$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa File: dde98764-ed59-4372-8084-926e73624f31.roa (raw, json) Hash identifier: NGpXNnShiXhhAreALM9Gl1g7VS38SI2a3zzDKaEdsY0= Subject key identifier: 84:91:82:B4:7E:17:EE:DC:87:B2:E2:F5:CF:F9:3B:DC:E8:E2:7E:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25ED38A1A07050B38C1EBE2B4E7859A6319D6176 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa Signing time: Tue 08 Apr 2025 00:01:47 +0000 ROA not before: Tue 08 Apr 2025 00:01:47 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.106.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ed:38:a1:a0:70:50:b3:8c:1e:be:2b:4e:78:59:a6:31:9d:61:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:01:47 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=845ff49cc543fb126ee96d15272f46870e1298ccf87ab2f3be383d76dcbe84e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:ed:a9:c2:92:62:f7:01:ad:d7:67:24:dc: 9c:c7:6f:b2:22:af:c8:e2:54:86:cf:30:08:bf:72: 0c:96:1c:c1:85:06:eb:6b:42:73:2f:6f:37:3d:55: ff:46:fb:13:5d:21:e3:3e:5b:ae:8b:b4:b7:51:e7: 0f:ad:24:53:00:a0:1b:14:e6:ba:7d:23:ca:aa:5f: e4:2f:2a:3e:9a:99:16:4c:b7:6e:ac:63:3b:36:4d: 29:58:be:9c:26:26:2a:1d:27:09:ff:cb:f1:ed:7f: d2:19:b7:a4:33:fe:38:70:13:8c:32:de:d8:f5:ad: 6b:8a:f6:f6:ba:fe:a2:b3:8b:7f:73:60:f6:2c:12: f1:44:cb:4e:19:fd:a5:8c:23:24:41:27:d1:a7:b4: 5a:eb:71:61:83:47:81:56:0f:20:bf:66:5c:a1:d4: 40:3e:78:4b:6f:4c:5f:6a:d9:c9:59:f2:c8:68:c2: e0:0b:41:0d:91:e3:a5:6a:dd:b0:44:ae:ad:93:b8: d4:2e:77:53:86:64:79:d1:fc:36:46:3d:cd:4a:a5: 3e:7d:fe:1a:98:17:3a:c7:97:14:ca:81:f0:e0:8b: 85:8d:ec:41:f6:8a:cf:8a:be:1e:b3:21:c7:c0:b1: ab:04:6e:c5:ed:35:ca:cf:f0:44:b9:c1:02:4a:fb: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:82:B4:7E:17:EE:DC:87:B2:E2:F5:CF:F9:3B:DC:E8:E2:7E:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dde98764-ed59-4372-8084-926e73624f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.106.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:8f:17:ed:9e:88:1b:8d:9d:57:90:34:0a:cf:e9:28:a7:1f: e1:2e:88:a0:96:b1:d4:67:be:c2:3c:4a:73:37:fa:47:0e:72: 6b:92:80:cf:90:84:d6:b7:55:60:00:f1:a1:e7:29:fc:17:ef: a1:07:fb:46:3c:3b:d7:74:0c:ca:00:8e:61:3a:22:ba:69:e6: 24:fa:c8:03:36:97:9e:ae:7c:03:3b:06:67:5f:f7:64:38:3b: 08:8e:1f:16:80:57:b2:b0:2d:25:c9:c4:67:a0:c4:a5:d5:05: d1:7b:16:cc:cb:6a:d7:58:cf:6f:23:f8:61:de:34:3f:b7:84: da:88:d6:c2:6f:36:0d:2d:01:72:8b:57:4a:b2:49:c2:d8:63: da:96:d0:b2:ce:e5:f7:e5:31:9b:1d:d4:f8:94:5c:f2:0c:bb: 17:35:6b:f8:13:11:98:bb:88:f0:11:d9:85:35:fb:75:a7:0c: 4f:c2:48:a3:e5:60:30:76:4c:e4:fb:a1:91:bb:ed:95:dd:7d: 8c:8c:91:01:c2:fc:66:4b:4b:67:25:b8:64:cb:b6:dd:6c:7c: 2e:e8:3c:41:f7:ca:ee:cb:5b:eb:a0:51:5f:46:6a:22:44:5f: e1:0a:a2:58:f2:80:7a:c0:93:97:83:d9:3e:ab:47:f8:1f:c1: e7:20:d9:39 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJe04oaBwULOMHr4rTnhZpjGdYXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAwMTQ3WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDVmZjQ5Y2M1NDNmYjEyNmVlOTZkMTUyNzJmNDY4NzBl MTI5OGNjZjg3YWIyZjNiZTM4M2Q3NmRjYmU4NGUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl5+2pwpJi9wGt12ck3JzHb7Iir8jiVIbPMAi/cgyWHMGF ButrQnMvbzc9Vf9G+xNdIeM+W66LtLdR5w+tJFMAoBsU5rp9I8qqX+QvKj6amRZM t26sYzs2TSlYvpwmJiodJwn/y/Htf9IZt6Qz/jhwE4wy3tj1rWuK9va6/qKzi39z YPYsEvFEy04Z/aWMIyRBJ9GntFrrcWGDR4FWDyC/Zlyh1EA+eEtvTF9q2clZ8sho wuALQQ2R46Vq3bBErq2TuNQud1OGZHnR/DZGPc1KpT59/hqYFzrHlxTKgfDgi4WN 7EH2is+Kvh6zIcfAsasEbsXtNcrP8ES5wQJK+7TbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhJGCtH4X7tyHsuL1z/k73OjifrIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkZTk4NzY0LWVkNTktNDM3Mi04MDg0LTkyNmU3MzYyNGYzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQajANBgkqhkiG9w0BAQsFAAOCAQEAFY8X7Z6IG42dV5A0Cs/pKKcf4S6I oJax1Ge+wjxKczf6Rw5ya5KAz5CE1rdVYADxoecp/BfvoQf7Rjw713QMygCOYToi umnmJPrIAzaXnq58AzsGZ1/3ZDg7CI4fFoBXsrAtJcnEZ6DEpdUF0XsWzMtq11jP byP4Yd40P7eE2ojWwm82DS0BcotXSrJJwthj2pbQss7l9+Uxmx3U+JRc8gy7FzVr +BMRmLuI8BHZhTX7dacMT8JIo+VgMHZM5Puhkbvtld19jIyRAcL8ZktLZyW4ZMu2 3Wx8Lug8QffK7stb66BRX0ZqIkRf4QqiWPKAesCTl4PZPqtH+B/B5yDZOQ== -----END CERTIFICATE-----Generated at Wed Apr 16 17:12:46 2025 by rpki-client