$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f278b37a-a12f-48c8-bb13-86309c2b47f7.roa File: f278b37a-a12f-48c8-bb13-86309c2b47f7.roa (raw, json) Hash identifier: MkUZUfSHFdZavMXuFkjO4F17UktTD3EvRcQF7v1oO/k= Subject key identifier: C5:0C:49:9B:BE:8C:F9:26:A8:92:70:A5:61:E9:5F:11:36:E9:69:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01D0D510A1A3DE07F68F4371BF16D892EC7E28FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f278b37a-a12f-48c8-bb13-86309c2b47f7.roa Signing time: Wed 30 Apr 2025 00:02:13 +0000 ROA not before: Wed 30 Apr 2025 00:02:13 +0000 ROA not after: Wed 04 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 74.237.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d0:d5:10:a1:a3:de:07:f6:8f:43:71:bf:16:d8:92:ec:7e:28:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:02:13 2025 GMT Not After : Jun 4 23:59:59 2025 GMT Subject: serialNumber=a3136f44756ec78f845d0dc45927cb3ba0cba71c889050f8c0a7c9c2b32e6152, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:25:b9:6c:60:6a:5a:70:86:31:85:72:f3: 26:1d:b7:3d:2a:5c:7f:0d:93:cb:74:fd:6e:80:79: 32:0e:93:3f:b2:d5:be:0a:9b:79:f1:0d:f5:19:cb: 9d:97:58:41:e6:ca:d3:cd:a9:63:b8:38:6a:c7:e8: 2c:f2:ff:fd:93:0e:b2:c9:9e:d2:f1:02:f5:57:ee: 6b:70:27:95:d8:6a:4f:eb:2c:a4:ec:e6:93:1d:c2: 9e:81:3f:7c:f4:66:f4:bb:3b:df:4d:e5:b5:8f:e7: f0:d2:a3:7d:0b:a8:a7:51:5a:f5:c5:fa:0f:34:30: 12:23:6b:bb:02:7d:75:af:d3:10:41:01:c3:21:5a: f8:c9:e3:7a:e7:63:62:aa:90:c6:5b:ec:c3:49:ee: ca:75:7d:1b:82:3f:f2:75:e3:fb:fb:ab:8f:07:ca: 1b:c7:7e:6a:3e:94:3f:7f:01:e8:06:22:89:51:0e: 9e:d7:0e:f5:81:41:36:b1:46:1f:f3:8c:1d:e4:96: 18:25:f8:78:39:63:01:90:a9:fe:1b:86:8a:ed:91: 87:05:4a:a4:18:5d:ca:e0:41:85:aa:a8:b0:a8:ce: 5b:30:e9:c2:47:53:94:0b:71:41:4d:84:44:ca:1a: 14:17:75:23:4a:99:7b:3c:1f:4f:ba:1a:ed:cc:08: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0C:49:9B:BE:8C:F9:26:A8:92:70:A5:61:E9:5F:11:36:E9:69:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f278b37a-a12f-48c8-bb13-86309c2b47f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.237.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:83:34:eb:3e:14:2f:bb:8b:72:c5:ed:9a:7d:3e:c5:c1:dc: 83:6b:7b:b9:f9:54:47:38:55:18:71:1f:50:19:34:ad:21:f8: b5:4a:03:5a:fc:f8:96:6d:43:00:8a:b7:c3:03:e6:8e:4d:dd: 05:a3:43:37:68:b0:36:1c:7e:78:b0:90:38:cc:c3:c6:e0:81: 6b:1d:70:f8:f5:b3:d2:19:2b:ed:f4:f4:61:09:28:1f:9e:57: 96:36:59:c1:a0:2e:45:d7:d0:e2:50:36:81:d3:e6:58:b3:54: 2b:5b:f7:d5:b4:aa:55:83:e8:5b:e4:50:21:8f:14:b3:05:89: 09:4d:a5:fe:8b:01:da:5f:d4:83:e0:f8:80:2f:03:f6:20:e2: 8b:da:44:44:c3:24:7f:3f:11:ab:48:d7:4a:a5:c8:d5:36:88: 57:ab:ba:58:bf:46:a9:f9:86:00:2c:e4:ac:f6:1a:00:1b:b4: c1:3f:cb:b9:5c:51:e0:e8:22:b0:14:bf:fa:d0:90:9a:3f:48: 03:17:df:bf:b8:cf:bb:6a:17:e2:54:6b:a0:69:e5:ee:2b:41: e3:38:18:b2:f9:80:a6:08:77:1b:cb:95:55:96:61:de:10:dd: cf:05:27:49:7f:84:e2:e8:58:89:d5:0d:b5:4b:26:39:a5:50: 37:aa:d2:6d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAdDVEKGj3gf2j0NxvxbYkux+KP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDMwMDAwMjEzWhcNMjUwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzEzNmY0NDc1NmVjNzhmODQ1ZDBkYzQ1OTI3Y2IzYmEw Y2JhNzFjODg5MDUwZjhjMGE3YzljMmIzMmU2MTUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2uiW5bGBqWnCGMYVy8yYdtz0qXH8Nk8t0/W6AeTIOkz+y 1b4Km3nxDfUZy52XWEHmytPNqWO4OGrH6Czy//2TDrLJntLxAvVX7mtwJ5XYak/r LKTs5pMdwp6BP3z0ZvS7O99N5bWP5/DSo30LqKdRWvXF+g80MBIja7sCfXWv0xBB AcMhWvjJ43rnY2KqkMZb7MNJ7sp1fRuCP/J14/v7q48HyhvHfmo+lD9/AegGIolR Dp7XDvWBQTaxRh/zjB3klhgl+Hg5YwGQqf4bhortkYcFSqQYXcrgQYWqqLCozlsw 6cJHU5QLcUFNhETKGhQXdSNKmXs8H0+6Gu3MCFwxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxQxJm76M+SaoknClYelfETbpabwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyNzhiMzdhLWExMmYtNDhjOC1iYjEzLTg2MzA5YzJiNDdmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBK7TANBgkqhkiG9w0BAQsFAAOCAQEABIM06z4UL7uLcsXtmn0+xcHcg2t7 uflURzhVGHEfUBk0rSH4tUoDWvz4lm1DAIq3wwPmjk3dBaNDN2iwNhx+eLCQOMzD xuCBax1w+PWz0hkr7fT0YQkoH55XljZZwaAuRdfQ4lA2gdPmWLNUK1v31bSqVYPo W+RQIY8UswWJCU2l/osB2l/Ug+D4gC8D9iDii9pERMMkfz8Rq0jXSqXI1TaIV6u6 WL9GqfmGACzkrPYaABu0wT/LuVxR4OgisBS/+tCQmj9IAxffv7jPu2oX4lRroGnl 7itB4zgYsvmApgh3G8uVVZZh3hDdzwUnSX+E4uhYidUNtUsmOaVQN6rSbQ== -----END CERTIFICATE-----Generated at Tue May 6 01:29:37 2025 by rpki-client