$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa File: 477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa (raw, json) Hash identifier: VF0Ls2UIS6XBkKUaXjsZx5UiuFqGtB4Xihd8VScw204= Subject key identifier: FA:41:FA:34:CC:BB:74:6C:0F:E4:18:FF:12:62:FC:FE:A3:1F:62:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 669402AFA087FE5D32CE18356AB17CCFF7DE3F09 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa Signing time: Tue 08 Apr 2025 00:01:31 +0000 ROA not before: Tue 08 Apr 2025 00:01:31 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:94:02:af:a0:87:fe:5d:32:ce:18:35:6a:b1:7c:cf:f7:de:3f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:01:31 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=4c50c401be8abf8f21d84b61d01a3c229d9c018d19f3b888eb66cae0fbbd7b36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:c7:90:13:fb:38:24:dc:e7:b5:84:43:5e: e2:5f:b7:58:31:c0:ee:c5:e6:8d:c7:9a:95:85:4f: bb:64:0b:87:a1:f7:6a:ba:b3:10:f6:d5:79:ca:24: 64:1f:4e:1b:55:c2:f1:a7:d8:c3:5e:61:05:c1:c7: 27:d9:db:0c:4d:ec:4f:76:78:47:85:e3:79:56:04: 9f:a5:f9:a5:86:9c:9a:50:f2:d1:aa:bf:64:11:06: 93:8d:a1:78:77:b2:fd:28:1f:cb:fa:3d:6a:11:e1: 1f:3a:17:bb:a1:0a:9d:b6:a6:1a:a1:85:b2:06:26: 61:40:48:55:1b:92:96:3f:ec:27:21:6e:23:7a:53: ed:15:c7:8f:dd:95:b9:7b:eb:0b:18:25:6b:c7:b6: 55:af:79:9f:ce:8c:2a:77:17:bb:35:a4:9f:14:5d: f1:d1:e4:ad:a3:8e:89:17:ce:fc:80:06:1b:aa:99: b2:43:32:01:9d:40:de:27:d7:8f:56:d2:ee:26:1a: 19:1b:0c:d1:f5:9b:37:15:e9:2f:2a:4e:68:11:f6: a5:66:9e:03:2e:2b:e2:cc:38:62:26:10:53:61:96: 5d:81:c9:7e:e8:4d:1e:44:bb:50:89:78:41:3a:9d: 88:d5:a8:fd:1b:b9:1e:47:83:1f:1e:14:63:bc:47: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:41:FA:34:CC:BB:74:6C:0F:E4:18:FF:12:62:FC:FE:A3:1F:62:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:d9:36:4e:6f:eb:21:d2:52:49:4e:75:af:7a:80:a6:86:3e: 3e:68:7f:fc:4f:e1:a0:65:10:4d:03:6b:59:19:47:53:44:e8: 4f:d5:84:27:c1:3f:f8:a2:35:30:0e:99:e2:14:a8:ed:67:3f: 32:d6:42:03:7d:5e:06:82:08:5d:a5:89:16:bd:37:55:1d:a5: 78:5c:d9:0f:47:cd:f9:37:10:1b:4a:21:8f:4a:74:3a:c7:8a: b0:c2:01:de:e9:59:cc:f0:cc:67:90:00:da:95:e7:01:a6:bf: 4b:fc:84:d3:32:f1:41:f9:25:cc:63:ae:14:73:e2:f8:a2:66: fe:41:de:44:74:24:7b:4a:f9:f6:27:e3:96:5f:71:f6:c2:da: 6f:af:77:78:cf:dc:35:7a:3e:61:4a:ea:e2:a8:c8:6f:23:11: 16:e7:28:2d:1c:18:30:50:74:0f:86:44:d9:0d:e9:ea:f0:ac: 24:3b:24:5e:95:66:6e:e0:ce:f9:e3:20:32:64:82:4e:7c:f3: 90:16:82:8a:fa:f9:13:d6:ad:ab:1b:5c:45:41:e7:2f:10:a4: 08:79:13:68:81:2a:70:96:ea:23:14:b1:07:e4:e6:62:65:cc: b1:63:4e:15:83:c8:5d:5b:e8:c3:2a:14:9b:98:a5:fb:96:c8: 48:1f:68:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZpQCr6CH/l0yzhg1arF8z/fePwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAwMTMxWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzUwYzQwMWJlOGFiZjhmMjFkODRiNjFkMDFhM2MyMjlk OWMwMThkMTlmM2I4ODhlYjY2Y2FlMGZiYmQ3YjM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaS8eQE/s4JNzntYRDXuJft1gxwO7F5o3HmpWFT7tkC4eh 92q6sxD21XnKJGQfThtVwvGn2MNeYQXBxyfZ2wxN7E92eEeF43lWBJ+l+aWGnJpQ 8tGqv2QRBpONoXh3sv0oH8v6PWoR4R86F7uhCp22phqhhbIGJmFASFUbkpY/7Cch biN6U+0Vx4/dlbl76wsYJWvHtlWveZ/OjCp3F7s1pJ8UXfHR5K2jjokXzvyABhuq mbJDMgGdQN4n149W0u4mGhkbDNH1mzcV6S8qTmgR9qVmngMuK+LMOGImEFNhll2B yX7oTR5Eu1CJeEE6nYjVqP0buR5Hgx8eFGO8R88zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+kH6NMy7dGwP5Bj/EmL8/qMfYt0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3Nzc3M2ZhLWYzZTctNDI3Mi05YjY0LWVlMGQzYmFjYWI2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBo4zANBgkqhkiG9w0BAQsFAAOCAQEAidk2Tm/rIdJSSU51r3qApoY+Pmh/ /E/hoGUQTQNrWRlHU0ToT9WEJ8E/+KI1MA6Z4hSo7Wc/MtZCA31eBoIIXaWJFr03 VR2leFzZD0fN+TcQG0ohj0p0OseKsMIB3ulZzPDMZ5AA2pXnAaa/S/yE0zLxQfkl zGOuFHPi+KJm/kHeRHQke0r59ifjll9x9sLab693eM/cNXo+YUrq4qjIbyMRFuco LRwYMFB0D4ZE2Q3p6vCsJDskXpVmbuDO+eMgMmSCTnzzkBaCivr5E9atqxtcRUHn LxCkCHkTaIEqcJbqIxSxB+TmYmXMsWNOFYPIXVvowyoUm5il+5bISB9o/w== -----END CERTIFICATE-----Generated at Wed Apr 16 16:40:58 2025 by rpki-client