$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa File: 13fff5ce-e24c-47b0-8733-aa45784ee06b.roa (raw, json) Hash identifier: Dws0ulxQvhPFPBTRxAQf3r6HPAXaWAbXSOG3QDwiXLU= Subject key identifier: CA:2A:67:EA:61:39:CB:BF:11:24:EF:4F:0D:AD:55:10:D0:B7:44:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 641D1BBD2B887BC31EE66B51C8F60199BC251D38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa Signing time: Tue 20 May 2025 15:00:40 +0000 ROA not before: Tue 20 May 2025 15:00:40 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.195.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1d:1b:bd:2b:88:7b:c3:1e:e6:6b:51:c8:f6:01:99:bc:25:1d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:00:40 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=e13489129bbcb3e77b044dc47fda9f058b99cef933cd4af65e8a51c06b8efab6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:4c:c2:c7:fc:59:c6:94:e2:c8:f1:56:37: 67:80:e7:2a:3a:7a:9b:e7:19:95:8c:33:1a:15:d7: 0b:e8:fe:8d:a2:83:9b:24:a1:7c:45:09:fe:9b:17: 70:ec:bd:56:c5:09:1b:6c:16:9f:8d:08:b2:a4:8f: aa:ff:db:f3:cc:a7:04:17:a6:15:4f:da:e2:ba:df: 7e:4d:5a:38:ad:26:aa:58:6d:55:14:ee:ed:e8:ff: 1b:aa:c0:4f:4e:17:a6:36:a8:05:2a:7d:d3:47:19: bc:f0:4a:c7:88:c5:93:cf:6c:10:e8:8d:7f:0e:ee: bf:e6:2e:a8:83:56:89:db:b0:17:e4:2b:e3:47:11: 92:b4:6e:23:1a:bc:f7:ca:67:f7:c0:c9:6d:94:23: be:69:39:5e:92:25:98:f1:4a:f7:b7:2e:e0:cb:91: fc:88:c3:03:11:e6:2d:70:86:8f:4f:3c:1c:56:c3: ac:d9:11:c2:9f:0b:e3:99:8d:bc:fa:77:94:9d:5f: 3d:13:73:7e:28:00:81:f4:2e:3d:cf:e4:69:30:2b: 36:01:70:9c:73:49:83:68:ec:52:2e:41:11:a0:f2: 52:7f:01:0f:b0:ce:e8:c6:e2:1d:9c:8c:13:d2:60: b7:86:71:b4:6b:f5:26:13:40:08:69:a9:f0:f7:95: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2A:67:EA:61:39:CB:BF:11:24:EF:4F:0D:AD:55:10:D0:B7:44:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13fff5ce-e24c-47b0-8733-aa45784ee06b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.195.0.0/16 Signature Algorithm: sha256WithRSAEncryption cd:60:01:10:ec:36:ce:7f:27:01:8d:c2:d6:0f:64:63:6e:d2: 91:a3:1d:28:0a:4e:17:73:ee:a9:44:19:c4:45:c0:a4:75:50: 22:0f:5e:60:30:16:58:67:d5:34:03:45:5e:c9:e2:fb:93:48: b8:b3:f3:6c:9f:16:a7:94:bb:96:e6:df:36:23:d5:c1:d8:f4: e2:e2:f1:91:31:18:13:64:ea:c5:e6:ef:2b:42:69:ca:42:29: c9:7b:09:cb:9f:75:35:75:72:0e:fa:8c:d0:2d:a8:17:54:6c: 27:81:ac:a3:4c:84:d6:6e:e2:69:8a:d9:84:39:67:60:da:ff: f4:0f:41:c8:d2:94:0b:79:ec:a5:33:ef:f8:2b:17:79:51:5d: 5d:49:14:92:eb:da:bb:4c:4e:04:3e:4d:3a:3e:ce:78:59:66: 73:18:79:0f:53:4c:92:af:c1:f0:ab:53:f1:91:18:d4:5b:08: c4:60:a2:48:1b:17:fe:33:39:be:f5:bc:78:83:60:ef:31:1a: 48:bc:d0:cd:61:a7:43:84:ef:47:7d:5f:67:0b:8e:fb:c2:7c: 88:9a:c3:cc:7a:76:ac:72:1a:b2:bb:5a:84:4b:47:0c:61:82: 43:3d:47:3f:64:39:3a:fd:ed:a1:05:0e:1b:02:f5:ba:5f:72: da:af:06:b6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZB0bvSuIe8Me5mtRyPYBmbwlHTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUwMDQwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTM0ODkxMjliYmNiM2U3N2IwNDRkYzQ3ZmRhOWYwNThi OTljZWY5MzNjZDRhZjY1ZThhNTFjMDZiOGVmYWI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHkkzCx/xZxpTiyPFWN2eA5yo6epvnGZWMMxoV1wvo/o2i g5skoXxFCf6bF3DsvVbFCRtsFp+NCLKkj6r/2/PMpwQXphVP2uK6335NWjitJqpY bVUU7u3o/xuqwE9OF6Y2qAUqfdNHGbzwSseIxZPPbBDojX8O7r/mLqiDVonbsBfk K+NHEZK0biMavPfKZ/fAyW2UI75pOV6SJZjxSve3LuDLkfyIwwMR5i1who9PPBxW w6zZEcKfC+OZjbz6d5SdXz0Tc34oAIH0Lj3P5GkwKzYBcJxzSYNo7FIuQRGg8lJ/ AQ+wzujG4h2cjBPSYLeGcbRr9SYTQAhpqfD3laGVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyipn6mE5y78RJO9PDa1VENC3RP8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzZmZmNWNlLWUyNGMtNDdiMC04NzMzLWFhNDU3ODRlZTA2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4wzANBgkqhkiG9w0BAQsFAAOCAQEAzWABEOw2zn8nAY3C1g9kY27SkaMd KApOF3PuqUQZxEXApHVQIg9eYDAWWGfVNANFXsni+5NIuLPzbJ8Wp5S7lubfNiPV wdj04uLxkTEYE2TqxebvK0JpykIpyXsJy591NXVyDvqM0C2oF1RsJ4Gso0yE1m7i aYrZhDlnYNr/9A9ByNKUC3nspTPv+CsXeVFdXUkUkuvau0xOBD5NOj7OeFlmcxh5 D1NMkq/B8KtT8ZEY1FsIxGCiSBsX/jM5vvW8eINg7zEaSLzQzWGnQ4TvR31fZwuO +8J8iJrDzHp2rHIasrtahEtHDGGCQz1HP2Q5Ov3toQUOGwL1ul9y2q8Gtg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:02 2025 by rpki-client