$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa File: 7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa (raw, json) Hash identifier: T+VuB2eIfvPmaVvFo8YNhqk7EhmptNIMUk+s1BvTHag= Subject key identifier: E6:95:2C:61:F7:DE:CB:16:E9:1E:1E:A9:7F:94:7C:79:FE:64:A6:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E61FD98938599BC2A71ADE7F048753E2CF43232 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa Signing time: Wed 09 Apr 2025 00:41:20 +0000 ROA not before: Wed 09 Apr 2025 00:41:20 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:61:fd:98:93:85:99:bc:2a:71:ad:e7:f0:48:75:3e:2c:f4:32:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:41:20 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=d3d38e6a396384613747d6551c5d8a25b44f0e22747094972e0fefe1a729ea4f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:e7:78:63:52:c3:d6:ac:1b:bc:70:6c:ad: fe:ca:a2:20:fe:00:e6:6b:b6:e6:08:88:ed:a8:93: ea:8a:7c:68:b5:c1:6f:1b:e7:39:99:80:d7:54:61: f1:cc:82:e9:f3:ac:93:4f:55:49:9d:9e:b2:93:de: ed:ea:7e:e3:db:0c:a8:d0:71:90:f3:6d:de:57:20: ea:44:d4:df:ca:95:46:93:b0:67:47:20:3c:e2:3d: 42:f6:66:e0:1f:e3:b4:ff:ed:dd:5d:32:33:60:e6: e2:87:4d:84:cb:e5:e6:e3:f0:47:36:86:dd:ba:67: 0e:6f:f8:e7:cf:10:8e:8d:4e:7d:cf:ae:84:63:01: e4:14:79:0f:a2:ce:6b:21:51:2d:dd:12:32:83:09: 9e:3d:c5:b4:46:5c:6f:9b:7d:a6:64:51:2e:e1:e8: 58:cf:d8:02:9c:d4:f5:81:ee:15:72:98:90:8c:af: f1:f4:a5:b9:48:2d:fd:f3:a7:01:49:91:99:5f:d0: 88:2a:a5:cd:87:57:25:40:c4:aa:24:0c:50:f5:6f: 55:95:47:71:a0:ce:55:f2:d2:ea:ac:bf:15:50:da: 8c:e7:83:ae:7d:d4:e3:7b:5e:d2:e4:40:8c:23:ee: 6b:ab:8a:54:42:55:56:3e:87:d0:f4:b9:b7:b6:36: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:95:2C:61:F7:DE:CB:16:E9:1E:1E:A9:7F:94:7C:79:FE:64:A6:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.92.0/23 Signature Algorithm: sha256WithRSAEncryption 17:52:88:c6:a2:23:7f:3f:b5:8f:0f:20:55:c3:78:de:b4:cd: 24:cd:80:36:78:a9:db:11:12:18:a2:fd:f1:57:31:7c:d0:57: 84:73:6b:0a:73:ff:f3:e0:f1:aa:67:7b:b2:f7:7f:0f:16:97: 51:b1:c1:ec:79:26:29:3b:0a:2e:cb:fa:1b:44:f0:48:11:e0: c7:8e:78:e2:1a:7b:25:1b:2b:12:27:15:78:4a:6c:7a:24:89: 83:43:fc:d2:ff:a9:45:9b:fe:cb:bd:fb:4e:ea:be:2e:df:f2: 67:9c:a6:4c:d4:1f:ba:30:ed:db:fd:2a:e7:cc:c8:ba:05:16: b0:fc:0f:f3:88:7a:87:20:c8:e8:0e:ac:bc:9b:d1:22:2a:5d: d5:b6:fe:f9:ef:11:3f:38:91:4e:13:91:51:34:51:d3:90:b8: da:aa:32:07:e4:81:63:87:a9:e4:15:fc:80:9c:a7:aa:3a:2d: 5c:72:e7:4a:73:a1:c8:7e:fb:b9:88:d4:f3:34:59:6e:ce:57: 93:65:a2:5b:7c:59:30:8e:52:de:3a:78:8a:51:c8:78:a6:76: 1e:67:bf:48:0c:24:9b:f8:63:69:ed:6f:a2:5f:bd:63:d6:b0: 49:dd:f5:10:5d:54:ff:93:e0:e8:bb:2d:bd:1c:ed:12:fe:5b: 0e:44:5b:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfmH9mJOFmbwqca3n8Eh1Piz0MjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MTIwWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2QzOGU2YTM5NjM4NDYxMzc0N2Q2NTUxYzVkOGEyNWI0 NGYwZTIyNzQ3MDk0OTcyZTBmZWZlMWE3MjllYTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8bOd4Y1LD1qwbvHBsrf7KoiD+AOZrtuYIiO2ok+qKfGi1 wW8b5zmZgNdUYfHMgunzrJNPVUmdnrKT3u3qfuPbDKjQcZDzbd5XIOpE1N/KlUaT sGdHIDziPUL2ZuAf47T/7d1dMjNg5uKHTYTL5ebj8Ec2ht26Zw5v+OfPEI6NTn3P roRjAeQUeQ+izmshUS3dEjKDCZ49xbRGXG+bfaZkUS7h6FjP2AKc1PWB7hVymJCM r/H0pblILf3zpwFJkZlf0Igqpc2HVyVAxKokDFD1b1WVR3GgzlXy0uqsvxVQ2ozn g6591ON7XtLkQIwj7murilRCVVY+h9D0ube2NqxvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5pUsYffeyxbpHh6pf5R8ef5kpvgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdiODJiZDcxLThiYWYtNDlhYS04ZDE4LWMwZDdlYzA3NzRmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgAFwwDQYJKoZIhvcNAQELBQADggEBABdSiMaiI38/tY8PIFXDeN60zSTN gDZ4qdsREhii/fFXMXzQV4Rzawpz//Pg8apne7L3fw8Wl1Gxwex5Jik7Ci7L+htE 8EgR4MeOeOIaeyUbKxInFXhKbHokiYND/NL/qUWb/su9+07qvi7f8mecpkzUH7ow 7dv9KufMyLoFFrD8D/OIeocgyOgOrLyb0SIqXdW2/vnvET84kU4TkVE0UdOQuNqq MgfkgWOHqeQV/ICcp6o6LVxy50pzoch++7mI1PM0WW7OV5Nlolt8WTCOUt46eIpR yHimdh5nv0gMJJv4Y2ntb6JfvWPWsEnd9RBdVP+T4Oi7Lb0c7RL+Ww5EW3E= -----END CERTIFICATE-----Generated at Wed Apr 16 17:12:31 2025 by rpki-client