$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa File: ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa (raw, json) Hash identifier: VNnxdq6cu+7pDYZ6bpyl4FfKwWmJtdeFV8DGiOyQs6E= Subject key identifier: E5:65:DF:D6:6A:95:86:5A:A7:AA:0D:9E:38:60:88:06:1F:2E:A9:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27A996170DD3C9E0784CCDFD6ABD14A0B40DB3AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa Signing time: Tue 25 Mar 2025 16:50:32 +0000 ROA not before: Tue 25 Mar 2025 16:50:32 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a9:96:17:0d:d3:c9:e0:78:4c:cd:fd:6a:bd:14:a0:b4:0d:b3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 16:50:32 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:2a:17:cc:b3:1e:36:4d:88:22:fc:42:2d: 41:c1:8b:e4:ca:57:b1:c1:37:b3:ab:94:94:25:d5: 2c:f3:5f:f6:8b:8a:6b:d5:0e:f4:80:27:7c:52:50: ee:a7:48:f0:15:85:2f:77:0a:a4:a3:38:e8:13:77: c9:37:98:41:cd:ac:00:c6:1a:54:16:11:cd:26:77: 7a:de:17:61:2d:60:cc:d0:dd:00:32:d0:c5:6b:90: 19:37:03:83:a4:cd:bb:70:14:61:a5:6d:8a:91:ca: 7e:9c:9d:be:09:db:e3:e2:03:af:97:50:56:19:7c: 8e:e9:24:f4:63:2a:c9:48:18:08:b1:59:6f:42:c2: f6:93:d9:31:d1:c9:5f:99:69:30:fe:a1:53:32:1f: 7b:22:51:3f:13:7b:7b:84:00:36:50:1b:2f:bf:ee: 17:b0:7b:de:8a:74:62:fe:72:2e:a6:c3:4d:0a:3d: 0e:0d:ba:48:86:2f:bb:2a:82:c5:7b:c6:7e:83:03: bc:57:68:af:a4:c8:2a:48:88:5b:44:7c:f6:8e:df: 28:91:49:5c:6f:75:9b:2d:0c:51:2a:3a:1f:06:91: 41:3a:b2:75:bf:87:16:cf:31:8a:b0:b3:c2:75:33: a6:5d:55:1d:73:4d:29:cb:3d:4a:4a:06:94:cf:95: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:65:DF:D6:6A:95:86:5A:A7:AA:0D:9E:38:60:88:06:1F:2E:A9:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.1.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:c7:bc:be:a8:d7:a8:b8:72:72:59:2e:53:aa:ce:e4:3d:c3: b6:63:8a:c9:bb:59:21:5a:d3:0c:97:cf:84:db:fb:16:ff:9f: 23:8b:7e:74:c7:e3:09:32:34:85:4b:6d:4e:a0:fb:4c:ac:64: b6:ba:b4:6a:b8:25:3c:6b:89:4f:8b:37:74:9e:84:09:fa:2b: 5a:88:23:33:6f:ff:bf:e7:a0:f1:75:9d:23:9d:e5:64:ae:5c: 7a:6a:10:ab:4f:5a:31:ff:11:ba:4e:d7:d0:ff:46:a8:a7:39: 86:d5:30:58:3e:52:c0:8a:d4:c2:3c:5a:11:c7:b8:a9:b8:9e: 1a:1b:3a:e3:bf:63:16:3a:5a:72:c0:3f:eb:c8:5b:27:fb:5a: 83:22:f2:bc:c7:c9:84:61:e4:d8:dc:b0:fb:18:56:15:de:2b: e4:f9:52:24:35:fa:9e:ae:69:4d:f5:fb:cb:f8:02:3d:bf:f6: 53:e5:b2:51:2c:eb:4e:d1:ee:81:e7:2c:60:d3:f7:1f:85:f9: fb:e3:5b:27:74:93:be:43:77:c7:74:68:66:b7:7f:09:13:83: 6c:e5:d8:18:37:d5:84:75:27:fd:db:dd:99:13:33:52:4a:71: 54:9e:7f:88:02:18:6f:3c:65:da:dd:80:95:6e:c2:e4:ec:32: 0c:30:98:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ6mWFw3TyeB4TM39ar0UoLQNs6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTY1MDMyWhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDdlMjAxMDBhYTcwYTNkNjIyMmE3NGMzNDQyNWY3ZDE5 YWY1OWU5YTAzZDRmNjdiNzkxMTZkZGI5OGMxY2JhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEAioXzLMeNk2IIvxCLUHBi+TKV7HBN7OrlJQl1SzzX/aL imvVDvSAJ3xSUO6nSPAVhS93CqSjOOgTd8k3mEHNrADGGlQWEc0md3reF2EtYMzQ 3QAy0MVrkBk3A4OkzbtwFGGlbYqRyn6cnb4J2+PiA6+XUFYZfI7pJPRjKslIGAix WW9CwvaT2THRyV+ZaTD+oVMyH3siUT8Te3uEADZQGy+/7hewe96KdGL+ci6mw00K PQ4NukiGL7sqgsV7xn6DA7xXaK+kyCpIiFtEfPaO3yiRSVxvdZstDFEqOh8GkUE6 snW/hxbPMYqws8J1M6ZdVR1zTSnLPUpKBpTPlZOfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5WXf1mqVhlqnqg2eOGCIBh8uqekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkN2I3MDY1LWNmM2UtNDUyMC05MTY2LTJjNjMyMmYzZDNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEgEwDQYJKoZIhvcNAQELBQADggEBAE7HvL6o16i4cnJZLlOqzuQ9w7Zj ism7WSFa0wyXz4Tb+xb/nyOLfnTH4wkyNIVLbU6g+0ysZLa6tGq4JTxriU+LN3Se hAn6K1qIIzNv/7/noPF1nSOd5WSuXHpqEKtPWjH/EbpO19D/RqinOYbVMFg+UsCK 1MI8WhHHuKm4nhobOuO/YxY6WnLAP+vIWyf7WoMi8rzHyYRh5NjcsPsYVhXeK+T5 UiQ1+p6uaU31+8v4Aj2/9lPlslEs607R7oHnLGDT9x+F+fvjWyd0k75Dd8d0aGa3 fwkTg2zl2Bg31YR1J/3b3ZkTM1JKcVSef4gCGG88ZdrdgJVuwuTsMgwwmAY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:36 2025 by rpki-client