$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8d6d9d5-8431-4cb5-8f8f-9337f8c3aad1.roa File: f8d6d9d5-8431-4cb5-8f8f-9337f8c3aad1.roa (raw, json) Hash identifier: 7fyKPYuKMmbg31XdlirntMq2w1IfTw1b3xxopdsxXeo= Subject key identifier: 2A:7E:CF:15:4F:C7:8C:CD:11:C7:C1:9A:51:AF:96:E3:D5:96:EF:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E14084D91502BC54ACA7C99738F9813DD1FA9ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8d6d9d5-8431-4cb5-8f8f-9337f8c3aad1.roa Signing time: Mon 14 Apr 2025 15:00:25 +0000 ROA not before: Mon 14 Apr 2025 15:00:25 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:14:08:4d:91:50:2b:c5:4a:ca:7c:99:73:8f:98:13:dd:1f:a9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 14 15:00:25 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=03b8af5b5a11120159c9abeda94f6e1bbc4fe2d5f322990312acf699b3c96870, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:5a:e6:29:ad:29:56:71:54:d3:b8:84:9c: 36:c7:f9:1c:0a:44:b5:58:d6:13:38:a5:38:b2:29: 4d:e7:fe:56:d3:fb:18:80:c7:79:72:9b:42:3f:48: 91:56:0d:dd:5d:41:2e:e3:23:21:16:43:53:7f:ae: 32:66:2e:62:d0:ed:5d:8e:fd:d7:d1:3a:68:e4:39: 0d:b1:fa:e9:e8:86:52:47:df:19:fe:a1:5d:95:31: 65:74:a7:70:d4:28:23:59:79:d0:56:36:f2:0b:bb: 60:2a:4e:13:01:76:14:20:6c:87:7a:7c:18:ff:55: 91:6a:a3:19:c4:c9:5f:99:2d:7d:73:8c:2c:64:a5: bf:20:4f:1e:3d:9c:97:d7:bc:65:08:91:61:3c:fd: 40:26:3b:37:c8:6c:bc:64:cc:a5:28:cf:0d:4f:e8: db:4d:8b:22:e1:af:98:a6:4a:90:90:bd:78:ff:ae: 65:9b:2e:0e:81:8f:40:d3:e5:90:a5:a1:39:0c:ec: 58:7e:e6:94:cb:f5:5c:e7:cf:07:8c:66:47:63:fc: 1d:bc:33:df:01:82:52:3e:bf:cc:cb:4e:0e:e5:3a: 06:cc:b8:77:2e:e8:d1:bb:d1:c2:c3:fa:e1:9f:8b: 6c:85:65:9a:28:64:a6:df:68:d8:a5:bd:c4:a1:c2: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:CF:15:4F:C7:8C:CD:11:C7:C1:9A:51:AF:96:E3:D5:96:EF:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8d6d9d5-8431-4cb5-8f8f-9337f8c3aad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.138.0/24 Signature Algorithm: sha256WithRSAEncryption a1:a7:57:45:9e:c9:56:0b:85:55:a9:cf:a8:d4:7e:68:1f:a8: a4:63:84:18:ea:30:8f:7e:8b:13:b8:20:1b:97:92:62:3c:43: 5f:b5:c6:0d:a3:c1:5b:90:13:19:24:4f:d4:fb:1b:76:32:18: 47:0a:cd:91:7e:4f:09:6b:4c:c3:82:90:c5:7d:9f:77:cb:45: 6a:c7:a9:69:ec:6e:87:0b:a3:93:95:39:36:b3:82:b5:b0:c6: 0a:9c:b2:f2:b0:3c:df:c7:a6:41:3b:d8:fb:af:75:c1:46:cb: 4e:38:13:ea:9c:9f:48:82:dc:8a:6a:91:4c:dc:99:b6:bc:86: fe:1c:fb:84:b6:36:e3:cd:58:37:c6:08:be:af:6f:cb:c5:38: 74:ce:d3:c3:06:f1:20:bc:26:87:fd:68:25:2a:dd:c6:7e:ce: ea:dc:bd:54:9d:a2:bf:b1:d4:9d:b2:67:df:12:67:2b:cb:b0: 87:d9:42:f3:8d:e2:42:f7:2c:a7:5a:4b:40:9b:04:26:37:03: 39:6c:21:a5:54:7a:4d:93:34:e7:2b:b6:c9:23:66:93:8f:26: 11:db:64:78:8e:5f:89:ed:bc:b2:30:1d:95:fb:9d:f0:5a:cc: bb:4f:f1:d1:25:74:8a:01:83:26:de:3d:3e:e4:bf:a0:80:71: 88:ed:43:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDhQITZFQK8VKynyZc4+YE90fqe0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE0MTUwMDI1WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2I4YWY1YjVhMTExMjAxNTljOWFiZWRhOTRmNmUxYmJj NGZlMmQ1ZjMyMjk5MDMxMmFjZjY5OWIzYzk2ODcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8GlrmKa0pVnFU07iEnDbH+RwKRLVY1hM4pTiyKU3n/lbT +xiAx3lym0I/SJFWDd1dQS7jIyEWQ1N/rjJmLmLQ7V2O/dfROmjkOQ2x+unohlJH 3xn+oV2VMWV0p3DUKCNZedBWNvILu2AqThMBdhQgbId6fBj/VZFqoxnEyV+ZLX1z jCxkpb8gTx49nJfXvGUIkWE8/UAmOzfIbLxkzKUozw1P6NtNiyLhr5imSpCQvXj/ rmWbLg6Bj0DT5ZCloTkM7Fh+5pTL9VznzweMZkdj/B28M98BglI+v8zLTg7lOgbM uHcu6NG70cLD+uGfi2yFZZooZKbfaNilvcShwp5/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKn7PFU/HjM0Rx8GaUa+W49WW7zMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4ZDZkOWQ1LTg0MzEtNGNiNS04ZjhmLTkzMzdmOGMzYWFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEoowDQYJKoZIhvcNAQELBQADggEBAKGnV0WeyVYLhVWpz6jUfmgfqKRj hBjqMI9+ixO4IBuXkmI8Q1+1xg2jwVuQExkkT9T7G3YyGEcKzZF+TwlrTMOCkMV9 n3fLRWrHqWnsbocLo5OVOTazgrWwxgqcsvKwPN/HpkE72PuvdcFGy044E+qcn0iC 3IpqkUzcmba8hv4c+4S2NuPNWDfGCL6vb8vFOHTO08MG8SC8Jof9aCUq3cZ+zurc vVSdor+x1J2yZ98SZyvLsIfZQvON4kL3LKdaS0CbBCY3AzlsIaVUek2TNOcrtskj ZpOPJhHbZHiOX4ntvLIwHZX7nfBazLtP8dEldIoBgybePT7kv6CAcYjtQ9M= -----END CERTIFICATE-----Generated at Wed Apr 16 16:52:14 2025 by rpki-client