$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32717b38-cb52-42a3-aaca-2c1c0036c862.roa File: 32717b38-cb52-42a3-aaca-2c1c0036c862.roa (raw, json) Hash identifier: aQBOoyevqL9j4A/IufB4s8qZDysi7jluxYqVvTRI2BU= Subject key identifier: D5:25:CD:1B:8F:0D:C3:3A:1C:14:66:32:A9:23:2D:61:A3:AF:CC:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1862CD6AE0B639FE7BC9CDF6664FA8066EEBFF4F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32717b38-cb52-42a3-aaca-2c1c0036c862.roa Signing time: Fri 23 May 2025 00:11:01 +0000 ROA not before: Fri 23 May 2025 00:11:01 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.126.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:62:cd:6a:e0:b6:39:fe:7b:c9:cd:f6:66:4f:a8:06:6e:eb:ff:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:11:01 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=53c9ee106c8b670339172dd39c897bc1b47dd86655ad43cdb238f4909ac3abcd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:d1:cc:f8:80:00:20:d1:15:4b:f7:08:49: c8:49:25:30:4e:13:58:44:6b:9d:b3:57:2d:58:68: 54:92:18:62:86:12:04:09:2d:e1:31:e5:be:2b:36: 43:aa:69:d3:a9:f3:eb:b2:52:c8:b5:fb:7a:75:46: f5:76:85:39:63:eb:c5:59:f1:4b:06:9b:a3:8f:f4: 73:48:bb:f8:c7:6d:9f:ca:d2:39:87:9c:a7:a4:5a: ef:e4:f0:45:4e:04:67:93:21:7a:69:28:95:a6:14: b2:de:96:50:a1:16:27:2d:bb:5d:b8:4a:3f:bf:25: cf:5b:dd:e4:1e:a9:28:f1:f0:47:ac:a9:d6:a7:5e: f8:c7:f2:84:64:e7:7a:5e:05:19:b6:c7:3a:7a:09: eb:fb:a4:33:40:0b:f6:7d:1b:50:6f:69:ab:9e:79: b8:f3:27:d0:20:39:a8:c2:19:63:5c:3d:2e:02:2c: 86:66:06:42:47:ff:c5:51:2f:17:51:ea:29:76:7e: 88:18:3b:60:c1:f4:d1:5b:28:ba:2a:ee:39:c0:e2: 71:dd:cf:9f:2f:8a:ee:f1:99:e6:cd:e4:e0:f2:ac: e6:29:cb:5b:c7:28:d4:d1:56:65:00:9e:db:c8:de: 34:20:f6:4d:41:bf:92:67:e7:43:15:e0:74:f6:65: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:25:CD:1B:8F:0D:C3:3A:1C:14:66:32:A9:23:2D:61:A3:AF:CC:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/32717b38-cb52-42a3-aaca-2c1c0036c862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.126.0.0/15 Signature Algorithm: sha256WithRSAEncryption 87:bb:d8:c4:39:6e:60:69:ee:c0:60:b9:ff:2d:4b:f9:35:79: d2:dd:29:7e:cf:ca:ee:83:20:c7:c1:1f:e0:21:1e:72:c6:16: ca:76:95:50:ba:83:35:33:48:b2:e2:f4:e0:fe:0e:73:e4:52: 6c:3d:ab:ff:00:0a:d1:9d:a2:5c:c3:e0:6b:53:ad:c2:d5:7e: 8a:7f:6d:ce:50:e9:d2:29:0b:fa:00:e6:1d:d0:ee:ef:cf:2d: 42:3a:ae:b8:1d:3a:7f:da:6f:3c:b5:fc:15:f9:27:79:c2:dc: 47:b1:14:2a:49:29:37:34:9c:05:9a:15:f7:38:0b:14:f2:70: c7:de:c4:ef:52:64:01:b3:94:b2:ae:f7:a0:0a:14:20:ac:11: d6:c7:2d:6f:a8:03:4b:51:84:51:22:ff:c2:45:a3:d3:e6:a8: 3e:3f:40:41:c6:92:02:99:9a:46:1e:69:1a:c6:a9:40:43:42: 3e:36:7a:4a:4e:22:99:87:6a:34:3b:57:72:bd:59:2f:c9:5e: 31:b2:aa:96:92:3b:93:df:e2:04:3c:71:bf:94:55:b2:9a:f2: 6b:e5:a0:7c:96:23:c5:77:c1:09:28:e3:48:60:57:a4:b1:34: 28:dd:8d:ce:03:83:a4:6b:6b:bc:d3:75:e9:96:a8:cc:9c:db: f0:d1:2d:cd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGGLNauC2Of57yc32Zk+oBm7r/08wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAxMTAxWhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2M5ZWUxMDZjOGI2NzAzMzkxNzJkZDM5Yzg5N2JjMWI0 N2RkODY2NTVhZDQzY2RiMjM4ZjQ5MDlhYzNhYmNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8btHM+IAAINEVS/cISchJJTBOE1hEa52zVy1YaFSSGGKG EgQJLeEx5b4rNkOqadOp8+uyUsi1+3p1RvV2hTlj68VZ8UsGm6OP9HNIu/jHbZ/K 0jmHnKekWu/k8EVOBGeTIXppKJWmFLLellChFictu124Sj+/Jc9b3eQeqSjx8Ees qdanXvjH8oRk53peBRm2xzp6Cev7pDNAC/Z9G1BvaaueebjzJ9AgOajCGWNcPS4C LIZmBkJH/8VRLxdR6il2fogYO2DB9NFbKLoq7jnA4nHdz58viu7xmebN5ODyrOYp y1vHKNTRVmUAntvI3jQg9k1Bv5Jn50MV4HT2ZaEbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1SXNG48NwzocFGYyqSMtYaOvzNwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyNzE3YjM4LWNiNTItNDJhMy1hYWNhLTJjMWMwMDM2Yzg2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQfjANBgkqhkiG9w0BAQsFAAOCAQEAh7vYxDluYGnuwGC5/y1L+TV50t0p fs/K7oMgx8Ef4CEecsYWynaVULqDNTNIsuL04P4Oc+RSbD2r/wAK0Z2iXMPga1Ot wtV+in9tzlDp0ikL+gDmHdDu788tQjquuB06f9pvPLX8FfknecLcR7EUKkkpNzSc BZoV9zgLFPJwx97E71JkAbOUsq73oAoUIKwR1sctb6gDS1GEUSL/wkWj0+aoPj9A QcaSApmaRh5pGsapQENCPjZ6Sk4imYdqNDtXcr1ZL8leMbKqlpI7k9/iBDxxv5RV sprya+WgfJYjxXfBCSjjSGBXpLE0KN2NzgODpGtrvNN16ZaozJzb8NEtzQ== -----END CERTIFICATE-----Generated at Sun Jun 8 19:21:40 2025 by rpki-client