$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa File: 8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa (raw, json) Hash identifier: WmpsUMIe4VUrg2OiDiKVWRPkxUDUOq4P7Eg5R1LpAXM= Subject key identifier: 70:50:C2:2D:14:E5:CE:28:65:04:30:54:76:80:B5:B8:D0:35:0F:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0591F89395A15B88875ED7AEB7C4D09C69ADFBDE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa Signing time: Mon 28 Apr 2025 15:10:27 +0000 ROA not before: Mon 28 Apr 2025 15:10:27 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 168.102.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:91:f8:93:95:a1:5b:88:87:5e:d7:ae:b7:c4:d0:9c:69:ad:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:10:27 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=9aea793237c0b5ab56f9c7462c3b63c93da59aa15344aa9c4e94cb80cfc83c78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:74:22:4a:02:7f:df:c5:43:81:18:b8:df:ae: 4b:e4:cc:92:d1:d2:94:03:d0:3e:11:9a:7b:61:38: 7e:4d:1a:bc:e9:15:e2:e0:cb:bc:e5:5c:4d:af:95: 8e:56:4e:18:10:2a:af:fd:16:08:44:f9:fb:f7:3d: a3:40:ed:13:9b:bd:2f:f2:7a:36:37:6c:9e:ad:05: 00:99:08:91:e4:99:32:29:09:60:02:f3:54:97:9c: 39:98:44:c3:3b:9f:da:18:d0:4d:e8:b6:10:f6:1b: cc:6d:cc:1b:57:b0:4a:58:d9:69:90:e1:01:8d:3a: fe:b7:68:fb:23:19:f6:65:a2:3a:23:a9:4e:46:e6: ad:3a:59:a0:48:f8:d9:fe:b3:89:d0:bc:fd:0d:db: 81:75:99:d1:fb:a8:28:c5:bd:b2:71:fe:fc:1c:28: 54:bb:04:cc:11:f8:36:56:6d:c1:5c:c3:b6:91:25: c6:71:66:79:69:85:62:6c:5c:13:9b:bd:63:fc:c7: 53:61:48:39:e2:fc:5c:7a:c5:44:97:c7:21:0a:fe: 9b:21:38:9b:a5:ed:da:4f:01:67:bf:38:9d:b4:de: 17:20:87:94:f2:1a:47:5f:8d:be:56:87:58:2c:41: a5:2f:5a:21:48:10:c1:d7:5d:b4:8f:fb:7f:36:bb: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:C2:2D:14:E5:CE:28:65:04:30:54:76:80:B5:B8:D0:35:0F:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ee7d9ea-c63a-4d74-90ef-368b77bdc888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.102.192.0/18 Signature Algorithm: sha256WithRSAEncryption 39:c3:74:d8:59:3a:40:b9:f0:71:ed:f7:5e:88:b0:7c:0a:db: f0:61:8d:78:44:02:8f:fd:5d:dd:b8:84:b3:c3:6f:18:e6:9f: 96:59:bd:59:a8:8a:a4:8c:eb:59:e8:84:57:dc:37:a6:78:4f: a5:66:e2:6b:e7:52:bf:e9:41:19:7d:2f:45:20:20:6a:62:93: c5:9a:56:27:47:86:6c:14:b5:51:b8:38:ef:36:a6:b6:01:00: 14:44:4b:b4:df:a1:d9:8c:1e:84:09:51:84:1a:b5:29:e6:e0: e2:84:7a:a7:79:c8:ba:f7:f9:81:ce:b1:21:55:39:b0:54:84: 4d:7d:f7:6a:35:ee:6d:d0:33:c7:40:07:9b:2c:50:74:f9:a5: e8:0a:3a:07:44:f2:5a:8a:f0:9e:04:fe:d4:40:3b:36:25:d3: d2:8a:78:3e:53:e7:a0:d2:2d:66:6f:24:b6:6b:c7:0a:33:26: 31:a8:19:e1:06:ea:85:b6:2d:32:09:a7:d2:06:a7:b1:b2:2c: 53:7e:f8:a4:cf:8d:e5:eb:09:fe:26:c1:79:b8:7a:d3:8d:04: cd:29:96:03:d1:c0:bd:c0:b6:9e:3a:b5:b4:d3:2e:24:95:0d: 99:44:57:4e:dd:32:b8:5d:22:81:55:ad:c2:1b:ea:32:98:03: 35:dd:f6:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBZH4k5WhW4iHXteut8TQnGmt+94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUxMDI3WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWVhNzkzMjM3YzBiNWFiNTZmOWM3NDYyYzNiNjNjOTNk YTU5YWExNTM0NGFhOWM0ZTk0Y2I4MGNmYzgzYzc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDudCJKAn/fxUOBGLjfrkvkzJLR0pQD0D4RmnthOH5NGrzp FeLgy7zlXE2vlY5WThgQKq/9FghE+fv3PaNA7RObvS/yejY3bJ6tBQCZCJHkmTIp CWAC81SXnDmYRMM7n9oY0E3othD2G8xtzBtXsEpY2WmQ4QGNOv63aPsjGfZlojoj qU5G5q06WaBI+Nn+s4nQvP0N24F1mdH7qCjFvbJx/vwcKFS7BMwR+DZWbcFcw7aR JcZxZnlphWJsXBObvWP8x1NhSDni/Fx6xUSXxyEK/pshOJul7dpPAWe/OJ203hcg h5TyGkdfjb5Wh1gsQaUvWiFIEMHXXbSP+382u40xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcFDCLRTlzihlBDBUdoC1uNA1D5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlZTdkOWVhLWM2M2EtNGQ3NC05MGVmLTM2OGI3N2JkYzg4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaoZsAwDQYJKoZIhvcNAQELBQADggEBADnDdNhZOkC58HHt916IsHwK2/Bh jXhEAo/9Xd24hLPDbxjmn5ZZvVmoiqSM61nohFfcN6Z4T6Vm4mvnUr/pQRl9L0Ug IGpik8WaVidHhmwUtVG4OO82prYBABRES7TfodmMHoQJUYQatSnm4OKEeqd5yLr3 +YHOsSFVObBUhE1992o17m3QM8dAB5ssUHT5pegKOgdE8lqK8J4E/tRAOzYl09KK eD5T56DSLWZvJLZrxwozJjGoGeEG6oW2LTIJp9IGp7GyLFN++KTPjeXrCf4mwXm4 etONBM0plgPRwL3Atp46tbTTLiSVDZlEV07dMrhdIoFVrcIb6jKYAzXd9o8= -----END CERTIFICATE-----Generated at Mon May 12 04:38:15 2025 by rpki-client