$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa File: 98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa (raw, json) Hash identifier: cPXPFBRXdfN/HtOJeJtRfP7HnYHrK6+6R2Wv9SRIsaM= Subject key identifier: 0F:10:CD:F2:8B:D7:8D:AA:19:52:8D:7F:EB:A6:8A:1E:75:EF:05:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 431E64494D0C13A9E6E9EAF7241B81F275E3520E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa Signing time: Mon 05 May 2025 15:31:10 +0000 ROA not before: Mon 05 May 2025 15:31:10 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1e:64:49:4d:0c:13:a9:e6:e9:ea:f7:24:1b:81:f2:75:e3:52:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:31:10 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=10bb7dfcf5fe9c377cde6af67b3865b644d79441e9b2006611a19569baf1994a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:66:35:59:59:12:8f:09:50:41:23:c8:18: 39:f7:3d:98:9b:ed:f0:11:1b:72:ce:b4:9c:4b:d2: 1b:a0:4e:6e:1c:4c:bc:7b:7b:26:40:98:99:d6:b2: c7:8b:a8:31:27:88:21:bf:39:da:8f:19:15:8d:f4: 42:a1:72:94:2d:c5:45:48:b9:a1:d7:2f:5f:1a:88: f8:85:e9:6c:8e:a4:e5:97:8b:fc:9b:44:0f:7d:9c: 5e:1f:24:cc:21:b4:97:c9:6f:8e:cb:c4:a6:4c:b9: ec:c6:6a:13:ef:68:77:d6:4f:70:8b:55:34:40:ce: d2:d6:ba:98:6a:c2:bb:d9:c1:99:23:f8:30:c1:86: 60:ae:33:b9:2a:80:d5:ce:45:4b:a9:7e:80:43:7a: b8:b5:fa:3f:0f:41:39:7e:a5:e0:6a:2e:88:87:d1: bb:bd:ce:4c:b7:69:f3:96:7d:ff:75:28:b4:b8:90: e6:66:24:54:79:90:b4:ce:f8:b8:f1:64:ed:6b:da: 8d:fd:d9:d8:28:89:3e:41:b3:05:3f:ab:ca:a5:10: bf:20:68:f3:3c:53:c8:f8:17:64:87:0c:be:0d:77: ba:08:33:86:77:bd:68:91:56:72:c5:a5:a0:18:66: ff:f2:cd:d1:bb:6a:bf:1c:36:aa:db:5f:f3:0c:96: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:10:CD:F2:8B:D7:8D:AA:19:52:8D:7F:EB:A6:8A:1E:75:EF:05:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98aa5ac4-1895-4aa6-9175-1ee3bda2890d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.116.0/24 Signature Algorithm: sha256WithRSAEncryption 18:13:f5:ba:3c:4c:24:22:f7:3e:8e:0b:18:31:8c:2e:d0:3a: 92:03:49:d3:8e:8a:8b:7e:87:01:be:31:56:6c:52:d5:10:3c: 09:11:f3:06:1b:df:e1:f9:14:0e:7b:ac:37:04:c2:91:16:c4: 00:6f:7b:4d:8e:cc:5d:9c:9d:ec:7e:e9:04:4f:a8:ad:86:7e: cc:9a:f4:69:30:37:20:8f:d6:3f:8f:ef:86:6c:de:b4:f1:19: be:c1:bb:af:d2:5b:56:bc:49:55:42:f7:10:ab:1f:fc:9f:f9: f0:b0:7c:94:99:51:93:e0:c5:4e:ec:ed:82:c8:9e:19:c1:f6: 22:b8:75:4c:5c:8a:da:bb:47:3b:d8:a1:d8:a7:a1:a6:b0:7f: 16:a0:9a:a0:27:d3:d0:f7:0a:8e:31:ab:5f:a2:8b:9f:06:67: 7a:a4:1d:4c:4c:99:67:03:51:f4:82:6f:9a:12:77:d4:45:d0: 29:f4:2c:7c:ee:f9:9b:a1:dc:8e:5c:63:41:dd:4e:26:ce:b8: 5c:1c:17:f7:50:8f:ae:68:f3:61:3e:bb:bb:22:f5:a1:68:1b: 79:46:ad:8e:74:e4:57:24:fd:a6:b1:7f:e2:01:27:73:57:3d: af:88:41:e9:84:1d:8f:0e:c6:7e:60:cb:9e:c0:4a:f5:a7:a0: b3:3a:b4:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQx5kSU0ME6nm6er3JBuB8nXjUg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUzMTEwWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGJiN2RmY2Y1ZmU5YzM3N2NkZTZhZjY3YjM4NjViNjQ0 ZDc5NDQxZTliMjAwNjYxMWExOTU2OWJhZjE5OTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTSWY1WVkSjwlQQSPIGDn3PZib7fARG3LOtJxL0hugTm4c TLx7eyZAmJnWsseLqDEniCG/OdqPGRWN9EKhcpQtxUVIuaHXL18aiPiF6WyOpOWX i/ybRA99nF4fJMwhtJfJb47LxKZMuezGahPvaHfWT3CLVTRAztLWuphqwrvZwZkj +DDBhmCuM7kqgNXORUupfoBDeri1+j8PQTl+peBqLoiH0bu9zky3afOWff91KLS4 kOZmJFR5kLTO+LjxZO1r2o392dgoiT5BswU/q8qlEL8gaPM8U8j4F2SHDL4Nd7oI M4Z3vWiRVnLFpaAYZv/yzdG7ar8cNqrbX/MMlqelAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDxDN8ovXjaoZUo1/66aKHnXvBbgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4YWE1YWM0LTE4OTUtNGFhNi05MTc1LTFlZTNiZGEyODkwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HQwDQYJKoZIhvcNAQELBQADggEBABgT9bo8TCQi9z6OCxgxjC7QOpID SdOOiot+hwG+MVZsUtUQPAkR8wYb3+H5FA57rDcEwpEWxABve02OzF2cnex+6QRP qK2Gfsya9GkwNyCP1j+P74Zs3rTxGb7Bu6/SW1a8SVVC9xCrH/yf+fCwfJSZUZPg xU7s7YLInhnB9iK4dUxcitq7RzvYodinoaawfxagmqAn09D3Co4xq1+ii58GZ3qk HUxMmWcDUfSCb5oSd9RF0Cn0LHzu+Zuh3I5cY0HdTibOuFwcF/dQj65o82E+u7si 9aFoG3lGrY505Fck/aaxf+IBJ3NXPa+IQemEHY8Oxn5gy57ASvWnoLM6tFo= -----END CERTIFICATE-----Generated at Mon May 12 18:18:46 2025 by rpki-client