$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa File: 0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa (raw, json) Hash identifier: G11sQ0cbYeHcoKhA6S7lWyMhPWEehBb2PsPNu1X816M= Subject key identifier: 94:D9:24:8E:89:2D:9D:BB:50:6B:A5:B4:8B:6F:8E:1C:A5:17:C8:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07CC4AF00ACD33ACCDDAD8EA592489EEBDB30462 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa Signing time: Tue 27 May 2025 00:00:33 +0000 ROA not before: Tue 27 May 2025 00:00:33 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.247.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cc:4a:f0:0a:cd:33:ac:cd:da:d8:ea:59:24:89:ee:bd:b3:04:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:00:33 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=948d4111e636c229c1b75575d00b1ed1cf8395cfe6e35a3976a91774ec6df888, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:4e:d1:e4:66:17:d1:eb:dd:a5:65:d5:d2: d5:2e:70:b2:dd:bd:b8:0d:37:12:5a:5d:db:1b:6a: 53:94:2f:05:dd:9e:f3:a6:56:44:d0:94:a6:8d:5c: c8:20:90:14:5d:dc:11:1b:4c:82:e8:8e:cd:d0:f9: ea:44:fc:0d:7e:39:a2:6f:91:31:13:52:25:f9:cd: 6f:ad:2f:11:1f:83:9f:31:d9:7a:29:37:60:be:35: f9:ce:e5:c3:82:c7:7e:58:07:ef:bd:91:df:b6:a1: 7c:41:d1:4e:ef:62:15:a3:8c:70:65:85:db:09:56: 90:12:dc:99:4f:57:58:5e:8f:46:e8:bb:ce:db:e2: a8:dd:26:7e:2a:b5:e8:8d:81:f7:d4:e5:d3:06:e5: 4b:18:bb:08:95:55:e6:d6:7f:72:a8:4f:4c:76:19: 0b:26:87:85:d3:2f:7a:a7:cf:28:34:d7:7d:bd:88: 14:63:e0:29:3d:01:ff:d4:4a:07:f5:c1:21:8c:8f: 08:63:b4:3c:46:ff:bf:bd:32:8d:3c:bf:6a:94:00: 81:4d:39:88:c2:64:6b:32:6a:e3:e1:d9:83:3d:56: 03:63:5a:33:71:d6:88:29:77:85:d7:21:32:26:ca: 94:71:f3:45:e2:7e:bc:41:b8:fc:cf:65:58:34:94: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:24:8E:89:2D:9D:BB:50:6B:A5:B4:8B:6F:8E:1C:A5:17:C8:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.247.33.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ee:1b:f9:a9:e1:da:07:d9:d7:6e:33:f9:ec:c1:e7:9b:a1: bf:dc:7d:60:ba:51:29:20:eb:e8:b6:27:02:6c:68:58:88:98: 79:12:c1:58:3b:f9:0b:f8:b0:d2:0c:8d:2a:e3:72:33:a6:83: 81:48:53:ea:2b:fa:4d:60:83:2b:15:18:55:82:41:c0:2e:96: ab:7d:68:fa:62:50:e9:5d:c6:bd:29:28:4e:49:0c:69:12:9b: 51:36:86:79:d2:b3:18:11:25:a9:f5:72:3b:3d:10:40:a9:a2: 6e:27:eb:9c:1e:cb:95:ab:b1:25:0c:01:cd:05:d7:a8:69:2f: 62:1b:c7:73:a7:ed:ad:49:30:9c:24:c3:ce:0b:a8:5e:19:28: 49:d2:01:00:6b:9c:11:ab:40:a2:7c:ae:6c:62:93:8c:e3:c5: 23:37:fb:b9:1d:5d:be:72:cd:37:49:95:89:96:c4:04:3d:c7: 5a:34:81:cf:a8:b0:73:25:91:66:7b:4b:ee:b6:1e:8f:c7:10: cc:d5:5b:a0:3b:40:90:4a:d9:de:0d:57:ee:db:5d:cc:18:60: 6b:18:4c:9a:cc:8b:7c:a0:96:47:88:91:87:73:17:a9:75:08: 20:02:ca:9b:e8:60:05:d2:30:0f:20:f5:5e:84:d8:1a:cc:73: 9d:5c:36:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB8xK8ArNM6zN2tjqWSSJ7r2zBGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAwMDMzWhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDhkNDExMWU2MzZjMjI5YzFiNzU1NzVkMDBiMWVkMWNm ODM5NWNmZTZlMzVhMzk3NmE5MTc3NGVjNmRmODg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhHE7R5GYX0evdpWXV0tUucLLdvbgNNxJaXdsbalOULwXd nvOmVkTQlKaNXMggkBRd3BEbTILojs3Q+epE/A1+OaJvkTETUiX5zW+tLxEfg58x 2XopN2C+NfnO5cOCx35YB++9kd+2oXxB0U7vYhWjjHBlhdsJVpAS3JlPV1hej0bo u87b4qjdJn4qteiNgffU5dMG5UsYuwiVVebWf3KoT0x2GQsmh4XTL3qnzyg01329 iBRj4Ck9Af/USgf1wSGMjwhjtDxG/7+9Mo08v2qUAIFNOYjCZGsyauPh2YM9VgNj WjNx1ogpd4XXITImypRx80XifrxBuPzPZVg0lMX5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlNkkjoktnbtQa6W0i2+OHKUXyLYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NDFmZGE2LWNiM2YtNDFkMi1iM2JmLTIwYjAzNTdmNTEyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW9yEwDQYJKoZIhvcNAQELBQADggEBABLuG/mp4doH2dduM/nsweebob/c fWC6USkg6+i2JwJsaFiImHkSwVg7+Qv4sNIMjSrjcjOmg4FIU+or+k1ggysVGFWC QcAulqt9aPpiUOldxr0pKE5JDGkSm1E2hnnSsxgRJan1cjs9EECpom4n65wey5Wr sSUMAc0F16hpL2Ibx3On7a1JMJwkw84LqF4ZKEnSAQBrnBGrQKJ8rmxik4zjxSM3 +7kdXb5yzTdJlYmWxAQ9x1o0gc+osHMlkWZ7S+62Ho/HEMzVW6A7QJBK2d4NV+7b XcwYYGsYTJrMi3yglkeIkYdzF6l1CCACypvoYAXSMA8g9V6E2BrMc51cNg8= -----END CERTIFICATE-----Generated at Fri Jun 6 05:30:52 2025 by rpki-client