$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa File: 68262a77-03e2-4c18-92d9-7a34ebeac869.roa (raw, json) Hash identifier: /6DZ0fXZI0jIvlevUSYtMXL3KTRoBEIrO5yuTnuCsVc= Subject key identifier: 4C:73:68:AF:F1:24:51:0C:27:3B:D4:EB:46:9B:01:FE:95:B5:83:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29973A269454B24A7387DB05AA4F2FDC8B910490 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa Signing time: Wed 09 Apr 2025 00:30:34 +0000 ROA not before: Wed 09 Apr 2025 00:30:34 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 66.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:97:3a:26:94:54:b2:4a:73:87:db:05:aa:4f:2f:dc:8b:91:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:30:34 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=7b9901100c558621cc5112d8e656d7af500b34246eec3de1d6340045f9aa4bb8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:33:91:c5:99:f2:48:63:78:be:40:60:23: e2:62:fa:3f:a2:86:5e:6a:2c:3e:ff:3a:7e:57:e2: 1c:9a:42:b5:59:6d:b2:94:51:38:14:25:9e:5b:c8: 30:dd:30:da:6a:95:bf:db:43:89:fa:fc:23:67:cb: cb:9a:71:cc:87:06:b7:8d:dc:f1:5f:dd:ea:22:69: b6:19:68:6c:a8:86:17:28:ad:04:88:43:6d:b3:77: b2:c1:67:7f:37:5a:ee:42:9d:3a:aa:2d:31:b0:bd: 34:28:dd:94:6d:7b:67:80:a6:61:6f:90:f9:b8:7c: 90:56:21:ae:28:dd:93:6c:6d:da:9c:7a:cf:66:ce: 11:b4:fb:d1:be:3b:8c:f7:cd:5d:8c:30:c1:01:45: 76:00:b4:c4:2a:df:3e:ed:dd:45:84:1b:92:de:8b: 8b:52:a4:fc:3c:e7:97:a1:30:a4:48:0e:b7:1d:e6: 25:2b:a2:db:0d:3a:37:be:32:be:fd:06:96:3c:33: f9:e2:66:71:3e:83:85:c5:4c:e7:cc:8a:c8:cd:0a: b3:82:fb:2d:93:8c:b8:b2:a1:4d:ea:10:5e:dc:49: e6:d8:48:6d:89:be:7e:6e:6c:5e:0f:e0:f6:d8:4e: a2:85:be:35:20:73:61:f5:b5:c2:26:26:e5:e7:72: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:68:AF:F1:24:51:0C:27:3B:D4:EB:46:9B:01:FE:95:B5:83:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:1a:40:03:bd:98:d6:2c:30:cc:98:00:ac:16:b1:00:4e:85: 32:ab:3d:7a:6b:06:9c:1c:27:99:08:26:b8:d0:20:6e:fb:dc: ea:4b:5c:b5:ab:30:6d:43:02:e2:37:17:eb:59:e3:ab:78:8b: 48:cd:e2:45:d2:0c:e9:c2:d5:e5:aa:2f:ab:12:d7:2b:bd:76: 5f:37:57:15:de:78:4e:8f:44:a4:0d:e4:a9:0e:0a:19:4c:d7: e2:6b:23:66:b4:d0:64:a0:4e:2e:e9:f7:bd:db:50:0d:d7:86: 7a:45:31:40:3e:91:63:3e:d3:89:99:7b:b5:3f:5c:c5:21:1f: df:0e:4b:3e:24:df:8e:72:77:3c:46:e5:65:6a:a2:c6:1d:04: b2:d7:88:de:46:26:5b:24:49:2d:c1:92:01:d4:00:00:ae:b3: 21:b0:19:d8:29:5c:2c:de:1a:21:17:d1:8d:6e:a3:9f:e1:de: c7:5a:04:f9:3e:19:80:58:55:6a:b6:31:f1:77:f8:6a:70:c2: 88:56:73:cb:2a:39:9d:6e:7e:bd:f0:06:60:e5:fa:a7:c0:53: 59:f6:7b:7b:12:55:b3:c6:4c:4c:b0:99:b0:5d:9d:82:6c:22: f6:dd:27:d0:5c:86:9a:2d:5f:a0:15:62:e8:93:91:a5:f3:1d: 6a:05:89:9f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKZc6JpRUskpzh9sFqk8v3IuRBJAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAzMDM0WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Yjk5MDExMDBjNTU4NjIxY2M1MTEyZDhlNjU2ZDdhZjUw MGIzNDI0NmVlYzNkZTFkNjM0MDA0NWY5YWE0YmI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTADORxZnySGN4vkBgI+Ji+j+ihl5qLD7/On5X4hyaQrVZ bbKUUTgUJZ5byDDdMNpqlb/bQ4n6/CNny8uaccyHBreN3PFf3eoiabYZaGyohhco rQSIQ22zd7LBZ383Wu5CnTqqLTGwvTQo3ZRte2eApmFvkPm4fJBWIa4o3ZNsbdqc es9mzhG0+9G+O4z3zV2MMMEBRXYAtMQq3z7t3UWEG5Lei4tSpPw855ehMKRIDrcd 5iUrotsNOje+Mr79BpY8M/niZnE+g4XFTOfMisjNCrOC+y2TjLiyoU3qEF7cSebY SG2Jvn5ubF4P4PbYTqKFvjUgc2H1tcImJuXnciP/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTHNor/EkUQwnO9TrRpsB/pW1g4wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MjYyYTc3LTAzZTItNGMxOC05MmQ5LTdhMzRlYmVhYzg2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBCnTANBgkqhkiG9w0BAQsFAAOCAQEAiRpAA72Y1iwwzJgArBaxAE6FMqs9 emsGnBwnmQgmuNAgbvvc6ktctaswbUMC4jcX61njq3iLSM3iRdIM6cLV5aovqxLX K712XzdXFd54To9EpA3kqQ4KGUzX4msjZrTQZKBOLun3vdtQDdeGekUxQD6RYz7T iZl7tT9cxSEf3w5LPiTfjnJ3PEblZWqixh0EsteI3kYmWyRJLcGSAdQAAK6zIbAZ 2ClcLN4aIRfRjW6jn+Hex1oE+T4ZgFhVarYx8Xf4anDCiFZzyyo5nW5+vfAGYOX6 p8BTWfZ7exJVs8ZMTLCZsF2dgmwi9t0n0FyGmi1foBVi6JORpfMdagWJnw== -----END CERTIFICATE-----Generated at Wed Apr 16 17:12:33 2025 by rpki-client