$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d163000-da92-4a82-87fe-0bc2263033d1.roa File: 2d163000-da92-4a82-87fe-0bc2263033d1.roa (raw, json) Hash identifier: pwDk36rz8UOtaboseykIblHn5GysmPQrxm2JtM6qcPA= Subject key identifier: 6D:C6:31:68:99:6C:2F:F6:CB:0E:2C:66:9D:EE:D8:FA:08:31:6C:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04BB70622D37D6316A9246CF102E96ADDD8C6A37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d163000-da92-4a82-87fe-0bc2263033d1.roa Signing time: Mon 12 May 2025 15:30:18 +0000 ROA not before: Mon 12 May 2025 15:30:18 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 78.12.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bb:70:62:2d:37:d6:31:6a:92:46:cf:10:2e:96:ad:dd:8c:6a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:30:18 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=16c46344669fbc43a3d57bc54cc09a4d19c123656efcd85dc4b083c7dc616589, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:da:88:4f:b2:66:a5:09:00:9e:fc:76:2b: 0a:de:6c:8d:51:cf:e0:a3:6b:20:47:22:60:75:cf: ca:cc:fa:93:cd:72:aa:97:bc:db:80:f7:e7:02:30: 6e:31:e0:79:8a:18:f0:4d:c5:9e:bb:76:c1:68:97: 2b:04:af:59:e8:84:ac:6c:22:7f:fb:1c:bd:0a:19: 66:34:2a:88:c3:b5:29:5c:c1:36:db:8c:d9:c9:92: cb:75:21:89:ef:95:fb:65:e4:d5:f8:c7:f0:8b:8a: cd:8a:b6:2d:cd:b5:17:3e:ef:ce:30:1f:0f:93:7c: 7a:6b:e9:f8:04:4d:00:77:cf:63:3c:87:bc:b6:15: 9d:da:33:03:a4:48:7f:b2:5f:69:5f:18:4d:ed:ee: 57:69:9d:fb:c5:31:b5:ac:bc:7a:56:ee:b7:46:f1: a0:0e:6c:06:20:01:73:cf:84:c7:10:a4:ce:37:95: 7e:61:11:12:4e:7f:5b:9e:78:67:1c:c0:20:8b:f9: ed:79:13:4d:07:e2:5e:2b:06:22:9f:02:40:dd:ab: 17:22:db:65:85:92:83:c1:28:2f:7f:05:c5:c6:58: 92:7d:e0:ac:46:56:95:88:a5:88:8c:ec:a5:5b:7b: ef:52:7f:ff:7b:e6:e4:a3:88:f8:cb:09:17:c3:82: dc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:31:68:99:6C:2F:F6:CB:0E:2C:66:9D:EE:D8:FA:08:31:6C:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d163000-da92-4a82-87fe-0bc2263033d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.12.64.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:15:14:e2:76:b4:e7:ef:3d:74:fb:b6:41:0c:74:70:11:9b: aa:c0:45:9e:05:b0:34:f0:bb:b2:9c:66:cc:4f:51:92:1e:f9: 3c:f8:26:d6:56:4c:2f:e1:3f:ba:a1:c7:98:2d:5f:6d:ce:8c: 37:76:9d:80:92:42:9f:51:e3:13:1f:a8:de:f7:69:4c:0c:38: 44:47:50:82:d0:9e:a2:e5:1c:0b:d5:59:d5:f2:78:3a:97:32: 26:6c:3f:8c:a0:b7:3c:b2:c6:3d:e6:24:05:61:dc:35:87:b4: bf:a3:b6:a9:d5:56:a6:ca:84:72:be:1a:f3:68:7d:74:b0:4c: d2:3e:f6:7d:8d:a9:07:77:5b:c0:bd:d9:12:c7:0f:0a:3a:1c: a6:b2:f3:47:b1:b4:5f:11:d9:a5:dc:3a:12:6d:7a:5f:ca:93: bc:e8:4c:f4:80:98:74:e9:7f:60:0b:f2:c5:89:91:53:4b:70: c4:4b:39:00:3e:6a:a9:f9:8c:86:7e:8c:83:f6:23:5b:8f:99: 92:f2:a9:60:9b:6d:85:5e:54:d0:ef:59:9c:31:36:a0:31:98: bc:4e:20:f8:ed:e7:0d:81:02:2e:83:24:90:5e:2b:9d:b9:ab: ae:4f:ad:22:67:ed:ae:b5:bf:dd:6e:d5:2e:bc:40:fd:35:b3: 8c:d8:70:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBLtwYi031jFqkkbPEC6Wrd2MajcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUzMDE4WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmM0NjM0NDY2OWZiYzQzYTNkNTdiYzU0Y2MwOWE0ZDE5 YzEyMzY1NmVmY2Q4NWRjNGIwODNjN2RjNjE2NTg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFbNqIT7JmpQkAnvx2KwrebI1Rz+CjayBHImB1z8rM+pPN cqqXvNuA9+cCMG4x4HmKGPBNxZ67dsFolysEr1nohKxsIn/7HL0KGWY0KojDtSlc wTbbjNnJkst1IYnvlftl5NX4x/CLis2Kti3NtRc+784wHw+TfHpr6fgETQB3z2M8 h7y2FZ3aMwOkSH+yX2lfGE3t7ldpnfvFMbWsvHpW7rdG8aAObAYgAXPPhMcQpM43 lX5hERJOf1ueeGccwCCL+e15E00H4l4rBiKfAkDdqxci22WFkoPBKC9/BcXGWJJ9 4KxGVpWIpYiM7KVbe+9Sf/975uSjiPjLCRfDgtwfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbcYxaJlsL/bLDixmne7Y+ggxbK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMTYzMDAwLWRhOTItNGE4Mi04N2ZlLTBiYzIyNjMwMzNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFODEAwDQYJKoZIhvcNAQELBQADggEBAE0VFOJ2tOfvPXT7tkEMdHARm6rA RZ4FsDTwu7KcZsxPUZIe+Tz4JtZWTC/hP7qhx5gtX23OjDd2nYCSQp9R4xMfqN73 aUwMOERHUILQnqLlHAvVWdXyeDqXMiZsP4ygtzyyxj3mJAVh3DWHtL+jtqnVVqbK hHK+GvNofXSwTNI+9n2NqQd3W8C92RLHDwo6HKay80extF8R2aXcOhJtel/Kk7zo TPSAmHTpf2AL8sWJkVNLcMRLOQA+aqn5jIZ+jIP2I1uPmZLyqWCbbYVeVNDvWZwx NqAxmLxOIPjt5w2BAi6DJJBeK525q65PrSJn7a61v91u1S68QP01s4zYcDE= -----END CERTIFICATE-----Generated at Mon Jun 2 16:51:49 2025 by rpki-client