$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09979197-79c0-48b0-823a-0eb71a344290.roa File: 09979197-79c0-48b0-823a-0eb71a344290.roa (raw, json) Hash identifier: JFSF5r/X9hIuQij1lSH6+CnzOEXjhbphL5LLcx0pGTs= Subject key identifier: 08:CB:08:B8:6A:14:08:78:93:6D:57:5A:09:62:E4:F6:7E:AC:D1:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 487691FFEF6AB287D44B337EC8408B5767F7A19E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09979197-79c0-48b0-823a-0eb71a344290.roa Signing time: Wed 28 May 2025 00:01:56 +0000 ROA not before: Wed 28 May 2025 00:01:56 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:76:91:ff:ef:6a:b2:87:d4:4b:33:7e:c8:40:8b:57:67:f7:a1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:01:56 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=8ec236030b4a9904ec34d176f93edf9568ced3cc7dd65a994e618883b4c8a0cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:e9:16:24:74:dd:c9:99:75:69:92:63:87: 18:6f:5b:2e:e5:6d:b2:8f:4b:6b:6f:4c:90:38:2a: 10:4a:c8:36:3a:0c:49:0d:02:c6:f6:62:b7:29:18: b1:9c:78:45:64:66:75:b9:fa:31:24:ec:0b:89:f2: b5:e0:71:2f:94:9e:81:51:b7:6a:10:e6:8e:45:34: 74:23:ab:45:0a:46:47:f0:2a:0f:1c:4f:20:9d:a9: 89:f8:46:95:4b:4a:f9:5a:b2:80:4d:4b:55:3f:96: b6:f2:e9:01:e8:ea:d1:37:2a:8e:8c:b7:f0:23:ff: 83:3b:8c:1f:43:bb:aa:0e:b8:0e:91:cd:bf:ba:ae: e0:60:e2:ac:96:5b:ce:22:5b:9e:c8:ae:25:71:51: c9:6f:3e:41:38:7c:a7:06:6d:b7:27:ba:81:65:0e: e3:76:4e:e3:1a:8f:ec:33:a4:30:aa:81:89:66:1b: cd:e0:04:05:50:f7:da:da:94:64:4e:83:2f:57:be: a5:73:eb:b9:72:e5:c8:53:99:d2:c1:99:08:08:2f: d7:ab:1a:af:70:30:1b:38:cf:23:ab:5e:d7:15:72: 29:73:6f:ac:a6:7e:fb:33:24:3a:f9:09:74:0f:e1: 2b:c7:a6:50:95:85:21:0a:d7:04:62:4c:c3:70:11: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CB:08:B8:6A:14:08:78:93:6D:57:5A:09:62:E4:F6:7E:AC:D1:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09979197-79c0-48b0-823a-0eb71a344290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.48.0/20 Signature Algorithm: sha256WithRSAEncryption c8:51:3c:e8:2f:b9:73:db:69:85:30:cf:72:06:17:cb:87:6c: fa:e6:c4:a7:70:5a:a7:8c:16:da:c1:3b:44:2c:bf:57:0d:3d: 45:4c:f5:68:a6:8f:72:b4:f2:d9:b0:38:4a:22:61:85:45:9a: b9:a1:ee:74:0f:fd:c0:b4:0c:79:f5:a0:e5:bf:f6:5b:46:0c: 1f:71:9c:d0:37:58:cd:2a:01:48:09:a4:71:19:9c:38:a8:72: 8a:86:7a:d2:f7:22:49:fd:11:01:5b:33:ca:bb:28:bd:12:9c: 92:a8:94:ab:97:2c:69:56:c9:02:61:d4:25:d0:ef:c0:c2:ec: 70:2d:14:47:fe:95:41:c8:c7:2d:7d:52:30:95:de:99:d8:e8: 34:2b:72:f9:88:21:55:74:df:db:20:ee:2a:7f:a1:38:e5:1a: 46:97:df:49:80:c8:f1:70:d7:54:b5:6b:66:40:ad:af:b2:81: 30:b2:02:33:0c:84:47:f0:e0:d3:50:d6:f0:81:fa:7e:61:24: bf:82:dc:f5:65:c5:89:ab:74:26:94:4b:04:cb:7d:54:54:f4: 73:b6:3f:9d:53:a3:e8:ad:1a:fa:40:68:db:5e:6d:7f:6c:cc: 6c:c0:96:d8:40:bd:68:2b:27:ec:7f:3b:c2:a8:22:df:fd:d5: bb:07:91:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSHaR/+9qsofUSzN+yECLV2f3oZ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAwMTU2WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWMyMzYwMzBiNGE5OTA0ZWMzNGQxNzZmOTNlZGY5NTY4 Y2VkM2NjN2RkNjVhOTk0ZTYxODg4M2I0YzhhMGNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyrukWJHTdyZl1aZJjhxhvWy7lbbKPS2tvTJA4KhBKyDY6 DEkNAsb2YrcpGLGceEVkZnW5+jEk7AuJ8rXgcS+UnoFRt2oQ5o5FNHQjq0UKRkfw Kg8cTyCdqYn4RpVLSvlasoBNS1U/lrby6QHo6tE3Ko6Mt/Aj/4M7jB9Du6oOuA6R zb+6ruBg4qyWW84iW57IriVxUclvPkE4fKcGbbcnuoFlDuN2TuMaj+wzpDCqgYlm G83gBAVQ99ralGROgy9XvqVz67ly5chTmdLBmQgIL9erGq9wMBs4zyOrXtcVcilz b6ymfvszJDr5CXQP4SvHplCVhSEK1wRiTMNwESIHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCMsIuGoUCHiTbVdaCWLk9n6s0bAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5OTc5MTk3LTc5YzAtNDhiMC04MjNhLTBlYjcxYTM0NDI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARsrzAwDQYJKoZIhvcNAQELBQADggEBAMhRPOgvuXPbaYUwz3IGF8uHbPrm xKdwWqeMFtrBO0Qsv1cNPUVM9Wimj3K08tmwOEoiYYVFmrmh7nQP/cC0DHn1oOW/ 9ltGDB9xnNA3WM0qAUgJpHEZnDiocoqGetL3Ikn9EQFbM8q7KL0SnJKolKuXLGlW yQJh1CXQ78DC7HAtFEf+lUHIxy19UjCV3pnY6DQrcvmIIVV039sg7ip/oTjlGkaX 30mAyPFw11S1a2ZAra+ygTCyAjMMhEfw4NNQ1vCB+n5hJL+C3PVlxYmrdCaUSwTL fVRU9HO2P51To+itGvpAaNtebX9szGzAlthAvWgrJ+x/O8KoIt/91bsHkQg= -----END CERTIFICATE-----Generated at Sun Jun 1 05:28:31 2025 by rpki-client