$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed432fea-e545-4d6d-beae-21ab78adea7b.roa File: ed432fea-e545-4d6d-beae-21ab78adea7b.roa (raw, json) Hash identifier: c2HqHJQ0SUQK6htB/cNc9zwl8XDz4xmic6yqBQvIBQU= Subject key identifier: 9B:ED:84:64:DB:82:A0:F5:20:43:2E:BB:CF:41:6D:09:47:71:5E:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52F518439802D72157DD3B25E728DB0BC2E76BE0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed432fea-e545-4d6d-beae-21ab78adea7b.roa Signing time: Mon 05 May 2025 15:00:56 +0000 ROA not before: Mon 05 May 2025 15:00:56 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.246.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f5:18:43:98:02:d7:21:57:dd:3b:25:e7:28:db:0b:c2:e7:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:00:56 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=b897d55288cd4a89280d7c8cd43a01a8cb78bfd097d529ce1dbe0acb8df2546a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:6e:3b:f0:41:cf:45:d0:f5:ef:54:db:3a: 92:15:8d:61:9a:b7:db:ef:5f:97:67:d0:cd:2d:66: fb:3a:d9:2d:9f:2e:da:dc:a2:03:a0:07:dc:d1:6f: 75:3e:10:42:56:d8:26:30:76:40:12:c3:91:23:eb: 53:c4:46:3e:f9:3b:db:4c:ae:71:5a:3b:fe:1c:20: b5:cf:94:44:f3:d5:b4:61:9b:53:cd:9b:37:78:29: 90:8a:04:13:17:6b:56:b5:15:3a:0c:1c:c1:07:15: d4:cf:0b:77:aa:62:98:7d:32:3f:1c:f1:e3:65:e9: 33:f2:2c:09:fd:65:7f:cc:97:40:39:b9:0d:b7:d7: 72:93:fc:3d:3c:a0:7f:68:7c:0a:92:d4:a8:5b:14: 04:f4:e2:f7:74:b1:0c:ce:0f:1f:92:4d:bd:ab:3b: 92:be:6b:40:21:6c:1a:c0:7e:af:21:ae:2c:a1:95: 31:3f:34:b1:f5:9e:3e:81:92:93:63:c1:d5:35:75: 09:26:50:e5:7c:75:53:0e:d4:ec:78:2e:41:91:21: 29:d8:d5:dc:61:0e:81:05:4e:db:b2:3e:14:ab:e5: 83:31:0c:7b:17:bc:c0:50:e6:f5:7c:fb:84:b7:3b: 17:eb:9a:42:62:0b:3f:8c:d7:e4:99:7e:e0:b6:5c: a0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:84:64:DB:82:A0:F5:20:43:2E:BB:CF:41:6D:09:47:71:5E:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed432fea-e545-4d6d-beae-21ab78adea7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.246.160.0/19 Signature Algorithm: sha256WithRSAEncryption d9:50:34:fd:ac:a9:bf:f7:16:0e:2b:1b:62:82:ca:69:84:e1: e1:e3:87:22:45:d0:a0:51:55:80:9d:cb:a0:4e:71:0c:bf:e5: 93:e8:aa:5e:30:82:85:1b:ee:7d:81:7e:1d:81:8f:57:20:1d: c0:fe:d1:80:51:02:d8:7d:0c:4d:b2:42:64:49:b3:3b:27:36: 71:a3:57:2b:04:51:b2:eb:c5:74:44:68:fd:da:09:9b:fb:48: b6:86:53:42:d8:d5:ff:08:24:2b:9c:dc:03:93:fe:c1:da:9f: d9:e3:e9:f6:8d:4a:dc:f7:22:7a:96:13:21:7d:8a:5a:21:0b: 9c:38:f1:24:77:15:9b:85:6b:87:90:9c:ce:92:93:05:5f:d2: 2c:f5:87:16:92:e8:65:6d:ad:d7:02:d2:6c:2f:9f:dc:ad:8c: 48:8f:68:15:a5:4f:9e:6c:df:cb:f1:51:9b:96:83:ce:66:0e: bc:63:63:36:05:c7:6d:a2:09:42:75:e0:16:cc:c2:a0:fe:ef: 08:7c:74:74:7c:3f:52:67:14:a3:be:a6:14:98:cb:7d:d8:86: af:26:55:a9:15:09:af:0b:fa:7b:47:cc:bd:0d:59:f5:3c:32: 44:0e:35:f8:86:cd:9b:65:03:a7:30:75:b9:91:c7:c6:49:52: 15:74:66:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUvUYQ5gC1yFX3Tsl5yjbC8Lna+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUwMDU2WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODk3ZDU1Mjg4Y2Q0YTg5MjgwZDdjOGNkNDNhMDFhOGNi NzhiZmQwOTdkNTI5Y2UxZGJlMGFjYjhkZjI1NDZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7uG478EHPRdD171TbOpIVjWGat9vvX5dn0M0tZvs62S2f LtrcogOgB9zRb3U+EEJW2CYwdkASw5Ej61PERj75O9tMrnFaO/4cILXPlETz1bRh m1PNmzd4KZCKBBMXa1a1FToMHMEHFdTPC3eqYph9Mj8c8eNl6TPyLAn9ZX/Ml0A5 uQ2313KT/D08oH9ofAqS1KhbFAT04vd0sQzODx+STb2rO5K+a0AhbBrAfq8hriyh lTE/NLH1nj6BkpNjwdU1dQkmUOV8dVMO1Ox4LkGRISnY1dxhDoEFTtuyPhSr5YMx DHsXvMBQ5vV8+4S3OxfrmkJiCz+M1+SZfuC2XKCDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm+2EZNuCoPUgQy67z0FtCUdxXqUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkNDMyZmVhLWU1NDUtNGQ2ZC1iZWFlLTIxYWI3OGFkZWE3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWt9qAwDQYJKoZIhvcNAQELBQADggEBANlQNP2sqb/3Fg4rG2KCymmE4eHj hyJF0KBRVYCdy6BOcQy/5ZPoql4wgoUb7n2Bfh2Bj1cgHcD+0YBRAth9DE2yQmRJ szsnNnGjVysEUbLrxXREaP3aCZv7SLaGU0LY1f8IJCuc3AOT/sHan9nj6faNStz3 InqWEyF9ilohC5w48SR3FZuFa4eQnM6SkwVf0iz1hxaS6GVtrdcC0mwvn9ytjEiP aBWlT55s38vxUZuWg85mDrxjYzYFx22iCUJ14BbMwqD+7wh8dHR8P1JnFKO+phSY y33Yhq8mVakVCa8L+ntHzL0NWfU8MkQONfiGzZtlA6cwdbmRx8ZJUhV0Zio= -----END CERTIFICATE-----Generated at Sun May 11 22:17:27 2025 by rpki-client