$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa File: 52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa (raw, json) Hash identifier: 5idKQm+DnuCMNg1twGgPCfh07mOYUE6aLkaqOwnjQOs= Subject key identifier: A0:99:F4:57:01:9F:64:BF:9C:90:26:95:A7:D5:6E:56:17:B6:92:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39EA4B308F51BCCBE0B6F5F3CE077115905A1843 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa Signing time: Tue 18 Feb 2025 15:00:52 +0000 ROA not before: Tue 18 Feb 2025 15:00:52 +0000 ROA not after: Tue 25 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:4b:30:8f:51:bc:cb:e0:b6:f5:f3:ce:07:71:15:90:5a:18:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 15:00:52 2025 GMT Not After : Mar 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:9a:63:62:df:52:7e:a4:ee:5e:fd:d6:b7: 6a:e0:33:19:47:72:ba:d7:d4:29:1a:60:8c:22:52: 37:37:f0:c0:f8:9b:09:37:da:74:e8:78:db:0a:b4: cf:c4:00:e1:a8:08:e9:45:b4:05:cc:e4:d6:ae:42: ef:54:8b:1e:18:64:bb:b0:69:2b:9a:0a:a7:b4:88: 48:be:29:93:4c:8c:2c:b6:dc:77:e4:78:ef:03:fb: 45:84:1b:5f:93:4b:7e:64:97:af:bc:3c:5b:b5:c2: ec:de:43:f3:7c:c7:f4:7b:31:94:c6:0d:d7:bb:9a: e2:3f:f4:7b:ae:14:18:24:a7:3c:ce:0c:1e:6a:52: b4:db:69:85:ed:70:90:a8:e5:5a:83:b4:e6:19:30: cc:83:a7:ed:f2:3a:91:2a:aa:28:d9:6c:85:f0:47: c1:b9:ee:57:c2:a6:39:45:c4:27:4b:72:a8:6a:cb: 8d:3f:dc:75:08:15:ba:bc:a5:b1:58:b6:1d:e1:13: 7f:b9:57:f1:a7:62:f1:d0:d6:16:2c:c5:9b:b7:a8: 9f:6b:46:b0:77:e2:dc:19:35:62:4d:5a:6f:36:dc: 36:92:17:74:c3:e1:10:a1:da:a7:8e:3e:69:cf:d5: f6:25:44:29:6a:48:3e:41:2f:4a:f7:72:4f:47:66: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:99:F4:57:01:9F:64:BF:9C:90:26:95:A7:D5:6E:56:17:B6:92:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52b2edf4-d1ad-4ef7-8a47-774336a91a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.76.0/24 Signature Algorithm: sha256WithRSAEncryption a1:8d:66:0c:9b:c7:40:1f:f8:2d:b5:99:00:c7:ff:4a:9d:93: 06:93:7c:6d:0a:74:c5:5f:01:ee:e1:25:31:fd:b9:2c:ac:ff: 8c:29:c4:de:98:64:da:b9:e6:40:36:b1:8d:1f:b4:70:c9:51: 6d:fa:f5:af:75:c9:bf:6b:30:58:53:42:0c:48:9c:ab:2d:64: 78:92:b6:5f:d1:49:5f:99:a7:0c:71:c5:e4:34:c7:3a:c3:e3: 52:2b:2e:24:26:c0:c4:13:14:0b:c4:a8:5a:65:79:75:ec:c5: 64:ef:39:37:fa:e0:77:26:b4:10:85:37:af:f6:ab:90:2b:0b: 18:b6:45:31:45:94:cb:eb:58:d0:b9:24:c7:f9:a5:36:ca:63: a6:51:70:a7:6c:da:67:da:a8:8d:0d:11:cb:0b:67:10:a7:1f: 74:ab:b6:77:a0:67:0f:e2:1b:a5:21:f6:5b:2b:cf:03:e1:55: 07:72:79:08:7c:b9:09:ce:74:8c:14:6a:b2:42:0e:3b:50:75: 43:bc:3f:00:1c:94:51:34:ae:b1:8c:8c:53:0f:b7:8f:71:51: 2c:da:c7:78:e8:69:6b:39:8e:78:73:c5:c3:92:b9:c7:c0:b5: 84:a1:dd:24:b7:6c:51:90:e5:5b:1c:e9:49:2d:70:0b:43:ae: 51:8c:83:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOepLMI9RvMvgtvXzzgdxFZBaGEMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjE4MTUwMDUyWhcNMjUwMzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDc1YTg2ZDNkOGIwYmQwMWRjNzlhOTQyZDA2ZDEzNjBi NjQyMTJhMWQ0N2I0NWI5ZGM2ZjZmYTk4MzUwNzNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfD5pjYt9SfqTuXv3Wt2rgMxlHcrrX1CkaYIwiUjc38MD4 mwk32nToeNsKtM/EAOGoCOlFtAXM5NauQu9Uix4YZLuwaSuaCqe0iEi+KZNMjCy2 3HfkeO8D+0WEG1+TS35kl6+8PFu1wuzeQ/N8x/R7MZTGDde7muI/9HuuFBgkpzzO DB5qUrTbaYXtcJCo5VqDtOYZMMyDp+3yOpEqqijZbIXwR8G57lfCpjlFxCdLcqhq y40/3HUIFbq8pbFYth3hE3+5V/GnYvHQ1hYsxZu3qJ9rRrB34twZNWJNWm823DaS F3TD4RCh2qeOPmnP1fYlRClqSD5BL0r3ck9HZh/VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoJn0VwGfZL+ckCaVp9VuVhe2ks4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyYjJlZGY0LWQxYWQtNGVmNy04YTQ3LTc3NDMzNmE5MWEwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EwwDQYJKoZIhvcNAQELBQADggEBAKGNZgybx0Af+C21mQDH/0qdkwaT fG0KdMVfAe7hJTH9uSys/4wpxN6YZNq55kA2sY0ftHDJUW369a91yb9rMFhTQgxI nKstZHiStl/RSV+ZpwxxxeQ0xzrD41IrLiQmwMQTFAvEqFpleXXsxWTvOTf64Hcm tBCFN6/2q5ArCxi2RTFFlMvrWNC5JMf5pTbKY6ZRcKds2mfaqI0NEcsLZxCnH3Sr tnegZw/iG6Uh9lsrzwPhVQdyeQh8uQnOdIwUarJCDjtQdUO8PwAclFE0rrGMjFMP t49xUSzax3joaWs5jnhzxcOSucfAtYSh3SS3bFGQ5Vsc6UktcAtDrlGMg5I= -----END CERTIFICATE-----Generated at Thu Mar 13 23:49:00 2025 by rpki-client