:ad:8e:c7:14:e4:8d:87:8f:25:a2:9c:81:03:e5:1a:85:17: ec:0b:92:24:a6:5e:dd:f5:89:38:66:ad:4b:60:61:f1:79:21: ca:b3:57:5d:1a:5b:8e:9c:52:7b:c7:8d:c0:df:ea:4f:e5:8a: 65:9c:0c:90:a9:1d:cf:73:6f:65:92:33:6c:a8:9e:0b:ab:cd: 1c:27:31:04:45:18:f0:cf:90:d9:d1:00:a8:5a:56:89:61:dd: d0:3a:eb:a9:43:87:84:d2:53:ce:cb:2b:94:89:e3:14:bb:54: a1:4b:cc:4f:36:ce:b3:d6:58:6b:23:7b:b8:c7:fa:52:2c:8f: 36:91:9f:b5:4c:b2:b0:9e:70:79:9d:e1:b7:9a:cd:c0:a5:40: ec:47:46:25:af:21:09:21:a9:91:ea:c5:c4:d7:ef:76:fd:e4: db:e7:0f:af:99:df:5c:f1:ec:50:6a:3f:b8:c9:c0:fb:0e:d4: 30:b2:15:b8:a1:bf:91:05:d5:78:2d:05:57:25:d7:e7:f3:42: 0f:c8:0c:81:31:15:72:1e:57:6c:a1:01:8c:57:d6:2b:bc:aa: 53:da:5f:41:89:27:7d:6d:bf:e9:42:9e:6b:92:4c:68:bd:06: 06:9b:92:05 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWZ71oUa2VAKmVjttjUpY11deQcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMTU2WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDAyZWM4ZGUyNGVjOGI3NzgzOTI5MzBkMzQwNTZhNzM1 NzYzYzVkNjE1MmQyMzZlZWEzYzI4MTVjN2VlMWRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXxXb13+xAXfRcqJYG7c85WSYt+rtu5GOMn08aNuZ8ZGe1 Nbbd5IPMTREllYoVAoPr4dPyn1d2MLp8sWVdGrP4p7U1wFvF0g+2GioLHihq0QF/ tHIYDrrNCDU1+omJvyyNzhQb/fp3WTj99LS7LmDUJmHPovd8SZ/Pn8I0T/ba+ywU NsCFOqID/2CE9EqGjhn+or6pD5gGfteIeARD165B8zFaULdWclDEgyOVpUId7j+C /jTXl/orqmZl5zgSrTC5PjkHVpkXheKF/t+ci9BIH1FrwUw8G9GXn8HMwfptHvDX Zmo5HSpxqpegn7YJ3VgltIMmcGBRuZ+Re5Mwhwi7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4H5iuVy0trYioXKqZ05cvBTN9l0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMTNiYjcwLWFhYzgtNGIxZi1hM2I0LWI4MDIwNjgyYTRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgTANBgkqhkiG9w0BAQsFAAOCAQEAZdnprJCqXeghNJLf1Wmujy5voq2O xxTkjYePJaKcgQPlGoUX7AuSJKZe3fWJOGatS2Bh8XkhyrNXXRpbjpxSe8eNwN/q T+WKZZwMkKkdz3NvZZIzbKieC6vNHCcxBEUY8M+Q2dEAqFpWiWHd0DrrqUOHhNJT zssrlInjFLtUoUvMTzbOs9ZYayN7uMf6UiyPNpGftUyysJ5weZ3ht5rNwKVA7EdG Ja8hCSGpkerFxNfvdv3k2+cPr5nfXPHsUGo/uMnA+w7UMLIVuKG/kQXVeC0FVyXX 5/NCD8gMgTEVch5XbKEBjFfWK7yqU9pfQYknfW2/6UKea5JMaL0GBpuSBQ== -----END CERTIFICATE-----Generated at Mon May 5 05:03:19 2025 by rpki-client