$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ae0d6d-16cf-40c3-9a3e-054480e1b35b.roa File: b8ae0d6d-16cf-40c3-9a3e-054480e1b35b.roa (raw, json) Hash identifier: 0IHRm9fVI5JSzo0+UxoMSDApJJDrOp6if3jfJF8bezc= Subject key identifier: FC:83:BF:FE:F5:93:27:59:20:EC:04:AD:38:A9:04:2F:4B:51:D3:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FDECAF9740122433A499DB73F1650F7DA275342 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ae0d6d-16cf-40c3-9a3e-054480e1b35b.roa Signing time: Sat 03 May 2025 00:00:20 +0000 ROA not before: Sat 03 May 2025 00:00:20 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 206.134.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:de:ca:f9:74:01:22:43:3a:49:9d:b7:3f:16:50:f7:da:27:53:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:20 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=26aad5d9cd10793a46cdac946bbe1af9eae54d26767f209a4f54915815b1c354, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:50:73:5e:4e:68:e7:f1:26:3e:c9:b0:25: 89:f7:2d:c4:7b:87:8c:b4:df:0d:a7:95:8f:b0:cb: 8b:80:39:a3:df:f4:69:ed:29:97:cb:af:4b:bb:63: fe:09:8a:63:02:05:e1:a9:99:ab:7a:97:72:08:eb: 1c:14:01:b7:cd:f1:df:3f:e9:23:7b:ab:bd:61:e8: 5d:35:ca:de:d5:3d:1c:00:ad:05:85:48:52:d9:9b: 73:40:0c:d7:cc:12:11:ba:df:71:4c:82:fb:c0:eb: 33:eb:e8:26:37:5a:f6:1c:e5:12:f0:53:90:6a:0a: 86:70:db:50:7f:5c:eb:70:f5:a6:b8:fb:58:6a:bd: 62:83:3d:12:89:19:08:5e:9b:44:be:f4:88:81:28: 4d:2d:2c:fe:32:44:ad:f8:3e:65:5a:e7:44:08:86: 91:05:b9:b6:50:d5:c7:08:52:77:ed:10:20:ee:cc: f8:cd:d6:35:39:0c:1f:2c:d0:46:e8:ee:41:3b:8f: 74:97:a6:f0:31:21:2f:f7:4c:a6:2b:3d:3c:3b:24: 51:5c:d0:67:e4:29:53:55:5d:a0:4f:e0:f6:3f:83: 7d:08:e1:c5:d7:2b:9a:ea:2a:51:a6:70:c0:4d:ac: 69:73:8c:8a:cf:3a:73:8a:4e:71:9a:fc:fb:c1:cc: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:BF:FE:F5:93:27:59:20:EC:04:AD:38:A9:04:2F:4B:51:D3:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8ae0d6d-16cf-40c3-9a3e-054480e1b35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.134.0.0/16 Signature Algorithm: sha256WithRSAEncryption bf:83:aa:70:dd:83:13:9f:51:c3:a4:49:4e:06:fb:d5:c9:d4: 79:d5:be:bb:d7:bb:3e:04:f1:0b:7d:c5:42:ab:19:3d:3a:16: 60:98:34:a6:d0:fe:bb:c7:37:33:91:df:41:5e:9f:ae:bd:8c: f3:d1:39:e0:b1:87:4f:c0:12:0f:91:28:86:b3:b5:9a:46:5d: 25:8c:e8:ca:e1:0b:8a:de:c8:f5:3f:d1:00:bb:21:2f:ce:83: cd:ad:b9:65:0b:02:8a:3f:d7:d9:4d:ba:f2:bb:89:ac:60:5e: 46:fe:ba:66:35:2e:89:31:84:9d:d1:fb:79:c4:85:dd:58:b9: a2:4c:22:1d:23:db:5e:d3:16:3b:e1:ea:4b:07:6e:e2:17:79: ee:a6:73:00:6e:c6:a7:ea:4f:19:43:79:45:09:42:e6:c5:dd: f7:c7:e5:0f:fc:25:72:2a:aa:8b:29:cb:c9:90:b3:8f:1c:57: 4d:bb:ae:29:df:0d:77:16:5f:6e:5a:8c:b2:58:cc:e5:30:0a: d3:d1:0f:b8:a4:7d:90:08:9e:19:2a:1f:cf:8c:d4:a6:81:2f: b0:e8:53:2e:f3:e4:57:d9:5b:09:9a:1e:a2:cf:00:38:b4:c4: 94:19:1d:db:15:89:94:b2:7e:0e:d1:2a:21:b2:cd:31:34:6a: d0:a4:8f:e6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUX97K+XQBIkM6SZ23PxZQ99onU0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAwMDIwWhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmFhZDVkOWNkMTA3OTNhNDZjZGFjOTQ2YmJlMWFmOWVh ZTU0ZDI2NzY3ZjIwOWE0ZjU0OTE1ODE1YjFjMzU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCplBzXk5o5/EmPsmwJYn3LcR7h4y03w2nlY+wy4uAOaPf 9GntKZfLr0u7Y/4JimMCBeGpmat6l3II6xwUAbfN8d8/6SN7q71h6F01yt7VPRwA rQWFSFLZm3NADNfMEhG633FMgvvA6zPr6CY3WvYc5RLwU5BqCoZw21B/XOtw9aa4 +1hqvWKDPRKJGQhem0S+9IiBKE0tLP4yRK34PmVa50QIhpEFubZQ1ccIUnftECDu zPjN1jU5DB8s0Ebo7kE7j3SXpvAxIS/3TKYrPTw7JFFc0GfkKVNVXaBP4PY/g30I 4cXXK5rqKlGmcMBNrGlzjIrPOnOKTnGa/PvBzF2TAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/IO//vWTJ1kg7AStOKkEL0tR0xYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YWUwZDZkLTE2Y2YtNDBjMy05YTNlLTA1NDQ4MGUxYjM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDOhjANBgkqhkiG9w0BAQsFAAOCAQEAv4OqcN2DE59Rw6RJTgb71cnUedW+ u9e7PgTxC33FQqsZPToWYJg0ptD+u8c3M5HfQV6frr2M89E54LGHT8ASD5EohrO1 mkZdJYzoyuELit7I9T/RALshL86Dza25ZQsCij/X2U268ruJrGBeRv66ZjUuiTGE ndH7ecSF3Vi5okwiHSPbXtMWO+HqSwdu4hd57qZzAG7Gp+pPGUN5RQlC5sXd98fl D/wlciqqiynLyZCzjxxXTbuuKd8NdxZfblqMsljM5TAK09EPuKR9kAieGSofz4zU poEvsOhTLvPkV9lbCZoeos8AOLTElBkd2xWJlLJ+DtEqIbLNMTRq0KSP5g== -----END CERTIFICATE-----Generated at Wed May 7 11:25:24 2025 by rpki-client