$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa File: 2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa (raw, json) Hash identifier: p91DBzUis4sjti4+HZJaNEQq+KEp3QGIWDc7qcZZ0XE= Subject key identifier: 11:A1:42:E1:24:CC:AF:A7:8D:6C:8B:FF:91:1C:6D:B6:56:40:CB:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30D86CF60718767A62BBB13A54CD64A392854417 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa Signing time: Sat 10 May 2025 00:21:25 +0000 ROA not before: Sat 10 May 2025 00:21:25 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.113.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d8:6c:f6:07:18:76:7a:62:bb:b1:3a:54:cd:64:a3:92:85:44:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:21:25 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=6cd01013609b17ef8dcce57534213f8558bf3289faba15b19cce972df854370d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:55:cf:b9:ff:b0:63:c2:cf:06:9e:47:92: 3b:e2:23:7c:2a:94:b1:ee:2b:97:2f:cc:cd:4c:91: da:ef:43:0b:4f:ea:48:1e:66:34:32:f3:0a:fc:34: 66:05:ba:2d:36:e9:cf:7c:da:c0:f7:1e:1c:8c:c1: ce:ee:d6:df:66:71:48:db:72:1e:50:2d:86:e6:9a: 86:01:9f:b1:4f:d2:9c:a0:8f:75:b6:c0:37:50:35: 78:17:c4:46:2c:64:16:6a:a3:97:ad:9f:07:23:aa: 27:60:75:02:3d:ed:57:7e:e5:e9:07:da:b6:09:dd: f7:1d:01:ed:13:e4:32:09:42:9a:a9:bf:ef:9a:5a: 76:b4:9b:93:9a:21:98:95:f8:46:05:51:9d:f1:2f: ed:89:e2:34:b5:14:68:45:e4:3d:dd:fe:1f:c3:21: 8a:fa:20:a6:8a:d1:74:5e:ce:0f:ff:d5:a1:05:6d: 46:b5:9e:21:d0:6a:44:5a:58:3a:bf:65:45:29:d2: 5a:3e:93:83:87:a7:6f:c7:d2:87:3b:ff:25:9a:04: 5a:78:16:04:a0:1e:5f:8f:3f:50:43:1b:2e:d9:2b: e9:19:d8:a9:c9:18:65:b2:17:0e:00:40:b2:b7:e9: 88:26:6f:01:d4:a4:d5:cd:0d:e1:e3:ef:56:20:44: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:42:E1:24:CC:AF:A7:8D:6C:8B:FF:91:1C:6D:B6:56:40:CB:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d9d7bd3-1ddb-48f0-b445-7c3d44fa09af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.113.192.0/19 Signature Algorithm: sha256WithRSAEncryption ac:55:66:63:cf:79:46:90:1d:90:04:14:0f:c7:b1:3a:58:6d: 27:7c:ae:8e:4a:b7:8b:48:1b:29:13:69:03:3b:c9:26:f4:bb: d1:03:bd:f5:11:3b:74:58:f9:ee:89:f0:a2:7a:7f:bc:fe:14: 52:e3:bb:c7:bd:24:02:f8:07:58:64:40:1c:49:b7:ae:79:b8: 0f:f0:cb:17:01:c0:d4:3b:f7:c1:1d:cd:72:a4:49:d8:ef:96: c8:3c:b5:40:d8:17:6a:f9:c4:c4:35:ff:12:aa:f3:b0:bd:da: e4:1c:72:f9:4a:73:ad:ef:33:fc:63:d5:0d:6c:73:c6:c7:21: ad:3d:ab:a7:70:a4:42:fa:6f:f6:f0:eb:4c:cf:83:03:a0:40: 7b:1a:2a:70:00:d8:5c:7c:cd:8b:ff:d4:e7:68:df:19:53:af: c0:43:53:1a:45:f5:f2:33:06:51:8e:07:7d:c9:e9:a0:c4:cd: c6:25:77:db:b1:80:d0:c1:ff:a7:a6:f3:f7:9b:a2:8e:39:c6: 24:73:1a:e5:cc:aa:a8:57:1f:60:20:39:22:46:a8:eb:c3:2c: a4:49:c2:69:d9:43:03:c6:97:e0:59:e5:b2:80:60:5f:33:d7: 16:b5:4b:70:1f:2f:e6:bd:01:8a:40:7d:53:ad:a7:c6:31:80: e2:e4:71:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMNhs9gcYdnpiu7E6VM1ko5KFRBcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAyMTI1WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2QwMTAxMzYwOWIxN2VmOGRjY2U1NzUzNDIxM2Y4NTU4 YmYzMjg5ZmFiYTE1YjE5Y2NlOTcyZGY4NTQzNzBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwQFXPuf+wY8LPBp5HkjviI3wqlLHuK5cvzM1MkdrvQwtP 6kgeZjQy8wr8NGYFui026c982sD3HhyMwc7u1t9mcUjbch5QLYbmmoYBn7FP0pyg j3W2wDdQNXgXxEYsZBZqo5etnwcjqidgdQI97Vd+5ekH2rYJ3fcdAe0T5DIJQpqp v++aWna0m5OaIZiV+EYFUZ3xL+2J4jS1FGhF5D3d/h/DIYr6IKaK0XRezg//1aEF bUa1niHQakRaWDq/ZUUp0lo+k4OHp2/H0oc7/yWaBFp4FgSgHl+PP1BDGy7ZK+kZ 2KnJGGWyFw4AQLK36YgmbwHUpNXNDeHj71YgRDexAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEaFC4STMr6eNbIv/kRxttlZAy5UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkOWQ3YmQzLTFkZGItNDhmMC1iNDQ1LTdjM2Q0NGZhMDlhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAccAwDQYJKoZIhvcNAQELBQADggEBAKxVZmPPeUaQHZAEFA/HsTpYbSd8 ro5Kt4tIGykTaQM7ySb0u9EDvfURO3RY+e6J8KJ6f7z+FFLju8e9JAL4B1hkQBxJ t655uA/wyxcBwNQ798EdzXKkSdjvlsg8tUDYF2r5xMQ1/xKq87C92uQccvlKc63v M/xj1Q1sc8bHIa09q6dwpEL6b/bw60zPgwOgQHsaKnAA2Fx8zYv/1Odo3xlTr8BD UxpF9fIzBlGOB33J6aDEzcYld9uxgNDB/6em8/eboo45xiRzGuXMqqhXH2AgOSJG qOvDLKRJwmnZQwPGl+BZ5bKAYF8z1xa1S3AfL+a9AYpAfVOtp8YxgOLkcVg= -----END CERTIFICATE-----Generated at Sun Jun 1 04:38:25 2025 by rpki-client