$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1633ee8-98fb-487d-86d0-2766783f0d7c.roa File: c1633ee8-98fb-487d-86d0-2766783f0d7c.roa (raw, json) Hash identifier: gO//UZO1K1KvuS7qSAve53saDBCHVprko3zPr4APZ+E= Subject key identifier: AE:2B:D8:5A:8F:24:D7:CF:FC:12:E1:98:37:2E:84:B9:8C:62:2D:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 053DF4EE4070DA5843F0980DD91863A743A383F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1633ee8-98fb-487d-86d0-2766783f0d7c.roa Signing time: Fri 25 Apr 2025 15:10:16 +0000 ROA not before: Fri 25 Apr 2025 15:10:16 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3d:f4:ee:40:70:da:58:43:f0:98:0d:d9:18:63:a7:43:a3:83:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:10:16 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=7a240cf29fc552a86d38b201166c4198bc46225aabf863c8aa0f24323f37906b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:e7:d2:71:8e:3b:e0:d9:80:58:68:eb:14: 63:c9:72:cd:6e:18:2f:d9:28:c6:e9:97:93:ca:6b: 7f:2b:51:f3:ec:46:22:ad:3b:ab:80:7a:85:f7:49: 51:aa:c5:01:40:3a:65:f8:73:ca:62:6a:e2:ff:99: c8:8e:a3:e3:f1:67:a7:9f:bb:0f:34:b9:26:b7:99: 27:bc:d0:71:70:11:9f:30:e0:95:db:c7:4f:d2:cb: e1:d0:b5:22:4d:6b:b4:ab:33:18:6a:2f:2d:25:53: 29:9c:39:b8:6f:76:e0:1a:52:85:a8:14:fb:8c:8e: 0d:e4:d6:23:c1:ab:95:3b:53:0c:f8:e7:ef:b6:54: 77:8b:da:c6:60:80:d4:ff:58:85:a1:44:53:29:1e: c1:81:a8:f9:a5:da:af:49:cd:4e:ce:fc:4a:28:52: 47:cf:ff:37:27:98:f8:9c:fc:e0:5a:84:4c:07:4e: c3:58:d9:f4:8a:fb:ed:e9:0d:9b:13:52:03:d5:38: 95:03:86:d4:d4:fb:4b:e1:6e:aa:65:d4:5f:eb:3c: cf:de:1a:38:7f:ef:37:23:c9:aa:e9:16:57:5d:4f: 6c:64:3a:29:ad:fa:58:77:72:58:ad:51:9b:73:ce: 81:e9:92:49:37:24:47:3b:98:da:5b:6e:02:e7:ce: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:D8:5A:8F:24:D7:CF:FC:12:E1:98:37:2E:84:B9:8C:62:2D:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1633ee8-98fb-487d-86d0-2766783f0d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.160.0/23 Signature Algorithm: sha256WithRSAEncryption 44:ba:0f:70:d3:6f:bb:75:40:a3:d6:10:9f:c2:24:f7:d2:e8: c9:40:fa:03:34:f6:c5:94:a9:aa:83:ed:15:d3:5c:47:4d:33: 20:72:4a:aa:c5:16:cd:a1:a2:e1:c7:83:b4:3a:7c:de:ae:b5: 5d:52:18:6e:da:36:6e:f6:26:72:82:20:14:0d:da:da:0b:85: ee:02:8a:02:3f:68:be:26:77:49:a2:2b:c9:31:68:93:8b:a8: d6:70:e0:95:60:e9:eb:5a:a1:2d:ba:2a:3c:ae:2f:e5:ca:2e: ce:db:c2:ca:9e:94:f3:76:1a:06:3e:80:24:fe:2c:d8:63:d9: 59:06:d5:e4:e3:fe:67:af:e9:32:03:ed:13:56:94:e4:25:56: fe:8d:b9:d2:f6:0f:a2:7a:57:58:be:28:6c:8d:2c:5f:12:23: db:0a:91:7e:4c:6b:9a:6e:a6:73:48:d0:a3:43:51:35:36:02: 42:ba:b6:51:cf:bf:13:e9:d2:6d:f8:e5:b4:b0:af:39:83:6b: c0:a7:d1:f3:b9:13:5e:43:7d:3e:3f:33:50:01:37:b4:0a:1d: 11:69:2c:18:c3:e2:52:0f:53:65:c0:68:27:a2:dd:d1:27:2a: 2a:f7:b1:7c:75:f1:5d:d8:64:2c:24:17:05:c1:93:36:c3:39: 34:74:df:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBT307kBw2lhD8JgN2Rhjp0Ojg/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMDE2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTI0MGNmMjlmYzU1MmE4NmQzOGIyMDExNjZjNDE5OGJj NDYyMjVhYWJmODYzYzhhYTBmMjQzMjNmMzc5MDZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDUOfScY474NmAWGjrFGPJcs1uGC/ZKMbpl5PKa38rUfPs RiKtO6uAeoX3SVGqxQFAOmX4c8piauL/mciOo+PxZ6efuw80uSa3mSe80HFwEZ8w 4JXbx0/Sy+HQtSJNa7SrMxhqLy0lUymcObhvduAaUoWoFPuMjg3k1iPBq5U7Uwz4 5++2VHeL2sZggNT/WIWhRFMpHsGBqPml2q9JzU7O/EooUkfP/zcnmPic/OBahEwH TsNY2fSK++3pDZsTUgPVOJUDhtTU+0vhbqpl1F/rPM/eGjh/7zcjyarpFlddT2xk Oimt+lh3clitUZtzzoHpkkk3JEc7mNpbbgLnzrmhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrivYWo8k18/8EuGYNy6EuYxiLVQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxNjMzZWU4LTk4ZmItNDg3ZC04NmQwLTI3NjY3ODNmMGQ3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUqAwDQYJKoZIhvcNAQELBQADggEBAES6D3DTb7t1QKPWEJ/CJPfS6MlA +gM09sWUqaqD7RXTXEdNMyBySqrFFs2houHHg7Q6fN6utV1SGG7aNm72JnKCIBQN 2toLhe4CigI/aL4md0miK8kxaJOLqNZw4JVg6etaoS26KjyuL+XKLs7bwsqelPN2 GgY+gCT+LNhj2VkG1eTj/mev6TID7RNWlOQlVv6NudL2D6J6V1i+KGyNLF8SI9sK kX5Ma5pupnNI0KNDUTU2AkK6tlHPvxPp0m345bSwrzmDa8Cn0fO5E15DfT4/M1AB N7QKHRFpLBjD4lIPU2XAaCei3dEnKir3sXx18V3YZCwkFwXBkzbDOTR0398= -----END CERTIFICATE-----Generated at Mon May 5 15:13:10 2025 by rpki-client