$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa File: 55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa (raw, json) Hash identifier: 43l0DAIRno+L/PD1vCSdxH14E1jle8sVrcI73rM4Lx4= Subject key identifier: 04:F6:4A:C2:79:66:61:DB:0B:34:DE:66:F9:E2:10:9D:75:CE:05:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 306F75E0B284053DA76A944EE249D1C9F9232410 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa Signing time: Wed 02 Apr 2025 00:21:03 +0000 ROA not before: Wed 02 Apr 2025 00:21:03 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.197.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6f:75:e0:b2:84:05:3d:a7:6a:94:4e:e2:49:d1:c9:f9:23:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:21:03 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:03:50:31:69:1b:56:bb:aa:70:ec:e7:27: 3b:dc:68:04:f2:1f:12:47:4a:f7:d8:8f:7b:a0:c7: 59:0c:d3:c3:9e:a3:be:e5:16:41:af:af:d6:8a:f3: 0f:6a:98:6d:6d:59:56:04:60:ed:4e:a1:b0:b7:8e: 65:66:4c:83:cd:49:8e:a0:05:98:0d:2a:17:f3:4e: 33:d6:bb:e0:ad:62:41:1b:5b:d0:5e:5c:ee:b3:07: 25:36:ee:42:23:35:64:b9:08:0a:0e:cb:50:60:80: eb:ad:a7:b8:cd:ca:94:d4:79:1a:f6:43:7d:eb:68: 1a:94:27:74:f0:c0:b8:86:f7:55:f6:d5:f8:d1:df: 12:57:b5:65:1b:f6:d2:46:e8:96:01:96:74:dd:0b: 1f:0a:70:82:ef:e0:30:8f:ff:67:80:66:d6:fd:e9: 35:13:4c:27:5a:68:26:86:a9:7e:64:4f:c1:fe:15: b1:3c:8f:f8:0e:0a:03:15:9a:66:de:e4:89:09:91: 8b:69:53:da:21:90:ca:38:10:52:14:3d:e9:88:9b: d8:46:11:2a:66:ce:3c:f9:4f:06:f3:59:75:ce:00: 44:03:06:3e:ef:ed:9a:26:4e:1d:08:54:69:05:e0: 21:cb:37:3d:71:a9:a3:fb:3e:a0:b2:30:4f:e2:1a: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:4A:C2:79:66:61:DB:0B:34:DE:66:F9:E2:10:9D:75:CE:05:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55a1b39c-73cf-4a03-a54b-58e8ee77e2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.197.128.0/18 Signature Algorithm: sha256WithRSAEncryption 44:5b:74:02:c1:cd:e7:9e:70:0d:95:3f:78:6f:8a:c2:19:67: ea:32:97:6a:bc:a7:af:0b:77:0a:da:49:26:f4:0a:c5:a5:41: a7:40:0d:31:24:3b:de:89:f5:60:21:c9:55:4f:58:39:77:0c: 20:4b:a9:05:75:2b:10:a8:01:48:42:b2:28:e8:f5:b3:c3:b7: da:a9:b5:a5:f0:bc:c4:d0:f9:f3:65:46:d5:a0:8e:b6:83:42: 82:88:d1:b0:72:d7:a2:2b:94:11:21:60:22:5c:1d:06:a1:87: f6:c7:1d:ce:8e:98:14:19:68:b1:b9:11:68:99:19:16:3a:20: ea:21:92:2a:84:d5:7d:80:2e:e2:c8:65:9a:e0:d2:09:b9:c0: 8d:b4:08:30:85:2a:0e:de:58:dd:7d:3e:77:b0:bd:be:2f:48: 5d:97:4c:5c:12:50:2d:54:15:13:67:9a:5f:1b:e2:8b:97:53: 26:84:b2:f1:77:e6:f6:d0:80:8f:66:4b:bf:5e:43:12:83:ab: 27:47:b2:12:4c:23:e9:b3:d9:67:ca:89:d5:3d:20:1e:64:25: e3:f3:94:9f:2c:12:b2:9e:62:17:0e:61:71:7d:5b:8f:eb:4e: 90:1d:32:ff:9a:cb:fa:44:eb:aa:50:ad:4c:65:6f:c0:40:88: 85:94:de:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMG914LKEBT2napRO4knRyfkjJBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAyMDAyMTAzWhcNMjUwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTdlMDMxNzgyZDczYTNhMWVmNDNhNWI0MTVkZGQ1OGE4 NzgwNTUzMjIxOTYxM2U3YzcwMGJmODdiNDJhZWQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC59ANQMWkbVruqcOznJzvcaATyHxJHSvfYj3ugx1kM08Oe o77lFkGvr9aK8w9qmG1tWVYEYO1OobC3jmVmTIPNSY6gBZgNKhfzTjPWu+CtYkEb W9BeXO6zByU27kIjNWS5CAoOy1BggOutp7jNypTUeRr2Q33raBqUJ3TwwLiG91X2 1fjR3xJXtWUb9tJG6JYBlnTdCx8KcILv4DCP/2eAZtb96TUTTCdaaCaGqX5kT8H+ FbE8j/gOCgMVmmbe5IkJkYtpU9ohkMo4EFIUPemIm9hGESpmzjz5TwbzWXXOAEQD Bj7v7ZomTh0IVGkF4CHLNz1xqaP7PqCyME/iGg0BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBPZKwnlmYdsLNN5m+eIQnXXOBf4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1YTFiMzljLTczY2YtNGEwMy1hNTRiLTU4ZThlZTc3ZTJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZMxYAwDQYJKoZIhvcNAQELBQADggEBAERbdALBzeeecA2VP3hvisIZZ+oy l2q8p68LdwraSSb0CsWlQadADTEkO96J9WAhyVVPWDl3DCBLqQV1KxCoAUhCsijo 9bPDt9qptaXwvMTQ+fNlRtWgjraDQoKI0bBy16IrlBEhYCJcHQahh/bHHc6OmBQZ aLG5EWiZGRY6IOohkiqE1X2ALuLIZZrg0gm5wI20CDCFKg7eWN19Pnewvb4vSF2X TFwSUC1UFRNnml8b4ouXUyaEsvF35vbQgI9mS79eQxKDqydHshJMI+mz2WfKidU9 IB5kJePzlJ8sErKeYhcOYXF9W4/rTpAdMv+ay/pE66pQrUxlb8BAiIWU3g4= -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:09 2025 by rpki-client