$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa File: 3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa (raw, json) Hash identifier: WqFLye02GoY9zaCVfIso7/7yk1eIEZ2QJtbfPzbLZqE= Subject key identifier: 54:D1:54:E4:C9:1B:66:13:7E:5B:7B:DE:05:A5:FA:0C:69:32:5A:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A7A5750E6ADF85E359BC11B50A92CE554662977 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa Signing time: Fri 23 May 2025 00:10:29 +0000 ROA not before: Fri 23 May 2025 00:10:29 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.52.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7a:57:50:e6:ad:f8:5e:35:9b:c1:1b:50:a9:2c:e5:54:66:29:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:10:29 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=c02ad3e7c4067d93c618988142ad662d4dd9714309708b3783ba9bb279c27272, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:ea:95:8a:45:19:ed:97:5c:53:9b:5e:10: bd:e9:e2:a6:86:f5:38:d0:2e:43:c6:ce:0b:10:6d: e8:b6:80:38:e9:5d:2c:06:26:3d:9b:4c:11:99:ec: 1c:be:ee:1b:19:62:33:fb:5a:1b:69:31:14:11:b0: 16:b0:9e:98:bc:92:dd:ba:d5:19:dc:0e:1f:f5:31: 6b:3f:49:b0:56:7c:4a:6e:22:48:d9:11:a9:9d:67: 0b:f2:f6:f8:fc:21:27:8a:c9:e2:da:72:9e:bb:d3: b4:70:dd:35:8c:d7:16:3a:d4:61:fb:fb:ed:31:8f: c5:f2:43:59:23:b2:77:9e:40:d0:de:83:94:8a:38: 13:67:bd:10:87:f2:23:67:00:3c:b5:e8:12:9a:1b: 11:6e:31:01:56:47:38:6c:7e:33:de:4b:ec:31:f4: 14:df:38:b8:51:3a:53:58:33:c6:1d:6a:04:8a:ed: 86:a9:ad:02:38:d9:96:b3:9d:40:52:15:38:24:63: 2c:59:1c:6b:53:2f:34:75:a2:53:b7:84:7c:67:11: 86:bb:c2:3a:1c:55:20:c7:3f:c4:84:4a:5b:23:43: dd:9b:8e:2c:35:ce:39:8e:bb:14:4a:ee:f8:04:58: 12:68:97:a8:85:26:e4:a0:54:8f:c2:bb:11:55:3b: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D1:54:E4:C9:1B:66:13:7E:5B:7B:DE:05:A5:FA:0C:69:32:5A:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.52.32.0/19 Signature Algorithm: sha256WithRSAEncryption c6:d2:58:7f:76:42:10:65:3d:e1:55:99:19:4b:ab:04:07:0c: 72:8d:b7:aa:6a:88:d7:d5:b6:88:4f:40:ec:3e:5d:21:bf:e4: 91:7f:e8:65:37:a4:79:e9:0e:87:c5:fb:82:29:2a:c2:c5:1b: 47:3a:97:14:78:88:3b:97:94:aa:2e:7e:3f:9b:a9:e7:69:82: 07:97:3f:3f:2e:c0:d9:8b:fe:88:fd:36:f5:81:6f:22:ad:9e: 37:a1:ff:70:b5:ab:e4:5a:56:60:f2:12:03:8a:5b:38:39:e9: df:f1:f7:93:a1:cf:97:53:64:43:2c:ec:65:a3:4e:8e:3e:01: 64:1d:a6:65:06:e8:21:f6:0d:ee:44:8f:a0:9f:56:24:55:39: b4:8d:af:bc:1c:61:f9:45:cd:68:dd:90:7e:25:ca:52:10:52: 3a:d3:e4:ef:e4:93:c5:b7:cb:56:82:d6:1a:f5:8d:69:05:56: 9e:25:84:fd:74:b2:51:45:a8:d3:9b:ca:02:b8:3a:b7:32:e4: ca:b2:a0:c2:2d:5b:67:59:5e:6a:03:97:da:3f:29:fb:15:19: 88:2d:3a:27:ab:2a:56:31:c3:15:b6:a5:1b:a3:35:83:80:f3: 14:d2:98:7b:94:03:ee:f7:4a:f3:98:07:96:17:3a:fe:32:9f: 7f:83:f5:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWnpXUOat+F41m8EbUKks5VRmKXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAxMDI5WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDJhZDNlN2M0MDY3ZDkzYzYxODk4ODE0MmFkNjYyZDRk ZDk3MTQzMDk3MDhiMzc4M2JhOWJiMjc5YzI3MjcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHYOqVikUZ7ZdcU5teEL3p4qaG9TjQLkPGzgsQbei2gDjp XSwGJj2bTBGZ7By+7hsZYjP7WhtpMRQRsBawnpi8kt261RncDh/1MWs/SbBWfEpu IkjZEamdZwvy9vj8ISeKyeLacp6707Rw3TWM1xY61GH7++0xj8XyQ1kjsneeQNDe g5SKOBNnvRCH8iNnADy16BKaGxFuMQFWRzhsfjPeS+wx9BTfOLhROlNYM8YdagSK 7YaprQI42ZaznUBSFTgkYyxZHGtTLzR1olO3hHxnEYa7wjocVSDHP8SESlsjQ92b jiw1zjmOuxRK7vgEWBJol6iFJuSgVI/CuxFVOzZfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVNFU5MkbZhN+W3veBaX6DGkyWhswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MjZlOGY5LTNmNDEtNGEwNi04ZTZkLTQ1NmFiZTFmZmE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMNCAwDQYJKoZIhvcNAQELBQADggEBAMbSWH92QhBlPeFVmRlLqwQHDHKN t6pqiNfVtohPQOw+XSG/5JF/6GU3pHnpDofF+4IpKsLFG0c6lxR4iDuXlKoufj+b qedpggeXPz8uwNmL/oj9NvWBbyKtnjeh/3C1q+RaVmDyEgOKWzg56d/x95Ohz5dT ZEMs7GWjTo4+AWQdpmUG6CH2De5Ej6CfViRVObSNr7wcYflFzWjdkH4lylIQUjrT 5O/kk8W3y1aC1hr1jWkFVp4lhP10slFFqNObygK4Orcy5MqyoMItW2dZXmoDl9o/ KfsVGYgtOierKlYxwxW2pRujNYOA8xTSmHuUA+73SvOYB5YXOv4yn3+D9Xw= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:49 2025 by rpki-client