$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c6ab720-bcf1-4213-aee9-832ddfc3cf45.roa File: 9c6ab720-bcf1-4213-aee9-832ddfc3cf45.roa (raw, json) Hash identifier: HavviPDkr2AE+VaCu97Gzd9NomVE0bTA2ApIPVrHjVw= Subject key identifier: 50:4C:57:AD:11:B2:AE:B4:3E:F7:40:13:E1:06:47:5E:32:26:95:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E861D368BF939BFF2D86FDEDC296AEEA4C0ADDA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c6ab720-bcf1-4213-aee9-832ddfc3cf45.roa Signing time: Thu 08 May 2025 19:21:56 +0000 ROA not before: Thu 08 May 2025 19:21:56 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.160.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:86:1d:36:8b:f9:39:bf:f2:d8:6f:de:dc:29:6a:ee:a4:c0:ad:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 19:21:56 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=9004001540dea5adc75976ae4f356bf32d0967dd4857e4870a4cdf78aba6f1a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:64:06:69:38:a6:d3:c8:67:d7:84:0c:f0: b2:d8:98:7a:62:c7:8e:ab:f9:38:a6:7b:43:c5:2f: 1b:12:e4:81:2f:7a:7e:1a:d2:ed:2d:b3:41:8e:6c: 45:9e:01:b2:13:b1:27:44:90:b0:11:25:bf:c2:c7: b7:82:af:0d:47:e8:68:cf:4f:3f:2d:a2:f5:48:2c: aa:17:e0:e0:ce:c0:6c:c4:00:48:db:41:d8:4d:89: 6e:07:17:54:d5:4d:6e:f4:b2:b1:74:a7:14:e5:70: fe:2b:ef:1e:05:03:de:16:64:c8:ff:d6:40:d6:3f: 7c:cd:a6:5f:c6:2e:62:f2:a5:b1:49:66:fc:52:ad: b1:5a:0d:b5:a4:fc:33:8c:c8:68:9c:8b:f4:11:73: d8:ba:45:c0:d2:24:85:9b:c0:01:2f:b0:22:db:24: 90:d2:9b:07:d6:47:cf:72:56:ce:7f:ce:dc:84:82: 93:35:c5:11:7a:d2:cb:20:fd:cc:16:60:6f:f1:c8: e6:51:4d:39:5e:9e:3e:01:a1:ac:eb:d7:c5:e4:e7: a3:78:5d:ff:de:22:35:b9:43:69:fe:f0:d5:ec:32: 1b:1d:c3:00:93:9f:27:76:6b:56:80:b8:b1:03:9b: 8f:aa:57:b1:6e:69:42:09:1d:29:f3:d9:51:fa:9b: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:57:AD:11:B2:AE:B4:3E:F7:40:13:E1:06:47:5E:32:26:95:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c6ab720-bcf1-4213-aee9-832ddfc3cf45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.160.0.0/20 Signature Algorithm: sha256WithRSAEncryption 23:7a:96:96:5c:b8:99:ae:55:6c:3d:96:d6:b6:ac:81:7a:e9: 60:37:55:30:bc:1a:9e:1f:d2:e3:a0:ba:ec:54:33:c9:e4:0a: d5:53:5a:55:fd:19:22:a8:13:7b:e1:77:fb:57:3a:d0:da:df: 66:b8:2e:70:35:e2:ce:8d:2e:a3:98:df:c6:cd:a3:07:e8:08: 0b:7b:c8:02:e6:3d:7f:f2:fe:fe:37:c4:df:d4:44:78:07:f3: ba:1c:58:d1:90:45:ed:30:9b:5e:e6:4c:24:50:03:c3:2b:11: fb:69:48:0a:f9:15:43:ad:30:1d:65:57:23:32:6b:5a:12:aa: fe:8b:59:0b:33:a6:30:1d:a7:7b:b7:3f:a5:03:40:e4:cf:cf: 8a:37:be:e4:b3:9a:39:20:cd:a1:99:ea:65:f3:dc:95:f1:05: cd:d9:41:4c:0b:d0:58:0f:c9:04:ad:9a:03:b9:2e:3f:38:b9: 33:5d:fe:87:50:36:44:97:c3:25:d7:5d:2a:26:00:7a:ba:e1: 2e:dc:98:1d:16:9c:ab:33:c5:59:11:3d:f8:15:26:66:3e:e7: b1:bb:f5:2b:d3:56:e0:08:94:ab:04:88:c7:1e:1f:67:03:ac: 8b:f3:c1:41:33:53:4f:77:2a:bc:83:7d:3e:8a:6e:a3:52:cf: 90:49:68:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXoYdNov5Ob/y2G/e3Clq7qTArdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTkyMTU2WhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDA0MDAxNTQwZGVhNWFkYzc1OTc2YWU0ZjM1NmJmMzJk MDk2N2RkNDg1N2U0ODcwYTRjZGY3OGFiYTZmMWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC212QGaTim08hn14QM8LLYmHpix46r+Time0PFLxsS5IEv en4a0u0ts0GObEWeAbITsSdEkLARJb/Cx7eCrw1H6GjPTz8tovVILKoX4ODOwGzE AEjbQdhNiW4HF1TVTW70srF0pxTlcP4r7x4FA94WZMj/1kDWP3zNpl/GLmLypbFJ ZvxSrbFaDbWk/DOMyGici/QRc9i6RcDSJIWbwAEvsCLbJJDSmwfWR89yVs5/ztyE gpM1xRF60ssg/cwWYG/xyOZRTTlenj4Boazr18Xk56N4Xf/eIjW5Q2n+8NXsMhsd wwCTnyd2a1aAuLEDm4+qV7FuaUIJHSnz2VH6mw5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUExXrRGyrrQ+90AT4QZHXjImlZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljNmFiNzIwLWJjZjEtNDIxMy1hZWU5LTgzMmRkZmMzY2Y0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNoAAwDQYJKoZIhvcNAQELBQADggEBACN6lpZcuJmuVWw9lta2rIF66WA3 VTC8Gp4f0uOguuxUM8nkCtVTWlX9GSKoE3vhd/tXOtDa32a4LnA14s6NLqOY38bN owfoCAt7yALmPX/y/v43xN/URHgH87ocWNGQRe0wm17mTCRQA8MrEftpSAr5FUOt MB1lVyMya1oSqv6LWQszpjAdp3u3P6UDQOTPz4o3vuSzmjkgzaGZ6mXz3JXxBc3Z QUwL0FgPyQStmgO5Lj84uTNd/odQNkSXwyXXXSomAHq64S7cmB0WnKszxVkRPfgV JmY+57G79SvTVuAIlKsEiMceH2cDrIvzwUEzU093KryDfT6KbqNSz5BJaOs= -----END CERTIFICATE-----Generated at Mon May 12 01:31:09 2025 by rpki-client