$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa File: 97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa (raw, json) Hash identifier: K2++zzwVjlzGfIH9Rb8VcgM6zUZmAxdjz1R08Z5iXRk= Subject key identifier: EE:5C:FA:00:EC:CB:80:AB:0E:5F:CA:5F:59:11:01:A4:80:DE:FD:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DF4D48C09EECA35DE4D3266778FD8691196013C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa Signing time: Mon 31 Mar 2025 15:10:29 +0000 ROA not before: Mon 31 Mar 2025 15:10:29 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f4:d4:8c:09:ee:ca:35:de:4d:32:66:77:8f:d8:69:11:96:01:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:10:29 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=51b8c4610506fdb1ca1e8d7dad3727caa54524f476bca9490d76012d8c3591fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:6e:88:55:9e:e4:61:99:25:fd:f1:8f:fd: 7d:3c:d0:01:2d:3d:fa:d4:e0:eb:2a:38:29:b2:34: b4:cd:ff:72:6a:e0:5c:57:6e:43:7a:6e:bf:6a:8f: 6f:68:9a:e1:49:a0:87:a8:04:87:66:88:89:ce:e7: c0:7f:e2:bc:19:4b:80:47:ba:f4:47:28:ee:d1:1b: 2d:33:34:7e:16:c1:4c:50:f4:cb:77:82:00:82:84: 38:8e:f6:70:dd:1d:dd:4b:93:71:59:8a:d3:ce:9c: af:8a:7b:2a:28:b3:16:cf:3c:07:8d:88:17:3f:40: 8e:16:5b:08:6b:17:b1:73:9b:0c:7f:f1:24:e0:2c: 8e:6d:8d:48:de:c2:36:f5:3b:72:c1:5d:90:37:b8: a6:e2:dd:a4:0b:07:c1:a1:04:39:89:3f:74:fe:dc: e3:f7:d4:2b:66:e2:49:f6:d3:7a:75:b7:40:dd:3c: 89:0f:6b:71:c8:86:f9:5a:97:e0:73:b4:25:fc:92: 95:ce:ec:96:7a:c6:f5:78:4a:b9:36:65:b9:b0:9e: aa:28:79:1b:48:11:86:3b:77:7f:ec:65:e2:3a:ff: 4d:48:bf:0c:53:e6:2a:af:f5:a9:ca:0f:74:29:e8: 05:af:3f:c0:24:f6:e7:57:df:9a:35:7a:20:9e:2c: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5C:FA:00:EC:CB:80:AB:0E:5F:CA:5F:59:11:01:A4:80:DE:FD:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.76.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:3b:3a:b5:5d:4d:8b:54:60:a5:71:8f:a2:d8:28:0d:af:74: bf:b8:30:cd:5d:71:ac:07:21:92:67:b7:be:59:b6:fd:30:a2: cc:5c:29:c0:ab:e4:12:9c:9c:9e:e0:65:72:ba:c7:f7:bd:19: cd:49:26:f5:b7:64:61:d8:59:16:76:59:83:56:99:7e:12:a1: b7:f1:ca:a9:2d:3e:25:ec:94:4c:4b:29:2d:b9:2d:3c:a6:7d: f8:df:f4:0e:dd:f4:d1:48:27:a4:dc:09:5f:c4:e2:f9:f1:2c: ba:62:90:58:2a:a8:ab:f9:3f:39:b8:c3:c7:d9:9f:ba:15:72: b6:6d:6d:f1:c7:de:0d:31:bd:1f:9f:8f:74:f1:18:77:9e:96: 3b:7e:26:0e:4b:78:74:bf:d7:7c:d4:37:13:60:d5:12:da:7f: d8:5d:bd:01:27:83:1f:19:a6:40:f7:a6:01:66:2e:87:a1:87: b9:58:cd:64:d0:47:f8:16:ae:45:63:22:9c:7e:cb:c9:76:b3: d5:cf:6e:3c:f8:e1:a6:dc:46:c3:a9:77:c3:c8:bf:ed:6e:84: b9:62:4d:df:1f:c5:61:a1:8a:41:f4:53:18:5d:9d:c0:b1:36: bc:72:53:c5:27:ac:2a:39:20:66:1e:48:c4:11:9c:77:95:83: 81:ec:20:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULfTUjAnuyjXeTTJmd4/YaRGWATwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUxMDI5WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWI4YzQ2MTA1MDZmZGIxY2ExZThkN2RhZDM3MjdjYWE1 NDUyNGY0NzZiY2E5NDkwZDc2MDEyZDhjMzU5MWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8cW6IVZ7kYZkl/fGP/X080AEtPfrU4OsqOCmyNLTN/3Jq 4FxXbkN6br9qj29omuFJoIeoBIdmiInO58B/4rwZS4BHuvRHKO7RGy0zNH4WwUxQ 9Mt3ggCChDiO9nDdHd1Lk3FZitPOnK+KeyoosxbPPAeNiBc/QI4WWwhrF7Fzmwx/ 8STgLI5tjUjewjb1O3LBXZA3uKbi3aQLB8GhBDmJP3T+3OP31Ctm4kn203p1t0Dd PIkPa3HIhvlal+BztCX8kpXO7JZ6xvV4Srk2ZbmwnqooeRtIEYY7d3/sZeI6/01I vwxT5iqv9anKD3Qp6AWvP8Ak9udX35o1eiCeLDYjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7lz6AOzLgKsOX8pfWREBpIDe/f8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3MTI0YzkwLWU5ZDQtNDRlMi1hYWQ3LWExZDIxNmY2OWFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXF0wwDQYJKoZIhvcNAQELBQADggEBAFs7OrVdTYtUYKVxj6LYKA2vdL+4 MM1dcawHIZJnt75Ztv0wosxcKcCr5BKcnJ7gZXK6x/e9Gc1JJvW3ZGHYWRZ2WYNW mX4SobfxyqktPiXslExLKS25LTymffjf9A7d9NFIJ6TcCV/E4vnxLLpikFgqqKv5 Pzm4w8fZn7oVcrZtbfHH3g0xvR+fj3TxGHeeljt+Jg5LeHS/13zUNxNg1RLaf9hd vQEngx8ZpkD3pgFmLoehh7lYzWTQR/gWrkVjIpx+y8l2s9XPbjz44abcRsOpd8PI v+1uhLliTd8fxWGhikH0UxhdncCxNrxyU8UnrCo5IGYeSMQRnHeVg4HsIEQ= -----END CERTIFICATE-----Generated at Wed Apr 16 16:41:07 2025 by rpki-client