$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ba42f32-2bf4-4ab1-aee5-72ab05496fe4.roa File: 0ba42f32-2bf4-4ab1-aee5-72ab05496fe4.roa (raw, json) Hash identifier: Y6ahz5IZhRXeAKLtMkL/kroJf7g3E6yrcKKybWEEN3U= Subject key identifier: 7C:FB:1A:2C:BB:9E:F3:E6:F7:C3:AB:25:B7:97:7E:4C:C1:D2:CC:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40C5592F9E5D4FD28892DBEC187CA2AE221DE217 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ba42f32-2bf4-4ab1-aee5-72ab05496fe4.roa Signing time: Tue 20 May 2025 00:52:15 +0000 ROA not before: Tue 20 May 2025 00:52:15 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.172.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c5:59:2f:9e:5d:4f:d2:88:92:db:ec:18:7c:a2:ae:22:1d:e2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:52:15 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=28e50878cbbdbb53205b8af9fb2630c382db7368f313ccd4ff2fa30f5465787d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:96:1e:bb:0f:19:a6:c2:11:17:ef:cc:30: 77:64:58:52:6e:05:e4:50:33:b5:af:9f:a9:d4:3f: 8f:71:3d:ff:41:2f:40:1e:14:18:e8:58:47:f7:66: 1c:67:dd:48:e2:8c:80:72:09:df:da:6d:4d:4c:7d: 6b:06:11:f3:32:7e:05:d0:ed:fa:98:7d:60:ec:0e: 33:b4:ba:57:f4:26:d6:f0:d8:e9:69:f6:ac:6e:8d: bc:ff:01:be:29:b5:52:62:aa:29:fc:e7:b1:1c:83: 4a:c6:b7:78:27:be:e6:45:d2:c1:b2:9e:49:aa:55: d5:69:25:bf:4d:1c:4c:4e:4f:fa:72:e7:1b:7a:0d: 12:ad:a6:9d:12:a5:04:f4:6e:e6:ab:21:6e:15:c2: 98:0a:9d:1e:e9:ba:e7:5c:58:18:e5:03:14:53:66: d0:8f:44:df:37:e1:0d:99:ba:56:73:bb:89:90:78: e9:56:52:56:89:8a:da:75:ce:55:cb:e4:09:3c:52: 18:5d:da:08:36:33:04:2e:58:2f:79:72:ad:a2:59: 91:fc:b9:a5:de:25:6b:91:27:4a:26:ff:ec:bf:7b: d2:51:4a:d5:be:4e:d3:a2:49:ba:be:cf:86:17:f4: dc:e4:59:90:b9:2d:b1:d0:79:b6:a0:97:5f:e7:df: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FB:1A:2C:BB:9E:F3:E6:F7:C3:AB:25:B7:97:7E:4C:C1:D2:CC:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ba42f32-2bf4-4ab1-aee5-72ab05496fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption bf:1e:a1:de:8b:26:61:61:67:ce:c2:4c:50:4c:e6:fc:32:50: d1:6a:d6:68:bb:35:1d:54:ca:e6:ba:c8:b6:bb:62:61:c8:31: 55:91:0a:d0:5b:37:88:a5:ea:0f:8e:01:93:c0:b3:27:58:c8: f0:6e:70:9a:fb:76:c6:ce:51:49:2a:7a:4b:01:5f:34:3f:33: 81:04:71:1f:8c:34:39:6d:5c:10:3c:08:54:bf:ab:e8:bf:3c: cd:2a:80:c2:4c:86:5d:30:72:9a:8b:15:0f:09:70:59:90:a0: a9:b4:c7:51:17:84:43:ab:3f:59:85:86:d9:75:74:ab:10:0b: e7:43:ed:2f:25:be:4f:06:f8:e3:05:77:38:18:56:fd:24:0c: 97:8e:d1:82:de:c6:93:8c:91:5a:95:40:9c:66:41:15:1d:1c: b2:96:ef:0c:7a:b2:53:7b:51:39:30:2f:93:a0:19:bf:ea:16: 31:15:7d:43:c1:db:3f:08:de:16:1e:d7:f7:fa:0d:62:3c:fc: 6f:8c:b6:60:a0:3a:db:ca:18:35:81:10:2a:a3:67:8f:6f:6e: 71:a5:0f:b2:77:8e:4a:8c:89:8a:28:c7:62:10:b2:2c:a9:d0: 2f:37:08:9f:f1:e0:66:e1:30:73:6a:bf:d9:2c:db:05:73:03: a7:f7:2d:a1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQMVZL55dT9KIktvsGHyiriId4hcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA1MjE1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGU1MDg3OGNiYmRiYjUzMjA1YjhhZjlmYjI2MzBjMzgy ZGI3MzY4ZjMxM2NjZDRmZjJmYTMwZjU0NjU3ODdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzr5Yeuw8ZpsIRF+/MMHdkWFJuBeRQM7Wvn6nUP49xPf9B L0AeFBjoWEf3Zhxn3UjijIByCd/abU1MfWsGEfMyfgXQ7fqYfWDsDjO0ulf0Jtbw 2Olp9qxujbz/Ab4ptVJiqin857Ecg0rGt3gnvuZF0sGynkmqVdVpJb9NHExOT/py 5xt6DRKtpp0SpQT0buarIW4VwpgKnR7puudcWBjlAxRTZtCPRN834Q2ZulZzu4mQ eOlWUlaJitp1zlXL5Ak8Uhhd2gg2MwQuWC95cq2iWZH8uaXeJWuRJ0om/+y/e9JR StW+TtOiSbq+z4YX9NzkWZC5LbHQebagl1/n3xixAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfPsaLLue8+b3w6slt5d+TMHSzJYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiYTQyZjMyLTJiZjQtNGFiMS1hZWU1LTcyYWIwNTQ5NmZlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4rDANBgkqhkiG9w0BAQsFAAOCAQEAvx6h3osmYWFnzsJMUEzm/DJQ0WrW aLs1HVTK5rrItrtiYcgxVZEK0Fs3iKXqD44Bk8CzJ1jI8G5wmvt2xs5RSSp6SwFf ND8zgQRxH4w0OW1cEDwIVL+r6L88zSqAwkyGXTBymosVDwlwWZCgqbTHUReEQ6s/ WYWG2XV0qxAL50PtLyW+Twb44wV3OBhW/SQMl47Rgt7Gk4yRWpVAnGZBFR0cspbv DHqyU3tROTAvk6AZv+oWMRV9Q8HbPwjeFh7X9/oNYjz8b4y2YKA628oYNYEQKqNn j29ucaUPsneOSoyJiijHYhCyLKnQLzcIn/HgZuEwc2q/2SzbBXMDp/ctoQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:35:33 2025 by rpki-client