$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa File: cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json) Hash identifier: KcCDVT/004bT176tDrTbsDaaLFTW1IIrlnQIIbToyf4= Subject key identifier: 16:24:21:F8:9B:0C:84:46:11:52:F1:C5:E1:D8:31:68:A6:2C:C1:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19946597E8B13D5EA1AE9328559748A4C00E0839 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa Signing time: Sat 10 May 2025 00:11:01 +0000 ROA not before: Sat 10 May 2025 00:11:01 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:94:65:97:e8:b1:3d:5e:a1:ae:93:28:55:97:48:a4:c0:0e:08:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:11:01 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=dab1d37f5798afc24ee2d619e0523c2fc7f17d77049f0fb7ae090e4c85357531, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:53:a5:02:f0:36:64:ed:9e:19:90:4f:93: 13:fb:fb:69:4d:4e:d0:7c:24:27:95:ff:8f:7f:7e: e3:af:fe:f1:9b:86:5b:4a:13:4e:3c:36:43:78:e1: 3d:45:c2:37:89:c5:29:67:0f:ac:97:f2:e8:eb:d5: 71:52:71:cb:64:d1:f2:8c:19:4c:e3:a7:42:23:cc: 33:d2:ee:62:16:49:34:f4:bf:31:2e:78:c6:8a:b1: d7:e3:83:66:5e:0d:59:b2:4c:1c:d0:a0:29:c5:77: 58:be:5f:3e:1b:1c:e5:f6:99:9b:4d:3b:3b:50:9f: ad:22:c5:b4:ad:69:86:9f:ee:5b:ee:f5:26:40:3d: e1:c0:c3:ec:44:5f:f4:e3:a7:e7:c3:d7:ea:69:e2: 7a:79:b2:f3:62:9e:bc:f4:a6:85:6d:77:f1:8d:19: 18:5b:ca:f3:5f:41:0f:63:9d:48:b3:8a:df:be:6a: 86:aa:61:c5:cc:e1:da:18:59:bf:a3:c9:75:fe:ee: 1c:ad:6d:46:da:ec:f9:77:ab:c8:c8:17:54:fb:e0: a5:e7:f1:c6:78:bf:f4:57:3b:5e:9c:be:37:2c:7b: 82:12:5b:45:45:31:41:8c:8f:54:e8:e8:93:a6:2c: 55:26:5f:45:cb:c4:b5:a4:49:f7:3b:f9:0d:34:73: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:24:21:F8:9B:0C:84:46:11:52:F1:C5:E1:D8:31:68:A6:2C:C1:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:c1:9b:d1:9d:ad:c4:07:8f:9b:77:a5:52:13:19:50:60:ba: 0d:f4:e0:f4:12:b9:52:61:0b:bc:4b:72:b6:02:7c:67:ac:e3: e6:e6:bb:5f:ad:f4:e2:81:87:f6:58:63:18:94:30:02:59:38: 0f:c0:f2:9e:6e:31:1f:41:43:96:66:b3:44:fc:88:12:77:50: 39:87:4d:d5:d3:d0:9d:fb:b8:a2:b9:59:8a:04:27:96:4f:3e: b5:bf:56:51:40:97:18:58:be:c2:7a:86:bf:28:e1:0e:d5:9e: a1:8c:ad:a9:25:6e:00:1c:53:54:5c:35:2c:eb:89:9e:92:ae: a7:25:0c:50:ae:fa:59:79:76:f1:2f:d7:a6:8e:73:1d:c6:18: b4:32:6f:dc:7f:86:b1:ca:de:47:f4:be:32:9f:60:9c:3a:7a: 4c:c5:10:a9:4f:ed:28:c4:a0:60:49:c3:30:04:9f:3c:df:1a: 46:8b:78:a5:7c:2a:ab:3d:65:50:30:de:65:6a:69:8a:c6:df: 47:b2:34:9e:6d:68:cd:e9:99:62:8e:00:1a:3d:e5:2d:6f:d6: b8:9e:ee:06:b0:3e:69:e1:b0:63:d2:fd:d1:6c:62:1a:17:4b: 51:30:42:66:76:18:f9:5d:a4:37:e9:ec:87:b8:b1:eb:43:cf: 91:94:d4:23 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGZRll+ixPV6hrpMoVZdIpMAOCDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAxMTAxWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWIxZDM3ZjU3OThhZmMyNGVlMmQ2MTllMDUyM2MyZmM3 ZjE3ZDc3MDQ5ZjBmYjdhZTA5MGU0Yzg1MzU3NTMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGolOlAvA2ZO2eGZBPkxP7+2lNTtB8JCeV/49/fuOv/vGb hltKE048NkN44T1FwjeJxSlnD6yX8ujr1XFScctk0fKMGUzjp0IjzDPS7mIWSTT0 vzEueMaKsdfjg2ZeDVmyTBzQoCnFd1i+Xz4bHOX2mZtNOztQn60ixbStaYaf7lvu 9SZAPeHAw+xEX/Tjp+fD1+pp4np5svNinrz0poVtd/GNGRhbyvNfQQ9jnUizit++ aoaqYcXM4doYWb+jyXX+7hytbUba7Pl3q8jIF1T74KXn8cZ4v/RXO16cvjcse4IS W0VFMUGMj1To6JOmLFUmX0XLxLWkSfc7+Q00c7CrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFiQh+JsMhEYRUvHF4dgxaKYsweIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjMjA0MTkyLWY1NGEtNGEyNC1iNjkzLTkwNWZiZjQzM2I3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4UTANBgkqhkiG9w0BAQsFAAOCAQEAq8Gb0Z2txAePm3elUhMZUGC6DfTg 9BK5UmELvEtytgJ8Z6zj5ua7X6304oGH9lhjGJQwAlk4D8Dynm4xH0FDlmazRPyI EndQOYdN1dPQnfu4orlZigQnlk8+tb9WUUCXGFi+wnqGvyjhDtWeoYytqSVuABxT VFw1LOuJnpKupyUMUK76WXl28S/Xpo5zHcYYtDJv3H+GscreR/S+Mp9gnDp6TMUQ qU/tKMSgYEnDMASfPN8aRot4pXwqqz1lUDDeZWppisbfR7I0nm1ozemZYo4AGj3l LW/WuJ7uBrA+aeGwY9L90WxiGhdLUTBCZnYY+V2kN+nsh7ix60PPkZTUIw== -----END CERTIFICATE-----Generated at Tue May 13 07:56:51 2025 by rpki-client