$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de63a064-738e-48b3-950e-18e9f0ea4724.roa File: de63a064-738e-48b3-950e-18e9f0ea4724.roa (raw, json) Hash identifier: 1FzstwstNJwdloi1uPsqwSuoOinSeKWXbYs4SvGD45I= Subject key identifier: 56:1E:75:8A:0C:25:C3:67:C6:7D:0F:22:31:48:79:A3:9D:A8:55:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47831281D97309CCD21196E11A8E0BF110F411B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de63a064-738e-48b3-950e-18e9f0ea4724.roa Signing time: Fri 02 May 2025 19:52:07 +0000 ROA not before: Fri 02 May 2025 19:52:07 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.162.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:83:12:81:d9:73:09:cc:d2:11:96:e1:1a:8e:0b:f1:10:f4:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 19:52:07 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=98cd572a19dcf6d8f0a7997fb7b9062dfaf8becd25a528b0917adf738c26bfb7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:64:c6:1d:6e:fd:88:8a:90:2d:7f:b3:dc: fb:3f:22:c0:0b:d7:99:af:4c:f2:f9:69:1d:64:fb: c0:32:16:2f:f8:a0:f5:44:93:47:0b:5e:d2:a0:3e: b1:d8:9c:94:e8:70:3d:b5:03:98:d0:01:97:9c:e5: 15:6e:7f:5e:33:0a:f2:f4:93:4f:0d:bc:ad:c5:4a: ad:fb:97:40:ab:6f:f2:78:6f:e6:d9:55:07:de:04: 9e:22:75:6d:98:95:ed:b9:3a:c2:1d:21:93:b1:b4: c5:81:b1:d4:92:b2:d6:f0:2b:11:f1:2f:e9:35:05: 31:13:dd:fc:cb:6f:61:28:28:1b:80:9f:a5:69:6a: 52:1c:b0:44:59:dc:93:f8:f2:b7:eb:05:01:c9:57: f9:b6:c2:f9:ec:8f:e7:35:85:38:73:6f:92:9a:10: ae:29:b6:e4:6b:08:2f:7c:ef:59:79:3d:8b:51:36: 3a:d6:e3:c0:23:cb:7e:3f:85:00:74:b7:f8:3f:71: 96:df:91:fc:bf:d6:ac:db:41:88:fc:a4:f4:21:f2: 6e:0f:17:ad:70:71:83:69:2a:de:34:78:c0:9e:ce: 65:8f:8d:f9:e7:00:8a:2e:e0:49:39:b8:51:a9:09: 58:d2:eb:73:cd:45:9b:bb:86:36:99:95:87:08:d8: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1E:75:8A:0C:25:C3:67:C6:7D:0F:22:31:48:79:A3:9D:A8:55:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de63a064-738e-48b3-950e-18e9f0ea4724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:72:5b:43:77:e4:01:da:63:d2:3e:1f:63:47:cc:ec:59:de: b4:4d:6e:02:86:38:58:51:23:d1:42:d0:02:41:b6:1b:28:b6: 3c:a9:fa:c3:ca:b9:96:c7:4a:3a:9e:05:c9:05:a4:ff:af:64: d9:8f:c1:5a:4a:63:02:d9:08:40:e4:8c:08:77:7b:c2:6d:6c: a3:21:88:53:2e:fd:6a:ea:1b:b4:a6:43:30:73:9f:ee:d8:73: 8c:40:7a:79:08:c4:b1:b7:3c:d9:6d:f6:33:fa:a1:43:06:84: ab:b9:80:6f:c1:8e:c7:33:fa:74:8c:a2:5a:3d:de:61:1e:43: cc:ec:b0:bd:9c:5f:58:b5:6c:ab:44:a3:6f:e9:70:8e:67:66: 61:a1:fd:41:8e:08:58:1e:4f:f3:1f:6e:17:fc:a1:34:af:77: cd:c5:ca:b8:ba:45:02:26:83:60:29:60:67:e0:24:62:5b:b9: 44:00:68:f9:f5:9b:b5:03:5f:65:71:9c:f9:98:d0:63:22:89: 9a:85:61:57:54:bb:48:83:6c:46:34:01:18:64:a9:53:96:5c: c6:d1:2b:af:a2:f4:be:8f:8b:c9:5e:74:75:32:fb:b9:c0:34: de:c7:d5:e8:1d:08:30:fc:f7:c0:17:c0:6f:94:21:0f:d4:19: 39:e1:20:1c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR4MSgdlzCczSEZbhGo4L8RD0EbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMTk1MjA3WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGNkNTcyYTE5ZGNmNmQ4ZjBhNzk5N2ZiN2I5MDYyZGZh ZjhiZWNkMjVhNTI4YjA5MTdhZGY3MzhjMjZiZmI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5NWTGHW79iIqQLX+z3Ps/IsAL15mvTPL5aR1k+8AyFi/4 oPVEk0cLXtKgPrHYnJTocD21A5jQAZec5RVuf14zCvL0k08NvK3FSq37l0Crb/J4 b+bZVQfeBJ4idW2Yle25OsIdIZOxtMWBsdSSstbwKxHxL+k1BTET3fzLb2EoKBuA n6VpalIcsERZ3JP48rfrBQHJV/m2wvnsj+c1hThzb5KaEK4ptuRrCC9871l5PYtR NjrW48Ajy34/hQB0t/g/cZbfkfy/1qzbQYj8pPQh8m4PF61wcYNpKt40eMCezmWP jfnnAIou4Ek5uFGpCVjS63PNRZu7hjaZlYcI2BmHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVh51igwlw2fGfQ8iMUh5o52oVagwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlNjNhMDY0LTczOGUtNDhiMy05NTBlLTE4ZTlmMGVhNDcyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANojANBgkqhkiG9w0BAQsFAAOCAQEAh3JbQ3fkAdpj0j4fY0fM7FnetE1u AoY4WFEj0ULQAkG2Gyi2PKn6w8q5lsdKOp4FyQWk/69k2Y/BWkpjAtkIQOSMCHd7 wm1soyGIUy79auobtKZDMHOf7thzjEB6eQjEsbc82W32M/qhQwaEq7mAb8GOxzP6 dIyiWj3eYR5DzOywvZxfWLVsq0Sjb+lwjmdmYaH9QY4IWB5P8x9uF/yhNK93zcXK uLpFAiaDYClgZ+AkYlu5RABo+fWbtQNfZXGc+ZjQYyKJmoVhV1S7SINsRjQBGGSp U5ZcxtErr6L0vo+LyV50dTL7ucA03sfV6B0IMPz3wBfAb5QhD9QZOeEgHA== -----END CERTIFICATE-----Generated at Sat May 10 19:20:47 2025 by rpki-client