$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2651bd32-be0e-47db-b5f3-aa5e30add0da.roa File: 2651bd32-be0e-47db-b5f3-aa5e30add0da.roa (raw, json) Hash identifier: 2Hy5YT0e23UljyVktqSAg0ukDphr7B4IOOWO/KfnM0E= Subject key identifier: 4A:28:06:F4:8F:75:E8:E1:36:3A:F3:FB:6A:3A:D1:8A:8E:E8:AE:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45DE4CA9DA6C198A8361036987E25B160723513F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2651bd32-be0e-47db-b5f3-aa5e30add0da.roa Signing time: Sat 24 May 2025 00:01:12 +0000 ROA not before: Sat 24 May 2025 00:01:12 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.143.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:de:4c:a9:da:6c:19:8a:83:61:03:69:87:e2:5b:16:07:23:51:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:01:12 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=40e2f4b8eabfb989dfcbc227e482749230f5666a11eddfd4af7cec6d41bdf02f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:b7:13:a6:9c:86:2f:fc:30:89:10:b4:cf: 6d:3a:3f:f6:a5:a2:37:69:1d:a0:3a:ec:f5:ac:d6: 47:e5:2a:1d:ce:a5:ff:63:6b:cf:b7:d5:64:ca:80: e0:bc:9d:42:07:13:84:48:e5:6b:91:4e:63:2b:7d: 92:d8:17:46:f5:c6:ae:51:20:45:74:a5:c9:3e:ee: 3b:dd:bd:fa:ab:03:1e:0d:d7:98:c6:ed:c6:b2:a2: d0:9e:b8:d2:f2:81:a4:67:89:83:f6:3d:88:b0:b5: ca:bd:7e:42:db:ea:87:dc:9c:36:a7:5c:28:e6:e8: 97:d4:ba:2c:70:27:e6:ac:02:96:10:78:09:5a:b7: 8a:29:15:11:03:e4:50:2c:41:78:18:ab:01:f7:81: fb:e3:99:ed:be:a8:e4:27:4b:0c:51:74:71:c6:07: ab:06:75:78:51:ae:52:1d:df:5f:d5:d0:0c:e2:68: c8:5f:7d:04:af:b2:74:8f:94:e2:4b:d8:b3:f7:7c: da:b1:1b:30:13:65:ec:33:3e:c3:df:50:f1:ec:47: 01:bc:43:07:ad:eb:9c:bc:86:30:69:f8:e0:81:3c: 2e:17:24:28:10:ea:7e:19:1d:25:85:fb:d4:a4:a7: 6a:59:94:a4:01:a7:d4:64:16:25:17:81:96:2a:b2: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:06:F4:8F:75:E8:E1:36:3A:F3:FB:6A:3A:D1:8A:8E:E8:AE:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2651bd32-be0e-47db-b5f3-aa5e30add0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.143.0.0/17 Signature Algorithm: sha256WithRSAEncryption 85:41:60:a1:e9:77:2a:40:39:97:0b:36:dd:e1:d1:d1:9e:54: 6d:13:bf:8b:22:32:a4:76:dc:e6:e2:53:41:96:79:50:ae:e3: 2d:36:a6:1d:b5:65:b8:a3:46:22:84:c6:7a:6a:7b:48:71:16: e1:99:16:63:e7:34:08:25:ff:7e:df:be:7b:ee:84:e0:b7:3c: 86:8d:0b:cc:d3:d2:2c:f5:29:c5:5d:86:6e:c4:34:b1:c7:a6: 18:b8:a3:08:ff:97:37:ae:08:8b:43:24:7a:d7:73:b0:a6:d2: 89:8f:29:62:a5:47:ee:0f:71:74:01:19:f4:d9:6c:e3:81:c6: 87:f7:88:f9:fe:f1:ed:9d:3c:cb:05:d7:2d:6a:df:cf:9a:3b: ae:15:09:5c:92:89:80:38:1d:78:61:2b:a1:f7:1a:5d:59:f8: 4a:d6:7d:25:54:ca:e8:17:9b:1a:81:c4:c0:e5:be:5e:f1:56: 17:94:e5:25:73:94:13:ae:16:cb:c4:bf:ef:ed:73:80:32:31: e6:c2:91:80:cc:9c:40:bf:ee:54:08:58:33:9d:15:90:ab:b6: 97:7a:e1:fc:1b:ae:63:e5:10:c8:a0:d0:aa:38:40:8a:a3:59: 86:cb:56:32:9f:d6:8b:a8:ec:c6:39:0e:64:64:67:56:8b:15: b4:0f:67:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURd5MqdpsGYqDYQNph+JbFgcjUT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAwMTEyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGUyZjRiOGVhYmZiOTg5ZGZjYmMyMjdlNDgyNzQ5MjMw ZjU2NjZhMTFlZGRmZDRhZjdjZWM2ZDQxYmRmMDJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgibcTppyGL/wwiRC0z206P/alojdpHaA67PWs1kflKh3O pf9ja8+31WTKgOC8nUIHE4RI5WuRTmMrfZLYF0b1xq5RIEV0pck+7jvdvfqrAx4N 15jG7cayotCeuNLygaRniYP2PYiwtcq9fkLb6ofcnDanXCjm6JfUuixwJ+asApYQ eAlat4opFRED5FAsQXgYqwH3gfvjme2+qOQnSwxRdHHGB6sGdXhRrlId31/V0Azi aMhffQSvsnSPlOJL2LP3fNqxGzATZewzPsPfUPHsRwG8Qwet65y8hjBp+OCBPC4X JCgQ6n4ZHSWF+9Skp2pZlKQBp9RkFiUXgZYqsqvpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSigG9I916OE2OvP7ajrRio7orvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2NTFiZDMyLWJlMGUtNDdkYi1iNWYzLWFhNWUzMGFkZDBkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeIjwAwDQYJKoZIhvcNAQELBQADggEBAIVBYKHpdypAOZcLNt3h0dGeVG0T v4siMqR23ObiU0GWeVCu4y02ph21ZbijRiKExnpqe0hxFuGZFmPnNAgl/37fvnvu hOC3PIaNC8zT0iz1KcVdhm7ENLHHphi4owj/lzeuCItDJHrXc7Cm0omPKWKlR+4P cXQBGfTZbOOBxof3iPn+8e2dPMsF1y1q38+aO64VCVySiYA4HXhhK6H3Gl1Z+ErW fSVUyugXmxqBxMDlvl7xVheU5SVzlBOuFsvEv+/tc4AyMebCkYDMnEC/7lQIWDOd FZCrtpd64fwbrmPlEMig0Ko4QIqjWYbLVjKf1ouo7MY5DmRkZ1aLFbQPZ2o= -----END CERTIFICATE-----Generated at Sun Jun 1 04:35:34 2025 by rpki-client