$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d2f72a8-d1a4-4628-bff5-931332c05619.roa File: 2d2f72a8-d1a4-4628-bff5-931332c05619.roa (raw, json) Hash identifier: Ah1jrW2HU2bBAlkjLDI6AKwK/FG0H0EbQ60WH69AsZE= Subject key identifier: D5:3D:8E:8D:6E:18:42:F5:E2:2F:17:74:62:B0:B1:01:C6:FA:02:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68BA382C6E45D5255BEAB516A55176BB055F243D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d2f72a8-d1a4-4628-bff5-931332c05619.roa Signing time: Sat 05 Apr 2025 00:00:35 +0000 ROA not before: Sat 05 Apr 2025 00:00:35 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 74.166.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ba:38:2c:6e:45:d5:25:5b:ea:b5:16:a5:51:76:bb:05:5f:24:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 5 00:00:35 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:2d:0b:d1:99:98:d6:77:2d:43:a5:54:da: a4:da:3f:d9:19:14:c3:03:19:7f:f5:6d:93:45:91: a1:13:6e:bf:cf:4f:13:52:ee:8c:01:d9:51:4d:27: 49:b0:d9:79:ee:db:7c:4e:90:b2:fb:8e:59:47:c8: 15:c2:55:fc:b4:d2:52:63:08:3a:94:6c:e3:b8:6a: 23:bb:c6:c3:d0:e8:30:48:b2:33:e1:3f:66:6b:51: be:a9:89:10:e9:7f:b6:ca:87:8e:9e:d9:dc:e4:7a: b0:f1:49:02:03:5b:56:38:9a:06:75:56:0a:96:08: 9c:1f:d4:6c:19:4d:87:11:d3:3d:f6:d7:1a:4f:ae: 4d:75:a1:47:8c:77:50:0c:f7:eb:4c:20:8f:48:ca: 6b:95:12:af:65:39:76:6b:6c:16:e7:5d:39:a9:9f: 67:46:98:16:ca:1e:c4:0e:4f:33:2a:83:7a:7e:08: ef:ef:83:3c:fe:6b:58:be:21:b5:77:57:58:01:e7: e8:d5:21:21:09:4c:80:67:50:b8:89:a8:1e:e3:5c: 82:43:7e:6e:d3:a7:fc:67:76:0c:21:3b:4b:e3:8a: 1c:a8:d7:20:5a:05:3d:44:b3:2a:f1:53:b6:c5:b8: 52:91:ce:37:c4:23:d8:06:98:dd:22:0f:53:c2:60: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3D:8E:8D:6E:18:42:F5:E2:2F:17:74:62:B0:B1:01:C6:FA:02:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d2f72a8-d1a4-4628-bff5-931332c05619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.166.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:5d:19:c7:ab:ef:f2:d5:62:55:0f:8a:13:15:5b:52:3b:88: 1a:91:67:e9:7e:da:cc:c6:fe:39:c1:d4:2a:ac:ef:e5:9a:41: 8c:96:9d:81:8f:e8:82:c7:4c:92:0e:36:8a:01:98:fc:a4:09: bd:8c:16:0c:76:4c:0d:92:07:bb:bb:c3:da:bf:a8:86:5b:87: 5d:ec:8e:69:40:ac:ad:2a:ba:73:f9:95:fc:20:de:e1:07:7f: e4:12:e3:56:ab:fa:5d:b2:ce:d7:1e:55:8b:0f:19:ed:43:3e: c6:b6:4f:e6:a6:56:97:63:51:a6:79:e7:ff:30:bc:a6:a6:41: 8c:83:e1:14:76:d0:f0:03:1d:7c:37:f4:3d:e6:b4:1b:eb:43: b4:48:94:ad:d4:af:b5:8e:14:8d:da:5a:bb:f2:f0:3d:72:0c: 39:3c:36:3a:c9:f8:e8:79:7b:0f:3b:38:4e:63:fb:c1:8f:c6: a2:7e:2b:3c:af:9c:4a:37:8a:cb:6f:88:56:82:44:5e:6b:07: c9:17:42:6d:55:f3:c7:69:20:0d:26:11:db:a5:2e:c1:9f:d2: 8e:c4:ae:db:2c:08:2b:17:1b:6d:76:7a:de:6b:d9:a7:2a:8e: 3e:7e:c0:ab:22:dd:cc:9e:08:a9:28:cc:1e:44:f5:99:78:b1: 49:9b:38:d5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaLo4LG5F1SVb6rUWpVF2uwVfJD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA1MDAwMDM1WhcNMjUwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzJmNzFhNGUyMzZkMDUzYzY0ZDY4MjY2MTBmY2RlMjI0 ZTdiNjk1ODZmNDZiYzY4NGFiNDEwM2NlZTE4ZDhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5Zi0L0ZmY1nctQ6VU2qTaP9kZFMMDGX/1bZNFkaETbr/P TxNS7owB2VFNJ0mw2Xnu23xOkLL7jllHyBXCVfy00lJjCDqUbOO4aiO7xsPQ6DBI sjPhP2ZrUb6piRDpf7bKh46e2dzkerDxSQIDW1Y4mgZ1VgqWCJwf1GwZTYcR0z32 1xpPrk11oUeMd1AM9+tMII9IymuVEq9lOXZrbBbnXTmpn2dGmBbKHsQOTzMqg3p+ CO/vgzz+a1i+IbV3V1gB5+jVISEJTIBnULiJqB7jXIJDfm7Tp/xndgwhO0vjihyo 1yBaBT1EsyrxU7bFuFKRzjfEI9gGmN0iD1PCYBnbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1T2OjW4YQvXiLxd0YrCxAcb6ApkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMmY3MmE4LWQxYTQtNDYyOC1iZmY1LTkzMTMzMmMwNTYxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBKpjANBgkqhkiG9w0BAQsFAAOCAQEAp10Zx6vv8tViVQ+KExVbUjuIGpFn 6X7azMb+OcHUKqzv5ZpBjJadgY/ogsdMkg42igGY/KQJvYwWDHZMDZIHu7vD2r+o hluHXeyOaUCsrSq6c/mV/CDe4Qd/5BLjVqv6XbLO1x5Viw8Z7UM+xrZP5qZWl2NR pnnn/zC8pqZBjIPhFHbQ8AMdfDf0Pea0G+tDtEiUrdSvtY4Ujdpau/LwPXIMOTw2 Osn46Hl7Dzs4TmP7wY/Gon4rPK+cSjeKy2+IVoJEXmsHyRdCbVXzx2kgDSYR26Uu wZ/SjsSu2ywIKxcbbXZ63mvZpyqOPn7AqyLdzJ4IqSjMHkT1mXixSZs41Q== -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:00 2025 by rpki-client