$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa File: 8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa (raw, json) Hash identifier: FZHYDKgsff2gTeUk04edqhCbiJP1363tEn4JT2ML8/Y= Subject key identifier: F0:FB:F9:12:3F:25:D2:F7:BF:4A:10:E1:FA:8E:9D:0B:E6:C6:AD:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 548D60E6BB0D7ACF185450050E94D749E3407D42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa Signing time: Fri 02 May 2025 00:00:32 +0000 ROA not before: Fri 02 May 2025 00:00:32 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.128.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8d:60:e6:bb:0d:7a:cf:18:54:50:05:0e:94:d7:49:e3:40:7d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:00:32 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=30804e7ca8d0419aacb341a230c8ae092bdc66da4016f64bb5b904e7ecc41cb6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:2f:54:20:3b:d6:56:e7:00:f6:ec:2a:3b: a2:b8:aa:e1:cf:cf:cb:af:92:54:ae:90:aa:d7:1a: 19:3f:11:90:48:30:75:0a:b7:e7:99:b0:07:60:ec: cf:f1:24:ae:c8:54:fa:59:ce:12:fa:88:80:fb:9b: 15:ff:42:bc:6e:65:fc:f8:c7:b1:bd:8f:dc:69:d8: 18:34:8f:a4:f0:43:64:b1:7a:68:ec:fb:79:5a:34: 7e:57:e5:d3:d5:b3:b9:ae:09:85:14:6e:8f:b8:c4: 87:82:8c:bf:a0:f6:b6:18:27:51:a1:3c:ac:55:97: 55:2c:05:35:2e:13:10:c6:bf:c5:b4:57:8b:3b:90: 26:20:b7:5e:1b:4b:91:5f:55:a9:d5:9f:9b:1d:5d: f9:e0:cb:ff:d2:74:fe:58:57:2a:95:7b:45:cb:1b: ea:5e:6c:cd:a1:a4:b0:9a:b3:a6:10:ac:e0:1f:5a: da:0e:73:31:01:57:2c:7e:e4:ac:f5:7d:ca:42:f2: d6:be:55:18:f0:9b:94:c3:f1:b8:93:9a:71:fb:9f: 5b:a1:41:82:33:1b:7b:ca:7d:38:49:72:5a:34:66: 49:1d:c8:65:12:a7:5e:73:9b:62:eb:23:9f:1d:4a: 57:6a:a5:61:a0:01:38:1c:4c:b7:9b:e0:05:eb:53: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FB:F9:12:3F:25:D2:F7:BF:4A:10:E1:FA:8E:9D:0B:E6:C6:AD:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d7b7e30-05f6-4389-91e2-fd1e0ed26c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:1f:f4:b9:6d:18:55:39:68:2f:00:03:6d:f4:fb:51:b2:26: cc:78:56:2a:f6:b6:93:9d:9d:90:57:29:38:f7:50:e8:31:8e: 15:1a:dc:96:2b:3c:1a:9d:b2:c1:5d:12:44:d1:39:21:d8:90: 17:fa:28:1f:4e:89:4f:26:d9:7d:c7:d6:9d:b8:46:40:a3:be: 84:99:18:d5:e9:40:fd:af:bc:33:32:ee:32:c9:ff:3d:b3:6a: 9a:fb:6b:c5:a0:b0:d4:55:87:04:a3:bd:27:3e:fe:03:6b:7c: 69:54:29:e7:9a:96:f3:03:23:27:36:f4:84:5c:9c:7a:fd:e8: d9:7f:0f:98:f6:cf:f8:12:9f:c2:90:d1:b5:01:be:5e:f5:7d: 20:15:ad:62:ee:7f:93:b3:0d:a6:30:55:30:9d:cc:39:48:f4: 0d:63:45:85:94:b1:59:ed:b4:6f:e1:36:9e:dc:10:eb:ba:d4: 54:d9:32:28:40:62:65:3d:d0:6c:09:df:93:77:51:49:41:a9: 05:c3:22:c1:5f:83:10:cf:3c:67:1e:44:5a:f3:92:e6:ed:b0: 07:e6:d5:56:89:eb:e7:7c:14:d0:95:b8:18:38:23:86:71:89: 06:68:13:a1:4f:fa:e9:5f:ac:e8:c5:49:92:79:72:2e:50:ed: e4:dd:d4:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVI1g5rsNes8YVFAFDpTXSeNAfUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMDMyWhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDgwNGU3Y2E4ZDA0MTlhYWNiMzQxYTIzMGM4YWUwOTJi ZGM2NmRhNDAxNmY2NGJiNWI5MDRlN2VjYzQxY2I2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8pC9UIDvWVucA9uwqO6K4quHPz8uvklSukKrXGhk/EZBI MHUKt+eZsAdg7M/xJK7IVPpZzhL6iID7mxX/QrxuZfz4x7G9j9xp2Bg0j6TwQ2Sx emjs+3laNH5X5dPVs7muCYUUbo+4xIeCjL+g9rYYJ1GhPKxVl1UsBTUuExDGv8W0 V4s7kCYgt14bS5FfVanVn5sdXfngy//SdP5YVyqVe0XLG+pebM2hpLCas6YQrOAf WtoOczEBVyx+5Kz1fcpC8ta+VRjwm5TD8biTmnH7n1uhQYIzG3vKfThJclo0Zkkd yGUSp15zm2LrI58dSldqpWGgATgcTLeb4AXrUzVbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8Pv5Ej8l0ve/ShDh+o6dC+bGrUYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkN2I3ZTMwLTA1ZjYtNDM4OS05MWUyLWZkMWUwZWQyNmM3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgDANBgkqhkiG9w0BAQsFAAOCAQEAGB/0uW0YVTloLwADbfT7UbImzHhW Kva2k52dkFcpOPdQ6DGOFRrclis8Gp2ywV0SRNE5IdiQF/ooH06JTybZfcfWnbhG QKO+hJkY1elA/a+8MzLuMsn/PbNqmvtrxaCw1FWHBKO9Jz7+A2t8aVQp55qW8wMj Jzb0hFycev3o2X8PmPbP+BKfwpDRtQG+XvV9IBWtYu5/k7MNpjBVMJ3MOUj0DWNF hZSxWe20b+E2ntwQ67rUVNkyKEBiZT3QbAnfk3dRSUGpBcMiwV+DEM88Zx5EWvOS 5u2wB+bVVonr53wU0JW4GDgjhnGJBmgToU/66V+s6MVJknlyLlDt5N3Uyw== -----END CERTIFICATE-----Generated at Mon May 5 05:38:13 2025 by rpki-client