$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f421e27-1750-4590-95a3-28a2ba4d048c.roa File: 6f421e27-1750-4590-95a3-28a2ba4d048c.roa (raw, json) Hash identifier: DvJ1uanwXN64cLE+6BkCJEZF+ZWixrn+ZJ3R/uYLfCk= Subject key identifier: 03:3C:D4:EB:52:F2:32:04:8A:EE:51:4F:6F:05:8C:B3:66:1E:57:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01A1FCE65BD300124C97A87EEE50432EEF6ABC67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f421e27-1750-4590-95a3-28a2ba4d048c.roa Signing time: Wed 02 Apr 2025 00:21:44 +0000 ROA not before: Wed 02 Apr 2025 00:21:44 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 46.168.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:fc:e6:5b:d3:00:12:4c:97:a8:7e:ee:50:43:2e:ef:6a:bc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:21:44 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=060dce664a2f0f143f668eaaf17c859e13cbe3e302332209bd5bb4170cc28c17, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:a9:7b:71:33:d3:bd:6b:26:ae:49:92:85: 28:00:4d:40:88:d2:14:40:d6:50:91:26:14:7e:2a: cb:29:84:9e:cc:df:04:67:a8:f3:34:f9:ed:ef:b1: bd:5d:87:0f:f5:19:9b:f3:29:af:c5:08:83:85:cb: 4d:fb:b5:18:96:29:b2:73:a0:98:9e:39:90:2c:13: ad:a3:17:61:17:f4:56:aa:35:41:21:18:c2:81:70: 6a:7c:85:6d:3a:e1:2a:ef:d1:03:fe:4d:47:70:5b: db:12:65:c0:5b:13:67:40:0f:43:e5:e2:30:c2:f2: 88:8a:ab:e7:75:42:0e:7c:a4:f5:57:dd:56:c9:b8: a3:e3:4f:3c:6b:70:63:c9:b7:ae:a9:c1:9c:fd:8f: c3:9f:6b:ff:28:f5:8d:e1:f7:e0:93:93:3e:cd:54: 6b:d4:cf:a4:f1:24:07:25:76:d6:6f:07:f1:52:f0: 64:f7:b2:5d:fa:62:a0:7f:2a:ba:27:b4:5f:30:ce: 2d:ca:23:1d:97:f5:48:dc:2e:94:19:e5:4a:f7:fb: e4:6d:e8:c9:a0:a6:9f:55:0b:3a:c0:34:e0:10:02: af:7a:0d:b8:b7:be:e8:63:96:9a:a3:0a:d0:c9:cf: a5:97:2d:03:35:f4:02:c5:45:01:5b:27:d8:01:5e: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3C:D4:EB:52:F2:32:04:8A:EE:51:4F:6F:05:8C:B3:66:1E:57:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f421e27-1750-4590-95a3-28a2ba4d048c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.168.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1b:ae:6a:b1:ca:3d:c2:4d:1c:b8:5a:17:d2:f1:ae:a1:98:09: f9:01:5f:1c:cd:a9:76:c1:03:55:0c:5c:83:bd:fe:c4:a4:61: cb:8f:94:d6:52:0f:04:30:4d:8a:29:bd:56:10:53:bf:6a:ce: d3:76:76:e8:08:e0:32:81:84:aa:f2:67:e8:8f:66:dc:4b:0d: 39:80:2b:21:c1:e9:00:41:69:5e:55:7d:8b:79:2c:0c:ec:06: 5e:54:70:95:ee:32:56:c4:25:03:25:d1:bb:a7:04:a4:a3:90: 23:b5:f4:0b:67:94:4d:d7:e9:60:af:24:54:42:e5:63:ce:13: dd:01:a7:3f:31:40:08:c7:07:2e:e1:94:a1:cc:d0:eb:b7:0d: 74:74:f9:7a:d1:33:28:ad:14:7a:c5:4d:50:71:e0:78:bc:c2: a9:02:09:87:2e:61:54:c6:5a:d5:4b:8d:e7:0f:26:b5:90:95: e2:fc:5a:28:f8:7a:18:f7:76:28:85:92:ed:f4:61:a3:98:92: 3c:e9:a8:11:bc:bc:2d:b9:a8:a6:41:b4:09:a1:13:75:27:e8: 7f:54:b0:61:f0:79:bc:fb:6f:9b:7e:79:da:f2:67:7e:fb:95: 5f:c8:7c:7e:c0:a2:b9:ca:13:07:2c:d0:1e:42:ca:6c:3f:e9: a7:df:6c:bb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAaH85lvTABJMl6h+7lBDLu9qvGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAyMDAyMTQ0WhcNMjUwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjBkY2U2NjRhMmYwZjE0M2Y2NjhlYWFmMTdjODU5ZTEz Y2JlM2UzMDIzMzIyMDliZDViYjQxNzBjYzI4YzE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCckKl7cTPTvWsmrkmShSgATUCI0hRA1lCRJhR+KssphJ7M 3wRnqPM0+e3vsb1dhw/1GZvzKa/FCIOFy037tRiWKbJzoJieOZAsE62jF2EX9Faq NUEhGMKBcGp8hW064Srv0QP+TUdwW9sSZcBbE2dAD0Pl4jDC8oiKq+d1Qg58pPVX 3VbJuKPjTzxrcGPJt66pwZz9j8Ofa/8o9Y3h9+CTkz7NVGvUz6TxJAcldtZvB/FS 8GT3sl36YqB/KrontF8wzi3KIx2X9UjcLpQZ5Ur3++Rt6Mmgpp9VCzrANOAQAq96 Dbi3vuhjlpqjCtDJz6WXLQM19ALFRQFbJ9gBXlkxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAzzU61LyMgSK7lFPbwWMs2YeV5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZmNDIxZTI3LTE3NTAtNDU5MC05NWEzLTI4YTJiYTRkMDQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEuqDANBgkqhkiG9w0BAQsFAAOCAQEAG65qsco9wk0cuFoX0vGuoZgJ+QFf HM2pdsEDVQxcg73+xKRhy4+U1lIPBDBNiim9VhBTv2rO03Z26AjgMoGEqvJn6I9m 3EsNOYArIcHpAEFpXlV9i3ksDOwGXlRwle4yVsQlAyXRu6cEpKOQI7X0C2eUTdfp YK8kVELlY84T3QGnPzFACMcHLuGUoczQ67cNdHT5etEzKK0UesVNUHHgeLzCqQIJ hy5hVMZa1UuN5w8mtZCV4vxaKPh6GPd2KIWS7fRho5iSPOmoEby8LbmopkG0CaET dSfof1SwYfB5vPtvm3552vJnfvuVX8h8fsCiucoTByzQHkLKbD/pp99suw== -----END CERTIFICATE-----Generated at Wed Apr 16 17:06:06 2025 by rpki-client