$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/216068bf-4da8-436e-911a-fb5943fbff09.roa File: 216068bf-4da8-436e-911a-fb5943fbff09.roa (raw, json) Hash identifier: oZgN6/r+W8ZNH6KV0T65Ru4HsG73HoJhoyG8/IzpnKo= Subject key identifier: E5:C3:B3:4C:D2:C6:0D:F8:1D:03:B3:C0:B8:E6:0C:BF:E6:AF:CF:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17604CDDD32F17D336D40E5C740805EBC3106F07 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/216068bf-4da8-436e-911a-fb5943fbff09.roa Signing time: Wed 21 May 2025 00:10:54 +0000 ROA not before: Wed 21 May 2025 00:10:54 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 78.14.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:60:4c:dd:d3:2f:17:d3:36:d4:0e:5c:74:08:05:eb:c3:10:6f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:10:54 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=0de5c6a1a98ba610bd741d5e94d5ffcc0d8c8ad865798075a8dbd38d3311aeb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:e0:2d:45:65:3c:72:e4:b3:85:d4:bb:f9: 5e:80:88:ce:81:ab:c5:fa:15:bd:ab:42:cf:e5:eb: c6:a1:05:a4:bc:e3:e1:ca:24:9c:aa:e7:e8:8b:64: 23:14:5a:c2:d7:34:81:e6:1c:88:77:94:06:14:f8: ef:72:07:63:ec:32:f9:82:30:bc:8e:1c:7b:57:26: c5:ca:bd:5b:7c:97:52:94:b4:de:18:e8:2d:b9:59: ae:5f:7c:e7:74:41:5a:66:7c:10:3d:fb:ec:3b:b9: cd:fa:5b:d2:53:fc:d9:e0:3b:74:2a:b1:f1:8f:84: bc:5b:bf:bb:ed:a5:e2:6e:6d:04:20:2c:24:06:68: 74:ef:46:29:b6:1a:44:5d:a1:44:95:52:80:74:80: ed:ad:95:af:7d:1b:9a:f9:4c:65:74:38:a9:56:f7: 4a:82:ac:de:46:a1:84:fc:6b:94:a8:9c:f6:52:65: 63:44:5c:80:d7:b7:95:90:60:2e:54:2f:6a:fb:1f: 1a:87:96:77:ba:e6:cd:d6:b9:18:40:c8:5c:ee:c4: bd:fe:d2:6c:fe:58:40:7d:b4:56:6f:81:62:e0:fe: c2:f4:8b:39:bf:5c:b8:37:fc:a6:2a:46:01:36:77: ea:cf:60:77:68:d1:44:fe:1a:9c:a4:8a:21:81:5d: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:B3:4C:D2:C6:0D:F8:1D:03:B3:C0:B8:E6:0C:BF:E6:AF:CF:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/216068bf-4da8-436e-911a-fb5943fbff09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.14.0.0/15 Signature Algorithm: sha256WithRSAEncryption 00:ba:9e:25:e7:82:de:5e:b9:ac:6e:bd:f6:e7:79:c1:db:6f: 41:ba:43:b4:64:b4:e4:47:c1:fe:63:3e:c8:75:4d:a2:95:2b: 4a:c4:a6:7b:69:85:c1:81:93:a9:0f:9e:8a:6a:70:60:76:9c: e4:fb:a5:3c:6d:8a:4c:d1:f8:6c:41:4c:30:5e:7b:6a:b2:f6: e1:ed:0f:56:17:25:a1:76:6d:65:51:d6:6b:7f:fa:d7:1f:67: d5:6d:eb:30:57:c9:c4:f5:b9:6d:1b:a5:e5:b2:4f:66:28:d1: 50:4d:fa:ca:fc:bf:53:24:d6:0d:bd:b9:f3:17:18:a3:db:99: 7a:9e:58:94:a1:e5:a2:54:ae:d3:13:66:65:60:87:69:4c:4e: c7:0c:11:be:69:51:6c:12:d5:d5:34:a0:c5:50:1f:d6:6a:53: 5a:7d:8e:7c:f4:d5:1f:cd:e9:b7:bf:fa:2c:38:f7:0a:c4:b1: 2e:26:e1:39:0e:4c:fd:84:17:2d:ed:ed:53:23:25:10:05:dc: 3b:6b:70:1d:ff:55:cf:57:0a:dd:a0:af:b4:91:76:f2:00:12: 9d:af:da:2c:5f:ea:64:a1:e6:71:47:0a:79:27:3e:ef:67:a5: ec:2b:42:ec:69:66:5d:c2:0f:bb:6a:f5:42:c8:fb:94:da:6b: b8:84:86:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUF2BM3dMvF9M21A5cdAgF68MQbwcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAxMDU0WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGU1YzZhMWE5OGJhNjEwYmQ3NDFkNWU5NGQ1ZmZjYzBk OGM4YWQ4NjU3OTgwNzVhOGRiZDM4ZDMzMTFhZWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv0OAtRWU8cuSzhdS7+V6AiM6Bq8X6Fb2rQs/l68ahBaS8 4+HKJJyq5+iLZCMUWsLXNIHmHIh3lAYU+O9yB2PsMvmCMLyOHHtXJsXKvVt8l1KU tN4Y6C25Wa5ffOd0QVpmfBA9++w7uc36W9JT/NngO3QqsfGPhLxbv7vtpeJubQQg LCQGaHTvRim2GkRdoUSVUoB0gO2tla99G5r5TGV0OKlW90qCrN5GoYT8a5SonPZS ZWNEXIDXt5WQYC5UL2r7HxqHlne65s3WuRhAyFzuxL3+0mz+WEB9tFZvgWLg/sL0 izm/XLg3/KYqRgE2d+rPYHdo0UT+GpykiiGBXbIzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5cOzTNLGDfgdA7PAuOYMv+avz1wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxNjA2OGJmLTRkYTgtNDM2ZS05MTFhLWZiNTk0M2ZiZmYwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFODjANBgkqhkiG9w0BAQsFAAOCAQEAALqeJeeC3l65rG699ud5wdtvQbpD tGS05EfB/mM+yHVNopUrSsSme2mFwYGTqQ+eimpwYHac5PulPG2KTNH4bEFMMF57 arL24e0PVhcloXZtZVHWa3/61x9n1W3rMFfJxPW5bRul5bJPZijRUE36yvy/UyTW Db258xcYo9uZep5YlKHlolSu0xNmZWCHaUxOxwwRvmlRbBLV1TSgxVAf1mpTWn2O fPTVH83pt7/6LDj3CsSxLibhOQ5M/YQXLe3tUyMlEAXcO2twHf9Vz1cK3aCvtJF2 8gASna/aLF/qZKHmcUcKeSc+72el7CtC7GlmXcIPu2r1Qsj7lNpruISGmw== -----END CERTIFICATE-----Generated at Sun Jun 1 05:23:24 2025 by rpki-client