$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa File: d69d305c-a658-4c39-8075-c28e2b201286.roa (raw, json) Hash identifier: LzSybK5Utx8Q6GfskK+ZLZxstyE17soYxQHnDPAI7E8= Subject key identifier: E4:30:38:36:5F:AE:3D:24:4A:A2:22:F3:5B:DB:25:0A:FF:24:E0:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66068EA624C2ADEF880BAC6DDF8417F6E0136B63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa Signing time: Sat 03 May 2025 00:00:28 +0000 ROA not before: Sat 03 May 2025 00:00:28 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 208.115.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:06:8e:a6:24:c2:ad:ef:88:0b:ac:6d:df:84:17:f6:e0:13:6b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:28 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=078f66580c895d5f839c7376e72d7b76afceb078d79d7c0b5544f40b22dc3cdb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:d9:0e:47:1d:f3:59:d5:45:b1:d4:13:11: fc:29:25:48:9b:bd:78:12:38:f0:97:07:2b:ce:5c: 56:08:6a:76:e4:9d:a7:b6:27:3e:a0:5e:35:ed:88: 2d:e8:34:fb:d6:a9:46:8a:1f:e9:bb:26:cf:44:5b: f5:3f:c6:60:0d:78:c6:f4:ea:e4:56:ee:17:a7:30: 28:69:6e:86:c9:a4:d5:97:a1:a5:26:fd:97:20:f4: eb:c6:64:43:b9:7a:b3:e6:e3:be:c0:ab:a0:0b:ab: a4:8c:fa:9e:ce:cb:4c:72:02:18:77:5e:c7:4a:3e: 34:d7:82:c9:a4:17:09:85:09:87:1b:a4:1a:90:93: 17:bf:17:52:dd:c6:90:f3:0a:f0:70:cb:f5:7a:07: 20:0c:6f:c6:ef:8c:28:84:56:f3:57:85:59:e1:71: 77:b6:de:a7:ff:94:b0:2d:a6:26:43:68:db:59:6a: 07:91:01:82:82:a6:61:b7:bc:45:23:e8:92:34:e0: d2:f9:72:b1:bc:a7:81:52:af:d9:b8:95:f3:fd:e6: fe:83:b1:0d:96:a8:56:a7:4f:9b:5f:ce:76:b4:87: 80:89:b9:a4:eb:c2:3b:8b:47:a0:10:7e:da:2f:61: 1c:84:58:38:8a:28:4b:8f:31:79:21:70:5b:85:d1: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:38:36:5F:AE:3D:24:4A:A2:22:F3:5B:DB:25:0A:FF:24:E0:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.115.0.0/19 Signature Algorithm: sha256WithRSAEncryption 87:19:56:59:a3:f2:30:b0:e5:12:15:90:82:b3:7a:60:91:12: e5:06:7c:29:18:0b:04:8b:63:07:c5:6f:e3:1f:61:d8:87:b3: 8a:a1:76:c7:ad:1a:a6:1c:4e:63:c9:21:81:16:e3:fe:a0:58: e8:ab:0d:ea:6b:5d:51:7a:ca:47:f2:bc:ad:f8:c0:23:d2:4c: cb:28:f9:e7:9a:58:dd:c2:f8:f1:39:ba:8d:25:72:76:f6:9d: 0c:c0:18:b3:6c:b7:2d:1f:99:7e:cb:ef:e0:b3:70:4e:9e:07: d6:5a:05:c8:be:a3:85:62:33:68:73:ae:c8:dd:7a:93:5b:41: bc:8a:47:f9:93:73:30:21:55:bb:82:b9:81:43:07:9d:00:6c: 7c:3f:4d:fb:cd:88:09:fb:c8:2e:c4:8b:07:ff:39:92:98:ec: 0b:c5:6d:ef:8a:2f:53:ed:a4:00:1f:9a:2e:08:fe:16:f4:01: 60:9e:32:33:d4:95:ef:c2:91:9b:3d:66:02:06:f4:cf:40:b5: 17:76:8c:f2:70:ed:6f:37:86:ef:69:6d:76:75:b0:b6:4e:c0: a9:38:16:7d:ca:60:e5:8d:a2:4e:a7:3a:2d:37:ac:42:5c:4d: a0:e7:d0:7d:40:9f:78:f4:b0:e4:dd:4f:52:d2:2a:27:ea:be: 57:ff:ef:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZgaOpiTCre+IC6xt34QX9uATa2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAwMDI4WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzhmNjY1ODBjODk1ZDVmODM5YzczNzZlNzJkN2I3NmFm Y2ViMDc4ZDc5ZDdjMGI1NTQ0ZjQwYjIyZGMzY2RiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL0NkORx3zWdVFsdQTEfwpJUibvXgSOPCXByvOXFYIanbk nae2Jz6gXjXtiC3oNPvWqUaKH+m7Js9EW/U/xmANeMb06uRW7henMChpbobJpNWX oaUm/Zcg9OvGZEO5erPm477Aq6ALq6SM+p7Oy0xyAhh3XsdKPjTXgsmkFwmFCYcb pBqQkxe/F1LdxpDzCvBwy/V6ByAMb8bvjCiEVvNXhVnhcXe23qf/lLAtpiZDaNtZ ageRAYKCpmG3vEUj6JI04NL5crG8p4FSr9m4lfP95v6DsQ2WqFanT5tfzna0h4CJ uaTrwjuLR6AQftovYRyEWDiKKEuPMXkhcFuF0f4DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5DA4Nl+uPSRKoiLzW9slCv8k4F4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2OWQzMDVjLWE2NTgtNGMzOS04MDc1LWMyOGUyYjIwMTI4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXQcwAwDQYJKoZIhvcNAQELBQADggEBAIcZVlmj8jCw5RIVkIKzemCREuUG fCkYCwSLYwfFb+MfYdiHs4qhdsetGqYcTmPJIYEW4/6gWOirDeprXVF6ykfyvK34 wCPSTMso+eeaWN3C+PE5uo0lcnb2nQzAGLNsty0fmX7L7+CzcE6eB9ZaBci+o4Vi M2hzrsjdepNbQbyKR/mTczAhVbuCuYFDB50AbHw/TfvNiAn7yC7Eiwf/OZKY7AvF be+KL1PtpAAfmi4I/hb0AWCeMjPUle/CkZs9ZgIG9M9AtRd2jPJw7W83hu9pbXZ1 sLZOwKk4Fn3KYOWNok6nOi03rEJcTaDn0H1An3j0sOTdT1LSKifqvlf/7+I= -----END CERTIFICATE-----Generated at Wed May 7 04:18:22 2025 by rpki-client