$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78852d65-e57f-4d0d-8118-1c98133b1bf0.roa File: 78852d65-e57f-4d0d-8118-1c98133b1bf0.roa (raw, json) Hash identifier: NsYtfYFfiRUHSqvmI8wrAh+pZiRCCpA7kHZnyQ+vG7k= Subject key identifier: A4:7E:9A:1E:F9:35:73:F1:5C:AD:25:9A:5C:57:AF:1E:DA:04:F0:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2951E19A6526F914F4456F7AE273FD6C95B8A4D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78852d65-e57f-4d0d-8118-1c98133b1bf0.roa Signing time: Fri 09 May 2025 00:01:13 +0000 ROA not before: Fri 09 May 2025 00:01:13 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:51:e1:9a:65:26:f9:14:f4:45:6f:7a:e2:73:fd:6c:95:b8:a4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:01:13 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=1dcbb1945c4584e3a6accfc41ddb39b61016b8a2b9df33d1be75d66399b381e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:33:82:92:8f:cc:c0:31:39:2b:9c:73:ae:dc: cb:5f:bc:a5:2d:be:ea:2d:73:4e:bf:a0:41:a6:a8: 1e:4f:e1:2b:53:d9:f0:b2:09:8e:3b:fd:27:5e:c3: 90:71:3c:39:5c:63:56:c4:2c:1d:1f:0c:60:00:99: c5:74:28:f4:86:bb:5a:53:58:4e:38:05:90:17:ca: 97:38:a2:57:e4:6a:50:44:b3:41:db:d7:34:27:63: 7f:11:d3:12:6f:08:95:73:ae:f7:a6:8e:a9:16:63: 01:00:ad:c2:e0:8c:70:8e:33:53:56:cd:28:af:fd: f3:0a:36:91:10:92:6a:b1:01:37:62:4a:a5:4b:70: ed:a5:28:dd:33:fe:7d:47:0b:d8:92:2c:cf:97:18: 07:6e:46:d3:fe:33:e5:9c:36:d3:39:fd:7e:04:d0: 0f:cf:46:9c:b5:02:af:24:18:fd:23:bd:7a:9f:76: f4:89:b7:ac:03:f0:f5:4c:1c:74:70:9d:61:d0:70: b4:61:90:10:bb:79:ff:e4:f6:d7:cc:c2:59:e5:3e: e2:48:3a:7f:4b:17:70:d1:aa:ba:4e:56:78:5e:2d: aa:06:16:06:66:9f:38:ab:6f:27:c3:aa:2f:c2:bb: dc:7e:04:e4:53:23:26:ef:f0:f0:d6:6b:4b:6c:67: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7E:9A:1E:F9:35:73:F1:5C:AD:25:9A:5C:57:AF:1E:DA:04:F0:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78852d65-e57f-4d0d-8118-1c98133b1bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.254.0/23 Signature Algorithm: sha256WithRSAEncryption 55:d9:d0:54:c5:b1:0d:25:95:25:4c:ea:6a:ad:a7:39:17:e3: 01:28:96:30:f5:11:77:1c:18:ff:39:92:10:31:fa:02:da:f7: 6a:e3:e2:b6:6a:4c:b0:62:53:7b:64:f1:68:57:d6:58:89:fd: 58:6e:f5:ad:1b:dd:31:d7:3e:33:4c:9d:dd:4e:7b:00:1a:de: 65:15:f0:ec:86:27:99:25:32:f3:d6:75:ac:52:68:69:2e:cb: da:69:dd:1b:e7:1f:bc:9c:f2:e7:2e:5f:a1:b8:52:b5:80:90: 8e:73:43:13:f6:60:e2:59:97:a3:9b:3b:e1:83:32:4e:85:3c: a5:68:16:6c:6a:c4:b8:d8:cb:93:81:50:a0:18:3c:91:e6:96: e5:13:8d:cf:8c:d5:f7:93:27:c6:de:33:af:d2:8a:98:bb:92: db:04:ac:c7:b9:c8:69:20:0f:ef:ec:e3:96:90:0b:29:a0:fd: 5d:fd:36:f5:2d:ce:fc:ef:d7:a3:58:95:57:97:ea:b0:32:07: 85:92:4d:75:c9:76:e6:55:4d:1c:5f:ea:91:06:aa:c4:cf:5a: 87:7e:35:e9:b7:10:67:b8:cc:3c:9f:e5:69:99:a3:60:ad:33: ef:e0:20:34:0b:a9:51:12:68:42:83:09:ad:a7:2a:9c:fa:bd: 6b:e2:fa:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVHhmmUm+RT0RW964nP9bJW4pNcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAwMTEzWhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGNiYjE5NDVjNDU4NGUzYTZhY2NmYzQxZGRiMzliNjEw MTZiOGEyYjlkZjMzZDFiZTc1ZDY2Mzk5YjM4MWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoM4KSj8zAMTkrnHOu3MtfvKUtvuotc06/oEGmqB5P4StT 2fCyCY47/Sdew5BxPDlcY1bELB0fDGAAmcV0KPSGu1pTWE44BZAXypc4olfkalBE s0Hb1zQnY38R0xJvCJVzrvemjqkWYwEArcLgjHCOM1NWzSiv/fMKNpEQkmqxATdi SqVLcO2lKN0z/n1HC9iSLM+XGAduRtP+M+WcNtM5/X4E0A/PRpy1Aq8kGP0jvXqf dvSJt6wD8PVMHHRwnWHQcLRhkBC7ef/k9tfMwlnlPuJIOn9LF3DRqrpOVnheLaoG FgZmnzirbyfDqi/Cu9x+BORTIybv8PDWa0tsZ6ifAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpH6aHvk1c/FcrSWaXFevHtoE8M0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ODUyZDY1LWU1N2YtNGQwZC04MTE4LTFjOTgxMzNiMWJmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEv4wDQYJKoZIhvcNAQELBQADggEBAFXZ0FTFsQ0llSVM6mqtpzkX4wEo ljD1EXccGP85khAx+gLa92rj4rZqTLBiU3tk8WhX1liJ/Vhu9a0b3THXPjNMnd1O ewAa3mUV8OyGJ5klMvPWdaxSaGkuy9pp3RvnH7yc8ucuX6G4UrWAkI5zQxP2YOJZ l6ObO+GDMk6FPKVoFmxqxLjYy5OBUKAYPJHmluUTjc+M1feTJ8beM6/Sipi7ktsE rMe5yGkgD+/s45aQCymg/V39NvUtzvzv16NYlVeX6rAyB4WSTXXJduZVTRxf6pEG qsTPWod+Nem3EGe4zDyf5WmZo2CtM+/gIDQLqVESaEKDCa2nKpz6vWvi+n4= -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:48 2025 by rpki-client