$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c90bc2f-3486-456a-9d24-2194e5e63b08.roa File: 1c90bc2f-3486-456a-9d24-2194e5e63b08.roa (raw, json) Hash identifier: PQop/c0IpB5SEBRbkaMzfF3uZCAhkEvhcAEUQOb2gr4= Subject key identifier: 9B:D9:6A:6C:69:4F:6F:F3:DE:87:28:88:C2:70:AE:9C:12:64:E0:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DC281D9130165D79FADE225CA09CF402580791D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c90bc2f-3486-456a-9d24-2194e5e63b08.roa Signing time: Wed 28 May 2025 00:00:44 +0000 ROA not before: Wed 28 May 2025 00:00:44 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 165.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c2:81:d9:13:01:65:d7:9f:ad:e2:25:ca:09:cf:40:25:80:79:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:00:44 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=7cf69499dc23f9096484a2582513ed4ee3c8f1d280b8a963c0cfd96cc2efe693, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:5b:d1:5b:13:fc:ce:eb:08:df:64:eb:59: ea:56:70:31:3f:8e:f0:ea:91:2d:19:c8:4c:24:8c: db:02:2f:f0:3c:13:eb:2c:0a:5c:63:a1:79:7c:11: 65:44:9d:26:d3:cf:14:2d:35:c2:d3:a2:93:4c:59: e4:8e:d3:cd:1f:21:d9:12:b0:0b:ed:28:e4:ef:14: 22:e3:e6:36:75:44:85:24:06:24:bd:fb:9a:65:f3: 97:5d:d4:04:ed:dc:32:77:59:b1:56:12:71:4d:ff: 7d:f3:64:e0:6e:f2:69:bc:19:17:6e:f0:29:7b:59: 98:45:6a:f9:a4:9f:de:44:64:d2:4c:31:5e:01:7b: 93:48:e4:fd:88:eb:17:cb:bc:7c:aa:c0:f3:ef:c2: 26:a7:08:be:65:ba:bd:b3:09:9a:f8:04:95:50:aa: 5a:0b:8e:80:be:f7:5a:77:ef:03:c3:99:84:3a:a3: b6:97:55:c6:f2:5a:61:79:3e:69:da:43:a0:11:04: 0d:19:4b:32:94:cb:99:a4:24:99:58:d4:f2:f8:95: 5b:56:30:6b:98:d9:80:6f:93:3d:f6:91:91:95:7d: f2:85:0f:17:80:cc:24:00:62:04:93:73:4a:e2:5c: b9:28:81:4a:68:30:a6:cb:2b:72:81:79:a6:ba:c0: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:6A:6C:69:4F:6F:F3:DE:87:28:88:C2:70:AE:9C:12:64:E0:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c90bc2f-3486-456a-9d24-2194e5e63b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:32:c5:fd:1b:13:8c:35:43:a8:ba:21:1d:8c:54:3d:d4:80: 41:2d:90:2c:8a:3a:14:a9:bb:0c:bc:a8:0b:50:91:83:5f:31: a2:59:8c:25:3d:5f:74:36:0d:62:24:02:60:a6:7a:b1:22:43: 23:db:20:cf:98:d5:1c:d8:f4:0b:b4:f6:fd:3c:a7:b0:ea:ab: 00:22:b0:0a:21:95:5c:dd:16:45:23:fc:31:f4:00:8e:73:d8: ff:91:f9:1a:88:91:79:28:c6:5a:81:6b:18:45:f9:da:21:cc: 72:45:ed:65:49:e2:26:8e:79:de:6f:69:08:94:7b:4c:2b:9d: 2d:7a:92:b8:23:a8:fa:65:c5:f6:0e:4a:19:94:c8:57:7e:8c: 21:d4:72:0a:20:30:59:3d:25:ce:8a:7e:c6:cf:e1:0f:7b:7c: 5d:f4:cb:35:34:08:bc:a9:70:d2:db:1f:d7:75:96:0a:7f:65: 81:20:26:99:34:f8:e0:26:cc:ef:86:89:8d:4a:bc:a1:4c:71: c3:fe:81:0c:8b:fa:83:e9:b3:15:a2:14:f3:4b:2a:94:1f:ea: 4d:96:26:c6:ce:e3:c7:59:d0:99:37:59:ec:75:48:00:12:0b: 3a:81:8c:80:80:d5:b1:e7:1a:98:08:19:56:2b:2f:fb:91:9e: b8:5d:23:23 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPcKB2RMBZdefreIlygnPQCWAeR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAwMDQ0WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2Y2OTQ5OWRjMjNmOTA5NjQ4NGEyNTgyNTEzZWQ0ZWUz YzhmMWQyODBiOGE5NjNjMGNmZDk2Y2MyZWZlNjkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6WFvRWxP8zusI32TrWepWcDE/jvDqkS0ZyEwkjNsCL/A8 E+ssClxjoXl8EWVEnSbTzxQtNcLTopNMWeSO080fIdkSsAvtKOTvFCLj5jZ1RIUk BiS9+5pl85dd1ATt3DJ3WbFWEnFN/33zZOBu8mm8GRdu8Cl7WZhFavmkn95EZNJM MV4Be5NI5P2I6xfLvHyqwPPvwianCL5lur2zCZr4BJVQqloLjoC+91p37wPDmYQ6 o7aXVcbyWmF5PmnaQ6ARBA0ZSzKUy5mkJJlY1PL4lVtWMGuY2YBvkz32kZGVffKF DxeAzCQAYgSTc0riXLkogUpoMKbLK3KBeaa6wErpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm9lqbGlPb/PehyiIwnCunBJk4D0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjOTBiYzJmLTM0ODYtNDU2YS05ZDI0LTIxOTRlNWU2M2IwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwClUTANBgkqhkiG9w0BAQsFAAOCAQEAPzLF/RsTjDVDqLohHYxUPdSAQS2Q LIo6FKm7DLyoC1CRg18xolmMJT1fdDYNYiQCYKZ6sSJDI9sgz5jVHNj0C7T2/Tyn sOqrACKwCiGVXN0WRSP8MfQAjnPY/5H5GoiReSjGWoFrGEX52iHMckXtZUniJo55 3m9pCJR7TCudLXqSuCOo+mXF9g5KGZTIV36MIdRyCiAwWT0lzop+xs/hD3t8XfTL NTQIvKlw0tsf13WWCn9lgSAmmTT44CbM74aJjUq8oUxxw/6BDIv6g+mzFaIU80sq lB/qTZYmxs7jx1nQmTdZ7HVIABILOoGMgIDVsecamAgZVisv+5GeuF0jIw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:49 2025 by rpki-client