$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/819627c3-8ccc-4425-9f4f-1398f87c84d3.roa File: 819627c3-8ccc-4425-9f4f-1398f87c84d3.roa (raw, json) Hash identifier: CT0FhzKXYlGOWZ3QMeGM8fPCJ5io5jyYDvBZ9tm4YBQ= Subject key identifier: 40:70:0C:0A:90:45:52:4B:5D:1A:63:2D:51:A1:49:8B:ED:61:3D:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DFE7B2BAF01A9A2A6FF6DD5AD1FD2C389977514 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/819627c3-8ccc-4425-9f4f-1398f87c84d3.roa Signing time: Thu 08 May 2025 17:21:59 +0000 ROA not before: Thu 08 May 2025 17:21:59 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fe:7b:2b:af:01:a9:a2:a6:ff:6d:d5:ad:1f:d2:c3:89:97:75:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 17:21:59 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=05274d99a589bc568cb57e4f853450e87cd7029a1976af09d1ea7f57896f806a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:de:87:dc:34:6d:52:20:6a:f6:23:9e:04: 09:1a:82:a5:a9:3e:13:e4:1e:39:2b:63:7d:37:c5: 26:c2:10:aa:6a:c4:29:d7:51:a7:ab:e0:4c:55:c9: a6:ae:30:d8:9f:2d:96:fd:0a:a1:98:6a:07:07:0d: 17:ea:7f:34:81:b9:71:a6:3e:12:a1:1c:4c:1e:fb: 46:80:f1:ef:11:db:6c:c9:a3:15:c6:f5:a6:10:56: 9d:e5:79:90:d4:ee:00:bd:cd:c2:cb:42:63:d4:45: d4:1b:7d:66:31:8f:75:30:65:71:17:02:ed:a3:dc: c8:90:e6:d8:e4:77:92:29:71:61:8c:07:32:6b:74: 8f:33:41:12:9e:81:cd:d1:79:95:76:6e:a5:67:59: ad:f7:46:05:00:c0:f8:42:1f:d7:7d:d0:9f:0c:06: b8:af:1a:e4:12:38:d4:e3:27:20:53:09:31:38:44: 6f:17:86:dc:46:85:43:95:6e:24:e9:ee:59:79:7d: fb:d0:6b:af:de:3d:9b:64:58:76:dc:00:b2:e9:6d: 53:34:c4:41:27:af:f1:d8:c7:9c:d2:26:58:ea:d3: 38:fe:86:cf:d3:ea:6c:c0:cb:58:ca:42:b5:43:77: c3:57:4a:2f:a4:f1:5f:d2:1d:56:05:ff:15:f4:69: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:0C:0A:90:45:52:4B:5D:1A:63:2D:51:A1:49:8B:ED:61:3D:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/819627c3-8ccc-4425-9f4f-1398f87c84d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.128.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:dd:5c:bb:da:0b:2a:a7:15:e8:dd:85:bf:d7:62:13:8c:63: 07:49:b3:01:13:07:83:d6:0b:35:e4:e6:a5:53:6c:57:d1:10: fd:82:91:02:4f:bc:9a:ab:78:13:f9:a6:d6:46:e6:9b:a9:af: 28:9c:c7:2d:e2:45:e6:fc:dd:d5:51:bb:16:5f:27:6b:57:f3: c0:9b:b0:69:9b:80:a1:d8:92:9b:96:25:02:d2:c4:e9:43:29: e7:96:68:50:f7:44:83:e5:6b:54:50:1c:3c:19:b3:10:b4:dc: a9:95:d7:27:0c:7e:c2:23:c1:e3:98:14:48:27:b5:fd:ec:3f: 33:2b:a3:c1:92:fc:d4:f2:98:ed:5b:88:aa:80:3e:26:41:0c: 7f:d2:0c:d0:e1:80:a5:46:04:c8:d2:ea:f9:1b:6b:e6:94:a0: 69:36:41:2d:d9:20:b8:bc:45:29:4d:df:c1:bf:42:e4:31:22: 55:3a:79:36:3a:80:91:7a:ed:1e:b0:1d:1c:e4:8a:23:d5:dc: 6e:c0:0b:4d:95:1c:fd:18:dc:39:0d:d9:3d:32:82:1a:ae:b3: b8:94:95:df:ca:7d:3d:bd:ea:18:62:0e:64:a9:d5:63:89:24: 90:c6:2f:26:48:b9:a3:e7:04:8b:a8:ea:8f:2b:f0:56:53:f9: e7:64:fc:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXf57K68BqaKm/23VrR/Sw4mXdRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTcyMTU5WhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTI3NGQ5OWE1ODliYzU2OGNiNTdlNGY4NTM0NTBlODdj ZDcwMjlhMTk3NmFmMDlkMWVhN2Y1Nzg5NmY4MDZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Y96H3DRtUiBq9iOeBAkagqWpPhPkHjkrY303xSbCEKpq xCnXUaer4ExVyaauMNifLZb9CqGYagcHDRfqfzSBuXGmPhKhHEwe+0aA8e8R22zJ oxXG9aYQVp3leZDU7gC9zcLLQmPURdQbfWYxj3UwZXEXAu2j3MiQ5tjkd5IpcWGM BzJrdI8zQRKegc3ReZV2bqVnWa33RgUAwPhCH9d90J8MBrivGuQSONTjJyBTCTE4 RG8XhtxGhUOVbiTp7ll5ffvQa6/ePZtkWHbcALLpbVM0xEEnr/HYx5zSJljq0zj+ hs/T6mzAy1jKQrVDd8NXSi+k8V/SHVYF/xX0aT11AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQHAMCpBFUktdGmMtUaFJi+1hPRkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxOTYyN2MzLThjY2MtNDQyNS05ZjRmLTEzOThmODdjODRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgIAwDQYJKoZIhvcNAQELBQADggEBADrdXLvaCyqnFejdhb/XYhOMYwdJ swETB4PWCzXk5qVTbFfREP2CkQJPvJqreBP5ptZG5pupryicxy3iReb83dVRuxZf J2tX88CbsGmbgKHYkpuWJQLSxOlDKeeWaFD3RIPla1RQHDwZsxC03KmV1ycMfsIj weOYFEgntf3sPzMro8GS/NTymO1biKqAPiZBDH/SDNDhgKVGBMjS6vkba+aUoGk2 QS3ZILi8RSlN38G/QuQxIlU6eTY6gJF67R6wHRzkiiPV3G7AC02VHP0Y3DkN2T0y ghqus7iUld/KfT296hhiDmSp1WOJJJDGLyZIuaPnBIuo6o8r8FZT+edk/K8= -----END CERTIFICATE-----Generated at Sun May 11 18:09:51 2025 by rpki-client