$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa File: 9636aa82-d0d4-4b45-918e-5973b533cb33.roa (raw, json) Hash identifier: 1V1rb3U0pq19sghKccocnXka5XC3m1cslhWZUfHMvQk= Subject key identifier: A4:2A:6B:9E:7F:C2:89:34:CA:77:82:0C:94:4C:59:BD:67:38:46:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 286BB9E4BBFD5513D31731EB42D0C1B6D96E6F12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa Signing time: Mon 05 May 2025 15:21:15 +0000 ROA not before: Mon 05 May 2025 15:21:15 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 32.192.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6b:b9:e4:bb:fd:55:13:d3:17:31:eb:42:d0:c1:b6:d9:6e:6f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:21:15 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=37cb41c5384f4f1a8ee0ca7b92aaa53695af0662a50a20125d6d8dbec670e856, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:1c:70:e1:50:9a:2c:13:56:5c:b0:a8:65: e1:ec:22:0c:79:7a:a8:00:58:d0:57:b7:5e:c6:db: ff:5e:3d:83:db:29:16:f0:72:f3:4b:ea:15:3e:81: aa:a1:11:26:ee:df:33:3c:52:af:e9:13:2a:44:de: a9:2d:ed:bf:01:f6:44:5f:20:44:e1:3c:39:e6:fc: b7:bc:e1:8a:4b:d9:6e:6c:ce:32:08:9a:51:6a:44: be:01:a5:fd:33:cd:18:f2:8f:ae:b7:4a:13:b8:ac: 12:04:19:d1:ec:ac:59:77:94:30:f7:98:79:1c:5d: 77:b9:ac:ff:62:60:f1:cf:60:8a:b1:da:9d:2f:06: 86:fc:13:d2:30:49:a1:94:aa:41:f0:7f:6e:f1:73: aa:33:cd:a2:85:f1:9b:b7:c8:bf:e0:b8:3b:ee:66: bb:c1:b6:ec:5c:d3:2f:0d:31:8d:8d:9c:ca:93:ee: 89:f9:71:e1:f0:74:da:79:dc:c3:57:75:82:e5:59: dd:f9:5a:5b:15:7b:90:ca:f2:65:15:9c:c5:7c:68: dd:07:14:3b:87:59:50:70:71:ae:ca:06:b6:05:81: ba:34:42:0c:01:5b:56:dd:a4:05:2f:91:aa:a5:2f: 49:e0:14:b4:d6:88:ec:82:ed:e3:8f:5b:0b:00:3b: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:6B:9E:7F:C2:89:34:CA:77:82:0C:94:4C:59:BD:67:38:46:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.192.0.0/12 Signature Algorithm: sha256WithRSAEncryption 60:38:12:e5:0d:1c:95:15:26:9d:49:d6:c5:4e:05:c9:c4:ab: ba:e9:73:a7:8d:43:a1:a7:62:17:ef:19:c7:d0:d5:77:1e:b9: 6a:02:7c:5c:de:4e:fb:48:86:2e:ef:4d:5e:c9:b0:eb:cb:24: 5e:5a:23:5a:a8:f3:8b:5b:e4:97:8a:de:08:0b:58:f6:89:34: 2a:dd:0b:88:17:42:29:37:e1:c9:28:aa:4d:69:00:ad:38:c9: f6:a0:fb:97:f9:8b:38:d4:04:dc:6e:f9:d1:ab:22:30:61:80: a5:2d:6c:8f:14:49:a7:9d:05:e9:25:9e:5f:7a:00:91:f2:0e: 7b:b8:6b:0b:0c:cb:c3:d4:5b:ac:cc:1e:98:a1:9d:9d:27:b7: d6:a5:8e:37:f5:c9:1e:90:9f:9d:5b:86:79:fe:50:c5:c6:aa: 0e:84:dd:ae:65:89:f9:fa:a4:ac:82:7b:4b:fc:a5:4a:b3:79: c4:fd:64:a5:0d:9b:55:39:cd:c5:9e:6f:82:e9:6c:cf:f7:77: 97:f2:2e:80:ea:97:2e:2d:4c:43:16:9d:d9:c2:b2:07:aa:6d: 03:e4:3b:c9:bd:ec:0e:ba:85:c2:7b:08:02:c3:89:69:70:af: b2:02:c9:21:cf:8a:ad:8f:77:03:5d:b9:77:db:0c:43:26:ce: 11:67:00:ce -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKGu55Lv9VRPTFzHrQtDBttlubxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUyMTE1WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2NiNDFjNTM4NGY0ZjFhOGVlMGNhN2I5MmFhYTUzNjk1 YWYwNjYyYTUwYTIwMTI1ZDZkOGRiZWM2NzBlODU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9+Rxw4VCaLBNWXLCoZeHsIgx5eqgAWNBXt17G2/9ePYPb KRbwcvNL6hU+gaqhESbu3zM8Uq/pEypE3qkt7b8B9kRfIEThPDnm/Le84YpL2W5s zjIImlFqRL4Bpf0zzRjyj663ShO4rBIEGdHsrFl3lDD3mHkcXXe5rP9iYPHPYIqx 2p0vBob8E9IwSaGUqkHwf27xc6ozzaKF8Zu3yL/guDvuZrvBtuxc0y8NMY2NnMqT 7on5ceHwdNp53MNXdYLlWd35WlsVe5DK8mUVnMV8aN0HFDuHWVBwca7KBrYFgbo0 QgwBW1bdpAUvkaqlL0ngFLTWiOyC7eOPWwsAOzS1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpCprnn/CiTTKd4IMlExZvWc4RrkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2MzZhYTgyLWQwZDQtNGI0NS05MThlLTU5NzNiNTMzY2IzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQgwDANBgkqhkiG9w0BAQsFAAOCAQEAYDgS5Q0clRUmnUnWxU4FycSruulz p41DoadiF+8Zx9DVdx65agJ8XN5O+0iGLu9NXsmw68skXlojWqjzi1vkl4reCAtY 9ok0Kt0LiBdCKTfhySiqTWkArTjJ9qD7l/mLONQE3G750asiMGGApS1sjxRJp50F 6SWeX3oAkfIOe7hrCwzLw9RbrMwemKGdnSe31qWON/XJHpCfnVuGef5QxcaqDoTd rmWJ+fqkrIJ7S/ylSrN5xP1kpQ2bVTnNxZ5vgulsz/d3l/IugOqXLi1MQxad2cKy B6ptA+Q7yb3sDrqFwnsIAsOJaXCvsgLJIc+KrY93A125d9sMQybOEWcAzg== -----END CERTIFICATE-----Generated at Fri May 9 15:25:26 2025 by rpki-client