$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42bd5c98-ff16-4ff2-90fe-626a186a604c.roa File: 42bd5c98-ff16-4ff2-90fe-626a186a604c.roa (raw, json) Hash identifier: g/L5FUVdHW5NpYoeUhyKwhH4sm51FcpNwx5rp5CdYP4= Subject key identifier: 34:C3:B2:39:A0:A6:1D:BD:C2:E4:89:D9:CD:0E:8C:B4:F6:14:56:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C3EE607FD7902B00338E1E66DEB7B09FEB4BB48 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42bd5c98-ff16-4ff2-90fe-626a186a604c.roa Signing time: Tue 27 May 2025 00:11:24 +0000 ROA not before: Tue 27 May 2025 00:11:24 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.188.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3e:e6:07:fd:79:02:b0:03:38:e1:e6:6d:eb:7b:09:fe:b4:bb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:11:24 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=b7992a79ca6e9a26a9be079515f291a08b1ae78743f619b9e07aea411fe1a9a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:a7:0a:67:91:de:75:0f:5c:af:a3:5a:ca: 46:82:90:cb:31:e9:16:b1:7f:42:54:00:d9:3e:77: 5b:bb:15:a7:b7:2c:36:0d:58:58:b4:ea:f0:08:3a: 5d:39:65:a7:98:9f:27:20:40:e2:56:1f:5c:a1:1b: 3c:7f:cd:2e:54:d0:df:40:af:29:91:4e:67:f1:8d: 98:ea:7f:17:2f:f2:b4:a4:0e:f7:1d:5f:49:a1:c6: 07:11:ab:04:d3:05:d1:01:6a:0d:a8:20:1c:65:b5: ba:6a:b3:46:f8:b0:2d:36:dc:15:57:e7:f7:64:0c: 26:0d:33:d2:37:60:96:dd:63:b6:77:5b:89:aa:0c: ef:fa:b0:b1:7c:a7:c6:16:8a:b2:13:11:73:e0:35: 22:b7:5c:cf:58:74:97:ce:5a:48:6e:a0:67:27:64: c1:71:95:ea:f2:9a:3f:87:98:45:20:41:46:af:63: f3:51:48:e2:0d:89:7d:63:68:38:91:6d:b7:fd:ef: c1:77:ec:43:7b:7b:70:4f:b6:8b:ac:6c:c6:7f:29: 3b:33:a3:a5:9b:bc:48:16:5d:d2:96:a3:06:08:9a: b5:cd:93:a6:96:8a:20:47:ae:8c:df:05:e7:bf:bf: 1b:28:cc:71:e3:09:fe:08:16:de:83:83:9c:b3:e5: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C3:B2:39:A0:A6:1D:BD:C2:E4:89:D9:CD:0E:8C:B4:F6:14:56:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42bd5c98-ff16-4ff2-90fe-626a186a604c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.188.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:9f:88:c6:5a:8a:0e:e6:53:15:01:ec:da:d2:81:52:64:d4: 01:be:4e:8f:05:da:8b:2b:c5:fd:37:e8:38:64:fd:06:ca:07: dc:8d:58:01:1f:ac:f9:88:b2:8e:be:a7:32:6e:6b:14:9f:0c: 7c:73:f0:74:27:2b:c2:8f:8c:d3:d3:d2:95:0e:f8:3e:c9:49: 0e:7e:e4:b5:ae:77:2d:da:0b:2a:b6:8d:90:6e:70:3c:18:43: 9a:96:f5:95:14:c0:59:a4:23:cb:ac:fa:6f:44:9b:41:1a:db: 72:79:95:13:27:b1:87:e8:f1:9c:99:54:f7:1c:40:38:67:82: d2:1d:bd:85:93:1e:59:cb:a4:ec:b8:be:ac:a2:5b:75:38:3c: 3c:bc:b7:31:cd:6e:a3:b4:4d:0d:c4:84:23:9e:fb:2a:c5:9f: b6:a8:cb:43:01:54:df:da:ab:9b:38:be:d2:45:f9:8c:76:3c: 48:c6:37:d5:5e:7e:e6:0a:7b:07:a8:ee:f2:f8:e1:af:3b:d5: 6f:01:29:ca:59:e7:46:79:9d:17:66:7b:68:66:20:e9:4e:6c: fa:f8:c2:43:34:03:f1:85:36:3f:d5:11:28:37:ab:15:f3:b2: 63:f5:68:1b:4c:38:62:3a:62:1e:44:8d:b0:46:8a:79:8f:95: 69:99:38:86 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPD7mB/15ArADOOHmbet7Cf60u0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAxMTI0WhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzk5MmE3OWNhNmU5YTI2YTliZTA3OTUxNWYyOTFhMDhi MWFlNzg3NDNmNjE5YjllMDdhZWE0MTFmZTFhOWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtkKcKZ5HedQ9cr6NaykaCkMsx6Raxf0JUANk+d1u7Fae3 LDYNWFi06vAIOl05ZaeYnycgQOJWH1yhGzx/zS5U0N9ArymRTmfxjZjqfxcv8rSk DvcdX0mhxgcRqwTTBdEBag2oIBxltbpqs0b4sC023BVX5/dkDCYNM9I3YJbdY7Z3 W4mqDO/6sLF8p8YWirITEXPgNSK3XM9YdJfOWkhuoGcnZMFxlerymj+HmEUgQUav Y/NRSOINiX1jaDiRbbf978F37EN7e3BPtousbMZ/KTszo6WbvEgWXdKWowYImrXN k6aWiiBHrozfBee/vxsozHHjCf4IFt6Dg5yz5XdRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNMOyOaCmHb3C5InZzQ6MtPYUVqcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyYmQ1Yzk4LWZmMTYtNGZmMi05MGZlLTYyNmExODZhNjA0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQvDANBgkqhkiG9w0BAQsFAAOCAQEAH5+IxlqKDuZTFQHs2tKBUmTUAb5O jwXaiyvF/TfoOGT9BsoH3I1YAR+s+Yiyjr6nMm5rFJ8MfHPwdCcrwo+M09PSlQ74 PslJDn7kta53LdoLKraNkG5wPBhDmpb1lRTAWaQjy6z6b0SbQRrbcnmVEyexh+jx nJlU9xxAOGeC0h29hZMeWcuk7Li+rKJbdTg8PLy3Mc1uo7RNDcSEI577KsWftqjL QwFU39qrmzi+0kX5jHY8SMY31V5+5gp7B6ju8vjhrzvVbwEpylnnRnmdF2Z7aGYg 6U5s+vjCQzQD8YU2P9URKDerFfOyY/VoG0w4YjpiHkSNsEaKeY+VaZk4hg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:58:49 2025 by rpki-client