$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa File: 054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa (raw, json) Hash identifier: vDB6FYQlAJOouI7SplLx2gXAWAKOM2OBoMKXlhU+mw4= Subject key identifier: 39:51:EF:24:3C:DA:64:8E:9A:95:DC:43:5F:0E:CC:74:94:F8:16:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26019F1E50EEC91A64971C1E538B2FABC605D905 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa Signing time: Fri 16 May 2025 16:11:02 +0000 ROA not before: Fri 16 May 2025 16:11:02 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:01:9f:1e:50:ee:c9:1a:64:97:1c:1e:53:8b:2f:ab:c6:05:d9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:11:02 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=f1df24cf28141589dcb932718327118f4ca4ff4d26178f75724338a5388ccc01, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:30:12:1b:6b:cf:99:f9:59:d0:21:a0:3f: 83:91:c0:ed:b0:af:d1:58:b3:c9:91:dd:6a:ec:a1: 46:18:9f:1e:1a:04:45:0d:65:c1:f8:2b:c3:c9:fe: 96:41:7c:82:16:c8:78:b4:98:c3:9c:2c:0f:c4:ff: 75:47:6f:50:90:25:15:77:16:cc:4e:34:88:89:2b: a9:48:da:75:eb:da:14:12:e7:e2:57:d5:e4:b1:1c: e3:ef:d4:45:4f:54:56:9e:22:82:8d:55:9b:05:4d: 3c:ae:28:d0:83:a8:18:6e:71:1d:77:92:8c:f4:5d: 26:69:7a:a3:17:ea:e9:a3:2f:d5:44:27:d6:71:9d: eb:08:1a:a6:9c:f9:f9:0e:ba:a9:19:6c:dd:7c:d3: f2:e9:5c:96:c5:76:e5:a3:98:93:c1:82:f7:c2:c7: 3f:7b:f4:97:b9:4f:7b:f5:62:1c:1c:e5:17:02:aa: 68:f2:20:11:ae:b1:3d:ec:81:bf:14:17:1f:bd:a4: 32:94:3f:bf:6e:b2:1a:54:6f:6a:f8:68:cf:2e:60: 03:fe:ef:1e:46:85:85:68:b7:51:8c:c3:fc:df:8e: 89:d9:de:29:76:6e:f0:2b:9a:27:7a:b2:dd:d1:bd: b6:0c:d0:b8:8e:a7:0d:b9:68:df:85:8b:a5:54:28: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:EF:24:3C:DA:64:8E:9A:95:DC:43:5F:0E:CC:74:94:F8:16:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:b4:12:9e:75:9f:bd:ed:72:db:ac:fb:87:49:ce:08:01:1d: 3d:65:08:eb:eb:3d:f8:1e:b2:8c:e4:d4:4d:73:a5:0d:f3:74: cc:d2:03:2e:5f:75:30:51:1a:a9:71:d2:38:42:2f:54:a5:51: 5d:8c:50:9c:10:82:ad:01:9c:d6:c0:fb:dc:da:43:8d:03:37: d9:ce:90:8a:3a:cf:84:9d:08:ed:be:d8:20:db:b2:71:d1:cf: b6:a8:16:6c:7b:3a:3b:46:e4:49:e0:b7:dc:28:31:6a:c2:ca: 18:55:4e:0b:64:2f:17:d7:c9:32:97:07:ab:c9:ce:b3:ac:29: 97:13:8c:42:03:f2:86:d8:18:7c:a4:58:4c:4d:9b:5b:9d:84: 01:ae:bf:62:59:e9:48:e2:2f:d1:3b:27:dc:62:c9:31:ea:9d: c7:f7:7b:db:72:fc:2b:5d:6d:30:5f:f4:93:88:d9:16:eb:16: d5:56:df:38:8f:b3:a4:91:9f:48:7a:23:35:f6:a4:30:cc:95: bd:61:9a:86:02:f9:7f:18:09:03:fc:b8:9b:a8:78:85:e9:09: 16:db:8a:c8:40:07:1f:b8:3b:69:68:3b:7a:88:63:56:78:55: 74:bd:86:9c:2f:14:2a:a4:fe:02:d0:6e:a8:de:f5:ca:9a:6e: 3f:7c:57:fc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJgGfHlDuyRpklxweU4svq8YF2QUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYxMTAyWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWRmMjRjZjI4MTQxNTg5ZGNiOTMyNzE4MzI3MTE4ZjRj YTRmZjRkMjYxNzhmNzU3MjQzMzhhNTM4OGNjYzAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWpTASG2vPmflZ0CGgP4ORwO2wr9FYs8mR3WrsoUYYnx4a BEUNZcH4K8PJ/pZBfIIWyHi0mMOcLA/E/3VHb1CQJRV3FsxONIiJK6lI2nXr2hQS 5+JX1eSxHOPv1EVPVFaeIoKNVZsFTTyuKNCDqBhucR13koz0XSZpeqMX6umjL9VE J9ZxnesIGqac+fkOuqkZbN180/LpXJbFduWjmJPBgvfCxz979Je5T3v1Yhwc5RcC qmjyIBGusT3sgb8UFx+9pDKUP79ushpUb2r4aM8uYAP+7x5GhYVot1GMw/zfjonZ 3il2bvArmid6st3RvbYM0LiOpw25aN+Fi6VUKOHTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOVHvJDzaZI6aldxDXw7MdJT4FqEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NDk0OGNkLTQwZWQtNDgwNy1iMmZjLThhOGMzOGY4ZGRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQEDANBgkqhkiG9w0BAQsFAAOCAQEAn7QSnnWfve1y26z7h0nOCAEdPWUI 6+s9+B6yjOTUTXOlDfN0zNIDLl91MFEaqXHSOEIvVKVRXYxQnBCCrQGc1sD73NpD jQM32c6QijrPhJ0I7b7YINuycdHPtqgWbHs6O0bkSeC33CgxasLKGFVOC2QvF9fJ MpcHq8nOs6wplxOMQgPyhtgYfKRYTE2bW52EAa6/YlnpSOIv0Tsn3GLJMeqdx/d7 23L8K11tMF/0k4jZFusW1VbfOI+zpJGfSHojNfakMMyVvWGahgL5fxgJA/y4m6h4 hekJFtuKyEAHH7g7aWg7eohjVnhVdL2GnC8UKqT+AtBuqN71yppuP3xX/A== -----END CERTIFICATE-----Generated at Sun Jun 1 04:41:52 2025 by rpki-client