$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa File: eac672f7-9965-4a49-bc3b-231aecd7767e.roa (raw, json) Hash identifier: Cqx+HFFX06wLKMZPONwHxU048au38RO2vrW/+/KXaRw= Subject key identifier: 3D:4D:1D:4D:14:52:B1:8C:92:35:45:AF:E9:16:84:BF:11:5F:D3:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E096CC3EDB8A7F1AEA9329A6397484C94C040DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa Signing time: Fri 02 May 2025 00:10:32 +0000 ROA not before: Fri 02 May 2025 00:10:32 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 164.178.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:09:6c:c3:ed:b8:a7:f1:ae:a9:32:9a:63:97:48:4c:94:c0:40:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:10:32 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=7e886c74fd56946af3ad168bb3914190087de4fbc78315137249f8a2fd15a2c0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:e5:45:64:66:14:d5:e8:0b:f1:76:55:28: ae:bb:2f:b5:51:e1:6f:35:71:0a:0c:86:b2:74:a2: d9:43:e5:e0:a3:0f:45:0c:43:0b:f6:b8:7a:31:50: 76:93:a5:d5:f8:1e:e5:f8:63:dd:12:13:1f:e1:18: ee:65:ef:1b:56:a2:45:75:f7:3d:07:17:09:71:fd: 48:03:b1:03:79:1d:19:8b:b6:47:c9:b4:39:fc:1e: 19:6f:44:1c:26:05:2e:59:80:2d:dd:f2:bd:ed:6d: c8:cb:91:0f:f7:0e:01:00:7d:52:72:4d:ee:d6:ab: 7c:b1:83:63:61:b4:ed:0c:4f:35:91:0f:da:f3:93: 8d:1b:20:06:4a:f1:37:eb:66:30:2b:1c:67:65:13: 99:2a:f8:93:4e:bb:b1:fb:f4:be:63:7c:7f:e4:ea: 1e:41:26:32:95:d2:61:db:82:d4:47:a1:8b:dd:45: 28:f4:47:09:df:a9:2f:58:4f:91:b0:e6:a5:10:a6: 99:92:e9:35:72:f0:28:11:6c:53:7b:5a:7e:ef:4f: 1c:e3:3c:57:e2:2f:f4:e6:c7:be:38:ad:1e:41:cf: d3:31:f7:c8:1c:3a:25:06:c5:77:b7:a0:bd:72:7d: 98:2b:23:60:e4:f5:86:0c:6a:10:b6:fa:f3:d7:01: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4D:1D:4D:14:52:B1:8C:92:35:45:AF:E9:16:84:BF:11:5F:D3:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eac672f7-9965-4a49-bc3b-231aecd7767e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.178.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:f7:81:4f:40:77:e1:d3:5f:f1:d2:cb:40:31:47:f7:d1:27: a6:58:67:75:b9:44:df:a4:5e:bb:d8:76:55:51:d3:d2:b8:59: 65:df:81:c6:c2:31:83:21:d0:bd:37:4f:b1:6a:e8:73:35:6f: 0d:32:0e:ea:45:6f:6e:41:67:7b:66:be:a3:d2:d5:67:b6:70: 8d:36:3c:2b:02:fd:69:e2:07:40:fd:5b:4a:93:8c:f1:65:8c: 4f:5f:c9:4b:58:8a:df:b1:60:47:6a:6a:25:06:e0:da:d1:e4: 03:7c:0b:bc:37:91:d1:6a:85:b0:4f:53:25:91:e9:96:7c:01: 1a:4c:71:a1:99:3f:65:44:6d:a7:bb:4a:83:5a:59:41:19:46: 60:f9:6d:be:5d:d7:76:fa:b2:2e:0e:d7:f4:5a:9e:8f:c1:0f: ed:d5:50:a2:97:c8:ed:d8:ab:b3:9e:38:02:aa:1b:47:33:31: 7c:a0:b7:bb:36:c3:83:2c:3f:4f:e0:28:38:e1:75:72:f3:1d: 6e:60:31:c2:40:a6:91:2f:1b:8e:10:b1:89:b0:ce:29:1b:ef: 29:5f:ec:1d:8a:74:dd:aa:80:95:26:b3:3a:c8:1c:91:26:da: f2:b2:e7:c3:80:4b:69:da:03:ba:5b:67:96:9c:5e:bb:37:6e: 08:a9:60:4f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHglsw+24p/GuqTKaY5dITJTAQN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAxMDMyWhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTg4NmM3NGZkNTY5NDZhZjNhZDE2OGJiMzkxNDE5MDA4 N2RlNGZiYzc4MzE1MTM3MjQ5ZjhhMmZkMTVhMmMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDo+VFZGYU1egL8XZVKK67L7VR4W81cQoMhrJ0otlD5eCj D0UMQwv2uHoxUHaTpdX4HuX4Y90SEx/hGO5l7xtWokV19z0HFwlx/UgDsQN5HRmL tkfJtDn8HhlvRBwmBS5ZgC3d8r3tbcjLkQ/3DgEAfVJyTe7Wq3yxg2NhtO0MTzWR D9rzk40bIAZK8TfrZjArHGdlE5kq+JNOu7H79L5jfH/k6h5BJjKV0mHbgtRHoYvd RSj0RwnfqS9YT5Gw5qUQppmS6TVy8CgRbFN7Wn7vTxzjPFfiL/Tmx744rR5Bz9Mx 98gcOiUGxXe3oL1yfZgrI2Dk9YYMahC2+vPXAWNJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPU0dTRRSsYySNUWv6RaEvxFf06AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhYzY3MmY3LTk5NjUtNGE0OS1iYzNiLTIzMWFlY2Q3NzY3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCksjANBgkqhkiG9w0BAQsFAAOCAQEAg/eBT0B34dNf8dLLQDFH99Enplhn dblE36Reu9h2VVHT0rhZZd+BxsIxgyHQvTdPsWroczVvDTIO6kVvbkFne2a+o9LV Z7ZwjTY8KwL9aeIHQP1bSpOM8WWMT1/JS1iK37FgR2pqJQbg2tHkA3wLvDeR0WqF sE9TJZHplnwBGkxxoZk/ZURtp7tKg1pZQRlGYPltvl3XdvqyLg7X9Fqej8EP7dVQ opfI7dirs544AqobRzMxfKC3uzbDgyw/T+AoOOF1cvMdbmAxwkCmkS8bjhCxibDO KRvvKV/sHYp03aqAlSazOsgckSba8rLnw4BLadoDultnlpxeuzduCKlgTw== -----END CERTIFICATE-----Generated at Sun May 11 01:29:00 2025 by rpki-client