$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa File: c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa (raw, json) Hash identifier: 64CWqMWM8UaFKObur/6auYVwGquD/XGgPv2fUv07RnA= Subject key identifier: FC:06:F5:81:30:51:01:6F:CF:1A:50:DB:00:EE:36:B5:3C:E5:C4:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 455CB780285B5C6A678CB627EF58E06DB6769252 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa Signing time: Tue 29 Apr 2025 00:02:07 +0000 ROA not before: Tue 29 Apr 2025 00:02:07 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.234.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5c:b7:80:28:5b:5c:6a:67:8c:b6:27:ef:58:e0:6d:b6:76:92:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:02:07 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=36120f43d033700c38d2029c1a73ffde44524e33f1d2b9c27ad8a69100cd2288, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:2f:cd:de:16:85:7b:65:4f:aa:5c:36:d2: 10:e8:b7:2d:b4:13:16:08:e3:de:1e:35:c2:85:27: ce:18:09:dd:f9:1b:6b:5b:f5:f1:28:23:e1:17:b5: 84:e7:6f:bc:4b:82:03:f1:04:b5:32:fa:31:f6:4b: 86:5c:d8:46:85:b8:2e:86:cd:6a:5b:10:37:55:2c: 0a:ca:91:50:f3:bb:7c:96:88:ce:93:2c:93:bf:5c: d9:e4:27:d7:66:32:27:81:dd:28:47:32:57:75:fd: 1d:82:bf:cb:e3:f2:a9:03:9f:a7:ca:af:54:56:eb: 43:de:22:c4:80:49:08:a0:d0:ea:81:26:39:ff:6d: 04:f2:d7:33:62:bb:43:ef:a6:6c:21:a1:04:08:94: ba:bb:60:2e:29:ea:7d:34:d9:b9:23:38:e9:73:03: fa:6a:5a:be:d2:bb:9e:33:49:a5:05:58:ea:b5:2b: 90:ce:31:70:28:0d:dd:8f:48:c9:f6:19:8c:01:f1: b9:2a:f6:c5:9e:05:85:1f:6c:8f:e4:a4:30:8b:2d: 57:8f:21:c9:f9:e5:da:de:db:87:e4:16:9d:2e:82: ae:24:85:8a:5a:eb:cc:ba:26:06:dd:5f:61:7e:4d: 77:7a:e3:d1:f1:98:81:a9:c5:9c:d0:f1:5b:39:69: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:06:F5:81:30:51:01:6F:CF:1A:50:DB:00:EE:36:B5:3C:E5:C4:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c39a1017-a2a4-4d4a-a7f6-9ec0738f7329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4c:d5:72:f5:6a:33:89:d4:c9:62:31:8a:34:8c:d5:4f:5a:7e: f0:ce:d6:15:54:89:88:14:19:f8:f5:a4:91:74:6d:e8:5e:f0: 91:9d:50:90:c6:24:4f:9c:47:dc:d7:0d:96:51:b4:dc:c4:f7: 30:57:15:d1:0f:fe:7b:56:4f:51:28:15:3c:fc:8c:46:90:3f: 9a:d4:f2:0d:40:14:b8:4b:7a:60:47:69:ce:3e:a6:c7:5f:f4: 8e:31:d0:9a:d3:c8:98:bb:73:8c:67:7c:b4:93:d5:82:e5:a3: 3a:2f:30:3a:3e:60:73:62:12:b8:a2:64:f1:23:3f:93:36:72: 74:0d:10:7b:49:fb:49:6c:89:96:ae:89:1d:05:8c:9f:8b:83: 8c:47:52:60:e2:1e:6b:ef:3f:c3:55:80:90:63:89:75:a9:0d: 59:ec:dd:6c:5f:24:85:dc:ec:e6:74:bf:f5:40:68:3e:1c:7f: 7b:e6:81:1f:5e:03:50:ac:03:7b:b1:61:1f:dc:f7:88:4a:e2: f7:2e:d3:5c:88:d0:ba:b2:54:59:67:c1:6d:af:ed:d9:fa:78: af:69:dd:3f:f4:e7:67:6f:fb:95:50:10:63:12:9e:e8:4a:18: 94:dd:86:64:77:59:bc:84:3b:05:85:52:25:07:b7:69:8f:b3: d0:46:ce:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURVy3gChbXGpnjLYn71jgbbZ2klIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAwMjA3WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjEyMGY0M2QwMzM3MDBjMzhkMjAyOWMxYTczZmZkZTQ0 NTI0ZTMzZjFkMmI5YzI3YWQ4YTY5MTAwY2QyMjg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF7C/N3haFe2VPqlw20hDoty20ExYI494eNcKFJ84YCd35 G2tb9fEoI+EXtYTnb7xLggPxBLUy+jH2S4Zc2EaFuC6GzWpbEDdVLArKkVDzu3yW iM6TLJO/XNnkJ9dmMieB3ShHMld1/R2Cv8vj8qkDn6fKr1RW60PeIsSASQig0OqB Jjn/bQTy1zNiu0PvpmwhoQQIlLq7YC4p6n002bkjOOlzA/pqWr7Su54zSaUFWOq1 K5DOMXAoDd2PSMn2GYwB8bkq9sWeBYUfbI/kpDCLLVePIcn55dre24fkFp0ugq4k hYpa68y6JgbdX2F+TXd649HxmIGpxZzQ8Vs5aeltAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/Ab1gTBRAW/PGlDbAO42tTzlxBMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzOWExMDE3LWEyYTQtNGQ0YS1hN2Y2LTllYzA3MzhmNzMyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYX6sAwDQYJKoZIhvcNAQELBQADggEBAEzVcvVqM4nUyWIxijSM1U9afvDO 1hVUiYgUGfj1pJF0behe8JGdUJDGJE+cR9zXDZZRtNzE9zBXFdEP/ntWT1EoFTz8 jEaQP5rU8g1AFLhLemBHac4+psdf9I4x0JrTyJi7c4xnfLST1YLlozovMDo+YHNi EriiZPEjP5M2cnQNEHtJ+0lsiZauiR0FjJ+Lg4xHUmDiHmvvP8NVgJBjiXWpDVns 3WxfJIXc7OZ0v/VAaD4cf3vmgR9eA1CsA3uxYR/c94hK4vcu01yI0LqyVFlnwW2v 7dn6eK9p3T/052dv+5VQEGMSnuhKGJTdhmR3WbyEOwWFUiUHt2mPs9BGzug= -----END CERTIFICATE-----Generated at Mon May 5 06:53:29 2025 by rpki-client