$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6560d66-8e98-4546-86ad-c43d86d45125.roa File: a6560d66-8e98-4546-86ad-c43d86d45125.roa (raw, json) Hash identifier: ll1F8pS6/lka45IFAtJlH/9pdkudUxRKy+/tjRAck4k= Subject key identifier: 62:2D:5E:B7:75:6A:0F:A2:D4:33:91:1C:35:CC:62:7E:C0:EC:DD:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7257039F54EDAA44439BD2E37657925BBB51A5AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6560d66-8e98-4546-86ad-c43d86d45125.roa Signing time: Wed 30 Apr 2025 00:00:52 +0000 ROA not before: Wed 30 Apr 2025 00:00:52 +0000 ROA not after: Wed 04 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 151.148.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:57:03:9f:54:ed:aa:44:43:9b:d2:e3:76:57:92:5b:bb:51:a5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:52 2025 GMT Not After : Jun 4 23:59:59 2025 GMT Subject: serialNumber=0e50dd38bc977f0f4d886307089d1c44f1cbd1887a9bac11ffc4958ac741aa54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:7e:9c:e8:f9:34:40:a1:98:ca:0e:07:0f: f9:67:b0:f7:3b:98:b6:eb:1a:7f:52:13:ac:a3:be: 09:3b:76:2b:ac:8b:05:2d:37:a8:c5:d8:68:ef:b2: cd:3c:cf:06:0b:c7:42:64:99:32:5f:e2:24:d7:ba: ab:13:04:87:06:91:0e:e3:6c:14:ab:41:17:0d:e6: af:5e:2b:ea:71:be:94:7a:c3:ee:37:e4:4a:3d:70: 67:f6:73:1c:17:07:3e:3c:a4:7d:e8:ae:df:c9:32: ba:87:16:bd:e6:e0:1b:f9:0d:c8:94:70:39:8a:67: ce:ab:b7:1f:76:5a:05:cd:fc:0c:ae:91:de:79:ef: 13:97:47:fb:fc:56:5f:51:fa:11:6a:6c:9f:bb:6d: f2:5d:b1:0f:c3:ac:ea:ed:01:02:87:db:18:f6:51: d8:30:64:1c:fe:31:eb:f2:7b:27:38:6d:af:45:c1: a2:c3:05:0f:ad:ea:88:92:34:18:fd:2f:f9:94:69: 4d:ff:0b:a8:67:76:21:89:6e:58:c2:b7:77:eb:12: d8:26:07:08:bc:45:ec:0c:de:e2:73:4d:dc:70:3c: db:e3:2d:d2:b6:22:79:d3:28:90:97:c8:34:2a:cc: 87:a7:37:23:37:d0:1c:9b:35:3d:7c:5d:f2:a4:2b: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:5E:B7:75:6A:0F:A2:D4:33:91:1C:35:CC:62:7E:C0:EC:DD:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6560d66-8e98-4546-86ad-c43d86d45125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d5:d0:25:33:75:ec:37:5f:f0:45:71:bf:17:8b:20:81:09: 4a:65:b2:c4:eb:65:9a:22:b2:54:48:5a:10:88:6c:6b:14:3a: c1:ec:60:e2:5a:85:1f:22:57:90:30:4c:80:ed:34:fd:d5:3d: 83:e0:07:e5:34:c2:2e:d8:be:5a:7e:19:4d:52:3b:77:14:9a: d1:23:fd:a5:c5:36:06:22:84:4a:e1:62:f4:f1:5e:25:fc:41: 96:dd:5a:dd:c2:26:9f:c0:9b:dc:08:f0:8d:ae:b6:85:40:84: 8d:b3:95:24:30:24:5b:c1:8a:f9:29:ce:8e:f4:1b:8a:0c:f2: 14:a6:f9:ef:2b:f2:a7:9b:9b:8d:18:e0:05:20:bf:bc:47:3c: c9:aa:dc:ca:43:ce:4c:51:4a:65:f7:3c:03:82:1a:0a:f1:91: 97:62:53:ea:ea:03:c3:1e:4d:0b:6d:b9:c7:f1:c4:75:a7:ce: 4f:4a:50:40:d8:85:ed:1f:e3:21:f9:fc:6d:e4:18:30:91:7b: 97:f8:b4:04:00:c6:4e:ea:f6:0d:ee:d6:99:04:45:d7:55:e4: 19:20:5a:d6:34:4c:7f:05:76:d8:ce:af:ac:a3:06:ae:9f:c9: 87:99:39:be:21:67:0b:25:28:75:4f:53:6c:97:ae:ee:00:46: 0c:03:bf:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUclcDn1TtqkRDm9LjdleSW7tRpa4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDMwMDAwMDUyWhcNMjUwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTUwZGQzOGJjOTc3ZjBmNGQ4ODYzMDcwODlkMWM0NGYx Y2JkMTg4N2E5YmFjMTFmZmM0OTU4YWM3NDFhYTU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIrH6c6Pk0QKGYyg4HD/lnsPc7mLbrGn9SE6yjvgk7dius iwUtN6jF2Gjvss08zwYLx0JkmTJf4iTXuqsTBIcGkQ7jbBSrQRcN5q9eK+pxvpR6 w+435Eo9cGf2cxwXBz48pH3ort/JMrqHFr3m4Bv5DciUcDmKZ86rtx92WgXN/Ayu kd557xOXR/v8Vl9R+hFqbJ+7bfJdsQ/DrOrtAQKH2xj2UdgwZBz+Mevyeyc4ba9F waLDBQ+t6oiSNBj9L/mUaU3/C6hndiGJbljCt3frEtgmBwi8RewM3uJzTdxwPNvj LdK2InnTKJCXyDQqzIenNyM30BybNT18XfKkK2vhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYi1et3VqD6LUM5EcNcxifsDs3fswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NTYwZDY2LThlOTgtNDU0Ni04NmFkLWM0M2Q4NmQ0NTEyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlCQwDQYJKoZIhvcNAQELBQADggEBAI/V0CUzdew3X/BFcb8XiyCBCUpl ssTrZZoislRIWhCIbGsUOsHsYOJahR8iV5AwTIDtNP3VPYPgB+U0wi7Yvlp+GU1S O3cUmtEj/aXFNgYihErhYvTxXiX8QZbdWt3CJp/Am9wI8I2utoVAhI2zlSQwJFvB ivkpzo70G4oM8hSm+e8r8qebm40Y4AUgv7xHPMmq3MpDzkxRSmX3PAOCGgrxkZdi U+rqA8MeTQttucfxxHWnzk9KUEDYhe0f4yH5/G3kGDCRe5f4tAQAxk7q9g3u1pkE RddV5BkgWtY0TH8FdtjOr6yjBq6fyYeZOb4hZwslKHVPU2yXru4ARgwDv58= -----END CERTIFICATE-----Generated at Sat May 10 13:32:08 2025 by rpki-client