$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa File: c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa (raw, json) Hash identifier: gva3Q4OmHh+27qdaPnkwDZPVgg0zy/CAI0x7pqLLFe8= Subject key identifier: A8:45:15:CA:46:DA:E8:20:EB:7A:49:C0:F6:C8:C6:7E:18:95:BC:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 509331EFC0C4BD4A20A3DF664252925C3FE7D062 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa Signing time: Mon 05 May 2025 15:01:09 +0000 ROA not before: Mon 05 May 2025 15:01:09 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 199.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:93:31:ef:c0:c4:bd:4a:20:a3:df:66:42:52:92:5c:3f:e7:d0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:01:09 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=ddfca17e2817e668b1a734f52ed715a30ac0fd81999f289487a8884fe2a79219, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:e6:71:04:8d:f1:17:83:e9:df:89:a2:35: d8:6a:75:36:1b:4d:f0:bd:19:f5:95:30:ad:8e:1e: 34:30:79:94:3e:9c:a9:d2:0b:68:7c:6b:95:23:1e: 9c:c1:c4:c0:27:f7:ed:cc:7b:c9:b3:c9:03:cd:75: 50:db:74:82:b8:71:3c:5f:97:bd:cc:65:f4:1c:d1: 29:49:57:d6:ed:f8:17:64:0a:36:78:da:a2:1d:57: 15:29:02:a8:d2:bb:4e:d0:d6:1e:20:70:65:1a:a2: 5d:de:09:64:6d:3a:f3:5b:90:ff:d5:68:b7:38:d7: f7:8c:99:de:76:58:0a:7d:fb:8b:b3:69:d0:48:8e: 54:2b:3b:69:23:58:8f:c6:3f:4a:df:54:6d:64:c8: 3b:a5:5d:61:52:65:85:96:cf:b4:4e:f5:ca:b6:47: cc:32:9c:c9:f4:8b:c8:89:90:3e:09:ee:01:1b:26: 80:39:21:4c:4d:98:0a:17:28:17:31:48:bf:44:7e: e9:0a:54:93:c0:ee:a7:88:25:47:7c:b9:98:9a:e5: f3:cb:83:7b:c2:3d:c0:70:af:98:c5:4c:36:27:1f: 27:56:a3:66:9c:68:5e:39:80:f8:ec:02:25:5e:18: 33:62:5d:8f:92:b9:97:91:ee:c3:64:63:02:14:df: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:45:15:CA:46:DA:E8:20:EB:7A:49:C0:F6:C8:C6:7E:18:95:BC:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8296b0d-cbcf-44a2-886a-0112d22bf3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:93:3c:c9:ac:51:fe:66:3a:b6:f9:f6:92:72:b0:24:8a:9d: 62:d4:c4:61:a4:d5:4f:8e:99:b6:55:9f:b9:36:2a:da:c5:a2: 9c:b9:b7:7a:db:87:69:29:9c:6f:9a:fd:cb:a2:81:9e:c6:28: da:62:ca:42:54:48:85:99:3a:4c:3b:ce:10:3a:77:f9:01:f4: 8b:b8:e9:09:9d:6a:39:ec:be:e6:26:86:f9:9e:31:79:51:53: 4d:80:7b:d2:00:0b:c7:9d:ac:81:f2:2a:dc:94:9e:ce:34:25: f2:6d:9e:bb:2d:73:e8:0c:5b:3f:3e:2e:7d:d0:5c:17:df:20: e4:29:e7:20:99:f1:f9:31:72:c9:10:69:74:c2:bf:93:a4:be: 0e:d3:be:4c:8b:67:1b:4c:8c:c5:65:48:8b:2c:c6:27:60:c6: eb:31:0e:d8:d4:eb:b2:69:2c:e1:90:40:30:b3:ea:a8:6b:31: fb:cd:d5:8a:d0:50:7f:4c:24:61:4b:3c:35:8c:58:33:a3:3e: 8b:37:42:af:36:ff:e0:dd:eb:96:bb:4a:3f:b4:f3:4c:da:8a: e9:44:05:4e:9e:c2:be:9b:20:07:cc:eb:16:73:28:c8:6a:bd: cc:c8:0f:e6:87:8d:7b:11:1b:80:09:a2:88:5b:97:dd:ee:af: ba:9e:06:97 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUJMx78DEvUogo99mQlKSXD/n0GIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUwMTA5WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGZjYTE3ZTI4MTdlNjY4YjFhNzM0ZjUyZWQ3MTVhMzBh YzBmZDgxOTk5ZjI4OTQ4N2E4ODg0ZmUyYTc5MjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZouZxBI3xF4Pp34miNdhqdTYbTfC9GfWVMK2OHjQweZQ+ nKnSC2h8a5UjHpzBxMAn9+3Me8mzyQPNdVDbdIK4cTxfl73MZfQc0SlJV9bt+Bdk CjZ42qIdVxUpAqjSu07Q1h4gcGUaol3eCWRtOvNbkP/VaLc41/eMmd52WAp9+4uz adBIjlQrO2kjWI/GP0rfVG1kyDulXWFSZYWWz7RO9cq2R8wynMn0i8iJkD4J7gEb JoA5IUxNmAoXKBcxSL9EfukKVJPA7qeIJUd8uZia5fPLg3vCPcBwr5jFTDYnHydW o2acaF45gPjsAiVeGDNiXY+SuZeR7sNkYwIU371jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqEUVykba6CDreknA9sjGfhiVvGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4Mjk2YjBkLWNiY2YtNDRhMi04ODZhLTAxMTJkMjJiZjNjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDHSDANBgkqhkiG9w0BAQsFAAOCAQEAo5M8yaxR/mY6tvn2knKwJIqdYtTE YaTVT46ZtlWfuTYq2sWinLm3etuHaSmcb5r9y6KBnsYo2mLKQlRIhZk6TDvOEDp3 +QH0i7jpCZ1qOey+5iaG+Z4xeVFTTYB70gALx52sgfIq3JSezjQl8m2euy1z6Axb Pz4ufdBcF98g5CnnIJnx+TFyyRBpdMK/k6S+DtO+TItnG0yMxWVIiyzGJ2DG6zEO 2NTrsmks4ZBAMLPqqGsx+83VitBQf0wkYUs8NYxYM6M+izdCrzb/4N3rlrtKP7Tz TNqK6UQFTp7CvpsgB8zrFnMoyGq9zMgP5oeNexEbgAmiiFuX3e6vup4Glw== -----END CERTIFICATE-----Generated at Sat May 10 19:00:41 2025 by rpki-client