$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa File: f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa (raw, json) Hash identifier: lT8lU/QS1yYhk8yUl5PtSRYiy9OfO1Xbk2ie6DgFMNM= Subject key identifier: E9:7A:2A:10:8D:AF:67:72:D8:36:70:01:A6:C5:50:0C:DA:A2:A8:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1254A9426BCA8D74C0F0FD57BEE39C141E686772 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa Signing time: Fri 28 Mar 2025 15:53:31 +0000 ROA not before: Fri 28 Mar 2025 15:53:31 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:54:a9:42:6b:ca:8d:74:c0:f0:fd:57:be:e3:9c:14:1e:68:67:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:53:31 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:2a:75:ab:0a:c7:cb:f5:18:03:ee:d5:2d: 95:1e:1e:82:d8:63:e9:2d:a7:44:01:a5:c1:66:e0: da:06:a9:8f:2c:77:5f:d3:ee:2e:52:b3:f8:b4:d3: 3d:2b:6f:8b:33:56:7b:ae:63:33:a9:ec:2d:ef:23: ec:09:20:b2:b7:5f:ce:11:3d:8e:f8:c8:8f:12:82: 2b:42:ce:dd:83:c8:0b:17:41:73:98:e3:45:04:fb: 7f:31:f3:bc:23:f8:bc:97:68:9d:28:ef:c4:8e:5e: 9d:18:a5:c5:92:c2:19:0c:09:70:98:b3:05:4b:f9: 9f:7f:f6:bc:af:47:6c:b3:04:c7:59:a2:40:95:3a: 5e:d9:ea:cc:31:c7:d9:7c:fa:95:37:0d:4e:f8:62: 8c:76:02:a8:1d:b1:ee:07:31:c6:f5:4b:c5:76:cf: fe:56:ec:3c:59:28:7a:61:37:a4:7d:eb:e3:7e:0b: aa:c6:50:5b:3d:52:84:bc:fe:62:0f:a7:d5:cf:cc: 2a:5f:27:39:89:4d:98:34:14:3a:d0:73:68:0a:74: 9d:d1:03:89:9c:07:80:9b:ef:3f:72:df:54:c0:13: a8:11:b6:3e:c0:32:dc:56:df:ed:57:2d:5e:6c:a9: 57:8b:dc:c7:ce:bd:5a:cc:3c:8a:59:5c:6d:1a:16: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:2A:10:8D:AF:67:72:D8:36:70:01:A6:C5:50:0C:DA:A2:A8:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:0d:11:31:09:a5:13:c7:da:ac:bc:f4:35:a8:17:13:ac:78: 7f:a6:47:e5:fc:8d:9d:35:61:db:a2:42:67:85:9c:25:b1:b0: d2:16:c1:c2:8a:15:3b:3f:77:5f:21:d7:39:91:53:a3:5f:32: 33:b5:bf:25:cd:53:dd:4d:0a:f8:94:a2:62:8b:cd:ec:62:6a: 85:a6:75:ef:0b:f7:11:fa:4c:bc:9a:41:8a:9a:2a:1a:89:bc: 43:66:38:6f:90:a8:ba:c7:af:85:b9:82:b7:58:51:fd:83:64: ef:36:0d:f5:c7:df:32:3c:a9:77:f6:17:a6:d3:39:48:f5:fc: bb:81:e6:6d:2d:7d:2a:93:72:42:8a:7d:53:5c:64:1a:c8:51: 9f:6c:f3:a2:66:34:17:d7:62:8c:34:02:2e:f1:e1:c9:b4:82: f2:84:9d:bc:97:5d:02:f2:5a:38:fe:70:3b:5d:81:9f:98:c8: c2:3c:f4:cd:ca:4c:c1:c2:6d:8a:8c:8f:bf:52:7d:dc:1e:ab: 4d:c3:a0:e0:f7:9c:d8:5a:86:6d:c8:9d:e2:b6:e6:42:e1:64: dd:f8:e1:9b:ec:2c:99:99:45:a5:05:59:8b:ec:0b:a2:b0:69: 68:fc:8e:d1:f7:76:f5:58:c9:87:ce:f3:15:5a:d3:b9:05:3b: 3d:0d:f0:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUElSpQmvKjXTA8P1XvuOcFB5oZ3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU1MzMxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTE1MjNjZTdjYzg2ZTFkNDdiYjhiYjU0MTRiMTY5N2Jk ZTRiYjBkODE2Y2M1ZTJlMGFiMDU0ODIyYTM4ZDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxrip1qwrHy/UYA+7VLZUeHoLYY+ktp0QBpcFm4NoGqY8s d1/T7i5Ss/i00z0rb4szVnuuYzOp7C3vI+wJILK3X84RPY74yI8SgitCzt2DyAsX QXOY40UE+38x87wj+LyXaJ0o78SOXp0YpcWSwhkMCXCYswVL+Z9/9ryvR2yzBMdZ okCVOl7Z6swxx9l8+pU3DU74Yox2Aqgdse4HMcb1S8V2z/5W7DxZKHphN6R96+N+ C6rGUFs9UoS8/mIPp9XPzCpfJzmJTZg0FDrQc2gKdJ3RA4mcB4Cb7z9y31TAE6gR tj7AMtxW3+1XLV5sqVeL3MfOvVrMPIpZXG0aFj/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6XoqEI2vZ3LYNnABpsVQDNqiqPMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxYWU2MGYxLWY1NGYtNDJmYy1iYmVhLWVmNGZkYTEzNmI1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBshAwDQYJKoZIhvcNAQELBQADggEBAAwNETEJpRPH2qy89DWoFxOseH+m R+X8jZ01YduiQmeFnCWxsNIWwcKKFTs/d18h1zmRU6NfMjO1vyXNU91NCviUomKL zexiaoWmde8L9xH6TLyaQYqaKhqJvENmOG+QqLrHr4W5grdYUf2DZO82DfXH3zI8 qXf2F6bTOUj1/LuB5m0tfSqTckKKfVNcZBrIUZ9s86JmNBfXYow0Ai7x4cm0gvKE nbyXXQLyWjj+cDtdgZ+YyMI89M3KTMHCbYqMj79Sfdweq03DoOD3nNhahm3IneK2 5kLhZN344ZvsLJmZRaUFWYvsC6KwaWj8jtH3dvVYyYfO8xVa07kFOz0N8Js= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:52 2025 by rpki-client