$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa File: c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa (raw, json) Hash identifier: TcfYpBeliJ7MWjPeriz/X+k/CEcsiZHwFygR81SkapY= Subject key identifier: F2:47:AB:C3:A6:1B:7D:6F:66:4B:5D:87:F8:BA:0F:1A:80:C7:9E:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28D25273F9C59251EE7DF2E7B2B97913B622862B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa Signing time: Sat 03 May 2025 00:31:56 +0000 ROA not before: Sat 03 May 2025 00:31:56 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d2:52:73:f9:c5:92:51:ee:7d:f2:e7:b2:b9:79:13:b6:22:86:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:31:56 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=72113e3d94741fbf19b3be6c0904979630e4824f3e53f9a99ca22e6215692a64, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:69:e2:19:bb:c2:ee:75:01:b6:0a:d9:77: c2:42:39:1b:2e:e4:b7:a0:73:36:74:f9:53:df:1f: 6a:7c:47:ba:3a:1b:a9:ea:d7:07:b0:92:0d:d1:77: c2:32:a3:71:b1:e6:3f:1e:55:0b:a1:04:4d:f8:00: bc:16:6e:81:99:0c:58:59:d3:03:bb:28:f5:28:6f: eb:a0:9c:59:bf:42:9e:7a:f4:fd:49:17:02:a8:da: 80:6d:bc:ed:34:c7:19:36:27:87:6a:70:ec:28:4c: 77:93:60:8c:38:49:d4:b9:8b:2a:9e:aa:a3:c4:19: 3c:c2:8a:68:1c:36:aa:92:59:fc:15:d3:94:f7:21: 1e:07:23:27:c2:ec:15:31:29:31:12:07:db:4c:fb: 23:17:36:47:d6:27:46:2a:0c:0b:fb:75:f1:e5:53: 32:bb:e1:64:4b:9e:f3:ad:45:95:fb:b5:a8:85:57: e9:ea:78:3c:2e:40:8b:b7:5f:6a:20:ba:6e:1c:8a: ad:8b:f5:62:80:e8:f7:b9:f9:97:4f:bb:fe:9a:22: 60:f6:c6:7a:b4:0e:e8:4e:12:a3:d4:dd:f7:04:84: ca:56:97:0b:53:b6:84:94:c0:26:87:0f:70:97:cc: ce:07:a4:51:7f:77:3a:7b:4e:5c:6f:68:e1:df:a9: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:AB:C3:A6:1B:7D:6F:66:4B:5D:87:F8:BA:0F:1A:80:C7:9E:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption b6:7d:ab:03:9e:f4:18:37:67:ed:72:1d:bb:0b:6b:0c:e4:4c: 8c:67:d7:e6:48:e9:de:54:80:e4:79:eb:54:d0:b3:2b:2e:65: 15:36:a4:b6:31:66:b6:1d:d6:21:aa:3c:48:4e:77:84:27:dc: 93:11:06:d8:10:01:83:7c:a4:f5:df:1e:d8:3d:75:21:01:70: 4e:32:81:d4:50:ff:ad:b0:08:11:42:a5:fc:ce:a2:aa:67:e7: 7f:cf:22:79:21:f3:43:65:1d:ae:33:f5:a7:cd:67:a3:62:77: 1e:21:37:5a:bf:40:91:b4:ac:9a:91:36:74:90:06:5d:0f:e3: 6f:f8:67:a9:67:cb:ae:5a:ac:ae:cf:6f:02:73:85:c7:ca:29: 8f:ce:f6:70:25:b4:41:1e:3c:00:0b:1d:60:b1:dd:79:63:d8: aa:3f:01:78:c9:64:04:c8:82:b2:b7:91:2f:c8:79:80:73:9a: 74:ab:cf:19:b5:59:9a:51:d3:08:a0:3d:7c:6c:c3:c0:99:e6: c9:ea:54:66:1f:e0:70:b7:f1:a8:fc:3d:1b:b7:6b:5c:a2:97: 8b:2f:e4:d7:a8:23:fe:04:76:36:9c:94:57:36:e4:55:9e:2f: 21:08:c0:19:ab:b8:11:89:bd:9f:ad:f8:6e:fc:92:71:26:a5: f6:ae:d1:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKNJSc/nFklHuffLnsrl5E7YihiswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAzMTU2WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjExM2UzZDk0NzQxZmJmMTliM2JlNmMwOTA0OTc5NjMw ZTQ4MjRmM2U1M2Y5YTk5Y2EyMmU2MjE1NjkyYTY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRgmniGbvC7nUBtgrZd8JCORsu5LegczZ0+VPfH2p8R7o6 G6nq1wewkg3Rd8Iyo3Gx5j8eVQuhBE34ALwWboGZDFhZ0wO7KPUob+ugnFm/Qp56 9P1JFwKo2oBtvO00xxk2J4dqcOwoTHeTYIw4SdS5iyqeqqPEGTzCimgcNqqSWfwV 05T3IR4HIyfC7BUxKTESB9tM+yMXNkfWJ0YqDAv7dfHlUzK74WRLnvOtRZX7taiF V+nqeDwuQIu3X2ogum4ciq2L9WKA6Pe5+ZdPu/6aImD2xnq0DuhOEqPU3fcEhMpW lwtTtoSUwCaHD3CXzM4HpFF/dzp7TlxvaOHfqcVjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8kerw6YbfW9mS12H+LoPGoDHnu4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxY2JmZjIzLWM1YjctNDAzZC1hNTNjLWJkMjNmYzFiMGEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EAwDQYJKoZIhvcNAQELBQADggEBALZ9qwOe9Bg3Z+1yHbsLawzkTIxn 1+ZI6d5UgOR561TQsysuZRU2pLYxZrYd1iGqPEhOd4Qn3JMRBtgQAYN8pPXfHtg9 dSEBcE4ygdRQ/62wCBFCpfzOoqpn53/PInkh80NlHa4z9afNZ6Nidx4hN1q/QJG0 rJqRNnSQBl0P42/4Z6lny65arK7PbwJzhcfKKY/O9nAltEEePAALHWCx3Xlj2Ko/ AXjJZATIgrK3kS/IeYBzmnSrzxm1WZpR0wigPXxsw8CZ5snqVGYf4HC38aj8PRu3 a1yil4sv5NeoI/4EdjaclFc25FWeLyEIwBmruBGJvZ+t+G78knEmpfau0Zo= -----END CERTIFICATE-----Generated at Mon May 5 23:51:23 2025 by rpki-client