$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa File: ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa (raw, json) Hash identifier: Vf5lcZFCbpyf7/zduUvJijGufJkztcuLeA2LwBPFC4Q= Subject key identifier: BE:CD:62:6D:C3:04:1D:59:33:A9:D0:FD:DC:01:48:7D:CE:58:4A:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F479F2AF7966C3DADBD5A551B4D694AE5D19EA6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa Signing time: Fri 21 Mar 2025 00:00:18 +0000 ROA not before: Fri 21 Mar 2025 00:00:18 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.20.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:47:9f:2a:f7:96:6c:3d:ad:bd:5a:55:1b:4d:69:4a:e5:d1:9e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:00:18 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:08:ea:0c:6e:41:59:8f:3d:94:98:f5:8a: c2:b4:94:c1:c2:d7:50:03:1a:b9:e6:0d:70:89:13: 06:2d:3c:06:cd:f4:b4:6d:87:a6:d5:fd:55:89:36: 26:a5:b4:0c:24:7a:59:3f:2c:0c:53:85:82:ec:d3: 52:34:26:58:fa:31:3c:bf:0d:22:44:8b:c5:65:6e: 5f:c1:52:8d:b0:c0:05:96:bf:2f:59:cc:99:3c:93: c6:69:b4:6c:21:05:85:62:b5:86:24:e0:2d:92:ce: 95:96:13:2a:9b:58:57:40:18:a1:a1:42:45:4f:6b: 6b:21:ad:d4:ce:49:ea:c5:42:cd:56:fc:4a:ee:88: f7:64:f3:3d:6c:d1:a6:bd:0b:57:e7:e0:d0:c9:36: 8d:54:8f:b3:c0:d9:81:89:1a:69:a4:43:bf:93:a5: 3e:6a:71:2d:60:89:14:a6:0f:3f:cb:a6:ef:84:68: fe:72:1e:2a:fd:58:cc:9b:af:ca:50:39:d4:60:58: 17:d0:41:4f:49:97:5c:7e:88:d4:4b:e4:03:63:5e: 7a:86:83:2b:10:bd:b9:b3:a7:77:6b:e9:b1:62:8a: f2:dc:8f:ff:ae:01:b3:b4:46:eb:b6:95:87:42:9f: da:68:72:28:01:de:b1:25:e2:66:97:7c:d0:c5:3b: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CD:62:6D:C3:04:1D:59:33:A9:D0:FD:DC:01:48:7D:CE:58:4A:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.20.128.0/17 Signature Algorithm: sha256WithRSAEncryption 09:ff:af:0e:5b:c4:84:15:79:aa:37:a0:8c:0c:fa:73:34:9e: 2c:a8:12:b8:22:58:e1:a1:08:da:95:aa:f3:7e:86:cf:01:a1: c2:ff:22:64:18:57:38:cf:60:b1:99:e0:1f:b7:51:54:dc:b9: ef:a4:dc:27:3c:c9:ff:c9:80:eb:7e:7a:ed:ee:a3:7f:0f:17: 7f:4e:83:a8:ac:50:54:da:90:0f:57:84:91:99:3f:07:f0:8a: 79:66:52:a7:b5:8c:81:b3:d0:29:8f:93:e1:73:87:7c:ea:3b: ae:9c:f0:a8:f2:9a:56:d9:d5:cf:ac:1c:92:fe:f1:a0:b8:fb: 7b:17:99:08:ae:ce:0d:3e:1f:6f:02:8a:de:94:45:ed:48:62: f9:1e:4b:5c:85:32:c6:4f:57:28:e6:0d:ea:48:f6:1d:71:c7: 7f:4b:08:b5:c3:d1:3a:31:4a:74:af:52:d7:97:27:cb:01:5a: 62:fe:0a:c8:b8:23:91:1d:f3:3c:c4:ec:67:42:e2:b5:de:88: 1c:a1:6d:ae:5b:49:e2:83:ed:d9:7c:27:e4:12:45:ee:8a:bf: d6:41:50:f6:43:76:76:ee:1c:c2:e9:e9:bc:f3:69:e1:fb:d1: 8b:19:ed:8f:a0:85:10:fe:d6:8a:78:04:ab:e1:1d:38:69:46: 5d:dc:74:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH0efKveWbD2tvVpVG01pSuXRnqYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAwMDE4WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODk0MzQ3ODg5NWFkM2ZjYTFhZjdiNGJjN2UwOGZkYzc0 MTc1NGQ5MTRiNTE0MWJlOTJiNGI3MzhhZTg3ZmM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9aQjqDG5BWY89lJj1isK0lMHC11ADGrnmDXCJEwYtPAbN 9LRth6bV/VWJNialtAwkelk/LAxThYLs01I0Jlj6MTy/DSJEi8Vlbl/BUo2wwAWW vy9ZzJk8k8ZptGwhBYVitYYk4C2SzpWWEyqbWFdAGKGhQkVPa2shrdTOSerFQs1W /EruiPdk8z1s0aa9C1fn4NDJNo1Uj7PA2YGJGmmkQ7+TpT5qcS1giRSmDz/Lpu+E aP5yHir9WMybr8pQOdRgWBfQQU9Jl1x+iNRL5ANjXnqGgysQvbmzp3dr6bFiivLc j/+uAbO0Ruu2lYdCn9pocigB3rEl4maXfNDFO+jpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvs1ibcMEHVkzqdD93AFIfc5YSoAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmMjhmZjMyLTg1ODktNDBlMS04ZjA3LWNhY2RiZmZkMDViOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAefFIAwDQYJKoZIhvcNAQELBQADggEBAAn/rw5bxIQVeao3oIwM+nM0niyo ErgiWOGhCNqVqvN+hs8BocL/ImQYVzjPYLGZ4B+3UVTcue+k3Cc8yf/JgOt+eu3u o38PF39Og6isUFTakA9XhJGZPwfwinlmUqe1jIGz0CmPk+Fzh3zqO66c8KjymlbZ 1c+sHJL+8aC4+3sXmQiuzg0+H28Cit6URe1IYvkeS1yFMsZPVyjmDepI9h1xx39L CLXD0ToxSnSvUteXJ8sBWmL+Csi4I5Ed8zzE7GdC4rXeiByhba5bSeKD7dl8J+QS Re6Kv9ZBUPZDdnbuHMLp6bzzaeH70YsZ7Y+ghRD+1op4BKvhHThpRl3cdOg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:41 2025 by rpki-client