$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c134793a-63ec-4164-85d3-0adf648bcf8d.roa File: c134793a-63ec-4164-85d3-0adf648bcf8d.roa (raw, json) Hash identifier: GhtvvdrLi1JZmeLn4tN3Eil0KzMUPlEB0hLgQbHe0yI= Subject key identifier: BE:CB:A2:75:61:01:49:17:0C:D5:5A:0E:54:4C:E9:C1:09:9F:9F:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 016386D3A6655FAA81A3D29B9E926F3A88C4B9AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c134793a-63ec-4164-85d3-0adf648bcf8d.roa Signing time: Tue 29 Apr 2025 00:12:03 +0000 ROA not before: Tue 29 Apr 2025 00:12:03 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.234.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:63:86:d3:a6:65:5f:aa:81:a3:d2:9b:9e:92:6f:3a:88:c4:b9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:12:03 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=537cbe8eff796c234eb57d91568ddbc53783e8ed41f47b5e2f654b34cddf2656, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:34:61:c8:7e:0e:10:f0:78:b5:90:e8:a3: 6a:90:29:32:c8:7b:aa:64:b9:f9:a2:a5:2f:e0:b0: 52:c4:bc:5b:e2:4c:22:d2:3e:56:ac:11:ad:cf:5e: 4b:c9:7d:6b:14:0b:22:92:ac:99:be:02:d5:72:de: 73:91:85:d7:38:a9:26:79:c9:18:86:f2:8e:c1:69: fa:0d:0b:4f:c6:39:12:95:f9:fd:aa:ba:12:f2:9d: ce:93:e9:af:10:2b:0d:7f:8e:69:20:54:74:71:41: 96:ec:76:14:42:31:19:cf:e3:e7:be:e9:8d:3b:22: 3f:10:a7:cb:02:8d:5a:e9:28:62:9f:6a:6b:d5:8d: b8:ef:65:d1:cd:f0:1f:f6:29:d9:f2:ff:49:d3:9a: a8:48:3e:b0:b2:3c:20:8b:f6:23:0d:ed:e1:89:98: 0b:19:9f:ef:fa:b3:15:97:67:7a:67:cf:cc:92:0e: f8:52:6c:c5:f5:fc:9e:89:aa:a8:57:ac:70:ff:d5: 4c:4a:46:10:b4:47:c3:4e:f9:bf:fa:fd:2b:f0:58: 6f:b5:d1:8f:be:ba:ab:6f:2f:c0:b0:76:75:43:b8: 30:91:3c:47:9d:9c:79:64:0a:2d:37:c0:b0:fe:22: 84:c0:72:74:cd:8c:aa:dc:4c:c4:05:2e:6a:ac:b1: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:A2:75:61:01:49:17:0C:D5:5A:0E:54:4C:E9:C1:09:9F:9F:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c134793a-63ec-4164-85d3-0adf648bcf8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.234.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:78:e8:ea:3d:0b:e8:ae:0e:f4:36:a5:30:e7:92:d0:fb:b5: 41:e2:3d:bf:a7:0d:3e:f4:70:18:8a:71:1e:61:57:cd:c8:bb: f1:cd:91:55:2a:d5:97:1e:d2:fc:6e:8a:81:59:1b:bc:fb:b7: cf:b1:91:72:3d:e2:82:03:c0:66:9a:c2:ad:54:c8:81:a6:ca: 52:d5:b9:10:7c:09:a8:7b:7e:c2:03:cd:a3:67:a1:b6:ff:cc: 60:63:04:e8:68:37:6c:9d:64:cb:7b:55:11:0b:4d:74:68:6f: 5e:a6:93:70:68:cc:bf:3c:ff:51:60:3b:ba:8c:37:9e:36:ec: c1:a2:d5:6b:e9:93:52:ab:c0:00:72:ec:ff:5a:46:79:5e:9c: 04:96:3c:d7:ff:1d:23:21:35:97:d7:e3:ba:a2:fc:6e:ee:62: ff:a7:45:12:c4:da:21:f1:1d:20:fe:f4:ef:1f:fe:4a:1b:e4: f7:87:14:dd:cf:53:f2:f5:d9:50:df:bc:e3:66:2d:3d:19:f8: f1:62:c2:56:33:b3:8d:f2:00:6b:14:41:0c:9b:1b:09:be:74: 82:c5:94:30:35:ec:3d:18:a5:58:16:e2:50:7b:47:af:c4:d9: ef:4b:59:b2:e0:db:ce:15:98:6e:47:97:e4:e1:7d:72:e8:be: a7:1a:ae:6b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAWOG06ZlX6qBo9KbnpJvOojEuaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAxMjAzWhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzdjYmU4ZWZmNzk2YzIzNGViNTdkOTE1NjhkZGJjNTM3 ODNlOGVkNDFmNDdiNWUyZjY1NGIzNGNkZGYyNjU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrDzRhyH4OEPB4tZDoo2qQKTLIe6pkufmipS/gsFLEvFvi TCLSPlasEa3PXkvJfWsUCyKSrJm+AtVy3nORhdc4qSZ5yRiG8o7BafoNC0/GORKV +f2quhLync6T6a8QKw1/jmkgVHRxQZbsdhRCMRnP4+e+6Y07Ij8Qp8sCjVrpKGKf amvVjbjvZdHN8B/2Kdny/0nTmqhIPrCyPCCL9iMN7eGJmAsZn+/6sxWXZ3pnz8yS DvhSbMX1/J6JqqhXrHD/1UxKRhC0R8NO+b/6/SvwWG+10Y++uqtvL8CwdnVDuDCR PEednHlkCi03wLD+IoTAcnTNjKrcTMQFLmqssaMjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvsuidWEBSRcM1VoOVEzpwQmfnzcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxMzQ3OTNhLTYzZWMtNDE2NC04NWQzLTBhZGY2NDhiY2Y4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA46jANBgkqhkiG9w0BAQsFAAOCAQEAm3jo6j0L6K4O9DalMOeS0Pu1QeI9 v6cNPvRwGIpxHmFXzci78c2RVSrVlx7S/G6KgVkbvPu3z7GRcj3iggPAZprCrVTI gabKUtW5EHwJqHt+wgPNo2ehtv/MYGME6Gg3bJ1ky3tVEQtNdGhvXqaTcGjMvzz/ UWA7uow3njbswaLVa+mTUqvAAHLs/1pGeV6cBJY81/8dIyE1l9fjuqL8bu5i/6dF EsTaIfEdIP707x/+Shvk94cU3c9T8vXZUN+842YtPRn48WLCVjOzjfIAaxRBDJsb Cb50gsWUMDXsPRilWBbiUHtHr8TZ70tZsuDbzhWYbkeX5OF9cui+pxquaw== -----END CERTIFICATE-----Generated at Sun May 11 13:42:43 2025 by rpki-client