$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa File: a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa (raw, json) Hash identifier: MlvWkWacwMtSI94Xmu/2LrBGO/ytFJhctCllp2ye8eQ= Subject key identifier: BE:7E:3B:24:8D:B4:1A:45:31:B7:D4:0A:CC:AC:0A:16:35:B0:6C:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76BBE05FEEC4611EE21520425C7A8352EA3B6907 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa Signing time: Sat 29 Mar 2025 00:22:11 +0000 ROA not before: Sat 29 Mar 2025 00:22:11 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 107.20.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bb:e0:5f:ee:c4:61:1e:e2:15:20:42:5c:7a:83:52:ea:3b:69:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 29 00:22:11 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:f6:1c:5f:63:ae:b4:76:98:fa:aa:f3:58: 9e:1d:d6:32:83:c8:69:e1:81:40:db:ee:f1:fb:f2: 1b:6e:8d:7e:0f:b7:09:7d:55:9c:6b:0c:e9:10:0f: 66:93:b6:de:6b:26:b5:01:91:ce:0a:2a:6a:30:64: cb:da:eb:bc:84:47:14:54:3c:84:6e:b9:58:f9:d5: d9:f7:f3:91:69:2a:81:73:46:bb:4b:7e:8a:0e:c5: 23:11:e1:cf:53:04:1a:d3:9b:1d:30:be:4b:2d:83: bd:d8:1e:80:d8:49:18:57:5d:78:e3:df:c3:f1:d6: 9a:92:b7:a1:69:f4:80:74:fb:cf:d2:4f:1b:02:19: 1a:d2:2c:5f:dc:18:20:b0:c1:f3:5a:d8:63:b4:dd: 27:f4:31:16:25:4f:80:c4:a7:88:cf:2f:cd:7d:f6: 5c:28:87:71:a0:8a:7a:6c:f8:84:d0:50:ef:82:16: a5:0a:d2:36:a6:9b:9f:ed:ff:c0:1f:3c:68:57:27: 52:83:19:c6:7a:47:46:62:a8:7a:7c:af:d6:10:2a: a8:0e:73:9b:2c:6d:17:10:bd:22:ec:b7:28:79:c9: de:a2:02:66:a6:34:b8:bc:ed:8e:33:71:2f:51:82: 9d:e9:cf:db:21:0b:53:ab:01:d3:64:51:8a:7b:08: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7E:3B:24:8D:B4:1A:45:31:B7:D4:0A:CC:AC:0A:16:35:B0:6C:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a56c9356-f41a-4cdc-9b12-5bd63d1b7e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.20.0.0/17 Signature Algorithm: sha256WithRSAEncryption 48:fc:89:c8:50:e2:64:72:32:d9:4b:29:65:7f:98:95:d6:15: cc:82:e0:03:cf:8a:c9:5f:c7:12:79:e8:02:5b:fb:81:85:76: dd:83:90:6e:74:05:33:60:e2:21:ee:d5:ca:be:14:61:99:37: 6b:b8:8e:8c:58:a5:d1:d5:21:de:ee:0a:00:32:fa:0e:91:a1: 42:eb:dc:6f:8b:c2:89:6b:39:c0:9d:a8:ab:2b:08:ba:95:ad: 7a:0d:5d:db:18:0f:e2:a3:1e:3f:b4:14:4b:46:b4:76:78:7c: 68:a6:d1:6e:51:a2:dc:3e:17:aa:08:49:cb:42:ae:99:b9:a7: ab:78:cc:d9:13:d0:f4:dc:b2:6a:2b:d7:f5:3f:72:9b:4e:7e: 98:68:55:fa:4b:e3:2f:38:e5:d2:f9:1a:24:48:22:ef:95:93: 01:5c:f1:ca:98:73:8e:29:04:2d:ab:23:f8:0e:4b:4c:47:f0: a0:d6:06:09:e3:82:39:ed:a5:9e:04:d1:7e:ba:35:df:6b:f1: 16:6b:03:d8:6b:22:96:5e:1b:1f:5b:d2:e9:1d:ee:46:67:bc: f1:77:00:d2:d4:66:08:4c:71:0e:de:ee:c3:4d:0c:02:2d:da: cc:5b:34:26:41:9e:fa:2c:05:1a:8e:d1:14:cc:cd:ca:d1:e9: 3e:e7:c0:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdrvgX+7EYR7iFSBCXHqDUuo7aQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI5MDAyMjExWhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmEwYTI4NjU5NzA4MGRiYmI5MGNlNDFjYzBkYmJjMDdi YmRiYmQ5ZTcwNTcxZmFkOWE0ZjQzOTAzZDUyMGIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCa/YcX2OutHaY+qrzWJ4d1jKDyGnhgUDb7vH78htujX4P twl9VZxrDOkQD2aTtt5rJrUBkc4KKmowZMva67yERxRUPIRuuVj51dn385FpKoFz RrtLfooOxSMR4c9TBBrTmx0wvkstg73YHoDYSRhXXXjj38Px1pqSt6Fp9IB0+8/S TxsCGRrSLF/cGCCwwfNa2GO03Sf0MRYlT4DEp4jPL8199lwoh3Gginps+ITQUO+C FqUK0jamm5/t/8AfPGhXJ1KDGcZ6R0ZiqHp8r9YQKqgOc5ssbRcQvSLstyh5yd6i AmamNLi87Y4zcS9Rgp3pz9shC1OrAdNkUYp7CBLxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvn47JI20GkUxt9QKzKwKFjWwbCQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1NmM5MzU2LWY0MWEtNGNkYy05YjEyLTViZDYzZDFiN2UwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFAAwDQYJKoZIhvcNAQELBQADggEBAEj8ichQ4mRyMtlLKWV/mJXWFcyC 4APPislfxxJ56AJb+4GFdt2DkG50BTNg4iHu1cq+FGGZN2u4joxYpdHVId7uCgAy +g6RoULr3G+LwolrOcCdqKsrCLqVrXoNXdsYD+KjHj+0FEtGtHZ4fGim0W5Rotw+ F6oISctCrpm5p6t4zNkT0PTcsmor1/U/cptOfphoVfpL4y845dL5GiRIIu+VkwFc 8cqYc44pBC2rI/gOS0xH8KDWBgnjgjntpZ4E0X66Nd9r8RZrA9hrIpZeGx9b0ukd 7kZnvPF3ANLUZghMcQ7e7sNNDAIt2sxbNCZBnvosBRqO0RTMzcrR6T7nwFI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:01 2025 by rpki-client