$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9edefb94-5cb3-4803-8f1f-ae04daf83510.roa File: 9edefb94-5cb3-4803-8f1f-ae04daf83510.roa (raw, json) Hash identifier: BDkfr37SvIxrIAsFkodm3Tx5diAqCXeN4A3LTqrP70s= Subject key identifier: 2B:F7:35:8E:A8:E5:A7:12:E3:3F:F5:BE:F1:48:A8:39:AC:12:4E:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 611439A3AC9D2F9A3DF76147B160FDC419CE9021 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9edefb94-5cb3-4803-8f1f-ae04daf83510.roa Signing time: Fri 25 Apr 2025 15:01:10 +0000 ROA not before: Fri 25 Apr 2025 15:01:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 72.44.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:14:39:a3:ac:9d:2f:9a:3d:f7:61:47:b1:60:fd:c4:19:ce:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:01:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8bfd596ee93f1e3f083707bd349cf89786aaedeca0a2d05cf3d6e921fbea3914, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:2a:60:0a:e1:55:0f:0a:c4:5c:65:ab:b4: 43:96:22:a5:81:00:c9:81:95:a0:12:c2:89:c1:ea: ce:cc:85:3f:6b:b9:7e:9c:19:fa:f8:1f:c3:7e:74: 62:9b:66:61:a3:81:88:de:80:7c:34:a6:13:93:fd: d9:4f:f2:48:0c:87:75:e9:16:09:4f:24:85:f5:1f: 33:fb:21:e1:73:b2:05:71:4c:51:05:e9:3a:3f:69: 37:f9:5c:2f:f5:fd:90:d1:84:26:26:30:06:a9:6c: 76:a4:c1:12:40:6c:de:b5:2c:fb:51:ee:dd:ad:e3: 1d:f3:25:b7:bf:6f:3f:d2:4c:79:d8:86:9b:cc:69: a3:cd:29:55:87:7a:40:08:c2:7d:a7:ae:ae:b2:2c: c8:fe:cd:9f:62:ed:ef:d5:69:3b:52:ca:4e:0f:c1: 14:cb:42:76:79:e6:59:93:95:46:44:69:6d:c7:10: 10:ba:ba:26:dc:e7:f1:31:3d:28:16:fe:c1:60:e8: ea:36:21:de:a5:0d:29:ce:14:d2:8b:9b:e9:35:8a: 19:97:13:d8:1c:12:16:0e:d3:e8:03:44:03:47:03: d3:e5:f2:ee:bd:6a:c1:25:30:aa:5a:b1:f2:08:7d: aa:6c:21:9d:b5:73:da:c7:24:31:17:da:b2:56:76: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F7:35:8E:A8:E5:A7:12:E3:3F:F5:BE:F1:48:A8:39:AC:12:4E:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9edefb94-5cb3-4803-8f1f-ae04daf83510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.48.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:6c:3d:78:9b:5e:b9:92:98:cb:3d:7d:19:bd:2e:52:37:a3: f4:90:67:f6:e2:0f:51:ec:23:f7:97:fc:cb:5c:e0:89:5a:16: d1:fe:84:72:a3:44:4c:8a:88:aa:ff:fb:3f:76:05:be:e2:e6: 02:df:f4:72:2e:81:1e:f5:c4:0b:41:47:91:7e:e3:68:ae:08: 8b:5b:c9:94:43:18:a6:2f:01:c8:7f:db:4d:fd:6f:5c:a7:4d: a2:d1:2e:88:18:3c:cd:17:12:c1:9a:ff:61:b7:dc:46:ba:f5: 3f:0d:8a:b7:4d:69:41:91:e5:fa:12:e9:34:b3:32:1a:51:6c: 11:ac:f4:d5:f6:fb:84:e8:79:e0:6e:2a:7b:4f:ff:99:d0:01: 2d:8e:ce:fb:34:7f:98:9d:da:bc:08:a4:b6:58:cf:03:6e:02: 80:82:6f:d2:34:93:b2:5b:d4:b6:78:f1:ce:83:e7:46:84:df: 9a:5c:5f:24:94:26:33:5a:67:e7:28:ce:06:90:b5:02:2c:27: d5:fd:ca:68:22:c8:8a:e1:ab:88:a3:97:b8:0b:9c:5d:9c:fc: 6b:49:b1:4d:ab:75:77:ec:b5:05:84:3b:d4:ce:a1:1f:7b:50: 13:d7:f6:41:a7:9d:7c:89:ee:70:06:59:e3:c2:9c:6e:32:72: 9b:47:fc:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYRQ5o6ydL5o992FHsWD9xBnOkCEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUwMTEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmZkNTk2ZWU5M2YxZTNmMDgzNzA3YmQzNDljZjg5Nzg2 YWFlZGVjYTBhMmQwNWNmM2Q2ZTkyMWZiZWEzOTE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiPSpgCuFVDwrEXGWrtEOWIqWBAMmBlaASwonB6s7MhT9r uX6cGfr4H8N+dGKbZmGjgYjegHw0phOT/dlP8kgMh3XpFglPJIX1HzP7IeFzsgVx TFEF6To/aTf5XC/1/ZDRhCYmMAapbHakwRJAbN61LPtR7t2t4x3zJbe/bz/STHnY hpvMaaPNKVWHekAIwn2nrq6yLMj+zZ9i7e/VaTtSyk4PwRTLQnZ55lmTlUZEaW3H EBC6uibc5/ExPSgW/sFg6Oo2Id6lDSnOFNKLm+k1ihmXE9gcEhYO0+gDRANHA9Pl 8u69asElMKpasfIIfapsIZ21c9rHJDEX2rJWdsnfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK/c1jqjlpxLjP/W+8UioOawSTqswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllZGVmYjk0LTVjYjMtNDgwMy04ZjFmLWFlMDRkYWY4MzUxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARILDAwDQYJKoZIhvcNAQELBQADggEBAH1sPXibXrmSmMs9fRm9LlI3o/SQ Z/biD1HsI/eX/Mtc4IlaFtH+hHKjREyKiKr/+z92Bb7i5gLf9HIugR71xAtBR5F+ 42iuCItbyZRDGKYvAch/2039b1ynTaLRLogYPM0XEsGa/2G33Ea69T8NirdNaUGR 5foS6TSzMhpRbBGs9NX2+4ToeeBuKntP/5nQAS2Ozvs0f5id2rwIpLZYzwNuAoCC b9I0k7Jb1LZ48c6D50aE35pcXySUJjNaZ+cozgaQtQIsJ9X9ymgiyIrhq4ijl7gL nF2c/GtJsU2rdXfstQWEO9TOoR97UBPX9kGnnXyJ7nAGWePCnG4ycptH/MA= -----END CERTIFICATE-----Generated at Sun May 11 13:25:48 2025 by rpki-client