$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/309eaaf0-856c-4408-8002-e3991ff3e8f5.roa File: 309eaaf0-856c-4408-8002-e3991ff3e8f5.roa (raw, json) Hash identifier: aoFw/lhFfbj8eYVZeRZI0eaRkjAl2X7CmkNucAwKgt4= Subject key identifier: 37:1C:A8:0B:81:1A:DA:CD:A5:0E:DD:67:99:F5:AE:16:60:0E:25:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DC185307938F60A98A5388FA704D578DD6B43E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/309eaaf0-856c-4408-8002-e3991ff3e8f5.roa Signing time: Mon 12 May 2025 15:21:05 +0000 ROA not before: Mon 12 May 2025 15:21:05 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.232.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c1:85:30:79:38:f6:0a:98:a5:38:8f:a7:04:d5:78:dd:6b:43:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:21:05 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=53c12b494b6830e63f0cc546ba2723c93d41b154b18e3507914b506c3cf14817, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:04:0d:41:1f:11:49:2c:c1:1c:13:f9:7a: 16:dc:40:d0:22:ea:99:2a:3b:92:25:02:02:50:0e: 5c:a9:23:29:55:a0:75:ee:09:e0:13:10:fc:2d:ff: cf:6d:68:7c:74:5f:29:ff:d7:32:ff:51:25:24:cf: 6b:95:62:2e:20:e9:32:8a:cb:91:ae:ed:0f:a9:43: fa:cc:93:68:0f:05:86:2b:6d:da:58:08:28:23:cf: a1:ff:a1:6f:79:9b:64:02:d7:74:55:cc:08:54:15: fb:74:2e:5d:95:72:85:0c:c4:06:7a:e0:33:a7:8f: 5c:17:08:5d:db:8a:c7:14:ea:7c:45:20:6c:62:bd: 6d:73:e6:34:9a:2f:da:ff:9f:ca:2b:d7:a9:d7:e8: ae:4a:e3:33:3a:b5:1b:78:37:8b:84:f2:eb:fa:f4: 60:11:a0:85:8d:59:96:0d:d1:81:2b:a7:f4:3a:af: 63:f8:3d:de:4a:f0:4b:4d:9f:61:49:24:f3:4d:b2: 8b:4b:d0:08:5b:25:56:7b:70:36:d3:90:b5:5c:09: 10:e8:02:92:d7:0b:a3:16:67:38:00:a1:d0:fc:e4: b9:b1:89:de:5f:a0:7a:b8:ad:d9:3d:46:1f:9b:57: e1:a8:30:b7:55:ee:7e:7d:16:2b:8e:eb:25:c8:87: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1C:A8:0B:81:1A:DA:CD:A5:0E:DD:67:99:F5:AE:16:60:0E:25:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/309eaaf0-856c-4408-8002-e3991ff3e8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.232.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:f5:2c:20:74:20:ec:2b:4e:cb:5a:4b:03:17:cb:62:12:06: cf:c9:de:bf:c5:85:58:3e:ef:d4:f9:08:80:32:b8:55:af:6b: 80:58:17:a2:03:c3:a3:ed:47:49:e3:ad:1e:fd:31:2c:4d:8c: cd:21:21:e5:10:b7:55:d2:05:4e:0c:b1:12:c3:15:7a:f5:dc: c8:26:71:de:66:9a:a6:6c:73:4f:ae:a2:28:26:b3:80:5c:60: d4:15:60:08:cf:c3:36:e9:b1:bf:f6:4d:7b:89:54:d3:d7:c7: 2b:17:cf:ee:9d:a4:f7:14:75:56:21:97:79:39:a3:43:85:6f: 7f:1c:f5:f3:1d:7b:f0:20:1e:e5:da:c0:9a:de:f8:1a:55:65: f8:f0:05:4c:20:b7:41:8b:aa:b2:16:d3:a2:1d:2d:26:d6:83: 2d:0a:58:bb:1f:6a:74:3d:c4:16:b6:d0:3d:ac:62:5d:63:b3: 66:44:1b:f6:25:00:0b:4f:62:ac:f2:55:f5:bc:8f:2a:f2:bc: 5d:71:f8:a3:7c:aa:21:c6:eb:e1:00:4b:d6:01:f5:e1:59:29: 81:f2:1c:65:bb:c5:17:c2:cc:1f:03:12:40:5c:3c:54:19:64: 26:69:1d:01:51:53:5a:b3:c8:ef:d7:7a:10:c6:f6:9f:1f:79: 94:71:d0:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfcGFMHk49gqYpTiPpwTVeN1rQ+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMTA1WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2MxMmI0OTRiNjgzMGU2M2YwY2M1NDZiYTI3MjNjOTNk NDFiMTU0YjE4ZTM1MDc5MTRiNTA2YzNjZjE0ODE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnLwQNQR8RSSzBHBP5ehbcQNAi6pkqO5IlAgJQDlypIylV oHXuCeATEPwt/89taHx0Xyn/1zL/USUkz2uVYi4g6TKKy5Gu7Q+pQ/rMk2gPBYYr bdpYCCgjz6H/oW95m2QC13RVzAhUFft0Ll2VcoUMxAZ64DOnj1wXCF3biscU6nxF IGxivW1z5jSaL9r/n8or16nX6K5K4zM6tRt4N4uE8uv69GARoIWNWZYN0YErp/Q6 r2P4Pd5K8EtNn2FJJPNNsotL0AhbJVZ7cDbTkLVcCRDoApLXC6MWZzgAodD85Lmx id5foHq4rdk9Rh+bV+GoMLdV7n59FiuO6yXIh/C7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNxyoC4Ea2s2lDt1nmfWuFmAOJWwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwOWVhYWYwLTg1NmMtNDQwOC04MDAyLWUzOTkxZmYzZThmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBA6DANBgkqhkiG9w0BAQsFAAOCAQEAPfUsIHQg7CtOy1pLAxfLYhIGz8ne v8WFWD7v1PkIgDK4Va9rgFgXogPDo+1HSeOtHv0xLE2MzSEh5RC3VdIFTgyxEsMV evXcyCZx3maapmxzT66iKCazgFxg1BVgCM/DNumxv/ZNe4lU09fHKxfP7p2k9xR1 ViGXeTmjQ4Vvfxz18x178CAe5drAmt74GlVl+PAFTCC3QYuqshbToh0tJtaDLQpY ux9qdD3EFrbQPaxiXWOzZkQb9iUAC09irPJV9byPKvK8XXH4o3yqIcbr4QBL1gH1 4VkpgfIcZbvFF8LMHwMSQFw8VBlkJmkdAVFTWrPI79d6EMb2nx95lHHQSg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:36:38 2025 by rpki-client