$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30347c3e-7f8e-4f8c-bf8a-86186731bca9.roa File: 30347c3e-7f8e-4f8c-bf8a-86186731bca9.roa (raw, json) Hash identifier: lLjGEWlfIXYXu8hrDOtFmdceD/B3fQBVFy+YSmg92M4= Subject key identifier: 4A:9A:6B:CB:92:8B:D5:C6:19:E7:48:CB:6B:B7:05:CB:D4:75:46:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39A7FCE7B027AACE27C9CCD125BA59BE7A82F2D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30347c3e-7f8e-4f8c-bf8a-86186731bca9.roa Signing time: Wed 21 May 2025 00:01:51 +0000 ROA not before: Wed 21 May 2025 00:01:51 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.17.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a7:fc:e7:b0:27:aa:ce:27:c9:cc:d1:25:ba:59:be:7a:82:f2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:01:51 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=f8eb7a9e58a27a6b556722acbc1a41a8e593a08245a58b9dbca5de73a3989590, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:f3:b7:7f:1a:f3:37:16:ee:ba:cf:40:1a: f6:ed:34:a7:00:33:6c:8d:5a:b1:01:18:15:62:f6: 82:d5:77:b2:8a:6e:31:17:93:e4:b6:73:a1:3f:13: d1:4b:26:82:bc:1a:be:dd:ff:b3:11:8e:ec:a6:a0: 2a:af:d0:34:8e:8b:56:27:12:83:a5:83:34:b1:fa: 58:21:6b:af:49:75:38:ce:cd:1d:6b:74:a1:55:33: ed:3d:97:b0:87:56:65:fa:19:f0:94:ac:99:a7:fd: d1:77:73:ad:b8:e5:31:bf:dc:cc:47:e4:74:7d:a5: 8c:2a:a4:30:15:06:5e:4a:bf:da:9e:34:89:fe:13: 64:d6:ed:e7:e8:fc:2a:50:81:89:b2:b3:00:a4:fc: d8:32:01:4c:84:50:68:72:41:f4:65:cd:24:96:20: 46:13:54:2e:5c:2f:ce:d6:4f:41:e1:79:c2:fa:86: 00:57:82:21:cd:fc:24:77:e3:2c:51:4d:d8:f7:10: f8:8a:86:0a:67:ec:eb:73:c7:15:45:59:3d:06:8b: bd:e0:88:bf:eb:1c:29:53:b8:c3:cf:76:5a:26:9b: 22:0c:70:ba:2c:5e:c8:5d:75:07:5a:8b:97:be:21: 80:14:3f:c2:c7:bd:72:36:dc:19:ce:72:aa:2c:7e: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:6B:CB:92:8B:D5:C6:19:E7:48:CB:6B:B7:05:CB:D4:75:46:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30347c3e-7f8e-4f8c-bf8a-86186731bca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.17.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6c:12:ed:5c:b0:26:bd:e5:91:6e:51:9c:94:30:be:9c:87:1d: a4:86:11:92:de:ab:c1:1e:91:f4:97:6e:bf:58:ec:80:33:e5: bd:c2:8a:73:7c:68:d2:eb:e4:1c:cc:6f:c2:62:f9:30:0a:2f: 8a:e2:d3:c7:61:8a:d1:14:6a:6d:4e:08:1e:36:d3:02:7f:95: ea:bc:03:7c:a9:0c:d6:e0:16:71:c3:6e:c6:2a:23:a2:5e:13: 19:af:bd:1d:81:eb:1f:09:a3:ab:b9:40:a7:28:98:3c:9a:45: e7:8c:0d:08:31:b8:d8:0c:04:e3:38:38:62:e5:a1:7c:6e:1d: f4:7d:4d:3e:63:f4:b0:29:ea:7c:c4:4b:16:50:14:4a:07:ac: fd:3d:c1:a0:de:33:f1:dd:92:ff:48:ba:14:76:53:51:05:d1: 84:f2:40:9b:18:ae:cb:61:cb:4c:7c:21:df:c9:00:25:9c:e5: da:81:41:df:93:0f:6e:a5:0e:87:34:a3:75:8f:2c:7f:31:e6: 14:23:1c:8d:29:fc:bc:57:ba:09:3f:4c:b7:f2:53:36:cc:9c: 81:6f:52:29:60:3d:35:3d:9b:fe:fd:dc:68:25:6c:65:e5:69: f6:27:8b:8c:11:90:08:6b:35:39:e5:f6:53:27:53:ba:70:84: ff:2d:a6:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOaf857Anqs4nyczRJbpZvnqC8tEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAwMTUxWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGViN2E5ZTU4YTI3YTZiNTU2NzIyYWNiYzFhNDFhOGU1 OTNhMDgyNDVhNThiOWRiY2E1ZGU3M2EzOTg5NTkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRBvO3fxrzNxbuus9AGvbtNKcAM2yNWrEBGBVi9oLVd7KK bjEXk+S2c6E/E9FLJoK8Gr7d/7MRjuymoCqv0DSOi1YnEoOlgzSx+lgha69JdTjO zR1rdKFVM+09l7CHVmX6GfCUrJmn/dF3c6245TG/3MxH5HR9pYwqpDAVBl5Kv9qe NIn+E2TW7efo/CpQgYmyswCk/NgyAUyEUGhyQfRlzSSWIEYTVC5cL87WT0HhecL6 hgBXgiHN/CR34yxRTdj3EPiKhgpn7OtzxxVFWT0Gi73giL/rHClTuMPPdlommyIM cLosXshddQdai5e+IYAUP8LHvXI23BnOcqosfkzvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSppry5KL1cYZ50jLa7cFy9R1RvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwMzQ3YzNlLTdmOGUtNGY4Yy1iZjhhLTg2MTg2NzMxYmNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfYEYAwDQYJKoZIhvcNAQELBQADggEBAGwS7VywJr3lkW5RnJQwvpyHHaSG EZLeq8EekfSXbr9Y7IAz5b3CinN8aNLr5BzMb8Ji+TAKL4ri08dhitEUam1OCB42 0wJ/leq8A3ypDNbgFnHDbsYqI6JeExmvvR2B6x8Jo6u5QKcomDyaReeMDQgxuNgM BOM4OGLloXxuHfR9TT5j9LAp6nzESxZQFEoHrP09waDeM/Hdkv9IuhR2U1EF0YTy QJsYrsthy0x8Id/JACWc5dqBQd+TD26lDoc0o3WPLH8x5hQjHI0p/LxXugk/TLfy UzbMnIFvUilgPTU9m/793GglbGXlafYni4wRkAhrNTnl9lMnU7pwhP8tpjQ= -----END CERTIFICATE-----Generated at Sun Jun 1 04:36:36 2025 by rpki-client