$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa File: f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa (raw, json) Hash identifier: vY/1QkshEXAfSKvQMG9H9AxNaxGNMHiRXONdA9uQQac= Subject key identifier: 58:B4:77:83:AD:5E:F2:35:C3:C3:E3:1B:5E:9F:28:4D:D8:2D:FC:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D204576633F29F221DFEC21557A5175FAC4FC62 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa Signing time: Tue 29 Apr 2025 00:11:47 +0000 ROA not before: Tue 29 Apr 2025 00:11:47 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.180.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:20:45:76:63:3f:29:f2:21:df:ec:21:55:7a:51:75:fa:c4:fc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:11:47 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=e183a15cb11a48836be3bfc0e17c14e8cbd79b921a094a15fcf3c5343f1a8bca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:0e:2c:30:57:54:eb:ac:76:d9:2a:5f:c1: 0c:69:2a:30:2b:73:cf:95:9e:bc:8a:fd:26:0a:24: 88:cf:01:90:e5:b5:05:88:e6:13:94:2f:1c:c1:a7: 65:0d:d5:fb:61:16:e4:98:c8:cf:fe:30:58:19:03: 0e:3e:02:ac:e1:d5:dc:f2:4a:04:90:c6:c8:0a:ee: 9f:01:d6:ae:e4:60:6a:a4:1d:0d:b6:f3:ca:9b:4e: e3:ca:78:0d:6c:43:f5:fc:6b:4a:01:f4:43:84:92: 00:0a:39:ce:58:37:02:5b:b1:c6:5d:9a:b9:f4:b4: b9:b9:3d:72:e6:05:c3:73:03:50:86:e0:f8:f0:fa: 3d:11:28:97:05:e6:01:5f:07:17:42:07:4c:e3:02: 13:7a:60:36:70:c1:8b:de:42:3e:a4:5c:4c:fe:63: c8:e2:31:ed:02:ab:fb:21:24:8e:dd:e8:06:f4:0e: 71:24:0b:70:85:51:72:e0:21:4a:f0:bd:7f:4d:fb: d0:5c:1f:34:da:22:2f:e7:d3:08:aa:61:5e:1d:3b: a3:29:1c:85:d9:34:e8:0a:1f:97:ad:b0:16:1b:b3: a3:1e:df:73:80:18:cb:ee:3d:2c:b8:35:fc:70:3e: aa:6b:06:c7:43:7b:0f:9d:4e:cc:e1:21:f1:45:f9: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B4:77:83:AD:5E:F2:35:C3:C3:E3:1B:5E:9F:28:4D:D8:2D:FC:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3125e31-ed97-4e31-89e9-d4af00e5b32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.180.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5d:ef:f0:bc:b1:b6:2b:54:e3:2e:f1:c3:2a:78:49:5f:98:00: f1:01:72:a8:b2:59:77:56:ca:ec:0f:f0:8a:88:0b:ca:46:b7: 2d:02:44:01:f0:24:a3:ea:d3:35:5d:d8:3c:8e:dc:d4:c3:d3: e4:c2:dc:12:48:64:bc:4f:b0:9d:1a:52:ac:dd:8e:65:ca:8d: 62:be:85:67:a3:a5:18:39:97:a3:7f:75:57:e1:18:b7:3e:3c: e0:41:7f:da:39:23:83:fe:41:5d:f9:84:bb:18:f2:48:b5:24: f3:97:f0:d4:d4:6b:77:38:d7:48:55:2b:5d:0b:a2:37:5a:62: fe:58:51:15:4e:7c:c9:ab:4e:93:9f:81:45:aa:09:f7:30:74: f3:1c:7d:06:18:2f:dc:25:7a:16:4a:2c:c6:ab:4f:c8:90:0a: aa:69:8a:41:1a:1a:74:5b:4e:c2:32:3f:99:38:fa:01:40:1e: d5:1f:b8:36:14:80:44:3a:bd:ff:91:77:fe:de:76:1e:b9:ec: 89:24:17:44:de:01:ae:51:4a:a9:ce:1e:2f:fb:4b:00:f0:f9: a6:95:af:19:cc:bf:3f:e8:f7:c8:2d:fb:cd:bb:13:76:f0:31: 61:18:2e:89:4a:71:35:c9:d2:4d:3a:a9:61:75:92:a5:63:ba: 06:a1:dd:ec -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPSBFdmM/KfIh3+whVXpRdfrE/GIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAxMTQ3WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTgzYTE1Y2IxMWE0ODgzNmJlM2JmYzBlMTdjMTRlOGNi ZDc5YjkyMWEwOTRhMTVmY2YzYzUzNDNmMWE4YmNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPsw4sMFdU66x22SpfwQxpKjArc8+VnryK/SYKJIjPAZDl tQWI5hOULxzBp2UN1fthFuSYyM/+MFgZAw4+Aqzh1dzySgSQxsgK7p8B1q7kYGqk HQ2288qbTuPKeA1sQ/X8a0oB9EOEkgAKOc5YNwJbscZdmrn0tLm5PXLmBcNzA1CG 4Pjw+j0RKJcF5gFfBxdCB0zjAhN6YDZwwYveQj6kXEz+Y8jiMe0Cq/shJI7d6Ab0 DnEkC3CFUXLgIUrwvX9N+9BcHzTaIi/n0wiqYV4dO6MpHIXZNOgKH5etsBYbs6Me 33OAGMvuPSy4NfxwPqprBsdDew+dTszhIfFF+eGRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWLR3g61e8jXDw+MbXp8oTdgt/HkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzMTI1ZTMxLWVkOTctNGUzMS04OWU5LWQ0YWYwMGU1YjMyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEotDANBgkqhkiG9w0BAQsFAAOCAQEAXe/wvLG2K1TjLvHDKnhJX5gA8QFy qLJZd1bK7A/wiogLyka3LQJEAfAko+rTNV3YPI7c1MPT5MLcEkhkvE+wnRpSrN2O ZcqNYr6FZ6OlGDmXo391V+EYtz484EF/2jkjg/5BXfmEuxjySLUk85fw1NRrdzjX SFUrXQuiN1pi/lhRFU58yatOk5+BRaoJ9zB08xx9Bhgv3CV6FkosxqtPyJAKqmmK QRoadFtOwjI/mTj6AUAe1R+4NhSARDq9/5F3/t52HrnsiSQXRN4BrlFKqc4eL/tL APD5ppWvGcy/P+j3yC37zbsTdvAxYRguiUpxNcnSTTqpYXWSpWO6BqHd7A== -----END CERTIFICATE-----Generated at Sun May 11 22:41:47 2025 by rpki-client