$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d951f62-09d0-4c50-88e6-d301fab02411.roa File: 9d951f62-09d0-4c50-88e6-d301fab02411.roa (raw, json) Hash identifier: UBrk6Pe4+z2nPP1+KRKCSBD16YBMtxAa2qBy2JsHEf8= Subject key identifier: 88:2E:9A:DB:D7:BD:67:B2:7B:34:82:DC:A3:70:90:81:07:70:1F:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 368950AAE4A0C31B7F00741581B27B5C87513D6A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d951f62-09d0-4c50-88e6-d301fab02411.roa Signing time: Fri 25 Apr 2025 17:23:26 +0000 ROA not before: Fri 25 Apr 2025 17:23:26 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.26.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:89:50:aa:e4:a0:c3:1b:7f:00:74:15:81:b2:7b:5c:87:51:3d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 17:23:26 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=ef9c5a11297ef6ba2715ef1967c2d4fff86db361239725a03519af095dfbe2ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:f2:a2:3d:4f:1f:fd:32:ba:1c:54:f7:7f: a3:32:1a:a5:6d:46:ef:b6:28:20:3a:77:cd:f0:45: 8c:78:09:2f:c3:24:f4:59:ba:2d:76:79:32:90:7a: b3:47:86:5b:f5:0c:ec:96:8b:f7:1d:96:95:9d:bb: a4:c0:39:81:24:8b:8a:ea:7b:46:6e:13:23:64:d8: 0d:9b:4a:45:8e:c2:66:98:16:a8:eb:90:7f:79:1b: 3a:c3:a0:00:b7:c2:99:5e:3e:32:fd:6b:61:34:5d: c5:56:ec:f6:b4:ed:8d:8f:c1:7a:8d:57:46:37:9f: 48:e7:00:b3:5e:01:f9:fb:44:f6:4c:e9:a2:8e:fd: 21:97:35:35:3c:f0:e9:d8:5a:c6:4a:7f:c0:b7:db: 96:94:84:a9:9b:b6:2f:13:34:60:bc:64:4f:0b:fc: b2:cd:9e:8a:ff:5c:a9:ec:c8:a2:74:df:40:8f:44: 52:f4:a7:12:1b:05:76:5c:3a:f5:9f:03:e7:94:60: 25:be:5f:0d:2c:2a:0d:0f:7b:67:29:05:56:fc:0e: 75:05:93:eb:dc:25:97:e3:b5:ff:8f:60:0c:99:7a: 2a:5f:27:81:d9:d2:68:8f:58:e7:18:09:6c:99:34: ff:1c:52:25:b6:de:aa:e6:7b:5d:e6:72:c2:6e:72: 46:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2E:9A:DB:D7:BD:67:B2:7B:34:82:DC:A3:70:90:81:07:70:1F:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d951f62-09d0-4c50-88e6-d301fab02411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.26.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:de:23:c0:15:66:f8:f1:04:87:ae:95:64:0e:77:c2:fc:4b: 8f:d8:a3:bd:ea:f4:13:c1:cf:4a:52:73:a7:72:11:b8:43:d8: 7c:85:1e:38:88:7e:a3:f8:3a:ae:67:b1:b5:14:41:2e:d1:c9: 38:f4:9f:92:a1:f4:8e:6a:dd:6a:3b:63:f2:47:27:f0:29:fb: f8:fe:b1:d7:82:30:2e:74:6c:4f:df:86:16:07:0e:ce:c5:5e: 83:ff:af:80:5f:d5:c5:09:d3:72:b8:0a:d6:12:12:80:24:96: d3:ea:ae:6b:b8:a0:2b:2e:68:57:21:c0:30:0c:b1:00:7c:de: 7e:3b:f3:58:89:e2:bc:2b:b4:09:36:76:16:9b:90:d5:12:d2: 57:94:ae:ce:81:bf:db:2d:8f:c2:fa:0a:40:46:c4:f7:f6:27: 2d:e6:90:43:a7:ec:52:a5:54:11:75:70:77:78:b0:3b:3e:5a: 4b:9c:fc:bd:38:18:d5:2e:91:ff:f6:ea:dd:e7:97:6e:6c:ce: 04:4c:dc:a5:91:38:6e:2e:a9:24:01:8f:e6:eb:95:bc:c3:eb: 0d:ee:18:45:4b:d4:e4:9e:f4:98:c4:3e:13:85:ae:76:28:d2: c5:4d:3a:c7:4c:72:37:8f:d9:88:03:3d:10:77:f1:51:21:ee: f7:4c:d7:e5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNolQquSgwxt/AHQVgbJ7XIdRPWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTcyMzI2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjljNWExMTI5N2VmNmJhMjcxNWVmMTk2N2MyZDRmZmY4 NmRiMzYxMjM5NzI1YTAzNTE5YWYwOTVkZmJlMmNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0TfKiPU8f/TK6HFT3f6MyGqVtRu+2KCA6d83wRYx4CS/D JPRZui12eTKQerNHhlv1DOyWi/cdlpWdu6TAOYEki4rqe0ZuEyNk2A2bSkWOwmaY FqjrkH95GzrDoAC3wplePjL9a2E0XcVW7Pa07Y2PwXqNV0Y3n0jnALNeAfn7RPZM 6aKO/SGXNTU88OnYWsZKf8C325aUhKmbti8TNGC8ZE8L/LLNnor/XKnsyKJ030CP RFL0pxIbBXZcOvWfA+eUYCW+Xw0sKg0Pe2cpBVb8DnUFk+vcJZfjtf+PYAyZeipf J4HZ0miPWOcYCWyZNP8cUiW23qrme13mcsJuckaLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiC6a29e9Z7J7NILco3CQgQdwHyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkOTUxZjYyLTA5ZDAtNGM1MC04OGU2LWQzMDFmYWIwMjQxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4GjANBgkqhkiG9w0BAQsFAAOCAQEABN4jwBVm+PEEh66VZA53wvxLj9ij ver0E8HPSlJzp3IRuEPYfIUeOIh+o/g6rmextRRBLtHJOPSfkqH0jmrdajtj8kcn 8Cn7+P6x14IwLnRsT9+GFgcOzsVeg/+vgF/VxQnTcrgK1hISgCSW0+qua7igKy5o VyHAMAyxAHzefjvzWInivCu0CTZ2FpuQ1RLSV5SuzoG/2y2PwvoKQEbE9/YnLeaQ Q6fsUqVUEXVwd3iwOz5aS5z8vTgY1S6R//bq3eeXbmzOBEzcpZE4bi6pJAGP5uuV vMPrDe4YRUvU5J70mMQ+E4WudijSxU06x0xyN4/ZiAM9EHfxUSHu90zX5Q== -----END CERTIFICATE-----Generated at Sun May 11 11:52:32 2025 by rpki-client