$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6694171a-aae2-4bbb-a718-43a3f95c6dc1.roa File: 6694171a-aae2-4bbb-a718-43a3f95c6dc1.roa (raw, json) Hash identifier: 8o8AHx+XjNzK86YMlqgfWuuCCuhdlYqyOHREi71/Css= Subject key identifier: 3E:11:04:E8:AD:2D:F8:08:2A:11:B5:82:B8:47:1C:9D:AC:F7:90:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 221E6AC68564A702F04D7A554883F5055C604D90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6694171a-aae2-4bbb-a718-43a3f95c6dc1.roa Signing time: Sat 29 Mar 2025 00:50:33 +0000 ROA not before: Sat 29 Mar 2025 00:50:33 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1e:6a:c6:85:64:a7:02:f0:4d:7a:55:48:83:f5:05:5c:60:4d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 29 00:50:33 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:22:be:ad:31:06:cb:9f:cd:3b:45:c8:be: 30:4d:09:84:bf:c9:6f:7d:85:57:fb:1f:e9:54:01: 8a:20:30:5f:7a:b4:7e:ac:94:94:ca:b9:0e:a1:d4: fd:54:21:ca:9d:ed:29:72:ae:a5:50:4d:4a:00:dd: c8:8b:05:77:b8:7b:29:8e:15:3d:5d:1b:b1:5d:c3: 7a:73:dd:c4:9b:30:f2:fe:63:fd:99:0a:58:23:33: 1e:69:f9:b8:03:05:92:e7:9d:28:23:f5:4c:52:ca: 83:7a:65:cc:ec:8f:dc:d5:38:61:62:45:f8:2a:e7: 81:4b:bc:9a:03:b9:2b:1f:5b:32:d4:ac:c2:68:fb: 07:36:7a:2b:e5:91:45:cf:54:ee:fa:87:2a:6a:df: 8c:cc:7f:fc:b8:9e:6d:e4:40:33:c9:30:82:5f:c1: 58:f7:95:ed:8e:28:73:c1:14:23:08:18:54:61:b0: 10:f2:13:d4:13:1a:4d:94:16:c6:49:e7:7c:29:53: 32:e0:1b:1e:cb:4c:20:3b:fe:a8:bd:48:d9:6d:2d: 84:cc:00:f3:ac:89:92:1e:91:04:85:81:2b:98:86: 2a:de:71:3f:fa:16:bc:f3:d9:9e:3e:b3:9e:48:34: 06:c9:a1:a1:37:98:9a:06:4a:31:95:eb:4a:cf:a3: e5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:11:04:E8:AD:2D:F8:08:2A:11:B5:82:B8:47:1C:9D:AC:F7:90:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6694171a-aae2-4bbb-a718-43a3f95c6dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.144.0/20 Signature Algorithm: sha256WithRSAEncryption 30:bc:89:75:41:82:db:0c:15:f3:51:54:07:a8:0d:56:2f:57: 9f:8e:d9:98:9d:88:88:2e:98:ce:bd:53:7f:e6:ea:c6:d0:e6: 60:8a:87:30:e1:1c:d5:f8:2a:12:a5:54:ad:e7:4a:a7:58:36: fd:39:21:8a:f0:b8:75:41:3c:e6:ec:51:dd:f4:ac:72:90:fb: f0:e4:80:71:70:b2:66:41:f2:ad:d5:5a:65:1f:0c:9d:3d:23: 61:12:a0:c5:f5:5d:5a:f6:bd:39:bf:55:02:39:c5:ab:5b:ea: cb:4a:dd:e9:c3:f1:b4:37:c1:bc:59:f1:0e:ae:02:89:e9:15: e0:2c:40:01:47:b8:65:90:a6:b4:5e:c4:2a:57:24:8b:bf:89: d3:97:66:8d:05:dd:a2:e5:96:fb:64:c2:cb:d1:d4:b0:91:6c: 12:9f:3c:77:53:14:ee:c8:3e:d0:1a:d4:66:e6:fc:d0:d7:62: b9:06:9e:36:cb:6c:18:c1:d0:61:ab:59:6c:96:67:e1:ee:d0: 2d:82:b5:36:2d:af:09:fa:e0:6b:e5:c7:a0:49:df:48:39:78: c7:54:71:57:e2:c6:c3:94:3d:52:01:c2:df:af:d5:ac:84:93: 8b:9f:a6:e3:6b:ff:3c:27:cd:ed:b4:65:c0:b6:25:e2:cc:6f: 4b:8f:47:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIh5qxoVkpwLwTXpVSIP1BVxgTZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI5MDA1MDMzWhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTUxOWM4M2YzM2M5MDMxMzVjNmI0ZTE0NTA0ZGMzNDg5 M2M4NjIyMWZhMjkzYzUwMWQzZjE3MjY2MmY5ODM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbSSK+rTEGy5/NO0XIvjBNCYS/yW99hVf7H+lUAYogMF96 tH6slJTKuQ6h1P1UIcqd7SlyrqVQTUoA3ciLBXe4eymOFT1dG7Fdw3pz3cSbMPL+ Y/2ZClgjMx5p+bgDBZLnnSgj9UxSyoN6Zczsj9zVOGFiRfgq54FLvJoDuSsfWzLU rMJo+wc2eivlkUXPVO76hypq34zMf/y4nm3kQDPJMIJfwVj3le2OKHPBFCMIGFRh sBDyE9QTGk2UFsZJ53wpUzLgGx7LTCA7/qi9SNltLYTMAPOsiZIekQSFgSuYhire cT/6Frzz2Z4+s55INAbJoaE3mJoGSjGV60rPo+W9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPhEE6K0t+AgqEbWCuEccnaz3kO4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2OTQxNzFhLWFhZTItNGJiYi1hNzE4LTQzYTNmOTVjNmRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7JAwDQYJKoZIhvcNAQELBQADggEBADC8iXVBgtsMFfNRVAeoDVYvV5+O 2ZidiIgumM69U3/m6sbQ5mCKhzDhHNX4KhKlVK3nSqdYNv05IYrwuHVBPObsUd30 rHKQ+/DkgHFwsmZB8q3VWmUfDJ09I2ESoMX1XVr2vTm/VQI5xatb6stK3enD8bQ3 wbxZ8Q6uAonpFeAsQAFHuGWQprRexCpXJIu/idOXZo0F3aLllvtkwsvR1LCRbBKf PHdTFO7IPtAa1Gbm/NDXYrkGnjbLbBjB0GGrWWyWZ+Hu0C2CtTYtrwn64Gvlx6BJ 30g5eMdUcVfixsOUPVIBwt+v1ayEk4ufpuNr/zwnze20ZcC2JeLMb0uPR1s= -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:45 2025 by rpki-client