$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa File: 987ee270-8da2-44b1-b542-2a58beb5c981.roa (raw, json) Hash identifier: 1DvcW+N1LCnOvTXKO3h4R1lMPk/D8AtKGTjlW7GVnMQ= Subject key identifier: 62:4B:3D:C5:CA:D2:3B:FE:62:F9:4C:3C:9C:6F:09:4F:3B:9D:EB:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13C950D3AA252BD4C26617F618EBB930969D6CAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa Signing time: Thu 08 May 2025 17:22:12 +0000 ROA not before: Thu 08 May 2025 17:22:12 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c9:50:d3:aa:25:2b:d4:c2:66:17:f6:18:eb:b9:30:96:9d:6c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 17:22:12 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=ec2ba5ddadb4f0214a2b1528db6ec20a95b10bce7db26bea71d64e6a6897e345, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:44:0b:ba:d1:e5:33:96:ea:52:a3:c0:45: 1f:8b:86:56:a5:22:6f:11:37:1e:94:12:0f:70:30: 1b:cb:8d:0c:4d:da:5e:48:f7:e1:3e:3f:2b:3f:dd: b9:5a:da:3a:b6:50:c3:dc:56:bf:ff:55:2c:7e:db: 7f:6e:a9:d5:8f:d9:7d:f1:0b:ed:e8:83:de:ee:87: 4c:ab:a3:96:ab:d2:13:d3:8d:ea:b2:f0:ea:65:cd: f7:af:67:7e:43:9f:b0:c0:a5:c3:95:a0:b9:2b:8d: e6:60:3b:81:e9:01:23:db:da:3f:a8:b8:33:05:25: b5:97:9d:c8:f8:67:19:82:46:64:2a:d2:b7:6d:88: 64:eb:08:e9:0b:2c:19:c6:45:e2:5e:4a:31:7b:ab: 6b:e2:fd:e2:40:4e:ac:7d:81:6a:cb:cd:8d:e7:ad: 33:cb:b5:64:8d:b9:37:9c:8b:68:0e:66:5f:00:06: cf:40:25:96:f7:c0:e6:3c:a1:5d:29:26:a0:2d:c4: ae:6c:e3:9f:7f:da:b5:77:73:4d:c9:61:ea:35:0b: 8a:82:0f:15:37:40:49:45:a3:29:03:e8:f1:79:5b: 8b:bb:2e:f6:29:42:41:0d:88:52:00:a9:c1:73:39: 71:8b:2f:3a:30:de:66:af:1c:d8:0c:44:4f:28:4d: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4B:3D:C5:CA:D2:3B:FE:62:F9:4C:3C:9C:6F:09:4F:3B:9D:EB:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.96.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:19:a8:ba:79:f2:09:1b:fd:77:ec:01:e4:f8:8e:97:fb:68: f9:44:1b:f2:a7:d9:a0:c3:f7:ac:67:96:a7:56:ac:6a:e7:8f: 4d:e1:9f:1c:a5:68:6c:b4:4e:ae:0d:60:5d:dd:5c:19:dd:2e: 9d:c3:21:2c:63:2e:b3:19:6a:2a:dd:5b:cf:3e:39:a5:52:a8: 90:c3:e5:d0:7e:26:e9:17:db:40:2b:95:f5:5e:4e:66:7b:60: 28:49:06:4a:99:41:f6:4f:db:4f:d9:58:bc:64:10:b1:a6:c5: 2d:66:bf:70:ff:a7:93:ca:a4:74:5c:82:88:dc:99:43:23:f5: 56:93:f8:b8:3d:5a:6f:da:4c:5a:95:0d:98:bd:cc:12:40:dc: e9:67:1b:c8:72:2d:d8:25:b4:18:15:58:fd:25:cf:43:e5:61: c1:6d:83:24:4d:10:d7:b3:2a:8e:95:a9:19:04:a1:13:66:f2: 3e:0d:82:6b:d0:a8:1a:dd:74:f3:a4:61:40:92:10:e1:d5:91: d4:39:98:1d:a5:e9:61:4f:72:d6:be:db:f6:58:77:04:ba:fd: ef:e6:c5:98:a1:a9:01:0f:3e:4f:f7:15:e6:b1:ce:35:4e:c7: 67:8e:5b:cf:86:a7:a0:b8:b7:ee:33:db:fe:77:f0:57:f8:79: a7:6a:4c:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE8lQ06olK9TCZhf2GOu5MJadbKowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTcyMjEyWhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzJiYTVkZGFkYjRmMDIxNGEyYjE1MjhkYjZlYzIwYTk1 YjEwYmNlN2RiMjZiZWE3MWQ2NGU2YTY4OTdlMzQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGK0QLutHlM5bqUqPARR+LhlalIm8RNx6UEg9wMBvLjQxN 2l5I9+E+Pys/3bla2jq2UMPcVr//VSx+239uqdWP2X3xC+3og97uh0yro5ar0hPT jeqy8OplzfevZ35Dn7DApcOVoLkrjeZgO4HpASPb2j+ouDMFJbWXncj4ZxmCRmQq 0rdtiGTrCOkLLBnGReJeSjF7q2vi/eJATqx9gWrLzY3nrTPLtWSNuTeci2gOZl8A Bs9AJZb3wOY8oV0pJqAtxK5s459/2rV3c03JYeo1C4qCDxU3QElFoykD6PF5W4u7 LvYpQkENiFIAqcFzOXGLLzow3mavHNgMRE8oTWgjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYks9xcrSO/5i+Uw8nG8JTzud66cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4N2VlMjcwLThkYTItNDRiMS1iNTQyLTJhNThiZWI1Yzk4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgGAwDQYJKoZIhvcNAQELBQADggEBAHoZqLp58gkb/XfsAeT4jpf7aPlE G/Kn2aDD96xnlqdWrGrnj03hnxylaGy0Tq4NYF3dXBndLp3DISxjLrMZairdW88+ OaVSqJDD5dB+JukX20ArlfVeTmZ7YChJBkqZQfZP20/ZWLxkELGmxS1mv3D/p5PK pHRcgojcmUMj9VaT+Lg9Wm/aTFqVDZi9zBJA3OlnG8hyLdgltBgVWP0lz0PlYcFt gyRNENezKo6VqRkEoRNm8j4NgmvQqBrddPOkYUCSEOHVkdQ5mB2l6WFPcta+2/ZY dwS6/e/mxZihqQEPPk/3FeaxzjVOx2eOW8+Gp6C4t+4z2/538Ff4eadqTCg= -----END CERTIFICATE-----Generated at Sun May 11 18:13:18 2025 by rpki-client