$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04ee03b7-12a6-41a9-a0ce-ab7e197d0ac3.roa File: 04ee03b7-12a6-41a9-a0ce-ab7e197d0ac3.roa (raw, json) Hash identifier: jKU56X9fwjvVC6BUhejtTNqXdJW2ZpsL6aqb0Oj0rWU= Subject key identifier: F1:00:21:4D:04:A1:96:6D:90:59:BA:9B:88:20:64:65:1A:E4:AA:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DF1F40FE9EC998ACD40E337B93258033AB5B519 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04ee03b7-12a6-41a9-a0ce-ab7e197d0ac3.roa Signing time: Mon 17 Feb 2025 15:20:14 +0000 ROA not before: Mon 17 Feb 2025 15:20:14 +0000 ROA not after: Mon 24 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.54.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:f4:0f:e9:ec:99:8a:cd:40:e3:37:b9:32:58:03:3a:b5:b5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 15:20:14 2025 GMT Not After : Mar 24 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:d9:36:de:5b:0f:50:70:55:ef:51:5d:ad: f9:74:3c:68:82:a1:78:2d:f8:5e:fe:7f:51:02:1f: 1b:f6:f7:f7:b9:84:07:c7:1b:b9:29:24:16:31:6f: 9a:da:2a:2a:08:2d:fa:a2:4d:84:d9:e5:51:f3:5f: c2:1f:4d:73:c6:c9:93:2f:89:d5:29:46:cf:0c:cb: da:61:ec:8c:a1:f3:88:16:2a:fd:50:12:50:c4:33: 69:75:eb:f0:46:8e:bf:23:83:96:14:c4:a0:8b:ec: fe:26:08:63:9a:45:20:ac:84:45:b0:0a:1d:ac:64: 66:bf:65:16:37:50:dd:9e:2e:f9:bb:ab:71:72:80: 87:9e:19:df:b5:f8:f0:a0:1e:03:b8:b6:e4:cf:29: 63:8c:21:c4:95:d6:41:6b:7c:13:7a:57:50:5f:54: dc:25:05:1f:cd:e2:a1:7c:e8:28:09:1d:cb:37:a4: 7e:48:75:76:80:a7:b8:fd:c6:30:9b:21:27:30:fa: 76:e7:4b:06:67:65:4b:a1:bb:f9:59:85:2a:cb:ae: 38:14:84:a5:56:c7:14:99:82:41:24:48:45:97:77: fb:66:24:5f:18:2b:f2:0a:a0:51:69:78:0d:a6:0a: 2b:d4:34:c1:91:4b:d2:fc:2a:1b:2c:75:ea:0a:4f: b6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:00:21:4D:04:A1:96:6D:90:59:BA:9B:88:20:64:65:1A:E4:AA:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04ee03b7-12a6-41a9-a0ce-ab7e197d0ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.54.160.0/19 Signature Algorithm: sha256WithRSAEncryption 59:3e:7a:f1:4e:0b:a0:c9:f4:b3:fc:93:55:4a:c4:ed:75:9e: 42:af:45:d2:f6:64:90:3c:19:c0:25:96:d7:14:ac:c0:b1:de: 17:8e:ae:08:35:f7:63:da:3c:f6:e8:8f:36:35:2d:8b:8f:d2: 53:0d:2d:88:0a:7f:21:de:2c:90:c2:c7:20:ac:4f:38:98:93: d6:51:fb:4e:f0:55:62:3a:56:69:1b:ec:c1:31:eb:61:58:81: 9f:8f:36:94:1f:5e:81:c1:73:8d:65:3e:1d:6c:7e:9f:71:67: c3:b6:7c:f4:95:19:e0:0e:24:e2:28:ee:d4:c7:77:c6:c6:ac: e4:03:7b:73:a5:2b:64:1c:cd:ef:82:ad:fe:21:ba:8f:91:5c: 93:89:fb:9b:59:ee:90:13:3e:59:74:51:70:26:33:32:24:82: fe:e0:d0:1e:34:94:a7:ea:34:84:0a:72:7e:10:d5:d9:88:c0: 52:e1:26:c9:de:6b:a6:1f:79:63:fd:d4:c6:59:52:69:c0:84: 62:d6:67:d6:b4:f4:7f:c5:bf:4b:2c:20:1c:36:58:8f:77:77: f0:3b:12:90:6f:05:e2:ab:5a:11:0f:dd:e6:ac:5b:6a:ad:c0: 1c:2f:6e:be:55:c5:38:8b:7b:e3:fb:64:ee:12:69:85:8d:47: d8:fb:e8:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDfH0D+nsmYrNQOM3uTJYAzq1tRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE3MTUyMDE0WhcNMjUwMzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmY4ZWI5MWJhODE3NzA1YzcwMTgyNTQ4OTE0YWI3M2I5 ZjMzNWE5ZTMwZDFmOTY4ZWU1ZDYxZjNmMWNlMDlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqedk23lsPUHBV71Fdrfl0PGiCoXgt+F7+f1ECHxv29/e5 hAfHG7kpJBYxb5raKioILfqiTYTZ5VHzX8IfTXPGyZMvidUpRs8My9ph7Iyh84gW Kv1QElDEM2l16/BGjr8jg5YUxKCL7P4mCGOaRSCshEWwCh2sZGa/ZRY3UN2eLvm7 q3FygIeeGd+1+PCgHgO4tuTPKWOMIcSV1kFrfBN6V1BfVNwlBR/N4qF86CgJHcs3 pH5IdXaAp7j9xjCbIScw+nbnSwZnZUuhu/lZhSrLrjgUhKVWxxSZgkEkSEWXd/tm JF8YK/IKoFFpeA2mCivUNMGRS9L8KhssdeoKT7YJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8QAhTQShlm2QWbqbiCBkZRrkqqIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0ZWUwM2I3LTEyYTYtNDFhOS1hMGNlLWFiN2UxOTdkMGFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRNqAwDQYJKoZIhvcNAQELBQADggEBAFk+evFOC6DJ9LP8k1VKxO11nkKv RdL2ZJA8GcAlltcUrMCx3heOrgg192PaPPbojzY1LYuP0lMNLYgKfyHeLJDCxyCs TziYk9ZR+07wVWI6Vmkb7MEx62FYgZ+PNpQfXoHBc41lPh1sfp9xZ8O2fPSVGeAO JOIo7tTHd8bGrOQDe3OlK2Qcze+Crf4huo+RXJOJ+5tZ7pATPll0UXAmMzIkgv7g 0B40lKfqNIQKcn4Q1dmIwFLhJsnea6YfeWP91MZZUmnAhGLWZ9a09H/Fv0ssIBw2 WI93d/A7EpBvBeKrWhEP3easW2qtwBwvbr5VxTiLe+P7ZO4SaYWNR9j76Ig= -----END CERTIFICATE-----Generated at Thu Mar 13 23:53:01 2025 by rpki-client