$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa File: ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa (raw, json) Hash identifier: DEXYQrczesaHS6FvV2HyeQZOaWGhJ70C/UbhVrhjO1k= Subject key identifier: 98:46:8A:6E:DF:11:22:AD:51:33:4A:10:65:74:D8:18:28:6D:D0:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 784C603FB88D195B864735407DE97CF4587A3F3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa Signing time: Fri 02 May 2025 00:01:45 +0000 ROA not before: Fri 02 May 2025 00:01:45 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 153.12.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4c:60:3f:b8:8d:19:5b:86:47:35:40:7d:e9:7c:f4:58:7a:3f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:01:45 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=0c1dd1ea53d3fc3a0cf9daf56b17ac29b6d4301a3816b7257e465a45baab77a9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:44:f4:72:f9:fd:dd:9c:8c:d1:85:f8:4c: 4a:69:7f:d2:39:bc:68:91:9e:5c:4e:a1:a2:a5:1d: d8:35:b3:c0:93:1a:d5:4a:13:3c:c4:de:50:1d:b4: 17:ef:03:6c:f3:a5:64:22:9d:c8:54:bc:d5:7f:9c: ac:09:6a:c3:77:34:72:51:98:83:94:01:76:4b:d5: f6:17:d9:01:86:81:10:9f:17:16:06:d1:aa:6c:5a: 28:92:fd:4c:e9:98:46:ff:41:34:22:16:e9:7f:2c: 7b:0c:51:e4:e3:48:0b:01:b2:f3:c2:31:0e:d3:45: 29:07:f9:0d:62:1a:75:2b:01:5b:72:52:56:90:9f: a5:bd:b2:2a:c7:46:a9:d4:25:f8:1f:04:bb:83:1d: 84:e6:34:6a:45:0e:80:3c:ca:8d:eb:cb:dd:11:8a: ad:54:dc:16:21:4a:f6:49:c6:77:b4:93:b0:1c:28: 88:eb:5e:83:66:f5:8a:5b:75:71:ef:a5:9d:3a:74: 90:35:30:44:83:af:ff:e4:c1:2c:a6:63:c9:f0:49: 46:35:07:68:21:6f:80:8a:95:28:78:d2:96:a2:49: d6:cd:e6:23:ba:7c:0a:82:96:43:2a:5d:59:63:cf: 97:5c:2b:81:c7:3a:34:a1:6a:4a:b5:aa:d8:1e:a8: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:8A:6E:DF:11:22:AD:51:33:4A:10:65:74:D8:18:28:6D:D0:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.12.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:f3:02:9e:64:68:b1:77:f8:d3:2e:da:ba:4b:87:ef:a0:31: c6:5f:9d:77:d0:25:17:ce:22:65:3e:0b:f7:7f:9d:fa:98:e7: 03:5e:4c:31:ec:55:39:57:92:54:0c:13:5a:9e:c4:2b:03:4b: f2:56:4d:30:0e:25:0c:f6:a3:bb:08:8a:50:a1:16:e0:18:d9: 9a:85:f2:dc:03:35:d5:e9:be:7f:df:77:5b:36:f0:15:ae:44: ff:19:b0:6d:f3:a5:48:72:3c:fe:e9:ba:95:ae:58:57:b6:e5: 77:bb:7b:dc:bc:de:c5:f1:04:c7:9c:bc:ea:18:c2:2e:85:de: 5d:5d:5b:bc:47:43:dc:75:10:c5:81:a1:e8:fa:4d:49:8f:b2: 6b:b5:d3:75:a8:6a:b7:87:b9:5c:74:2b:26:0d:3d:84:e7:1f: df:55:d7:f1:d2:b9:88:80:34:b3:fb:d5:67:0a:da:a9:42:2c: 36:92:f2:42:cc:56:c9:38:23:42:2b:5c:da:d7:f6:db:c4:74: ce:e9:f9:75:00:0a:ff:22:b1:c9:d3:ff:0b:44:44:19:5a:12: ef:55:5d:27:ab:50:8d:06:e6:7d:2c:71:c1:17:84:f9:25:61: 8d:3e:9b:6b:92:d3:5d:f1:95:8b:c3:6c:b4:bc:cc:3f:db:96: fd:f1:b9:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeExgP7iNGVuGRzVAfel89Fh6PzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAwMTQ1WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzFkZDFlYTUzZDNmYzNhMGNmOWRhZjU2YjE3YWMyOWI2 ZDQzMDFhMzgxNmI3MjU3ZTQ2NWE0NWJhYWI3N2E5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVikT0cvn93ZyM0YX4TEppf9I5vGiRnlxOoaKlHdg1s8CT GtVKEzzE3lAdtBfvA2zzpWQinchUvNV/nKwJasN3NHJRmIOUAXZL1fYX2QGGgRCf FxYG0apsWiiS/UzpmEb/QTQiFul/LHsMUeTjSAsBsvPCMQ7TRSkH+Q1iGnUrAVty UlaQn6W9sirHRqnUJfgfBLuDHYTmNGpFDoA8yo3ry90Riq1U3BYhSvZJxne0k7Ac KIjrXoNm9YpbdXHvpZ06dJA1MESDr//kwSymY8nwSUY1B2ghb4CKlSh40paiSdbN 5iO6fAqClkMqXVljz5dcK4HHOjShakq1qtgeqD+zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmEaKbt8RIq1RM0oQZXTYGCht0KgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMGM5YmJiLTYwYzUtNDc1OC1hYmMzLTU0MDMyYTA2MGQzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCZDDANBgkqhkiG9w0BAQsFAAOCAQEAcPMCnmRosXf40y7aukuH76Axxl+d d9AlF84iZT4L93+d+pjnA15MMexVOVeSVAwTWp7EKwNL8lZNMA4lDPajuwiKUKEW 4BjZmoXy3AM11em+f993WzbwFa5E/xmwbfOlSHI8/um6la5YV7bld7t73LzexfEE x5y86hjCLoXeXV1bvEdD3HUQxYGh6PpNSY+ya7XTdahqt4e5XHQrJg09hOcf31XX 8dK5iIA0s/vVZwraqUIsNpLyQsxWyTgjQitc2tf228R0zun5dQAK/yKxydP/C0RE GVoS71VdJ6tQjQbmfSxxwReE+SVhjT6ba5LTXfGVi8NstLzMP9uW/fG5Tg== -----END CERTIFICATE-----Generated at Sat May 10 22:08:48 2025 by rpki-client