$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa File: 2efb9bd0-475f-417d-8e72-8a50428e9da8.roa (raw, json) Hash identifier: JAA4+bAMgu5psgGfPEcLQH2CVL98ZVBXMzYqEDEJD0I= Subject key identifier: 3F:4B:62:7F:A5:54:81:39:C8:E4:3D:5B:CA:5D:E1:14:16:AE:B5:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 724ED1075F1DF6C79CF01B4246D1E5F45E68D306 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa Signing time: Sat 17 May 2025 00:00:23 +0000 ROA not before: Sat 17 May 2025 00:00:23 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4e:d1:07:5f:1d:f6:c7:9c:f0:1b:42:46:d1:e5:f4:5e:68:d3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:00:23 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=83c0280d285cfb1b30d392f3bdfd309f3672b1884bc6be5488658045b8b9d77e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:7c:64:67:5b:85:2e:2e:a9:26:d4:67:9c: d8:9d:91:3f:72:42:59:bf:34:5b:39:49:fe:86:77: b4:b8:74:97:1c:ce:72:cf:10:b8:0f:94:ce:fb:18: f2:25:dc:44:50:7f:2c:09:a5:71:2e:2e:e3:71:ac: 1e:05:5e:ac:25:25:68:ec:8b:d1:c4:80:0f:3b:ce: 96:75:38:51:57:f9:69:05:2e:ca:0a:78:52:09:30: b8:fe:57:fb:f3:75:99:f3:81:bc:b7:07:55:8a:f1: 70:ec:31:33:cd:f2:da:ed:94:29:49:0a:d7:00:7e: d4:c2:fa:29:09:cc:6e:cf:c3:06:8b:56:f0:48:61: 2e:5d:67:51:c1:cf:df:b4:76:86:f9:30:83:79:09: ab:6d:11:40:3b:a8:33:77:79:d7:96:c8:56:16:e1: d9:19:99:75:6b:f5:5b:46:94:90:f2:2d:fe:bb:2c: ca:d5:ce:57:92:8e:82:cb:11:6a:5a:98:60:95:bf: d3:a6:f8:45:e9:1f:e4:47:29:eb:43:fa:c2:15:26: f2:4b:4e:66:8c:db:3e:19:b8:0b:44:5c:d6:0e:3d: 16:c2:bb:99:73:4a:c5:b4:92:16:a9:13:6e:48:88: bf:3f:ac:83:ea:66:7c:77:3c:98:f5:f3:d6:15:bb: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4B:62:7F:A5:54:81:39:C8:E4:3D:5B:CA:5D:E1:14:16:AE:B5:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2efb9bd0-475f-417d-8e72-8a50428e9da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.52.0/22 Signature Algorithm: sha256WithRSAEncryption 80:bf:84:a2:c4:fe:33:ed:60:cf:9c:f8:78:d7:60:57:d8:4e: b1:41:ee:7d:7a:b6:3d:38:08:00:fb:7d:03:27:0a:09:20:c7: 15:13:b5:fb:24:99:b3:3b:b3:b0:38:1a:c4:d3:db:05:fa:b1: 52:c2:c3:62:cf:6c:dc:81:4b:0e:e0:42:35:7a:d6:42:24:e6: 2d:c3:2e:13:3d:9b:53:5d:fe:82:7d:75:ed:09:68:52:74:98: 23:8f:d8:d8:72:99:e2:01:85:3b:17:68:5b:8b:a4:9c:9d:30: 35:71:a9:0e:79:0f:ef:fe:3c:8e:31:6b:9c:30:e9:69:c1:68: c2:89:76:ef:10:6b:f7:c7:b0:e9:fc:ac:52:dc:c3:48:77:59: 08:60:fc:35:ee:1a:cf:3c:3f:9c:f6:1b:53:fa:8e:d8:9b:71: ba:6d:b5:fa:b6:01:87:b5:5f:d4:51:9e:e8:5c:48:9d:99:96: 46:80:93:66:59:f7:9b:b6:8d:a1:d8:ce:2c:e7:ab:5a:2e:a7: 6e:30:28:67:9f:a8:61:fc:13:88:25:b6:c8:f2:44:d2:19:a2: 18:2a:a3:37:b7:a2:b2:06:ab:39:b5:ad:e8:33:84:6b:ab:47: 39:ce:12:47:65:8b:9a:96:aa:c2:cf:9a:06:1b:b0:f5:0f:f9: 9e:78:e1:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUck7RB18d9sec8BtCRtHl9F5o0wYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAwMDIzWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2MwMjgwZDI4NWNmYjFiMzBkMzkyZjNiZGZkMzA5ZjM2 NzJiMTg4NGJjNmJlNTQ4ODY1ODA0NWI4YjlkNzdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvUnxkZ1uFLi6pJtRnnNidkT9yQlm/NFs5Sf6Gd7S4dJcc znLPELgPlM77GPIl3ERQfywJpXEuLuNxrB4FXqwlJWjsi9HEgA87zpZ1OFFX+WkF LsoKeFIJMLj+V/vzdZnzgby3B1WK8XDsMTPN8trtlClJCtcAftTC+ikJzG7PwwaL VvBIYS5dZ1HBz9+0dob5MIN5CattEUA7qDN3edeWyFYW4dkZmXVr9VtGlJDyLf67 LMrVzleSjoLLEWpamGCVv9Om+EXpH+RHKetD+sIVJvJLTmaM2z4ZuAtEXNYOPRbC u5lzSsW0khapE25IiL8/rIPqZnx3PJj189YVu1CDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP0tif6VUgTnI5D1byl3hFBautdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlZmI5YmQwLTQ3NWYtNDE3ZC04ZTcyLThhNTA0MjhlOWRhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBszQwDQYJKoZIhvcNAQELBQADggEBAIC/hKLE/jPtYM+c+HjXYFfYTrFB 7n16tj04CAD7fQMnCgkgxxUTtfskmbM7s7A4GsTT2wX6sVLCw2LPbNyBSw7gQjV6 1kIk5i3DLhM9m1Nd/oJ9de0JaFJ0mCOP2NhymeIBhTsXaFuLpJydMDVxqQ55D+/+ PI4xa5ww6WnBaMKJdu8Qa/fHsOn8rFLcw0h3WQhg/DXuGs88P5z2G1P6jtibcbpt tfq2AYe1X9RRnuhcSJ2ZlkaAk2ZZ95u2jaHYziznq1oup24wKGefqGH8E4gltsjy RNIZohgqoze3orIGqzm1regzhGurRznOEkdli5qWqsLPmgYbsPUP+Z544S4= -----END CERTIFICATE-----Generated at Sun Jun 1 04:51:34 2025 by rpki-client