$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa File: 2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa (raw, json) Hash identifier: CKKh4bUIchDcZgQw4i2z+Yod+bVqTZV2S2n4sk/k8ew= Subject key identifier: 76:51:5E:A6:7D:0A:35:95:C7:61:46:B8:65:75:66:C6:0D:F2:E8:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6400C904F68CD37E078497090D9265C6B5716200 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa Signing time: Tue 27 May 2025 00:01:50 +0000 ROA not before: Tue 27 May 2025 00:01:50 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 128.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:00:c9:04:f6:8c:d3:7e:07:84:97:09:0d:92:65:c6:b5:71:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:01:50 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=9fb02ac3b34a44dd362de7c95c5c0cde4679a68d81dd9b5537b1759a52873058, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:43:be:55:2c:75:ae:bf:e2:19:c7:f0:06: b1:6d:1e:0b:1d:71:d7:b1:b4:c4:db:c1:19:c8:55: 42:c7:95:c2:67:20:9c:8c:2c:74:ad:46:3e:97:86: 91:3c:cb:45:74:6c:b9:db:d6:4f:67:b9:9e:08:5e: 94:94:d5:df:cf:8b:ad:b4:00:e8:d3:36:3a:60:08: b7:23:89:0e:0c:3b:10:db:2d:43:65:69:9c:ce:ae: 8b:b4:c6:4d:c3:3b:e7:bc:ae:c3:03:a7:a4:af:40: 74:49:7c:8a:a1:f6:73:9a:8b:6a:78:44:e2:01:43: 6f:9c:ab:f1:f9:73:67:d6:c5:32:8b:53:e1:72:04: 71:9e:65:be:d5:9a:92:d6:17:43:fa:c9:36:e3:9b: a5:9a:28:95:0d:67:b0:ae:16:a4:a8:a1:20:14:af: 5b:79:54:ff:a7:ce:23:13:20:c6:b8:54:bd:73:7d: f5:bc:c5:8e:ac:3d:4f:61:84:d6:00:e8:1c:ed:01: e7:da:b6:d6:4b:e8:6d:aa:79:e1:e7:9e:a4:08:94: 85:0f:6e:1e:49:3b:71:33:4e:a8:e6:b5:47:ea:34: e0:10:47:e7:b6:88:d3:4e:79:1a:64:92:6f:67:aa: ca:62:a6:c9:3a:0a:a9:d9:31:91:a8:d6:12:56:3e: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:5E:A6:7D:0A:35:95:C7:61:46:B8:65:75:66:C6:0D:F2:E8:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a21eb4c-cfd4-4ad0-9e47-448a89527d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption bf:01:f3:10:92:36:85:ce:28:be:42:4e:d0:c6:40:43:03:71: d1:e1:59:f9:67:27:21:35:50:1c:7c:02:e3:eb:43:e5:a1:2e: 86:3e:bb:49:9d:73:a5:47:46:54:dd:63:f8:a7:bf:4e:46:35: 2f:64:7b:cd:19:6b:9d:44:eb:26:f5:3a:ac:01:f0:11:ac:ce: 8a:b3:a0:39:cd:e4:aa:92:45:5d:dc:f6:15:30:27:08:5e:8a: 41:48:49:88:6e:e8:8f:76:9d:af:23:6a:15:5b:da:eb:16:70: 3c:d8:d4:1c:fd:65:37:b7:12:9f:be:b2:aa:e9:03:b8:40:86: 9e:9e:f6:40:59:5a:92:f2:dd:5d:ae:2e:3c:02:eb:53:d0:c9: 39:12:70:2b:04:1a:2a:0a:80:16:7b:db:a7:3f:13:6d:04:5f: 4f:2c:0f:50:eb:51:92:c8:5a:da:2e:6e:3c:1c:b6:8d:e2:4f: 68:71:eb:2c:4d:19:12:d0:62:89:a5:91:5d:34:29:56:93:2d: d9:53:a6:38:a4:95:8b:55:fc:82:25:ec:7a:06:e7:10:d0:4d: 7e:97:c4:83:3e:4d:68:70:bd:60:bc:18:4a:91:24:c8:a6:bd: 3f:1a:ae:25:89:a0:a5:16:86:7e:2b:0b:6a:32:86:5d:87:fb: bd:23:4b:42 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZADJBPaM034HhJcJDZJlxrVxYgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAwMTUwWhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmIwMmFjM2IzNGE0NGRkMzYyZGU3Yzk1YzVjMGNkZTQ2 NzlhNjhkODFkZDliNTUzN2IxNzU5YTUyODczMDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY/kO+VSx1rr/iGcfwBrFtHgsdcdextMTbwRnIVULHlcJn IJyMLHStRj6XhpE8y0V0bLnb1k9nuZ4IXpSU1d/Pi620AOjTNjpgCLcjiQ4MOxDb LUNlaZzOrou0xk3DO+e8rsMDp6SvQHRJfIqh9nOai2p4ROIBQ2+cq/H5c2fWxTKL U+FyBHGeZb7VmpLWF0P6yTbjm6WaKJUNZ7CuFqSooSAUr1t5VP+nziMTIMa4VL1z ffW8xY6sPU9hhNYA6BztAefattZL6G2qeeHnnqQIlIUPbh5JO3EzTqjmtUfqNOAQ R+e2iNNOeRpkkm9nqspipsk6CqnZMZGo1hJWPtZXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdlFepn0KNZXHYUa4ZXVmxg3y6MgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMjFlYjRjLWNmZDQtNGFkMC05ZTQ3LTQ0OGE4OTUyN2QwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCAUTANBgkqhkiG9w0BAQsFAAOCAQEAvwHzEJI2hc4ovkJO0MZAQwNx0eFZ +WcnITVQHHwC4+tD5aEuhj67SZ1zpUdGVN1j+Ke/TkY1L2R7zRlrnUTrJvU6rAHw EazOirOgOc3kqpJFXdz2FTAnCF6KQUhJiG7oj3adryNqFVva6xZwPNjUHP1lN7cS n76yqukDuECGnp72QFlakvLdXa4uPALrU9DJORJwKwQaKgqAFnvbpz8TbQRfTywP UOtRksha2i5uPBy2jeJPaHHrLE0ZEtBiiaWRXTQpVpMt2VOmOKSVi1X8giXsegbn ENBNfpfEgz5NaHC9YLwYSpEkyKa9PxquJYmgpRaGfisLajKGXYf7vSNLQg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:24:16 2025 by rpki-client