$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa File: c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa (raw, json) Hash identifier: f4zC+M+VWQCXZqP2RGFipR9P8JoOdTj3EZYqNZlGQ+Q= Subject key identifier: 12:E7:D6:4A:5C:3F:96:6D:90:40:8A:C9:A1:E3:32:9C:9F:C5:A8:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 682B173D6DECC62F4207158CC352C025E84783B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa Signing time: Fri 14 Mar 2025 00:31:12 +0000 ROA not before: Fri 14 Mar 2025 00:31:12 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.123.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2b:17:3d:6d:ec:c6:2f:42:07:15:8c:c3:52:c0:25:e8:47:83:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:31:12 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:66:aa:29:7c:6c:60:42:86:29:15:4b:96: 61:1d:56:49:b3:7a:7d:96:fb:b3:a5:a4:9d:da:18: a6:bf:17:a4:90:c5:68:41:b4:8e:b9:ea:3c:88:ad: 97:06:bd:ca:9f:1d:31:e7:23:49:0b:07:91:61:4f: 4d:51:98:5f:7f:23:05:8f:98:c8:73:e8:e9:99:4e: e3:80:75:cd:58:49:17:90:42:0e:87:b0:07:b0:6d: b2:60:01:b3:8d:69:96:2c:eb:06:26:f6:44:dd:3b: 00:0f:48:b1:37:d7:4a:bf:2a:85:14:b4:c5:e0:84: c6:12:a7:a9:5b:1d:21:d6:cb:76:5d:62:72:bc:7a: 87:bc:15:c4:5f:f1:e5:c9:d3:99:5d:97:de:0b:d3: 2f:37:88:a6:cd:42:f9:c0:f6:2b:8e:9e:42:4a:1a: 9d:4a:4c:42:21:5f:6d:4f:53:67:a4:74:92:05:3b: 43:64:7e:aa:ea:19:29:6b:01:70:f2:78:06:27:fa: a7:9e:db:b6:52:a5:de:87:b7:f8:1d:79:8e:9b:2a: c7:7c:79:e0:16:35:c8:eb:64:6e:85:b9:66:d1:bf: 2c:49:13:ad:bc:9f:9a:a5:6d:fe:bd:5d:05:9b:5b: 83:9f:c4:03:9c:89:1c:b4:9f:bf:b8:f0:77:1a:9e: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E7:D6:4A:5C:3F:96:6D:90:40:8A:C9:A1:E3:32:9C:9F:C5:A8:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5c3a516-2272-4a7a-b6de-92ab991b4b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.123.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:5f:82:21:6e:26:31:bf:0c:b3:3c:ff:0f:88:ee:53:39:af: 6c:3f:ad:83:db:0a:08:d0:0b:08:2f:be:c8:8f:87:2e:fb:fd: 3f:ea:3d:2e:59:f5:bf:a8:c9:1d:4d:c6:32:17:87:4c:f3:11: c2:74:f4:60:95:e4:cc:30:cd:5e:8d:ab:87:54:f9:e3:25:ef: 21:72:57:58:a4:d9:e2:77:62:5c:b0:a9:43:18:10:b5:71:0e: bc:23:01:6b:0a:ef:12:6d:6c:0c:89:03:79:ed:e9:f9:b3:68: 11:b0:e6:e8:ac:a8:b5:a1:f0:50:55:9a:d1:e6:79:6f:ab:86: 89:d9:d4:65:ed:7f:d4:f0:02:b3:f3:78:aa:fc:11:3e:5d:da: af:c8:0d:4b:5f:a7:83:fc:e8:b4:94:49:db:5b:56:a3:97:7e: 3c:04:a4:78:b8:b2:81:c9:e5:84:a3:92:7b:3d:80:6d:b3:ff: 0d:46:b1:f9:fb:cc:ea:ed:b6:da:8f:8f:c1:17:74:0d:53:ea: 29:46:12:1e:3f:97:17:02:2f:ba:cb:e2:5d:0f:8f:d4:a2:8a: 47:3a:4a:52:96:6b:da:7c:df:b3:ec:75:ec:54:92:f1:e8:b5: 78:13:b8:dd:e9:bc:db:b3:6d:d0:e8:f6:29:c0:91:28:1b:ab: e7:29:c1:1d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaCsXPW3sxi9CBxWMw1LAJehHg7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDAzMTEyWhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjY4M2EzMGFjMmEzYWMwZjY0Njc2MGFlNGZlMGVmZDc4 YmIwMDEzNWQ0MGM3ZmU5MmUwNTIwMDNjYzNlNGM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbEWaqKXxsYEKGKRVLlmEdVkmzen2W+7OlpJ3aGKa/F6SQ xWhBtI656jyIrZcGvcqfHTHnI0kLB5FhT01RmF9/IwWPmMhz6OmZTuOAdc1YSReQ Qg6HsAewbbJgAbONaZYs6wYm9kTdOwAPSLE310q/KoUUtMXghMYSp6lbHSHWy3Zd YnK8eoe8FcRf8eXJ05ldl94L0y83iKbNQvnA9iuOnkJKGp1KTEIhX21PU2ekdJIF O0NkfqrqGSlrAXDyeAYn+qee27ZSpd6Ht/gdeY6bKsd8eeAWNcjrZG6FuWbRvyxJ E628n5qlbf69XQWbW4OfxAOciRy0n7+48HcanpjnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEufWSlw/lm2QQIrJoeMynJ/FqDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1YzNhNTE2LTIyNzItNGE3YS1iNmRlLTkyYWI5OTFiNGI0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ezANBgkqhkiG9w0BAQsFAAOCAQEAGF+CIW4mMb8Mszz/D4juUzmvbD+t g9sKCNALCC++yI+HLvv9P+o9Lln1v6jJHU3GMheHTPMRwnT0YJXkzDDNXo2rh1T5 4yXvIXJXWKTZ4ndiXLCpQxgQtXEOvCMBawrvEm1sDIkDee3p+bNoEbDm6KyotaHw UFWa0eZ5b6uGidnUZe1/1PACs/N4qvwRPl3ar8gNS1+ng/zotJRJ21tWo5d+PASk eLiygcnlhKOSez2AbbP/DUax+fvM6u222o+PwRd0DVPqKUYSHj+XFwIvusviXQ+P 1KKKRzpKUpZr2nzfs+x17FSS8ei1eBO43em827Nt0Oj2KcCRKBur5ynBHQ== -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:35 2025 by rpki-client