$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa File: 04458f53-1b58-4ea6-b808-1d18094e2918.roa (raw, json) Hash identifier: KUsrIKHiL/4KXrzUYo9byf/Cb2ZDyMYEnMYZQfRRaPk= Subject key identifier: 9D:27:5C:D5:27:40:4B:49:21:31:4C:43:15:64:C3:FF:C7:42:8C:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6419BE2DAF1FAD21A60537AEC184F1C5B617E3FA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa Signing time: Tue 20 May 2025 00:21:09 +0000 ROA not before: Tue 20 May 2025 00:21:09 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.182.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:19:be:2d:af:1f:ad:21:a6:05:37:ae:c1:84:f1:c5:b6:17:e3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:21:09 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=1b5d65ae9a17d85c819cc7b0806bc3ef3382809c8de59395345a3e3c57fc5932, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:82:47:ee:2c:bd:0a:74:29:12:21:3f:f0: 7e:73:29:80:a1:84:14:46:8b:cc:3e:77:1c:54:f7: 53:bc:81:f1:5d:8f:36:11:82:6c:58:d3:60:be:84: b5:4c:28:ae:91:fa:c5:74:c9:5e:1b:58:b9:bd:82: 61:be:76:eb:3c:47:e3:eb:cf:d9:0c:21:95:de:14: 0e:f3:60:66:96:b7:3a:13:4f:8f:7f:93:39:7d:6b: 85:77:12:4d:d0:8a:0c:74:7f:16:2f:3b:bc:b4:2d: d5:91:a3:d3:e4:2d:a5:14:ff:4b:16:82:15:1b:68: ae:ba:d6:f2:e0:ba:d2:69:d3:a1:f9:4f:e4:5f:fc: f8:3e:ee:d7:fc:ad:c2:b7:3f:40:22:cc:1e:02:d5: ee:b4:be:51:cf:1f:47:11:d4:37:4e:b5:99:cf:7a: b9:c4:7d:12:0b:7f:f6:9a:5a:35:5b:f9:91:0c:5e: 76:ab:1e:4e:14:69:a6:f5:95:22:e3:2a:ac:d1:e7: fd:2e:66:a0:52:b1:ab:9f:f4:ad:11:95:8c:ec:2b: 54:e3:53:90:93:db:9b:27:d9:51:91:7b:44:fb:2c: 31:89:00:fd:6f:27:cd:7b:df:68:d9:79:f3:96:e8: e7:e9:1e:81:a1:7d:f4:b8:24:16:0b:0a:31:52:19: d8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:5C:D5:27:40:4B:49:21:31:4C:43:15:64:C3:FF:C7:42:8C:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04458f53-1b58-4ea6-b808-1d18094e2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.182.224.0/21 Signature Algorithm: sha256WithRSAEncryption cc:9a:8c:44:21:e8:22:35:6f:0d:18:5a:9d:99:b0:43:62:07: 8f:ed:6e:5c:64:f5:e1:65:05:0d:10:20:0a:ab:57:05:a1:9a: 37:5e:53:25:30:ec:ba:fa:67:1e:e0:7d:96:7e:b1:19:62:ee: a2:f8:99:70:62:39:3f:81:45:ba:2b:3f:c7:a9:21:af:5b:4e: 09:51:88:4f:c1:49:c4:ff:a3:d9:0a:67:e8:2d:2d:c1:37:45: a3:05:bf:8c:5b:cc:55:dd:45:26:14:66:e0:a0:ba:74:f8:f4: 0e:70:5e:df:b5:72:3b:c8:00:8a:b3:6a:c3:38:4d:3b:ef:5b: 40:44:d0:72:c1:e8:de:e5:3e:48:2d:05:5e:88:bf:78:c6:f1: c9:f2:ea:d1:da:e5:9e:fe:9f:77:2f:d0:d4:5f:83:a6:ed:44: a8:84:75:43:0e:ae:92:be:4d:2a:02:8d:fc:ea:e7:b9:36:bb: 65:88:3e:68:f3:91:87:e2:a8:18:57:b6:d3:80:27:cd:23:13: 59:7e:87:d9:8b:66:a3:30:f0:3a:c1:ce:2e:1e:cd:e8:c0:3b: 13:57:d9:ac:d1:32:1d:04:23:94:06:d7:6a:a9:09:1a:c5:09: d4:22:b2:65:8f:78:7a:8f:ca:50:a2:de:02:b2:c5:6b:4f:b9: 4e:74:0c:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZBm+La8frSGmBTeuwYTxxbYX4/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAyMTA5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjVkNjVhZTlhMTdkODVjODE5Y2M3YjA4MDZiYzNlZjMz ODI4MDljOGRlNTkzOTUzNDVhM2UzYzU3ZmM1OTMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC46oJH7iy9CnQpEiE/8H5zKYChhBRGi8w+dxxU91O8gfFd jzYRgmxY02C+hLVMKK6R+sV0yV4bWLm9gmG+dus8R+Prz9kMIZXeFA7zYGaWtzoT T49/kzl9a4V3Ek3Qigx0fxYvO7y0LdWRo9PkLaUU/0sWghUbaK661vLgutJp06H5 T+Rf/Pg+7tf8rcK3P0AizB4C1e60vlHPH0cR1DdOtZnPernEfRILf/aaWjVb+ZEM XnarHk4Uaab1lSLjKqzR5/0uZqBSsauf9K0RlYzsK1TjU5CT25sn2VGRe0T7LDGJ AP1vJ81732jZefOW6OfpHoGhffS4JBYLCjFSGdgXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnSdc1SdAS0khMUxDFWTD/8dCjJYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDU4ZjUzLTFiNTgtNGVhNi1iODA4LTFkMTgwOTRlMjkxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYtuAwDQYJKoZIhvcNAQELBQADggEBAMyajEQh6CI1bw0YWp2ZsENiB4/t blxk9eFlBQ0QIAqrVwWhmjdeUyUw7Lr6Zx7gfZZ+sRli7qL4mXBiOT+BRborP8ep Ia9bTglRiE/BScT/o9kKZ+gtLcE3RaMFv4xbzFXdRSYUZuCgunT49A5wXt+1cjvI AIqzasM4TTvvW0BE0HLB6N7lPkgtBV6Iv3jG8cny6tHa5Z7+n3cv0NRfg6btRKiE dUMOrpK+TSoCjfzq57k2u2WIPmjzkYfiqBhXttOAJ80jE1l+h9mLZqMw8DrBzi4e zejAOxNX2azRMh0EI5QG12qpCRrFCdQismWPeHqPylCi3gKyxWtPuU50DO4= -----END CERTIFICATE-----Generated at Sun Jun 1 05:03:05 2025 by rpki-client