$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa File: b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json) Hash identifier: oCzfVPojDTSLLyfTzv7UWQKX6l6MwHDtfqYk9McA1Hg= Subject key identifier: B8:93:87:BA:24:C6:F2:C0:CB:89:89:8D:C0:EA:3E:44:CF:DA:CC:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 267483E4123EF5393AC56F8982931B4425CE548A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa Signing time: Sat 29 Mar 2025 00:11:06 +0000 ROA not before: Sat 29 Mar 2025 00:11:06 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:74:83:e4:12:3e:f5:39:3a:c5:6f:89:82:93:1b:44:25:ce:54:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 29 00:11:06 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: serialNumber=f7a665db0c8ecea90f15cb4e1bd8755acf99eb5d673c3c5526a76fc6e9edfe30, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:44:10:a5:af:37:2b:76:2f:c1:fe:48:88: 48:31:b3:57:70:87:30:fb:56:61:14:0c:14:49:83: fc:7f:9e:dd:cc:2f:84:7c:e0:06:15:df:ec:4d:7d: be:db:3f:6c:e1:14:ae:ed:08:ce:78:7e:b6:36:02: a2:5c:3e:43:0e:01:cc:bf:74:bb:74:72:f7:75:21: e3:f9:e3:9d:54:2d:10:22:3f:68:84:1b:70:ab:c2: 6c:c1:ab:88:15:0b:62:77:f8:96:f7:05:18:de:a6: 31:d2:f2:71:b3:99:b5:e5:e5:75:99:eb:a6:0c:6f: 50:45:71:97:92:7a:09:cf:91:e8:6f:6e:10:91:f0: 98:fc:56:19:13:e1:f4:61:35:cc:10:bb:bf:49:91: 15:7b:4d:51:5d:b5:08:c2:c1:5b:f8:e2:38:40:2b: 28:a8:3a:8b:3b:a9:89:53:db:f3:09:2c:cb:6b:65: c8:a5:aa:f3:a9:63:61:d7:c1:37:30:22:82:9e:1c: 11:e3:86:ea:aa:43:bc:fa:d8:66:62:e7:89:41:ff: b8:5e:bf:12:6e:40:2a:ca:72:3c:ad:13:36:a4:ee: f9:3f:3b:38:04:a1:0c:02:80:27:83:a1:16:4c:ec: d4:b9:53:73:18:ca:60:e1:5b:bd:4c:f5:0a:e6:2f: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:93:87:BA:24:C6:F2:C0:CB:89:89:8D:C0:EA:3E:44:CF:DA:CC:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption c6:4e:5d:56:26:a5:d1:d6:68:5b:0d:91:c5:a3:17:3a:00:b0: ac:73:b8:85:0c:fa:57:69:44:45:8a:fc:c5:1b:43:05:04:d9: 2b:e2:f5:50:41:20:d7:19:04:bd:a1:87:a4:f5:14:b6:cc:ab: 93:83:34:8b:b7:cd:a8:99:d8:14:ae:fb:11:33:fc:67:ff:29: 86:99:aa:71:65:a3:e1:0e:19:31:57:e4:7b:af:fc:09:c1:c6: 1a:40:a1:7f:f8:85:3b:f9:83:85:8e:2d:94:7f:49:ef:b5:86: 40:8c:b3:78:4f:a7:ed:11:e0:b2:85:58:fd:79:f9:1f:db:58: 7e:0e:71:1b:58:66:53:59:06:dc:c9:39:af:44:de:12:e6:35: 42:15:a0:18:67:7f:5e:45:ab:df:84:19:c8:8e:86:52:3d:08: 58:77:06:8d:40:a2:10:93:cb:1e:08:fc:42:ca:f4:a3:20:72: 0d:9e:b8:7d:a8:08:3a:15:36:67:0f:c9:1d:40:d2:42:af:3a: 3c:34:e1:2f:52:df:1c:d3:8a:f2:b8:d7:7e:34:32:fd:d2:81: d4:66:c7:f3:53:79:40:9e:38:f3:b5:cd:35:6c:6e:39:be:7e: ce:6c:e3:36:f3:08:07:0f:ee:dd:0d:7f:60:25:3e:f3:d4:44: 8e:b8:42:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJnSD5BI+9Tk6xW+JgpMbRCXOVIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI5MDAxMTA2WhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2E2NjVkYjBjOGVjZWE5MGYxNWNiNGUxYmQ4NzU1YWNm OTllYjVkNjczYzNjNTUyNmE3NmZjNmU5ZWRmZTMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9UkQQpa83K3Yvwf5IiEgxs1dwhzD7VmEUDBRJg/x/nt3M L4R84AYV3+xNfb7bP2zhFK7tCM54frY2AqJcPkMOAcy/dLt0cvd1IeP5451ULRAi P2iEG3CrwmzBq4gVC2J3+Jb3BRjepjHS8nGzmbXl5XWZ66YMb1BFcZeSegnPkehv bhCR8Jj8VhkT4fRhNcwQu79JkRV7TVFdtQjCwVv44jhAKyioOos7qYlT2/MJLMtr ZcilqvOpY2HXwTcwIoKeHBHjhuqqQ7z62GZi54lB/7hevxJuQCrKcjytEzak7vk/ OzgEoQwCgCeDoRZM7NS5U3MYymDhW71M9QrmL8BrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuJOHuiTG8sDLiYmNwOo+RM/azDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0NDgxOTViLTg0ZjMtNGUyYy1iZWI5LTMzY2VlNTMyZGNlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABrFp4wDQYJKoZIhvcNAQELBQADggEBAMZOXVYmpdHWaFsNkcWjFzoAsKxz uIUM+ldpREWK/MUbQwUE2Svi9VBBINcZBL2hh6T1FLbMq5ODNIu3zaiZ2BSu+xEz /Gf/KYaZqnFlo+EOGTFX5Huv/AnBxhpAoX/4hTv5g4WOLZR/Se+1hkCMs3hPp+0R 4LKFWP15+R/bWH4OcRtYZlNZBtzJOa9E3hLmNUIVoBhnf15Fq9+EGciOhlI9CFh3 Bo1AohCTyx4I/ELK9KMgcg2euH2oCDoVNmcPyR1A0kKvOjw04S9S3xzTivK41340 Mv3SgdRmx/NTeUCeOPO1zTVsbjm+fs5s4zbzCAcP7t0Nf2AlPvPURI64Qtk= -----END CERTIFICATE-----Generated at Wed Apr 16 16:54:29 2025 by rpki-client