$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa File: 27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa (raw, json) Hash identifier: lmVHNOARdKobfFmmoNNTk+aBt8Pr+9dLkzlG3Ql84cQ= Subject key identifier: 23:3F:AA:41:29:13:58:5A:77:32:8D:BE:7B:D7:36:30:71:D2:5C:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E0FAC79DBC918E983C019281AB08CA6ED42D892 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa Signing time: Tue 08 Apr 2025 00:41:22 +0000 ROA not before: Tue 08 Apr 2025 00:41:22 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.240.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0f:ac:79:db:c9:18:e9:83:c0:19:28:1a:b0:8c:a6:ed:42:d8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:41:22 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=cd0a7180fc76006b38416416596216ff7efb63b39ac9a0bbe3749d10a6257f3d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:a4:b9:2d:b6:8d:b5:2f:6d:87:db:05:32: 74:52:d6:55:15:f6:86:47:73:cc:ae:d6:aa:0e:7d: 8d:fa:2e:a0:92:3c:72:64:85:0c:ff:b6:af:d8:20: ca:15:84:a2:fc:44:8d:7e:96:86:a0:42:93:2e:1a: e9:63:6a:14:43:18:59:69:83:c6:71:27:2e:19:d4: 50:6c:11:f1:10:67:90:22:5f:55:7e:5a:c5:57:13: 7a:3e:ff:0f:7d:31:77:80:04:b5:ba:23:ec:cb:be: 9b:51:db:eb:35:b3:38:75:e1:0d:34:88:85:3d:56: d1:46:60:40:93:bd:65:79:37:a7:67:6f:6d:fa:6f: af:30:1a:ba:1c:d2:e7:6b:21:c8:51:0f:54:a7:e2: 69:4f:27:c3:50:14:cf:b5:15:dd:41:7c:bb:a8:4d: aa:1c:d8:96:94:bf:05:b4:66:77:7f:3b:c7:48:3e: 8b:ff:a2:8c:d0:bf:b9:ba:13:91:26:93:0e:40:e5: 64:2a:30:cd:bb:9a:89:99:a7:a9:ac:89:74:b3:06: a0:8d:f8:80:fa:1a:c3:2c:a4:47:c2:a0:94:bc:37: 63:40:b6:68:ac:db:bc:2c:85:58:0a:b0:82:74:b7: 4e:5c:cf:cc:ea:8a:99:b0:a0:96:28:4b:8f:c3:d0: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:AA:41:29:13:58:5A:77:32:8D:BE:7B:D7:36:30:71:D2:5C:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27c8a61e-4b54-49e6-9a8e-e3229656a9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.240.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0a:1d:ba:60:b9:2f:5b:c7:b9:d9:e3:82:ef:bd:e7:0e:a5:89: f2:40:c6:71:2d:7b:33:e9:91:bb:9a:e0:67:53:83:2e:66:ff: f2:3f:da:06:4e:2f:67:c1:45:4e:2c:a6:ae:5a:8d:dd:cf:28: 4c:b4:a6:4d:ab:af:c7:fb:b1:ef:b8:c2:ac:c3:3a:c5:4a:83: de:17:28:45:bb:69:e0:bd:64:e6:10:c7:63:b8:19:64:85:22: 94:f5:38:41:e0:6d:0a:eb:5c:59:bf:1f:f0:eb:ac:46:ad:49: 38:36:67:03:90:27:4b:0e:09:a4:cb:d0:49:92:83:ab:d8:1e: 65:49:fc:84:ca:d7:38:ca:30:c5:c7:24:11:67:97:a4:ae:59: 87:08:6b:bb:64:15:5c:9f:db:5b:fc:37:8d:a8:65:04:d2:0c: 6d:16:38:18:4c:fb:45:10:f0:12:ae:fa:a5:54:6e:50:71:02: 95:1d:f6:fb:5a:9b:91:14:71:23:0a:67:d3:62:67:2b:33:07: 9a:9e:14:ce:65:c0:16:6f:7c:01:2e:fe:bd:39:37:e0:c4:5a: 8e:23:1d:85:2e:6a:a9:13:62:22:e3:95:a3:5b:59:b5:b3:29: e3:3b:fe:e2:53:00:06:b3:5f:42:1b:18:2a:19:b5:ae:4a:b5: 0b:29:b5:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXg+sedvJGOmDwBkoGrCMpu1C2JIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDA0MTIyWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDBhNzE4MGZjNzYwMDZiMzg0MTY0MTY1OTYyMTZmZjdl ZmI2M2IzOWFjOWEwYmJlMzc0OWQxMGE2MjU3ZjNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFQKS5LbaNtS9th9sFMnRS1lUV9oZHc8yu1qoOfY36LqCS PHJkhQz/tq/YIMoVhKL8RI1+loagQpMuGuljahRDGFlpg8ZxJy4Z1FBsEfEQZ5Ai X1V+WsVXE3o+/w99MXeABLW6I+zLvptR2+s1szh14Q00iIU9VtFGYECTvWV5N6dn b236b68wGroc0udrIchRD1Sn4mlPJ8NQFM+1Fd1BfLuoTaoc2JaUvwW0Znd/O8dI Pov/oozQv7m6E5Emkw5A5WQqMM27momZp6msiXSzBqCN+ID6GsMspEfCoJS8N2NA tmis27wshVgKsIJ0t05cz8zqipmwoJYoS4/D0GejAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIz+qQSkTWFp3Mo2+e9c2MHHSXD0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3YzhhNjFlLTRiNTQtNDllNi05YThlLWUzMjI5NjU2YTlhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG8EAwDQYJKoZIhvcNAQELBQADggEBAAodumC5L1vHudnjgu+95w6lifJA xnEtezPpkbua4GdTgy5m//I/2gZOL2fBRU4spq5ajd3PKEy0pk2rr8f7se+4wqzD OsVKg94XKEW7aeC9ZOYQx2O4GWSFIpT1OEHgbQrrXFm/H/DrrEatSTg2ZwOQJ0sO CaTL0EmSg6vYHmVJ/ITK1zjKMMXHJBFnl6SuWYcIa7tkFVyf21v8N42oZQTSDG0W OBhM+0UQ8BKu+qVUblBxApUd9vtam5EUcSMKZ9NiZyszB5qeFM5lwBZvfAEu/r05 N+DEWo4jHYUuaqkTYiLjlaNbWbWzKeM7/uJTAAazX0IbGCoZta5KtQsptRY= -----END CERTIFICATE-----Generated at Wed Apr 16 16:52:06 2025 by rpki-client