$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565a7abe-8024-4d3c-9d79-823329f8cdf6.roa File: 565a7abe-8024-4d3c-9d79-823329f8cdf6.roa (raw, json) Hash identifier: 7J6bVC60PCSWG87zVTm9tVS7Bv/ADz8+7SmCSDPAZRk= Subject key identifier: 43:5B:42:7E:A3:A8:D8:EF:6F:D0:B9:61:A2:76:26:E2:4D:CB:40:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F0A58F21FDAAFA1D94D0F9045757A75A13A5265 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565a7abe-8024-4d3c-9d79-823329f8cdf6.roa Signing time: Fri 04 Apr 2025 00:00:21 +0000 ROA not before: Fri 04 Apr 2025 00:00:21 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.146.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0a:58:f2:1f:da:af:a1:d9:4d:0f:90:45:75:7a:75:a1:3a:52:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:00:21 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:36:e9:ea:39:25:5f:de:f1:1e:db:25:94: 4d:41:a0:f4:0d:20:57:85:be:05:d0:0a:2d:24:01: 1b:ad:9f:70:60:6a:6b:cf:8a:49:6e:00:f7:c5:20: c4:2c:f1:6f:a7:93:5f:ff:67:66:17:71:f1:d9:c7: a6:02:09:cc:04:24:34:a9:7b:32:39:24:6c:df:54: 0d:ea:b1:e8:b0:e7:07:38:59:8a:81:ee:88:0e:24: 70:62:3c:5c:49:08:4d:7e:8a:6d:65:1a:a8:3b:e4: 57:0c:a8:0b:87:da:45:d5:ac:f2:e9:10:f9:0e:db: 6f:12:4d:be:02:35:09:31:31:45:31:be:2c:cb:7d: 3f:fa:37:f4:3a:51:cd:0e:8b:34:40:69:54:3f:db: 1f:a2:8a:9b:83:07:96:25:6c:1f:d6:47:9d:a3:eb: 46:6d:ac:ac:42:9b:11:71:64:ba:f9:7d:2a:3d:fa: 60:3a:85:7b:f1:e3:1e:0f:2e:74:64:b5:c2:84:c0: 3b:90:c0:94:94:9a:bb:6e:fb:bd:82:25:d1:ca:e8: 29:51:2f:51:b5:8e:fc:c0:31:1f:fa:59:b3:21:8e: 4e:f2:cc:13:da:0b:86:d1:f3:c1:71:4f:2e:4f:17: 7f:4d:f8:14:a8:1b:6c:fc:60:30:42:89:ba:59:09: 28:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5B:42:7E:A3:A8:D8:EF:6F:D0:B9:61:A2:76:26:E2:4D:CB:40:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/565a7abe-8024-4d3c-9d79-823329f8cdf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.146.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:ee:bf:b1:d7:de:df:cd:c4:9a:46:83:c1:3e:8a:64:e4:c1: 8b:be:e7:e5:f2:e8:27:b0:84:11:a0:84:11:99:c3:a6:58:b3: ad:56:5a:aa:06:b8:55:d9:42:a2:7c:1e:e2:90:6b:b5:be:18: 72:85:fd:64:fb:43:f0:35:07:4a:27:28:03:5b:23:8b:89:c1: 7d:c4:ab:00:d3:0b:02:3c:52:69:ac:a7:f6:06:79:96:73:e9: ec:d0:f8:44:aa:77:77:d8:a7:2b:62:19:07:f1:3d:db:15:ec: ce:30:45:f7:59:4f:31:07:d6:81:62:da:32:0e:a3:94:53:9c: 43:52:70:fc:07:71:8a:6a:2f:e3:0f:e7:cc:7c:62:72:af:03: ba:a8:7e:68:b2:be:ef:81:f1:a3:0f:73:0a:83:be:0d:3c:45: eb:c6:ea:97:06:28:1d:29:a0:9c:97:cb:65:27:35:76:73:de: 91:a4:1c:19:8e:c5:58:78:46:3a:48:b2:35:b8:03:75:f0:0f: 19:c9:0f:66:be:c0:a2:01:66:89:39:a8:50:c2:b1:52:50:af: 65:16:54:de:ac:10:cc:07:a6:f0:a2:25:76:ee:71:ca:b4:b2: e1:47:d1:45:8f:8c:41:41:3b:07:f0:2c:1d:a0:9e:32:45:16: 82:12:c3:33 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDwpY8h/ar6HZTQ+QRXV6daE6UmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAwMDIxWhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDNhYWNlZjFmMGU3OTVjMGU1MjI0MDMwMjZiNDI4YzQy ZjkxOWJjMTdkZDQyYWFmMDUyMzgyOTMzYjVlYzY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ6jbp6jklX97xHtsllE1BoPQNIFeFvgXQCi0kARutn3Bg amvPikluAPfFIMQs8W+nk1//Z2YXcfHZx6YCCcwEJDSpezI5JGzfVA3qseiw5wc4 WYqB7ogOJHBiPFxJCE1+im1lGqg75FcMqAuH2kXVrPLpEPkO228STb4CNQkxMUUx vizLfT/6N/Q6Uc0OizRAaVQ/2x+iipuDB5YlbB/WR52j60ZtrKxCmxFxZLr5fSo9 +mA6hXvx4x4PLnRktcKEwDuQwJSUmrtu+72CJdHK6ClRL1G1jvzAMR/6WbMhjk7y zBPaC4bR88FxTy5PF39N+BSoG2z8YDBCibpZCSjxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQ1tCfqOo2O9v0LlhonYm4k3LQBswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2NWE3YWJlLTgwMjQtNGQzYy05ZDc5LTgyMzMyOWY4Y2RmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQkjANBgkqhkiG9w0BAQsFAAOCAQEArO6/sdfe383EmkaDwT6KZOTBi77n 5fLoJ7CEEaCEEZnDplizrVZaqga4VdlConwe4pBrtb4YcoX9ZPtD8DUHSicoA1sj i4nBfcSrANMLAjxSaayn9gZ5lnPp7ND4RKp3d9inK2IZB/E92xXszjBF91lPMQfW gWLaMg6jlFOcQ1Jw/Adximov4w/nzHxicq8Duqh+aLK+74Hxow9zCoO+DTxF68bq lwYoHSmgnJfLZSc1dnPekaQcGY7FWHhGOkiyNbgDdfAPGckPZr7AogFmiTmoUMKx UlCvZRZU3qwQzAem8KIldu5xyrSy4UfRRY+MQUE7B/AsHaCeMkUWghLDMw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:49 2025 by rpki-client