$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa File: 3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa (raw, json) Hash identifier: KxF4ql9egK99tss1YmAA1jrtA/S8FpkvD3XE8Yqu1Co= Subject key identifier: A8:8A:DA:CB:F3:2C:75:10:BD:9A:C9:1E:9A:E5:6D:10:38:83:F3:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 679FACADD2BF751EBD46787945F2E0061C58BB53 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa Signing time: Tue 20 May 2025 15:10:16 +0000 ROA not before: Tue 20 May 2025 15:10:16 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.68.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9f:ac:ad:d2:bf:75:1e:bd:46:78:79:45:f2:e0:06:1c:58:bb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:10:16 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=da441f70b711a0b97a09854dcfec8e2fdba4137e412b6b8c8687ccea6b0379d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:70:b5:81:4b:f9:70:32:87:56:5f:0e:85: 36:7a:e9:42:9f:98:f6:60:93:00:ab:ca:a5:c8:84: 6c:97:55:7b:c8:5b:1f:a3:81:f4:0c:f5:11:72:11: 98:b7:1e:15:76:69:9a:ed:f4:97:a2:16:54:e6:52: c8:f7:a1:9f:d4:33:73:cc:4d:b3:84:a1:7f:c7:f9: f2:0d:b1:1b:7e:30:66:a4:74:7d:86:ae:1a:46:67: d1:49:a4:9f:b1:aa:8d:32:ae:73:be:62:38:aa:7b: 26:2d:a7:e2:3e:d9:f3:77:b1:63:b6:ad:fa:62:6a: 41:a9:a1:9b:6c:38:eb:38:1b:32:3c:a8:be:cc:94: c6:b7:8b:fb:52:9d:60:ae:c9:f6:7d:c6:b9:2d:8a: 60:e3:4d:f9:f7:f9:20:83:f7:22:db:c4:13:eb:aa: 8b:6f:b7:c2:76:05:c0:e8:ad:06:0e:0c:6b:c2:e1: b2:bf:33:70:a1:69:47:25:d9:15:77:be:24:9a:8a: 19:2d:77:41:d9:1c:e7:62:95:1d:56:0e:77:b0:88: 46:bb:12:dc:01:6d:cc:04:34:74:c5:1c:02:f9:43: 56:14:40:d7:ad:d2:85:88:f9:b7:77:76:34:fd:c2: 60:0b:34:43:cf:81:46:7e:b6:89:9a:26:6f:97:e7: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8A:DA:CB:F3:2C:75:10:BD:9A:C9:1E:9A:E5:6D:10:38:83:F3:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1c020d-4131-47f0-a3f7-b0555cf026ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.68.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2d:3b:77:9e:4b:4d:2f:4d:27:ff:e4:08:96:e1:a2:94:79:51: 2e:e2:43:e1:5b:50:ac:e9:97:9b:8d:dd:96:86:8b:12:77:e8: 4d:d0:89:2d:68:d6:52:9d:84:44:d5:fd:b6:14:f6:03:19:a3: 6f:6b:4e:b5:96:38:3f:23:08:38:e2:e8:2c:74:3b:5f:cc:03: 68:d6:68:d1:57:00:cf:88:73:dd:b6:59:82:15:2d:df:91:0a: bf:86:9d:2a:be:00:61:99:9c:a5:e4:9e:f2:14:aa:91:c3:a9: c1:2f:8d:74:19:91:78:6e:ce:57:e5:51:82:2b:7e:18:2a:ff: ac:90:42:f0:c2:9f:33:58:ce:ee:15:05:f3:8b:3b:be:3c:1d: 1f:33:5a:60:ab:8a:31:01:8c:cc:02:a8:1b:44:2a:5a:2f:7f: 88:ba:48:c5:c9:94:9f:d5:6f:0a:a6:a4:c0:c2:4d:d6:c1:3b: d0:88:bf:d6:2a:2f:c5:69:aa:9e:72:08:5a:2e:3b:39:a0:a6: e0:cd:02:9d:27:38:6d:2a:8f:04:78:17:e8:18:e9:8e:75:bc: 10:3f:fa:bf:6a:97:cf:f1:12:39:e7:50:1f:49:46:c2:00:28: 98:a4:65:03:bd:bd:a0:0f:d8:0b:db:7c:db:92:fe:b2:1e:b3: c3:7f:e9:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ5+srdK/dR69Rnh5RfLgBhxYu1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUxMDE2WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTQ0MWY3MGI3MTFhMGI5N2EwOTg1NGRjZmVjOGUyZmRi YTQxMzdlNDEyYjZiOGM4Njg3Y2NlYTZiMDM3OWQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC36nC1gUv5cDKHVl8OhTZ66UKfmPZgkwCryqXIhGyXVXvI Wx+jgfQM9RFyEZi3HhV2aZrt9JeiFlTmUsj3oZ/UM3PMTbOEoX/H+fINsRt+MGak dH2GrhpGZ9FJpJ+xqo0yrnO+YjiqeyYtp+I+2fN3sWO2rfpiakGpoZtsOOs4GzI8 qL7MlMa3i/tSnWCuyfZ9xrktimDjTfn3+SCD9yLbxBPrqotvt8J2BcDorQYODGvC 4bK/M3ChaUcl2RV3viSaihktd0HZHOdilR1WDnewiEa7EtwBbcwENHTFHAL5Q1YU QNet0oWI+bd3djT9wmALNEPPgUZ+tomaJm+X5yofAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqIray/MsdRC9mskemuVtEDiD8wYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMWMwMjBkLTQxMzEtNDdmMC1hM2Y3LWIwNTU1Y2YwMjZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4RAAwDQYJKoZIhvcNAQELBQADggEBAC07d55LTS9NJ//kCJbhopR5US7i Q+FbUKzpl5uN3ZaGixJ36E3QiS1o1lKdhETV/bYU9gMZo29rTrWWOD8jCDji6Cx0 O1/MA2jWaNFXAM+Ic922WYIVLd+RCr+GnSq+AGGZnKXknvIUqpHDqcEvjXQZkXhu zlflUYIrfhgq/6yQQvDCnzNYzu4VBfOLO748HR8zWmCrijEBjMwCqBtEKlovf4i6 SMXJlJ/VbwqmpMDCTdbBO9CIv9YqL8Vpqp5yCFouOzmgpuDNAp0nOG0qjwR4F+gY 6Y51vBA/+r9ql8/xEjnnUB9JRsIAKJikZQO9vaAP2AvbfNuS/rIes8N/6fE= -----END CERTIFICATE-----Generated at Sun Jun 1 05:02:59 2025 by rpki-client