$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ba48806-c985-4d6d-bd00-180947f864e0.roa File: 2ba48806-c985-4d6d-bd00-180947f864e0.roa (raw, json) Hash identifier: 68SFqkztxU9GWt0tn7q0NpzeSQNPCOABkRp/rWCeYBs= Subject key identifier: 48:8B:BF:6D:40:1F:24:7F:D4:1B:34:29:26:B2:04:F7:67:25:63:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6EBA4C6DD7416FDE3D60D5D0782D3BDD6E7FF1B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ba48806-c985-4d6d-bd00-180947f864e0.roa Signing time: Mon 24 Mar 2025 15:41:56 +0000 ROA not before: Mon 24 Mar 2025 15:41:56 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ba:4c:6d:d7:41:6f:de:3d:60:d5:d0:78:2d:3b:dd:6e:7f:f1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 24 15:41:56 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:62:7d:bc:06:7a:57:99:62:75:39:6d:f7: 14:21:e5:0d:18:e0:17:a5:73:17:46:2c:7e:dc:48: 83:df:5a:dc:a5:e3:10:fd:87:70:60:c2:aa:1c:4c: 4e:59:6f:d5:42:b3:11:f6:5b:ba:c8:0a:2b:7c:4f: 25:af:00:9f:78:14:f9:fc:35:72:7b:b4:74:e8:a3: 39:21:2c:c1:4f:7a:65:a9:d0:53:30:7c:06:cc:ea: aa:43:7c:5c:6f:0c:2d:2d:1b:6a:14:e2:e5:1b:33: 08:ea:ca:6e:8f:14:3a:85:6c:0e:2e:b9:fa:5b:8f: 49:9a:cb:3c:34:e8:25:52:f4:e0:f3:f3:77:2c:65: 72:f2:3f:02:a4:1b:f9:4f:49:4b:76:fb:76:77:37: dc:a8:9d:ba:0b:67:79:7f:28:66:84:53:97:bd:ec: bb:11:53:c4:39:ee:63:f7:d6:81:99:aa:37:e0:0f: 9f:38:d4:e9:68:c6:b3:03:a1:c7:bc:9d:2b:37:a8: c4:32:9a:ad:82:a8:1e:a9:78:79:bd:16:c2:b8:eb: 2f:27:4f:54:ea:dd:ec:4c:1e:41:13:e9:6b:5f:fe: 37:e4:43:a4:dc:c3:10:95:55:bf:86:a1:f7:39:4a: f4:ab:f3:cc:1f:1c:1d:f8:50:e2:28:00:5b:7c:4e: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8B:BF:6D:40:1F:24:7F:D4:1B:34:29:26:B2:04:F7:67:25:63:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ba48806-c985-4d6d-bd00-180947f864e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.92.0/22 Signature Algorithm: sha256WithRSAEncryption 62:fd:07:c6:28:89:39:c2:fb:3b:b5:d8:de:18:47:bd:d1:a8: 9d:f4:25:1e:69:37:54:e6:98:a6:5b:0e:86:ea:57:97:75:b1: 18:e1:12:b8:62:41:d9:d5:6d:24:20:1e:18:80:f9:40:3c:71: 83:2e:e9:90:5d:39:34:80:93:7e:2c:cd:1f:90:c7:9b:e5:69: 6d:85:f0:d3:76:e5:42:a5:49:63:93:74:84:39:19:cb:b8:28: 2c:8f:a6:11:8d:1b:6b:5c:39:9e:20:ee:ec:e9:ce:6b:23:b1: 2b:88:29:3a:49:3b:b8:8c:e1:2a:21:f5:a2:4c:ca:9e:42:8f: 73:a3:7e:81:fc:c2:31:8f:1a:9f:c5:5e:22:58:5d:4c:86:31: ce:71:ec:3a:a2:55:56:0e:10:7f:43:22:5f:46:f0:db:ad:11: e5:fb:0f:99:aa:46:b6:d8:8f:c2:38:59:d6:0d:a5:c2:45:d4: bb:07:c4:1b:10:f8:e1:09:21:e3:14:43:c7:bb:1e:93:e0:ad: 1b:cc:03:8f:7a:77:01:19:69:e8:85:e5:4e:0e:95:0a:b7:94: 87:4c:1f:8a:52:79:8a:8b:da:3f:ca:f2:aa:53:bd:37:a9:43: 86:07:80:76:c4:b3:36:8c:4f:4f:c1:bb:45:18:3a:a2:a0:64: b2:30:30:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbrpMbddBb949YNXQeC073W5/8bIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI0MTU0MTU2WhcNMjUwNDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzJmYmUzNGEwNTZkYzFlMTc0YTMxNmYxYjBkNGNlNzVj NzMzZDU1ZmNiOWQ1YjAyOTJjZTU2NWM3ODJiOTcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzjWJ9vAZ6V5lidTlt9xQh5Q0Y4BelcxdGLH7cSIPfWtyl 4xD9h3BgwqocTE5Zb9VCsxH2W7rICit8TyWvAJ94FPn8NXJ7tHToozkhLMFPemWp 0FMwfAbM6qpDfFxvDC0tG2oU4uUbMwjqym6PFDqFbA4uufpbj0mayzw06CVS9ODz 83csZXLyPwKkG/lPSUt2+3Z3N9yonboLZ3l/KGaEU5e97LsRU8Q57mP31oGZqjfg D5841OloxrMDoce8nSs3qMQymq2CqB6peHm9FsK46y8nT1Tq3exMHkET6Wtf/jfk Q6TcwxCVVb+Gofc5SvSr88wfHB34UOIoAFt8Too1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSIu/bUAfJH/UGzQpJrIE92clY54wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiYTQ4ODA2LWM5ODUtNGQ2ZC1iZDAwLTE4MDk0N2Y4NjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAvlwwDQYJKoZIhvcNAQELBQADggEBAGL9B8YoiTnC+zu12N4YR73RqJ30 JR5pN1TmmKZbDobqV5d1sRjhErhiQdnVbSQgHhiA+UA8cYMu6ZBdOTSAk34szR+Q x5vlaW2F8NN25UKlSWOTdIQ5Gcu4KCyPphGNG2tcOZ4g7uzpzmsjsSuIKTpJO7iM 4Soh9aJMyp5Cj3OjfoH8wjGPGp/FXiJYXUyGMc5x7DqiVVYOEH9DIl9G8NutEeX7 D5mqRrbYj8I4WdYNpcJF1LsHxBsQ+OEJIeMUQ8e7HpPgrRvMA496dwEZaeiF5U4O lQq3lIdMH4pSeYqL2j/K8qpTvTepQ4YHgHbEszaMT0/Bu0UYOqKgZLIwMNI= -----END CERTIFICATE-----Generated at Sat Apr 5 19:28:51 2025 by rpki-client