$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa File: 0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa (raw, json) Hash identifier: JHhl2DRmmFh7LLX4AaHFzmO/7bjwf7lWzTRtfHRpgZY= Subject key identifier: 30:51:74:67:83:0E:BF:DA:8A:40:93:4F:CB:35:00:45:08:D1:5F:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E05E43B2EA9051C531FD107BAEAF34399C5FFFC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa Signing time: Mon 31 Mar 2025 16:00:49 +0000 ROA not before: Mon 31 Mar 2025 16:00:49 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.3.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:05:e4:3b:2e:a9:05:1c:53:1f:d1:07:ba:ea:f3:43:99:c5:ff:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 16:00:49 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:5e:14:e7:af:7a:c6:9b:bf:0d:67:14:df: 5a:98:1e:20:df:c9:d6:06:7b:79:bd:ce:26:7e:f9: 4d:1f:b1:72:0d:0c:13:fe:55:4e:a6:fb:a5:1c:cf: 9f:e4:a6:a3:a6:52:8b:a9:a0:41:0b:6b:1e:c2:50: 0e:6a:e3:39:7b:0c:69:bf:ed:ba:75:37:ec:9a:af: a0:01:ac:ba:61:3e:e1:0b:5e:ea:bf:4d:3c:e7:5f: e0:01:09:43:c8:8e:32:f8:86:86:c5:8c:f4:d0:be: 37:43:23:99:e8:82:3b:6d:42:61:22:32:8e:5c:a7: d2:c9:85:a2:76:85:51:54:ee:5c:ca:76:1d:ba:55: ea:40:b3:31:eb:66:0a:32:e1:03:ea:d4:cb:b4:30: 8b:82:b6:63:75:ea:3c:69:af:8b:d7:35:4c:5d:6d: 23:bc:9d:e6:19:09:74:c8:0f:2b:52:99:32:d0:34: 94:04:8a:d4:75:7a:be:cc:09:4b:e0:01:f8:b8:22: 50:52:c7:33:64:bc:82:bf:22:4b:5d:7d:aa:92:88: 3c:9e:96:3c:d6:0b:c6:97:dc:dc:b6:9a:98:2c:7b: c6:4a:d4:03:af:7e:20:88:cb:2d:14:05:a0:92:dd: 1e:41:21:2f:5a:81:b7:98:38:a4:2a:62:d3:65:b2: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:51:74:67:83:0E:BF:DA:8A:40:93:4F:CB:35:00:45:08:D1:5F:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fbb6f1f-99bc-435c-9ceb-ba548ee3a557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.3.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:30:37:f7:40:c5:66:ad:4a:94:ec:3e:23:cb:a6:61:74:6b: 7d:b9:da:30:ac:40:e3:35:6f:3c:61:13:c1:af:37:76:af:e0: 9c:0f:d7:af:32:75:73:1c:8e:1d:ce:73:78:e3:fe:89:6a:c5: 27:f1:fd:cc:41:aa:0b:26:61:77:b1:92:7c:56:f5:2e:08:19: 36:2e:d4:18:94:94:cb:dc:db:a3:ed:24:9b:03:49:cd:de:fc: b3:e3:3f:9d:da:57:3a:ed:3d:13:72:78:6f:73:4d:cc:08:ae: 6d:bc:3b:f5:a2:e9:86:03:2c:56:c5:86:e1:2d:55:fd:10:fa: b8:e1:43:bc:44:c5:ee:fb:a3:8a:09:b1:59:a8:4e:a2:a5:26: 82:b1:02:95:e3:92:bd:b8:30:af:68:1d:47:b4:76:15:0c:c1: 55:6e:19:e4:0a:70:4f:ad:ba:f0:b6:98:b6:d4:f0:d5:7d:dd: 21:3b:29:47:e0:bf:a4:c4:2d:98:9c:23:90:2d:38:7b:05:81: a8:98:ee:da:55:38:16:85:60:1b:ef:8c:bd:f3:1a:19:2e:ad: 3f:08:5e:ec:7f:b4:35:e1:b8:53:c4:a9:68:1a:0e:50:ca:2c: 1a:35:18:72:69:49:d7:e7:98:43:98:c0:5c:56:6e:b4:1f:fc: 00:9f:ce:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfgXkOy6pBRxTH9EHuurzQ5nF//wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTYwMDQ5WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWZlYjNkZGIzZmJlYTk0NGIxMDA1MGYyYjRjNmM0MGY0 ZGMzZWUyNWI5NmQ4YmFjNWE0MjE3MzgwYTdhZDMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5Jl4U5696xpu/DWcU31qYHiDfydYGe3m9ziZ++U0fsXIN DBP+VU6m+6Ucz5/kpqOmUoupoEELax7CUA5q4zl7DGm/7bp1N+yar6ABrLphPuEL Xuq/TTznX+ABCUPIjjL4hobFjPTQvjdDI5nogjttQmEiMo5cp9LJhaJ2hVFU7lzK dh26VepAszHrZgoy4QPq1Mu0MIuCtmN16jxpr4vXNUxdbSO8neYZCXTIDytSmTLQ NJQEitR1er7MCUvgAfi4IlBSxzNkvIK/IktdfaqSiDyeljzWC8aX3Ny2mpgse8ZK 1AOvfiCIyy0UBaCS3R5BIS9agbeYOKQqYtNlsmqZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMFF0Z4MOv9qKQJNPyzUARQjRX/EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmYmI2ZjFmLTk5YmMtNDM1Yy05Y2ViLWJhNTQ4ZWUzYTU1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLA4AwDQYJKoZIhvcNAQELBQADggEBAE0wN/dAxWatSpTsPiPLpmF0a325 2jCsQOM1bzxhE8GvN3av4JwP168ydXMcjh3Oc3jj/olqxSfx/cxBqgsmYXexknxW 9S4IGTYu1BiUlMvc26PtJJsDSc3e/LPjP53aVzrtPRNyeG9zTcwIrm28O/Wi6YYD LFbFhuEtVf0Q+rjhQ7xExe77o4oJsVmoTqKlJoKxApXjkr24MK9oHUe0dhUMwVVu GeQKcE+tuvC2mLbU8NV93SE7KUfgv6TELZicI5AtOHsFgaiY7tpVOBaFYBvvjL3z GhkurT8IXux/tDXhuFPEqWgaDlDKLBo1GHJpSdfnmEOYwFxWbrQf/ACfzts= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:45 2025 by rpki-client