$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9115376-5d57-4d99-92c6-f9f75ee735fa.roa File: c9115376-5d57-4d99-92c6-f9f75ee735fa.roa (raw, json) Hash identifier: nR3+F/reLprXVBrAHtIHAziH4LkHnR+ZohcLYTgCwG8= Subject key identifier: 1D:91:CC:E8:76:8D:73:B2:D2:AA:A1:69:2E:27:F7:EA:54:DE:8C:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 239F19FE4AD940ED4094D25E468F7C3FA3EBE80D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9115376-5d57-4d99-92c6-f9f75ee735fa.roa Signing time: Wed 09 Apr 2025 00:41:16 +0000 ROA not before: Wed 09 Apr 2025 00:41:16 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 93.79.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9f:19:fe:4a:d9:40:ed:40:94:d2:5e:46:8f:7c:3f:a3:eb:e8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:41:16 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=23068125ea8e76075a2330b67e886a59a370c508b0ab77d3b2cb7ec46a00219a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:45:67:59:f5:5d:04:6e:6f:0c:e4:b1:2a: 99:e2:1f:db:e8:a8:44:44:d4:68:32:f7:35:bd:a4: 80:27:2e:dc:ac:fc:25:0b:59:7a:d1:f1:84:d0:e2: 74:a0:ed:5c:34:e6:8c:d5:2b:9a:59:4a:1e:f8:10: a2:96:96:48:ba:cc:ed:15:64:6b:29:ca:86:27:a1: ac:b0:ed:8c:08:87:3e:30:98:71:1d:40:07:1a:2d: 60:45:09:99:2d:f0:95:84:c5:4b:5a:a6:15:a5:d4: 3d:79:61:e7:ab:9a:cc:a0:16:2a:01:e3:4d:78:ac: 93:06:11:8a:2b:18:0b:61:4e:54:9f:a1:11:00:0e: 50:e2:2e:6d:f2:a6:8d:05:d0:10:59:b4:eb:6c:65: 12:ed:c7:06:54:ed:9c:6b:68:8e:cb:5b:67:6a:4f: a5:38:78:88:e0:ca:2e:84:03:88:da:cc:79:10:f4: fe:26:77:8d:3b:49:6f:26:d1:d6:7d:33:87:d5:87: 1d:01:bd:6b:ef:72:de:f0:c6:40:05:ef:54:ab:63: 8e:87:b9:22:97:d2:1c:01:8a:87:a4:9e:c4:af:6b: 78:03:44:4b:f4:f7:e1:c6:c5:50:47:a6:c0:b9:7c: 0c:70:a8:2b:5c:0b:4e:a8:fa:94:2a:f2:df:38:6d: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:91:CC:E8:76:8D:73:B2:D2:AA:A1:69:2E:27:F7:EA:54:DE:8C:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9115376-5d57-4d99-92c6-f9f75ee735fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7a:e0:b5:14:17:7f:f5:06:fd:c8:c9:b6:0f:55:62:da:ba:14: 91:0d:35:49:dd:22:92:93:d0:4b:1f:51:64:b5:5d:dc:54:77: df:6c:da:5b:d3:6f:fc:a0:2e:0f:e6:a1:7f:02:3c:8f:5c:0f: 61:22:18:7e:fd:98:a2:5b:f7:e7:43:1f:c2:ef:5d:0b:08:a9: fe:a4:c0:b6:cf:0b:d2:0f:24:aa:1c:ff:87:b8:08:8d:f0:20: 13:f4:02:76:c6:92:20:db:5f:62:9a:57:04:e6:3b:89:dd:d0: fe:98:29:90:a0:8a:90:d8:b6:1e:84:1b:d2:cb:43:c6:38:5d: 14:bd:55:07:cd:97:b9:21:01:a0:d5:c5:06:1a:7d:8f:15:e0: 57:d4:fa:a4:73:e0:d8:fb:9b:b5:15:1d:7a:11:5b:26:65:27: 39:41:0d:a3:fc:b9:a9:bd:6b:21:d2:df:c6:50:3d:01:38:3d: 83:18:43:eb:55:80:f7:c3:f1:e3:c6:30:76:de:b3:35:ff:04: 7e:91:90:ee:df:3c:b8:b4:0d:af:9a:87:14:33:6a:89:e3:be: 7d:52:a6:dd:c9:28:46:1f:35:d1:3a:3d:69:ed:4f:ee:f1:c3: 4b:59:ad:79:4d:33:ae:10:73:9f:3b:b3:eb:8c:cb:0c:87:22: 81:35:48:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI58Z/krZQO1AlNJeRo98P6Pr6A0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MTE2WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzA2ODEyNWVhOGU3NjA3NWEyMzMwYjY3ZTg4NmE1OWEz NzBjNTA4YjBhYjc3ZDNiMmNiN2VjNDZhMDAyMTlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZQUVnWfVdBG5vDOSxKpniH9voqERE1Ggy9zW9pIAnLtys /CULWXrR8YTQ4nSg7Vw05ozVK5pZSh74EKKWlki6zO0VZGspyoYnoayw7YwIhz4w mHEdQAcaLWBFCZkt8JWExUtaphWl1D15YeermsygFioB4014rJMGEYorGAthTlSf oREADlDiLm3ypo0F0BBZtOtsZRLtxwZU7ZxraI7LW2dqT6U4eIjgyi6EA4jazHkQ 9P4md407SW8m0dZ9M4fVhx0BvWvvct7wxkAF71SrY46HuSKX0hwBioeknsSva3gD REv09+HGxVBHpsC5fAxwqCtcC06o+pQq8t84bSZJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHZHM6HaNc7LSqqFpLif36lTejFQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5MTE1Mzc2LTVkNTctNGQ5OS05MmM2LWY5Zjc1ZWU3MzVmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAddT4AwDQYJKoZIhvcNAQELBQADggEBAHrgtRQXf/UG/cjJtg9VYtq6FJEN NUndIpKT0EsfUWS1XdxUd99s2lvTb/ygLg/moX8CPI9cD2EiGH79mKJb9+dDH8Lv XQsIqf6kwLbPC9IPJKoc/4e4CI3wIBP0AnbGkiDbX2KaVwTmO4nd0P6YKZCgipDY th6EG9LLQ8Y4XRS9VQfNl7khAaDVxQYafY8V4FfU+qRz4Nj7m7UVHXoRWyZlJzlB DaP8uam9ayHS38ZQPQE4PYMYQ+tVgPfD8ePGMHbeszX/BH6RkO7fPLi0Da+ahxQz aonjvn1Spt3JKEYfNdE6PWntT+7xw0tZrXlNM64Qc587s+uMywyHIoE1SEw= -----END CERTIFICATE-----Generated at Wed Apr 16 17:12:34 2025 by rpki-client