$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa File: ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa (raw, json) Hash identifier: aSVJy+whDghKxgXI6IDGCZgjI/7tPbqQKE9iszVlJls= Subject key identifier: 13:6F:22:DC:CB:0C:61:5E:65:53:40:7E:74:31:20:AA:53:85:9F:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21E988D01B8B300D7E1F98F40234E2E359005702 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa Signing time: Sat 03 May 2025 00:30:15 +0000 ROA not before: Sat 03 May 2025 00:30:15 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e9:88:d0:1b:8b:30:0d:7e:1f:98:f4:02:34:e2:e3:59:00:57:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:30:15 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=5370f9df4dc326d104b7cf7e1dd0f83443e774c5c8c00c84a61e22886c8b5cf0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:aa:f3:e3:9f:d8:7c:88:fb:8a:cd:f7:ed: 61:26:66:aa:32:cd:47:eb:88:ba:9d:17:33:00:53: ce:6d:b3:91:5e:75:f0:e6:ea:68:57:a4:6b:f3:ce: 58:e9:cf:80:11:d7:4b:d9:70:a9:c1:08:4c:70:15: 2f:47:92:7e:8a:77:2e:dc:3c:90:86:e2:82:0d:f4: a5:5c:15:1b:79:73:0c:ac:17:46:61:bd:e2:f6:84: b9:4e:7c:35:1f:93:eb:b5:f0:5e:56:2d:8a:05:4c: d9:b4:a1:48:6f:21:f7:ce:f5:66:10:2d:9c:01:ea: 8d:88:0d:d2:48:e7:47:40:44:59:ef:d0:86:36:a1: c6:e2:a5:ef:0b:b5:0b:fe:90:e8:46:cc:bb:0c:55: fb:e4:77:8d:af:19:eb:99:ae:96:0d:90:ef:90:ab: b5:b7:3e:cd:a4:69:b4:59:b4:00:18:0e:d6:87:15: c3:37:57:58:10:f4:0e:af:79:14:f8:eb:a3:af:47: aa:90:6f:d2:42:5e:57:aa:d9:25:e6:7a:b8:9f:0d: 3b:a5:f3:a3:7a:8f:c0:c4:e0:b1:25:35:13:30:3f: 92:b8:5d:7c:ca:be:3d:65:07:8e:7a:40:be:a4:3b: be:05:69:13:12:8d:99:6e:3d:cd:27:e6:db:48:d7: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6F:22:DC:CB:0C:61:5E:65:53:40:7E:74:31:20:AA:53:85:9F:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:91:03:26:45:88:86:f1:0b:66:a4:38:97:35:e1:f2:5f:a5: c2:b4:21:1d:ec:22:2b:b7:08:03:89:ab:32:5f:af:50:79:fc: e2:4e:2c:ab:f6:e1:59:fa:1e:49:8d:e7:04:fc:5e:a6:33:4f: b7:a8:f7:28:c4:c5:5b:d6:d4:b2:c6:87:49:03:e6:1b:20:a7: 8d:b8:88:56:7b:b4:e3:19:09:1f:1f:f5:3b:d9:60:a7:f9:f0: 73:de:27:1a:26:ee:59:4c:aa:8f:c5:34:92:e6:72:8e:cf:8c: 0b:33:87:d2:f9:cf:16:b4:a1:ed:f7:ae:ca:6b:fd:d4:f0:7e: 6d:70:08:f9:d6:b3:43:c6:f8:49:f8:18:4b:d5:fd:b6:4a:2a: 1a:98:a6:e0:8f:76:8d:2d:27:1a:e2:aa:98:68:aa:8f:63:b8: 37:50:38:cf:28:ab:a1:fd:c7:58:c9:30:c3:0a:a3:91:05:41: 61:c5:19:56:2f:99:df:4a:a0:67:f8:93:7c:cd:00:52:62:91: 5d:96:08:96:2c:70:3a:9b:d1:33:d3:44:18:1d:19:3d:0b:c1: ab:8d:c8:56:f7:01:69:e7:c3:16:65:59:ad:73:8d:d9:4e:01: c3:16:9f:3c:10:48:08:a7:c8:d6:f9:02:d5:e4:1c:f9:1e:9a: bf:4b:f6:81 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIemI0BuLMA1+H5j0AjTi41kAVwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAzMDE1WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzcwZjlkZjRkYzMyNmQxMDRiN2NmN2UxZGQwZjgzNDQz ZTc3NGM1YzhjMDBjODRhNjFlMjI4ODZjOGI1Y2YwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU4arz45/YfIj7is337WEmZqoyzUfriLqdFzMAU85ts5Fe dfDm6mhXpGvzzljpz4AR10vZcKnBCExwFS9Hkn6Kdy7cPJCG4oIN9KVcFRt5cwys F0ZhveL2hLlOfDUfk+u18F5WLYoFTNm0oUhvIffO9WYQLZwB6o2IDdJI50dARFnv 0IY2ocbipe8LtQv+kOhGzLsMVfvkd42vGeuZrpYNkO+Qq7W3Ps2kabRZtAAYDtaH FcM3V1gQ9A6veRT466OvR6qQb9JCXleq2SXmerifDTul86N6j8DE4LElNRMwP5K4 XXzKvj1lB456QL6kO74FaRMSjZluPc0n5ttI1x7jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE28i3MsMYV5lU0B+dDEgqlOFn8owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMzMyN2E5LTVmNzUtNGM2Ni04ZTJiLTc3NjIyZmRkYTBlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ejANBgkqhkiG9w0BAQsFAAOCAQEAOZEDJkWIhvELZqQ4lzXh8l+lwrQh HewiK7cIA4mrMl+vUHn84k4sq/bhWfoeSY3nBPxepjNPt6j3KMTFW9bUssaHSQPm GyCnjbiIVnu04xkJHx/1O9lgp/nwc94nGibuWUyqj8U0kuZyjs+MCzOH0vnPFrSh 7feuymv91PB+bXAI+dazQ8b4SfgYS9X9tkoqGpim4I92jS0nGuKqmGiqj2O4N1A4 zyirof3HWMkwwwqjkQVBYcUZVi+Z30qgZ/iTfM0AUmKRXZYIlixwOpvRM9NEGB0Z PQvBq43IVvcBaefDFmVZrXON2U4BwxafPBBICKfI1vkC1eQc+R6av0v2gQ== -----END CERTIFICATE-----Generated at Mon May 12 12:12:50 2025 by rpki-client