$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa File: f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa (raw, json) Hash identifier: Gz7vdBEmITpM/SJvdxkimdLL1JPl1NhnV9jIznVTSFc= Subject key identifier: 5D:84:4E:BE:7C:D2:2F:F1:07:CE:40:9B:57:AD:2F:56:5C:26:B4:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EAD2D367DDC0E3F114D7A6D9362971451359B3A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa Signing time: Mon 24 Mar 2025 15:41:22 +0000 ROA not before: Mon 24 Mar 2025 15:41:22 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ad:2d:36:7d:dc:0e:3f:11:4d:7a:6d:93:62:97:14:51:35:9b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 24 15:41:22 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:72:bc:f3:2a:3b:7b:69:93:d8:e4:fe:9c: a9:b1:19:df:4b:d2:22:78:5c:d6:10:39:f4:5b:29: 57:5c:a8:a2:d8:69:b4:b5:86:bd:27:7c:ba:c4:e4: e7:a1:47:77:b6:37:84:7f:5f:23:b0:3f:cb:be:69: 87:a5:d2:ed:bc:c8:db:d7:23:c8:09:09:52:ac:6e: 25:47:a8:89:5e:a0:e5:de:ee:52:d3:f0:8e:99:1a: 7b:4b:66:ac:32:79:b6:a5:f1:e3:f7:dc:3d:1d:dd: 2d:55:3b:99:e9:d7:44:90:b2:ee:d5:92:0b:c8:d5: ee:44:e2:b3:1a:b4:3d:7e:4f:75:da:61:81:78:9b: fa:57:00:94:6e:aa:c0:f7:04:89:92:a5:65:6b:b3: bf:0b:88:d1:2b:5c:25:7b:b9:34:15:2b:87:60:ab: 48:ee:05:05:6d:e8:d6:ea:40:1f:05:ee:f6:b6:91: d7:16:db:42:b6:5b:d2:8a:a9:d0:9e:af:72:4d:14: bf:ac:b2:2d:dc:00:1b:98:c1:76:48:7b:4c:e4:04: 65:9a:b9:c4:4e:bf:71:d3:9e:09:c9:dc:d5:92:d7: 88:a7:a7:2a:cd:86:c2:d8:da:b2:bd:c5:9f:42:51: c4:3b:e5:c5:bc:f5:d0:02:70:5b:46:a0:36:14:44: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:84:4E:BE:7C:D2:2F:F1:07:CE:40:9B:57:AD:2F:56:5C:26:B4:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c5f88f-8a11-474d-b345-2e8d9ae0432f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.121.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:0b:b1:e1:cc:17:7e:64:cb:4d:a4:a5:87:7c:3e:b7:18:ce: ce:2a:e9:43:99:31:26:1e:37:e7:fd:bf:4a:84:81:1b:83:5d: b2:3d:63:3c:e7:07:f7:fc:30:24:62:ad:64:f5:3a:18:6d:26: b7:6c:5c:2c:50:ea:bc:fb:11:4e:99:e5:9b:5a:0e:7e:61:c6: 72:5e:c3:b8:ec:64:07:fb:05:56:88:40:10:a9:fb:91:01:96: 04:4e:83:ef:84:cb:54:b1:37:5a:e0:af:5e:22:37:46:3b:c0: 94:3f:b3:da:e6:6d:9b:52:65:53:d1:58:e5:da:da:4a:d6:67: 5d:d2:a6:7b:0b:a6:02:36:1d:5a:5b:f0:01:69:2d:1d:01:aa: 7f:91:d2:bc:6c:b0:33:cb:77:75:75:f8:12:7a:7f:6a:a4:7d: 98:df:67:6d:b8:39:31:f8:5c:38:08:87:0e:b8:96:01:9b:0e: 64:05:87:1a:b3:e0:95:17:3c:70:87:04:0c:3c:bb:e4:84:b4: 08:7c:35:9c:5e:d3:34:51:08:a8:0f:c8:54:1a:dc:ac:4b:b7: 8d:a8:b4:45:46:af:bf:ab:65:51:4e:13:3b:3a:01:aa:b3:10: 10:d6:ff:fa:b0:4c:03:82:88:63:52:1a:71:5c:7c:87:22:7f: e1:6a:11:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDq0tNn3cDj8RTXptk2KXFFE1mzowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI0MTU0MTIyWhcNMjUwNDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWQ4M2NmNDcwYzAyMmJkODk5M2ZiYzg2NjhjNGVkYTFl NzJmMGI5OTc5OTNhMzNjM2UyZGU0MzRkMDdjYWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP23K88yo7e2mT2OT+nKmxGd9L0iJ4XNYQOfRbKVdcqKLY abS1hr0nfLrE5OehR3e2N4R/XyOwP8u+aYel0u28yNvXI8gJCVKsbiVHqIleoOXe 7lLT8I6ZGntLZqwyebal8eP33D0d3S1VO5np10SQsu7VkgvI1e5E4rMatD1+T3Xa YYF4m/pXAJRuqsD3BImSpWVrs78LiNErXCV7uTQVK4dgq0juBQVt6NbqQB8F7va2 kdcW20K2W9KKqdCer3JNFL+ssi3cABuYwXZIe0zkBGWaucROv3HTngnJ3NWS14in pyrNhsLY2rK9xZ9CUcQ75cW89dACcFtGoDYURILlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXYROvnzSL/EHzkCbV60vVlwmtJQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwYzVmODhmLThhMTEtNDc0ZC1iMzQ1LTJlOGQ5YWUwNDMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAvnkwDQYJKoZIhvcNAQELBQADggEBACsLseHMF35ky02kpYd8PrcYzs4q 6UOZMSYeN+f9v0qEgRuDXbI9YzznB/f8MCRirWT1OhhtJrdsXCxQ6rz7EU6Z5Zta Dn5hxnJew7jsZAf7BVaIQBCp+5EBlgROg++Ey1SxN1rgr14iN0Y7wJQ/s9rmbZtS ZVPRWOXa2krWZ13SpnsLpgI2HVpb8AFpLR0Bqn+R0rxssDPLd3V1+BJ6f2qkfZjf Z224OTH4XDgIhw64lgGbDmQFhxqz4JUXPHCHBAw8u+SEtAh8NZxe0zRRCKgPyFQa 3KxLt42otEVGr7+rZVFOEzs6AaqzEBDW//qwTAOCiGNSGnFcfIcif+FqEdE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:40 2025 by rpki-client