$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa File: 0624423f-0ae9-4701-8d7b-9f636c543aa3.roa (raw, json) Hash identifier: EMk3HGc2FEwG/ET20z9a1calvR0oWWyWlr6ImYUBlDo= Subject key identifier: 22:7D:F1:43:72:F4:8E:D6:48:9C:65:82:E2:0A:80:CE:E2:BC:A0:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 018D2DD614901411359C3C41FAB4522AEFB59679 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa Signing time: Sat 29 Mar 2025 00:22:06 +0000 ROA not before: Sat 29 Mar 2025 00:22:06 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.23.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:2d:d6:14:90:14:11:35:9c:3c:41:fa:b4:52:2a:ef:b5:96:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 29 00:22:06 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: serialNumber=fcff17b3a35eca98554db4b37c9379bd259342f13b07f0b7606a27658385acfe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:5c:fa:0a:10:1e:b7:e7:f4:cc:7a:e7:41: 87:57:4f:ed:f9:cb:1f:67:ca:ed:92:b3:29:b7:07: e7:76:00:90:ab:3f:73:c9:4c:09:3d:c9:bf:ac:0b: 61:0c:02:a0:46:42:e6:93:d3:00:2b:4f:13:0d:33: 77:df:1b:b4:65:b6:5b:59:fc:4a:6c:53:2c:6b:47: d3:f1:9c:d9:97:bf:b1:c8:66:d8:58:2a:76:4e:94: 20:c1:a6:13:57:92:7b:28:c8:48:b7:08:e6:cc:29: 8d:a7:ea:ad:1f:21:96:ab:fb:1f:26:1a:4b:bc:36: b7:87:a8:ef:4b:8c:b1:5e:43:c7:47:84:d9:61:6c: 20:55:1c:e5:d6:70:2a:da:db:89:f9:81:90:74:e1: 4d:48:5a:da:5c:4e:09:db:de:87:07:0a:9f:2c:12: a2:d2:a7:b6:e3:c3:26:2a:b1:5c:98:79:d2:af:bf: 3b:eb:80:f2:10:fc:0a:06:1e:e1:5d:65:76:67:0f: 82:8b:f6:cb:41:1f:71:67:b5:52:8b:0e:24:40:5d: 3b:51:c8:17:2e:d6:e4:f7:a1:12:97:6b:dd:c5:ab: fd:81:bb:6c:e5:a3:7d:09:8b:e4:be:4a:fb:56:ca: b9:35:ad:95:88:9f:e6:5b:72:44:e6:71:7c:db:51: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7D:F1:43:72:F4:8E:D6:48:9C:65:82:E2:0A:80:CE:E2:BC:A0:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0624423f-0ae9-4701-8d7b-9f636c543aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.23.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3e:fe:7a:1f:fb:f6:57:b8:77:04:21:c3:5b:f8:0f:dd:0b:8f: 0f:f0:89:47:ed:1c:b2:42:62:f3:0c:26:8e:39:f7:50:67:9f: 7d:f6:5c:8f:94:36:ce:7e:00:11:b9:a8:b5:4c:82:f3:14:41: 40:5a:63:f1:30:c6:68:f2:2a:56:f2:e1:b5:9f:ee:ba:32:15: d5:c7:6c:d6:4e:cd:17:d8:8d:00:7a:17:3e:5b:51:8f:d9:b8: 64:f8:5d:d6:24:30:6b:ff:d2:74:83:86:d3:22:b8:9a:53:eb: 73:c8:0c:54:8b:e9:78:62:50:dc:21:f5:0b:5e:91:7f:f7:ba: d9:6f:09:99:04:4b:d0:d0:41:cb:06:41:69:51:30:02:75:b5: 32:08:5a:ab:25:ba:85:c0:f6:76:d0:cf:d5:47:97:c4:02:31: 2b:2c:16:2e:6e:c2:b8:5f:40:98:2f:ef:4c:42:1e:b2:30:6e: 4d:15:1f:6a:94:7d:58:12:0d:07:46:86:cf:8f:d3:e6:94:e7: 3e:d5:8b:9b:4c:2b:b2:60:2e:53:55:03:e6:bc:0d:47:3d:db: 4a:67:c6:95:b9:8c:0b:24:cb:de:19:bf:69:4a:8a:a9:28:7e: 3f:24:29:77:9b:56:17:0d:09:35:28:c8:c6:cc:ef:d8:03:3b: 85:e1:a9:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAY0t1hSQFBE1nDxB+rRSKu+1lnkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI5MDAyMjA2WhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2ZmMTdiM2EzNWVjYTk4NTU0ZGI0YjM3YzkzNzliZDI1 OTM0MmYxM2IwN2YwYjc2MDZhMjc2NTgzODVhY2ZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeKlz6ChAet+f0zHrnQYdXT+35yx9nyu2Ssym3B+d2AJCr P3PJTAk9yb+sC2EMAqBGQuaT0wArTxMNM3ffG7RltltZ/EpsUyxrR9PxnNmXv7HI ZthYKnZOlCDBphNXknsoyEi3CObMKY2n6q0fIZar+x8mGku8NreHqO9LjLFeQ8dH hNlhbCBVHOXWcCra24n5gZB04U1IWtpcTgnb3ocHCp8sEqLSp7bjwyYqsVyYedKv vzvrgPIQ/AoGHuFdZXZnD4KL9stBH3FntVKLDiRAXTtRyBcu1uT3oRKXa93Fq/2B u2zlo30Ji+S+SvtWyrk1rZWIn+ZbckTmcXzbUewlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIn3xQ3L0jtZInGWC4gqAzuK8oF8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2MjQ0MjNmLTBhZTktNDcwMS04ZDdiLTlmNjM2YzU0M2FhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdrFwAwDQYJKoZIhvcNAQELBQADggEBAD7+eh/79le4dwQhw1v4D90Ljw/w iUftHLJCYvMMJo4591Bnn332XI+UNs5+ABG5qLVMgvMUQUBaY/EwxmjyKlby4bWf 7royFdXHbNZOzRfYjQB6Fz5bUY/ZuGT4XdYkMGv/0nSDhtMiuJpT63PIDFSL6Xhi UNwh9QtekX/3utlvCZkES9DQQcsGQWlRMAJ1tTIIWqsluoXA9nbQz9VHl8QCMSss Fi5uwrhfQJgv70xCHrIwbk0VH2qUfVgSDQdGhs+P0+aU5z7Vi5tMK7JgLlNVA+a8 DUc920pnxpW5jAsky94Zv2lKiqkofj8kKXebVhcNCTUoyMbM79gDO4XhqZw= -----END CERTIFICATE-----Generated at Wed Apr 16 16:48:47 2025 by rpki-client