$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f631eed-497c-4345-8534-81eba457d89a.roa File: 0f631eed-497c-4345-8534-81eba457d89a.roa (raw, json) Hash identifier: JunZFUfg0oZv8dUbvptAqSorNnLn34900gkwMb64CqM= Subject key identifier: 32:06:59:71:D8:6A:34:B2:3C:3D:5C:AD:64:44:D1:6E:17:4F:92:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17CE77700B34E9C5F736EE026A9BE4A0AECC1189 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f631eed-497c-4345-8534-81eba457d89a.roa Signing time: Tue 20 May 2025 00:41:34 +0000 ROA not before: Tue 20 May 2025 00:41:34 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 32.242.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ce:77:70:0b:34:e9:c5:f7:36:ee:02:6a:9b:e4:a0:ae:cc:11:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:41:34 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=6dc1fbc3d6489fad0515e356a8327a392032371fd819448e412b1e82e3b3fe97, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:d1:c4:b0:99:0e:ea:98:36:0b:d4:79:0b: dd:e1:49:5b:d6:42:f4:65:3e:75:27:da:67:b0:79: 07:f8:9f:ce:57:80:d0:40:d8:6d:64:ed:f6:45:57: 2c:28:4f:04:59:d0:13:6c:74:6f:be:5d:66:5d:49: 9f:bc:8f:ae:28:56:b6:2b:67:9f:ca:f6:e2:9c:4f: 1d:5f:ef:55:e8:53:e9:f4:c1:5c:e8:6e:d2:fd:7c: 80:3c:a4:a4:90:a8:51:3e:ed:bf:12:14:86:cd:6b: ae:9d:6e:d4:ee:26:9c:14:88:73:57:c4:12:5d:3a: ac:83:e1:2c:c4:3d:85:00:a2:43:85:86:75:36:1c: 9e:e5:04:1d:9b:18:42:55:99:04:a1:2c:dc:5a:4f: 2b:42:56:f8:ab:89:14:7b:0e:23:6f:bb:e7:d3:ad: 0b:38:f2:a3:dc:30:23:d6:d9:d8:1d:f4:6f:a0:48: 57:2f:5f:ea:bb:af:53:de:d5:4e:91:ab:54:83:6c: 75:fe:06:03:0a:1e:e8:c4:81:05:47:e7:20:a6:f3: d4:30:9e:15:df:c7:c8:8a:c0:b6:a1:d2:da:41:17: 20:fd:4d:c7:9b:72:46:c9:8c:ac:3f:cb:a3:7b:46: f7:87:6e:a3:ae:1d:74:28:be:9b:19:c2:ff:b5:36: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:06:59:71:D8:6A:34:B2:3C:3D:5C:AD:64:44:D1:6E:17:4F:92:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f631eed-497c-4345-8534-81eba457d89a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1e:4b:b0:38:bb:2c:4c:af:81:24:b4:b3:7b:00:62:2c:c5:62: e7:42:f6:cc:96:30:0f:64:12:c1:28:61:96:44:4b:c1:9d:34: 64:4a:19:b8:b7:e4:b5:5e:aa:c2:74:f2:3b:a3:20:4d:cc:c6: 43:ab:7f:aa:5f:fe:81:7e:19:60:78:62:f2:86:5b:dc:6f:07: 66:90:bc:6d:0b:af:85:17:bc:a0:bd:b4:94:c5:ea:63:2c:dd: e7:11:2c:39:71:d4:73:a9:ab:34:25:ba:bc:ba:af:bf:0f:74: af:92:f2:af:38:9b:09:37:ca:98:dd:58:4a:9a:fb:f1:9e:23: d0:5d:86:12:e1:37:5c:05:fb:04:2a:d7:06:5c:98:d8:db:d1: ab:aa:9d:0c:c9:40:fb:da:8f:19:6b:1d:52:af:9b:53:3c:bf: f0:18:d1:73:f7:90:68:0b:02:0c:b1:f2:72:84:93:15:10:34: f0:a6:57:2d:0b:5c:7b:4e:9f:a5:ab:a5:cc:33:61:e7:e6:f8: 71:41:9e:7e:9f:05:7a:2a:26:a4:3c:f6:c2:6f:fb:1d:7b:3f: d0:46:02:cc:fb:5b:3e:f6:44:d6:a0:1b:a7:3b:3a:df:b1:2d: 2a:69:37:37:6a:06:58:7a:29:71:fc:85:6d:e4:2b:87:c6:23: 39:a8:ef:ad -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF853cAs06cX3Nu4CapvkoK7MEYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA0MTM0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGMxZmJjM2Q2NDg5ZmFkMDUxNWUzNTZhODMyN2EzOTIw MzIzNzFmZDgxOTQ0OGU0MTJiMWU4MmUzYjNmZTk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZb9HEsJkO6pg2C9R5C93hSVvWQvRlPnUn2meweQf4n85X gNBA2G1k7fZFVywoTwRZ0BNsdG++XWZdSZ+8j64oVrYrZ5/K9uKcTx1f71XoU+n0 wVzobtL9fIA8pKSQqFE+7b8SFIbNa66dbtTuJpwUiHNXxBJdOqyD4SzEPYUAokOF hnU2HJ7lBB2bGEJVmQShLNxaTytCVviriRR7DiNvu+fTrQs48qPcMCPW2dgd9G+g SFcvX+q7r1Pe1U6Rq1SDbHX+BgMKHujEgQVH5yCm89QwnhXfx8iKwLah0tpBFyD9 TcebckbJjKw/y6N7RveHbqOuHXQovpsZwv+1Nk5NAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMgZZcdhqNLI8PVytZETRbhdPkhMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmNjMxZWVkLTQ5N2MtNDM0NS04NTM0LTgxZWJhNDU3ZDg5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAg8jANBgkqhkiG9w0BAQsFAAOCAQEAHkuwOLssTK+BJLSzewBiLMVi50L2 zJYwD2QSwShhlkRLwZ00ZEoZuLfktV6qwnTyO6MgTczGQ6t/ql/+gX4ZYHhi8oZb 3G8HZpC8bQuvhRe8oL20lMXqYyzd5xEsOXHUc6mrNCW6vLqvvw90r5LyrzibCTfK mN1YSpr78Z4j0F2GEuE3XAX7BCrXBlyY2NvRq6qdDMlA+9qPGWsdUq+bUzy/8BjR c/eQaAsCDLHycoSTFRA08KZXLQtce06fpaulzDNh5+b4cUGefp8FeiompDz2wm/7 HXs/0EYCzPtbPvZE1qAbpzs637EtKmk3N2oGWHopcfyFbeQrh8YjOajvrQ== -----END CERTIFICATE-----Generated at Sun Jun 1 05:09:13 2025 by rpki-client