$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2610f4a5-7879-4f37-b965-de13b67824c7.roa File: 2610f4a5-7879-4f37-b965-de13b67824c7.roa (raw, json) Hash identifier: WKLGxWEFXdol7ROF02cD6nFvnnQ681T+s7Whjc/Uq1Q= Subject key identifier: DB:3E:3F:C1:6A:E6:B0:A5:FD:B4:7A:42:61:7A:E9:03:2B:00:8B:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E8EE7387FE92E497148F33369DF992F92EE0478 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2610f4a5-7879-4f37-b965-de13b67824c7.roa Signing time: Wed 21 May 2025 23:23:30 +0000 ROA not before: Wed 21 May 2025 23:23:30 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:8e:e7:38:7f:e9:2e:49:71:48:f3:33:69:df:99:2f:92:ee:04:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 23:23:30 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=3aa081b29130418951ed9e8f88184a755a83fd3af99ac1674a614fca1159eb7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:40:fa:e6:ba:fe:2f:b7:a7:18:ea:b2:38: 98:6f:72:5e:aa:fd:1f:d3:a6:95:45:b5:e1:b0:a4: a8:fe:a7:00:03:9d:c3:d5:44:f8:22:04:e6:03:32: 6a:85:19:88:e6:35:0c:b9:1d:01:31:37:89:64:92: 2b:98:3c:45:b2:cd:5b:97:c1:8c:30:b4:5e:2c:f6: b0:60:4a:51:e1:26:7c:b4:87:81:6e:06:16:e8:b5: 9c:21:c2:c2:55:10:8c:5c:dd:20:7c:55:81:ff:7f: 17:17:24:64:e6:b3:4e:4c:57:1a:18:cf:85:e9:0e: f2:78:93:b6:37:07:76:88:8e:0e:ae:ea:b9:d5:26: 77:9b:2d:be:03:bf:05:d0:ae:c3:81:5b:ce:d9:51: 55:4b:7f:50:02:60:3d:57:57:1d:d3:2a:33:68:67: dc:31:7c:d8:e4:eb:61:4f:7a:13:a4:e5:49:b4:9f: 76:be:f0:d9:d4:6f:64:45:ce:66:88:27:9d:30:49: 13:ef:77:2a:07:c2:c1:27:c5:6e:14:2d:86:4f:5a: bf:7d:59:e5:3a:f5:63:b4:67:c7:53:2f:0e:d5:80: 44:80:00:2b:f2:b3:6a:75:5a:f9:7b:b4:0b:2f:22: c8:52:57:3c:58:58:28:89:db:b0:ce:a7:d8:1c:ec: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3E:3F:C1:6A:E6:B0:A5:FD:B4:7A:42:61:7A:E9:03:2B:00:8B:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2610f4a5-7879-4f37-b965-de13b67824c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.238.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:02:ce:49:ed:07:1d:e9:38:76:f4:27:1f:bb:e0:0a:81:73: 56:5a:95:ff:17:92:41:62:f1:fc:cf:b9:5e:22:53:63:34:e0: cb:1c:61:70:f9:3e:cb:12:56:1f:e7:30:a2:b7:00:be:37:23: ac:b2:ad:92:ce:ca:31:25:35:28:f5:2b:ad:1f:b0:e6:f5:1c: 75:c3:92:70:d0:d2:2f:9a:f9:4a:81:ca:f0:57:2c:88:f1:7c: 1a:cc:c3:7c:85:45:73:3f:8b:ab:ad:b0:27:6f:67:81:4e:b3: e2:21:c1:ca:da:d1:7b:ee:8e:06:4e:d8:94:f1:03:75:cc:08: 5c:14:da:d7:32:3d:11:61:2c:5d:cf:37:b6:39:f2:42:45:09: a1:13:95:52:c2:3a:c2:03:c8:ce:de:c6:0e:e9:51:cd:e8:db: 46:85:09:0c:eb:af:b7:4f:dc:ac:e8:46:40:9a:9f:e9:3d:09: cc:99:32:a8:c4:d9:13:f0:48:97:39:82:51:9c:0d:e7:9f:ac: 57:dd:8d:70:e5:b1:fe:9c:47:47:03:b6:cd:4b:93:8c:ee:bd: c6:a4:25:82:f6:93:43:0b:09:cb:5e:e5:96:d0:cd:96:38:bc: 73:b9:0b:7b:34:ba:18:64:b0:d0:c3:16:2f:55:6c:11:5b:0b: 67:98:2f:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbo7nOH/pLklxSPMzad+ZL5LuBHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMjMyMzMwWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWEwODFiMjkxMzA0MTg5NTFlZDllOGY4ODE4NGE3NTVh ODNmZDNhZjk5YWMxNjc0YTYxNGZjYTExNTllYjdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxwUD65rr+L7enGOqyOJhvcl6q/R/TppVFteGwpKj+pwAD ncPVRPgiBOYDMmqFGYjmNQy5HQExN4lkkiuYPEWyzVuXwYwwtF4s9rBgSlHhJny0 h4FuBhbotZwhwsJVEIxc3SB8VYH/fxcXJGTms05MVxoYz4XpDvJ4k7Y3B3aIjg6u 6rnVJnebLb4DvwXQrsOBW87ZUVVLf1ACYD1XVx3TKjNoZ9wxfNjk62FPehOk5Um0 n3a+8NnUb2RFzmaIJ50wSRPvdyoHwsEnxW4ULYZPWr99WeU69WO0Z8dTLw7VgESA ACvys2p1Wvl7tAsvIshSVzxYWCiJ27DOp9gc7GylAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2z4/wWrmsKX9tHpCYXrpAysAi1gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2MTBmNGE1LTc4NzktNGYzNy1iOTY1LWRlMTNiNjc4MjRjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFe4wDQYJKoZIhvcNAQELBQADggEBAIsCzkntBx3pOHb0Jx+74AqBc1Za lf8XkkFi8fzPuV4iU2M04MscYXD5PssSVh/nMKK3AL43I6yyrZLOyjElNSj1K60f sOb1HHXDknDQ0i+a+UqByvBXLIjxfBrMw3yFRXM/i6utsCdvZ4FOs+Ihwcra0Xvu jgZO2JTxA3XMCFwU2tcyPRFhLF3PN7Y58kJFCaETlVLCOsIDyM7exg7pUc3o20aF CQzrr7dP3KzoRkCan+k9CcyZMqjE2RPwSJc5glGcDeefrFfdjXDlsf6cR0cDts1L k4zuvcakJYL2k0MLCcte5ZbQzZY4vHO5C3s0uhhksNDDFi9VbBFbC2eYLyo= -----END CERTIFICATE-----Generated at Fri Jun 6 19:48:42 2025 by rpki-client