$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edf3c604-746a-46b8-b1b2-34f62c038c9c.roa File: edf3c604-746a-46b8-b1b2-34f62c038c9c.roa (raw, json) Hash identifier: EBplzFeJpAUSxzWia4Dre/v9si8nOmHTs/HgDKtFe7U= Subject key identifier: 05:74:C6:48:1E:38:06:52:54:51:3E:49:A0:1A:9B:C4:0D:41:C3:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 619305BEAAF1E633E64F98F0F6EADAFD4507C78E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edf3c604-746a-46b8-b1b2-34f62c038c9c.roa Signing time: Fri 11 Apr 2025 00:10:31 +0000 ROA not before: Fri 11 Apr 2025 00:10:31 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.61.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:93:05:be:aa:f1:e6:33:e6:4f:98:f0:f6:ea:da:fd:45:07:c7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 11 00:10:31 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=349f5c882d4541f1f8614c9207f7d10bdce5aa6e3fa6d8d9c1abdad5235f72bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:46:c3:d4:ff:85:b1:d6:78:eb:6a:eb:4e: ba:12:44:4e:55:6e:d8:1d:50:b3:88:82:25:ec:fb: fc:50:c2:a5:91:89:fc:b4:9e:6d:4f:c7:41:76:29: 6f:85:5d:a4:7f:5b:5c:d8:ee:3e:80:66:77:24:d0: 89:33:85:10:dc:25:44:67:26:b9:e7:da:6d:d0:7d: c5:dd:c2:ac:d5:9b:fc:72:0a:95:21:d7:5e:79:38: 90:e3:b1:1c:a1:9e:a0:5c:fe:05:bb:16:d2:81:17: 7a:ab:ac:ff:65:67:6d:82:ab:71:91:5d:c5:5d:f0: a7:57:6c:a5:5e:3a:be:ff:06:7b:4c:75:34:5f:43: 23:ad:13:35:d8:f7:5b:50:bd:00:f8:b0:1c:20:3a: a5:30:0c:ed:89:1a:0b:a0:f4:06:ee:92:5b:a1:2b: 3b:c9:13:4f:2a:13:53:02:49:c9:7e:16:93:b5:76: 8d:a2:90:b0:8d:98:a1:86:9c:f7:8d:3d:4d:d7:58: de:b9:2e:ff:ac:71:c0:53:68:3c:f7:5c:73:91:89: db:2d:93:0a:f6:cb:0b:4e:15:25:f2:8d:91:94:48: 3a:7f:d8:8e:91:b0:56:76:f2:f9:98:16:9c:b7:b2: 7c:5e:fe:6f:eb:2b:05:b3:ba:cb:b6:31:b3:0f:f6: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:C6:48:1E:38:06:52:54:51:3E:49:A0:1A:9B:C4:0D:41:C3:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edf3c604-746a-46b8-b1b2-34f62c038c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.61.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:0c:c6:1e:8d:c2:97:19:81:d5:b9:8b:f4:70:f2:11:a6:ea: 37:73:2f:7b:b1:4f:d7:01:41:0d:4d:da:a2:06:97:9b:5a:3a: 50:85:54:f0:1d:bc:09:1c:88:b6:6e:cb:a5:1c:cf:f1:0e:80: f0:9b:da:85:3f:b8:72:02:cc:4b:79:cb:6f:2b:52:e2:ba:d0: 71:40:c1:77:1a:1d:34:88:9d:8e:a7:3b:72:8b:ee:d4:65:89: 6a:8a:03:90:33:03:a9:21:c4:34:94:ac:40:cf:df:49:81:6b: 5d:e9:36:3f:73:27:18:0c:f0:80:b8:86:c5:03:20:6e:4a:11: 46:fb:8a:98:8f:4e:74:43:96:fc:1d:8b:3a:e9:bf:95:9b:6f: 27:ac:6b:e7:67:94:90:0e:62:ba:3d:87:0c:78:f3:a7:08:95: 19:c6:6a:63:b2:c1:e4:0e:c7:c3:4a:95:b9:0a:32:98:68:af: 66:17:f6:f1:d7:9b:b7:d8:72:89:91:08:dd:61:69:d7:a7:c5: 14:61:14:e1:66:01:49:63:1e:6d:c3:1b:9a:a6:41:ec:c3:5f: 36:de:57:78:00:3e:2b:26:bc:55:32:42:b6:bf:69:a6:b0:5f: 7b:7a:bb:58:b4:88:93:1c:1c:6a:eb:c7:0d:2d:3a:c9:22:2d: ed:26:78:8a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYZMFvqrx5jPmT5jw9ura/UUHx44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDExMDAxMDMxWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDlmNWM4ODJkNDU0MWYxZjg2MTRjOTIwN2Y3ZDEwYmRj ZTVhYTZlM2ZhNmQ4ZDljMWFiZGFkNTIzNWY3MmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxgEbD1P+FsdZ462rrTroSRE5VbtgdULOIgiXs+/xQwqWR ify0nm1Px0F2KW+FXaR/W1zY7j6AZnck0IkzhRDcJURnJrnn2m3QfcXdwqzVm/xy CpUh1155OJDjsRyhnqBc/gW7FtKBF3qrrP9lZ22Cq3GRXcVd8KdXbKVeOr7/BntM dTRfQyOtEzXY91tQvQD4sBwgOqUwDO2JGgug9AbukluhKzvJE08qE1MCScl+FpO1 do2ikLCNmKGGnPeNPU3XWN65Lv+sccBTaDz3XHORidstkwr2ywtOFSXyjZGUSDp/ 2I6RsFZ28vmYFpy3snxe/m/rKwWzusu2MbMP9qxLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBXTGSB44BlJUUT5JoBqbxA1Bw5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkZjNjNjA0LTc0NmEtNDZiOC1iMWIyLTM0ZjYyYzAzOGM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCiPTANBgkqhkiG9w0BAQsFAAOCAQEACAzGHo3ClxmB1bmL9HDyEabqN3Mv e7FP1wFBDU3aogaXm1o6UIVU8B28CRyItm7LpRzP8Q6A8JvahT+4cgLMS3nLbytS 4rrQcUDBdxodNIidjqc7covu1GWJaooDkDMDqSHENJSsQM/fSYFrXek2P3MnGAzw gLiGxQMgbkoRRvuKmI9OdEOW/B2LOum/lZtvJ6xr52eUkA5iuj2HDHjzpwiVGcZq Y7LB5A7Hw0qVuQoymGivZhf28debt9hyiZEI3WFp16fFFGEU4WYBSWMebcMbmqZB 7MNfNt5XeAA+Kya8VTJCtr9pprBfe3q7WLSIkxwcauvHDS06ySIt7SZ4ig== -----END CERTIFICATE-----Generated at Wed Apr 16 16:48:50 2025 by rpki-client