$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa File: 06f60828-42c6-42a0-b210-4f859b5cc846.roa (raw, json) Hash identifier: 410fcdIOCbDtI89L/PtuqLv85JypMwkx9ecYLDO/cQ8= Subject key identifier: AC:7B:9C:AC:51:6C:CA:35:EE:02:BA:57:80:5A:CC:8E:E3:B7:0F:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78B0EEBB81B6668D33365BA284A30D9E57D1854E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa Signing time: Wed 28 May 2025 00:00:36 +0000 ROA not before: Wed 28 May 2025 00:00:36 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b0:ee:bb:81:b6:66:8d:33:36:5b:a2:84:a3:0d:9e:57:d1:85:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:00:36 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=5aebd3a12a7988b642774690d364cb4a29232389d4bad4072fdf4d90bd6fc47b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:f3:d7:84:ab:6b:9b:39:86:57:85:90:7e: b0:81:8f:d1:8d:b2:5d:81:b3:df:5c:68:7d:39:e7: 0c:05:1f:5f:98:33:e6:00:ac:f4:c7:52:a4:a1:45: 91:14:84:a4:c9:40:1d:da:bf:a7:00:7b:06:1a:a7: d3:0d:05:e4:10:4c:a1:20:7c:ff:bf:19:ff:c7:4b: cb:eb:8e:27:db:7e:78:ab:57:bf:82:89:2f:2a:af: a1:1c:a3:85:36:2b:f5:b9:e6:70:8b:06:28:83:e2: 05:1e:23:ed:c1:fa:76:a4:7d:b6:75:ae:96:28:09: 18:cd:54:cb:26:b1:59:c5:58:df:8b:70:96:d5:56: ec:99:72:9a:77:15:eb:91:1c:1d:c2:9f:67:2e:f9: 02:0e:df:30:bc:eb:f5:c6:5f:6f:10:e1:d7:53:48: 09:4f:5d:d1:7a:67:33:6a:e9:d8:f5:af:c0:f4:9a: a0:45:84:48:d1:13:82:d8:bf:c3:e2:03:bf:81:dd: 84:96:0f:b0:ba:86:ea:e4:6a:e3:8d:1d:9f:94:f3: 96:bf:1b:d6:9f:5e:90:09:0c:2c:f2:02:bc:a6:13: 7a:9e:e0:53:13:9e:88:e3:7c:e4:91:2b:c6:41:57: 1d:42:37:91:85:5c:1f:da:56:05:7c:80:43:54:47: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7B:9C:AC:51:6C:CA:35:EE:02:BA:57:80:5A:CC:8E:E3:B7:0F:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:87:e5:f6:87:de:48:87:8b:6d:79:44:01:c9:9d:eb:04:82: 26:66:32:71:bb:67:3f:7c:f5:23:ea:9a:9f:cf:39:74:09:e4: 5b:b3:32:31:04:40:c7:c5:d3:02:30:c2:dd:c7:da:d7:50:db: d0:31:a8:6e:71:6d:46:ec:e3:25:ca:3e:7d:ba:9b:d0:3f:28: df:6b:28:0e:89:bc:cd:2c:bc:d0:27:1c:71:81:5e:c3:b3:86: 1a:02:bc:d8:a4:6d:51:82:f3:c3:70:e0:ff:4b:19:05:38:0f: 4f:ef:23:58:4a:fe:54:de:88:30:0c:46:86:f9:6c:86:9f:56: 4c:1f:a7:7d:bb:c0:58:76:86:53:84:bd:5e:f8:b2:c0:7e:1b: 7b:3c:a8:69:c6:4f:ed:ea:84:70:dc:d2:fe:0f:04:0c:fe:98: f9:ed:e2:6c:e0:85:a9:e6:b3:4f:b5:2e:2e:37:42:a0:82:04: 74:5e:63:2e:17:ef:d9:2b:a3:0b:7e:1f:26:30:67:44:aa:56: da:c3:6d:17:2e:2f:b0:94:0a:85:35:bc:d1:65:b8:c5:19:6f: 3d:0d:a6:90:78:30:26:a5:c7:f7:c3:47:d2:84:50:8d:ac:c8: 68:d0:30:79:5c:82:bb:72:77:df:f1:c9:12:91:14:f3:d2:74: 0a:d0:8c:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeLDuu4G2Zo0zNluihKMNnlfRhU4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAwMDM2WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YWViZDNhMTJhNzk4OGI2NDI3NzQ2OTBkMzY0Y2I0YTI5 MjMyMzg5ZDRiYWQ0MDcyZmRmNGQ5MGJkNmZjNDdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvIfPXhKtrmzmGV4WQfrCBj9GNsl2Bs99caH055wwFH1+Y M+YArPTHUqShRZEUhKTJQB3av6cAewYap9MNBeQQTKEgfP+/Gf/HS8vrjifbfnir V7+CiS8qr6Eco4U2K/W55nCLBiiD4gUeI+3B+nakfbZ1rpYoCRjNVMsmsVnFWN+L cJbVVuyZcpp3FeuRHB3Cn2cu+QIO3zC86/XGX28Q4ddTSAlPXdF6ZzNq6dj1r8D0 mqBFhEjRE4LYv8PiA7+B3YSWD7C6hurkauONHZ+U85a/G9afXpAJDCzyArymE3qe 4FMTnojjfOSRK8ZBVx1CN5GFXB/aVgV8gENUR19lAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrHucrFFsyjXuArpXgFrMjuO3DzowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2ZjYwODI4LTQyYzYtNDJhMC1iMjEwLTRmODU5YjVjYzg0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQVjANBgkqhkiG9w0BAQsFAAOCAQEAfIfl9ofeSIeLbXlEAcmd6wSCJmYy cbtnP3z1I+qan885dAnkW7MyMQRAx8XTAjDC3cfa11Db0DGobnFtRuzjJco+fbqb 0D8o32soDom8zSy80CcccYFew7OGGgK82KRtUYLzw3Dg/0sZBTgPT+8jWEr+VN6I MAxGhvlshp9WTB+nfbvAWHaGU4S9XviywH4bezyoacZP7eqEcNzS/g8EDP6Y+e3i bOCFqeazT7UuLjdCoIIEdF5jLhfv2SujC34fJjBnRKpW2sNtFy4vsJQKhTW80WW4 xRlvPQ2mkHgwJqXH98NH0oRQjazIaNAweVyCu3J33/HJEpEU89J0CtCMEw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:40:57 2025 by rpki-client