$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa File: 2f243fe6-341e-47d0-b6c0-16d041ff88be.roa (raw, json) Hash identifier: Nh/K7+U067udOffFFrz9RE+f5OqgW177PZNdDExbvlM= Subject key identifier: 0F:07:F5:9E:15:BB:86:37:2D:89:B3:62:68:C0:C5:76:5E:72:56:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EE551F7C12A73731DED538F39781478084832D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa Signing time: Wed 21 May 2025 21:06:46 +0000 ROA not before: Wed 21 May 2025 21:06:46 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e5:51:f7:c1:2a:73:73:1d:ed:53:8f:39:78:14:78:08:48:32:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 21:06:46 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=a63e500b1eb22e1bf80eb01ad9d63245edd8d158219040466ade562edaca09a1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:e0:b8:eb:cc:1d:70:02:16:40:55:85:2c: d3:6b:7d:ef:da:4a:a2:cf:39:53:e9:12:bc:86:37: 0e:62:eb:68:be:f5:00:ac:f0:b1:0e:0b:53:18:f8: 98:b5:d3:3b:eb:64:44:7b:f8:20:20:57:8f:45:02: a6:e4:ed:f2:1a:d3:8b:ea:cf:6e:b3:c7:1e:51:74: 8e:e5:6a:56:4a:ef:e6:b2:88:ec:e7:97:47:a1:07: 27:86:1c:f6:94:77:ee:ee:5a:34:e4:e6:15:ee:76: 1b:70:b6:a9:f3:1b:1c:11:88:88:a9:cc:7a:99:a5: 11:79:82:41:8a:e6:d6:1e:93:ae:32:ae:12:6d:f8: c7:de:b2:47:e9:6c:bf:1b:be:84:6b:68:27:38:03: b2:ca:b0:90:52:a9:7a:bb:74:82:1d:15:d4:5f:a0: 3d:16:65:97:b6:cb:76:51:a1:40:29:f6:88:8a:e4: 78:27:b9:88:45:32:d0:9b:36:02:1b:51:63:7c:fa: b5:f2:a1:c0:77:74:5c:6d:ac:02:47:9b:71:7b:97: b9:5e:49:96:77:79:70:a4:97:bb:fc:d2:4f:24:5b: 06:11:93:d7:6a:a1:f9:e8:61:a9:fa:7f:84:9b:71: 87:ae:71:e9:10:2c:e7:df:9e:9f:97:3c:bb:16:c8: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:F5:9E:15:BB:86:37:2D:89:B3:62:68:C0:C5:76:5E:72:56:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f243fe6-341e-47d0-b6c0-16d041ff88be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.163.0/24 Signature Algorithm: sha256WithRSAEncryption 44:fe:4e:3e:9c:9a:14:6c:e7:60:02:b5:13:5a:e2:d4:a7:f5: f2:98:5b:34:e5:b7:18:ca:64:39:b3:d4:c7:2d:71:5d:fc:21: a1:9e:c2:70:c4:be:f5:25:bf:5c:80:13:ad:7c:c8:e4:56:29: b5:71:23:9a:e9:94:3c:52:6b:66:a7:05:2a:6e:42:2c:be:76: c8:fd:31:46:83:d9:90:a3:5f:68:7d:30:5c:97:90:68:51:73: 43:e2:8d:30:f3:14:18:09:7a:f4:5c:cc:3f:59:97:9f:27:8f: b2:36:93:49:36:78:9f:7b:fe:84:6f:9a:64:d9:ad:dc:83:12: b9:3a:28:8b:c7:c7:d8:88:40:4f:42:51:65:3f:16:03:9d:55: 98:7f:e7:c9:b6:18:09:52:6f:cd:dd:ac:29:d0:a8:c4:6b:c5: 26:c7:ea:11:e7:92:e5:ec:d3:f9:16:d2:75:18:a7:0e:f3:72: 0c:41:1b:49:1a:6d:88:c0:83:de:fe:f1:e6:81:18:6d:50:96: 2a:b6:1a:2c:e6:74:b7:65:74:b7:8f:2f:ce:e9:27:5d:53:23: e0:71:b2:01:82:56:c9:e6:65:1e:4e:08:61:de:22:35:0b:76: aa:34:59:f6:b1:e8:99:57:96:c3:30:b4:b0:cf:53:33:fb:85: 60:05:61:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPuVR98Eqc3Md7VOPOXgUeAhIMtMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMjEwNjQ2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjNlNTAwYjFlYjIyZTFiZjgwZWIwMWFkOWQ2MzI0NWVk ZDhkMTU4MjE5MDQwNDY2YWRlNTYyZWRhY2EwOWExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNJuC468wdcAIWQFWFLNNrfe/aSqLPOVPpEryGNw5i62i+ 9QCs8LEOC1MY+Ji10zvrZER7+CAgV49FAqbk7fIa04vqz26zxx5RdI7lalZK7+ay iOznl0ehByeGHPaUd+7uWjTk5hXudhtwtqnzGxwRiIipzHqZpRF5gkGK5tYek64y rhJt+MfeskfpbL8bvoRraCc4A7LKsJBSqXq7dIIdFdRfoD0WZZe2y3ZRoUAp9oiK 5HgnuYhFMtCbNgIbUWN8+rXyocB3dFxtrAJHm3F7l7leSZZ3eXCkl7v80k8kWwYR k9dqofnoYan6f4SbcYeucekQLOffnp+XPLsWyOSlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDwf1nhW7hjctibNiaMDFdl5yVqswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmMjQzZmU2LTM0MWUtNDdkMC1iNmMwLTE2ZDA0MWZmODhiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFAKMwDQYJKoZIhvcNAQELBQADggEBAET+Tj6cmhRs52ACtRNa4tSn9fKY WzTltxjKZDmz1MctcV38IaGewnDEvvUlv1yAE618yORWKbVxI5rplDxSa2anBSpu Qiy+dsj9MUaD2ZCjX2h9MFyXkGhRc0PijTDzFBgJevRczD9Zl58nj7I2k0k2eJ97 /oRvmmTZrdyDErk6KIvHx9iIQE9CUWU/FgOdVZh/58m2GAlSb83drCnQqMRrxSbH 6hHnkuXs0/kW0nUYpw7zcgxBG0kabYjAg97+8eaBGG1Qliq2GizmdLdldLePL87p J11TI+BxsgGCVsnmZR5OCGHeIjULdqo0Wfax6JlXlsMwtLDPUzP7hWAFYUA= -----END CERTIFICATE-----Generated at Sun Jun 1 04:58:51 2025 by rpki-client