$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa File: fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa (raw, json) Hash identifier: PXX9a66E2fIHo2Fls7Ox9b2uyyEEZ1akOhot39jwDf8= Subject key identifier: C7:64:39:71:F3:13:FF:52:80:C9:4E:04:A5:0E:71:5B:95:D0:A9:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E10144F0E0389D539A031436D26B84D2028489B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa Signing time: Mon 31 Mar 2025 15:10:59 +0000 ROA not before: Mon 31 Mar 2025 15:10:59 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 208.86.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:10:14:4f:0e:03:89:d5:39:a0:31:43:6d:26:b8:4d:20:28:48:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 31 15:10:59 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=35036aa5fd1b0f704b177125fd75af349b1da704e85cdfcd62ebdda536bfb081, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:3c:4d:da:45:da:28:ea:9e:6a:93:35:76: c6:3b:28:7b:44:75:72:60:fa:49:98:d5:ee:ba:25: 54:ff:8f:48:53:62:d2:2b:b1:19:f6:d2:7b:7e:91: b8:7b:37:d7:6a:2b:14:84:35:cf:87:31:cc:4a:5c: 42:80:e6:3e:f1:3b:0c:88:c8:7c:38:09:69:9e:36: c9:ce:ed:49:0d:02:ff:95:a9:9d:b3:cb:71:08:2a: 96:3b:be:ca:64:c5:bd:d4:c9:99:98:5d:74:2c:5d: 9a:9c:4b:54:72:12:0d:af:00:c1:ea:86:aa:4e:c1: 3f:a6:a2:7d:94:33:5f:7c:63:3f:42:bd:33:73:32: c0:94:e6:0d:8f:9c:8e:7d:32:b3:9e:84:b5:35:a4: dc:eb:96:88:f6:63:0b:71:f9:ad:56:07:20:99:76: 08:d1:93:fc:56:b0:be:4c:5d:e2:6f:34:04:65:ff: ba:96:ef:ed:21:37:7f:de:76:ba:37:93:f2:fc:64: 7d:75:9e:8d:67:ee:39:1f:56:20:d1:3a:58:b5:d4: 1f:9f:af:d7:72:11:8f:60:90:d3:29:c1:58:60:a8: 6b:96:1d:a8:d5:ac:c5:73:36:fa:27:2e:2a:c7:59: 12:77:b4:7c:70:52:c0:73:77:64:f2:aa:a1:fb:b2: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:64:39:71:F3:13:FF:52:80:C9:4E:04:A5:0E:71:5B:95:D0:A9:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.86.88.0/23 Signature Algorithm: sha256WithRSAEncryption 60:09:76:71:36:e5:32:0b:8e:25:f3:0d:91:c5:84:2d:aa:03: 56:99:c2:fd:7d:5f:29:1d:27:91:e2:db:08:fb:9c:e3:7f:9e: d6:68:cd:22:6b:3d:33:23:ac:63:7f:90:2e:d6:6b:8f:68:d8: 56:ab:7e:5f:2a:56:05:ca:bc:9f:a4:e9:a9:46:a0:6f:cd:41: 60:f2:1c:cd:13:c9:19:c1:7b:3c:a3:6f:12:32:29:f7:3f:ec: 52:a1:37:df:50:b8:b0:86:a4:63:b7:1b:45:05:25:85:54:47: 3e:42:fb:87:e5:1d:5a:46:50:b8:b4:8e:44:ff:45:d5:ca:f1: 0a:34:45:77:c9:10:38:67:30:d0:da:71:76:03:3c:9a:23:c8: 04:54:9c:59:55:6c:ca:6c:ab:25:6e:f5:11:4f:43:8c:8f:10: 76:b7:4b:46:b6:0b:51:21:ca:28:c6:72:72:b3:dc:4b:0e:14: b4:4b:33:6d:71:67:81:07:44:6c:e1:8c:9c:0f:c0:58:42:da: f9:da:02:e9:a7:22:6e:0d:8f:b6:a8:84:ed:60:db:f7:f5:eb: 4f:3a:57:5c:f7:bd:83:46:db:ff:a3:cc:81:50:36:39:71:4f: f9:f7:f5:be:38:73:c2:3e:b2:22:f6:61:71:d4:c1:d1:97:a5: 0c:01:e7:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXhAUTw4DidU5oDFDbSa4TSAoSJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzMxMTUxMDU5WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTAzNmFhNWZkMWIwZjcwNGIxNzcxMjVmZDc1YWYzNDli MWRhNzA0ZTg1Y2RmY2Q2MmViZGRhNTM2YmZiMDgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy6TxN2kXaKOqeapM1dsY7KHtEdXJg+kmY1e66JVT/j0hT YtIrsRn20nt+kbh7N9dqKxSENc+HMcxKXEKA5j7xOwyIyHw4CWmeNsnO7UkNAv+V qZ2zy3EIKpY7vspkxb3UyZmYXXQsXZqcS1RyEg2vAMHqhqpOwT+mon2UM198Yz9C vTNzMsCU5g2PnI59MrOehLU1pNzrloj2Ywtx+a1WByCZdgjRk/xWsL5MXeJvNARl /7qW7+0hN3/edro3k/L8ZH11no1n7jkfViDROli11B+fr9dyEY9gkNMpwVhgqGuW HajVrMVzNvonLirHWRJ3tHxwUsBzd2TyqqH7sh3jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx2Q5cfMT/1KAyU4EpQ5xW5XQqYcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZjYzg0ZDgxLTliZjgtNGNiZi1iMjc5LTU0YzJmY2Q2NzllMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHQVlgwDQYJKoZIhvcNAQELBQADggEBAGAJdnE25TILjiXzDZHFhC2qA1aZ wv19XykdJ5Hi2wj7nON/ntZozSJrPTMjrGN/kC7Wa49o2Farfl8qVgXKvJ+k6alG oG/NQWDyHM0TyRnBezyjbxIyKfc/7FKhN99QuLCGpGO3G0UFJYVURz5C+4flHVpG ULi0jkT/RdXK8Qo0RXfJEDhnMNDacXYDPJojyARUnFlVbMpsqyVu9RFPQ4yPEHa3 S0a2C1EhyijGcnKz3EsOFLRLM21xZ4EHRGzhjJwPwFhC2vnaAumnIm4Nj7aohO1g 2/f16086V1z3vYNG2/+jzIFQNjlxT/n39b44c8I+siL2YXHUwdGXpQwB58U= -----END CERTIFICATE-----Generated at Wed Apr 16 17:10:35 2025 by rpki-client