$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa File: 44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa (raw, json) Hash identifier: 0UQq/bUtTNwJszaHKbxgyWRSYK8Q4W8XP2n2MQUjHD0= Subject key identifier: BB:9D:5D:A0:67:FC:B8:A3:3E:44:E6:BE:A8:C1:A5:AD:E6:CA:15:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6647A0B9AB8E7969E6996FCD025467158C9AD63E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa Signing time: Wed 21 May 2025 00:00:21 +0000 ROA not before: Wed 21 May 2025 00:00:21 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.101.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:47:a0:b9:ab:8e:79:69:e6:99:6f:cd:02:54:67:15:8c:9a:d6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:00:21 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=a440ef2c3fc93cc6bf14b9b8da69fc6713bc836a6b833725865136f77d0140c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:f0:4c:b7:9f:7b:d0:8a:06:d4:42:7c:19: c5:1f:2c:ba:df:d3:69:28:d0:81:61:35:f6:37:fe: 3f:59:b8:20:61:0b:f4:68:f2:7e:77:56:ac:4d:1a: 3b:a0:08:e0:ff:b2:4a:58:a9:62:b4:8d:2d:20:9d: 7f:4f:fe:fc:ef:a6:9f:1a:5a:41:d0:95:54:1a:2f: d1:31:c0:c2:da:59:0c:aa:c6:10:0c:3b:f7:61:b2: 55:a4:07:a7:df:05:91:39:d0:aa:d5:fd:5b:59:92: 18:96:c2:01:95:fa:17:e4:3e:d1:39:89:bf:c8:34: e8:5e:b6:a9:c6:21:42:c8:d9:59:93:be:f3:57:02: e6:25:50:3e:08:26:14:70:5e:53:f3:c9:de:12:29: e8:a5:56:e6:c9:11:7e:02:47:a8:75:c1:d2:6b:9c: a4:9c:2e:49:f3:03:e3:3b:df:52:0a:02:93:10:c8: e0:37:14:4c:cc:aa:6d:4c:cd:1e:0e:6b:89:c5:7d: 39:58:56:9b:99:52:f4:19:42:9a:5c:8c:a2:ce:d5: 65:2c:ba:31:a3:72:b2:a7:ca:1e:74:6f:28:bc:68: d5:2d:b4:d3:2b:66:3a:f0:f9:81:79:e2:aa:fe:39: 64:51:a5:0a:cc:77:31:7d:ac:73:09:63:f8:90:55: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:5D:A0:67:FC:B8:A3:3E:44:E6:BE:A8:C1:A5:AD:E6:CA:15:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.101.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:dd:5a:4c:77:5a:de:42:ec:2c:41:46:64:86:2a:24:23:a5: b1:4a:5c:37:94:11:03:75:71:23:49:cb:83:01:8b:d1:c9:25: d4:f1:15:18:c0:89:ba:a9:c9:76:ad:0b:37:d8:40:24:84:cf: cd:cc:90:fd:b1:e9:ef:a5:01:83:6d:70:75:b2:e5:73:97:74: 9b:ff:05:de:b4:e7:fb:50:14:3a:7c:1d:ee:7f:a3:31:55:4c: ff:68:5e:41:ab:70:39:e7:81:b4:29:e9:ff:df:cf:84:59:87: c8:e2:e9:3e:77:db:47:61:b9:15:98:a7:37:0c:64:b1:31:7f: f0:ce:d5:b5:cc:23:f5:bc:5e:80:ea:35:95:0d:e1:87:fe:33: d9:f5:68:66:a6:47:68:86:10:66:99:eb:2f:fa:df:43:2b:46: 26:ee:81:d2:ce:e1:dd:79:71:34:ae:4a:8e:1f:cb:33:11:c9: 98:ab:b0:c5:6e:97:6f:51:f6:64:2a:2f:b3:7a:ef:f9:70:ba: 6e:e0:8c:e4:fa:3a:93:38:f3:3b:34:a1:b7:cc:de:fb:b4:18: d0:a5:f6:9a:1d:23:18:14:7b:30:c5:ce:bb:a5:96:b3:94:9d: 18:9a:65:cd:c5:04:e5:25:fd:1a:f5:5c:b6:a2:60:a2:31:fe: d0:93:eb:c6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZkeguauOeWnmmW/NAlRnFYya1j4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAwMDIxWhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDQwZWYyYzNmYzkzY2M2YmYxNGI5YjhkYTY5ZmM2NzEz YmM4MzZhNmI4MzM3MjU4NjUxMzZmNzdkMDE0MGMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwS/BMt5970IoG1EJ8GcUfLLrf02ko0IFhNfY3/j9ZuCBh C/Ro8n53VqxNGjugCOD/skpYqWK0jS0gnX9P/vzvpp8aWkHQlVQaL9ExwMLaWQyq xhAMO/dhslWkB6ffBZE50KrV/VtZkhiWwgGV+hfkPtE5ib/INOhetqnGIULI2VmT vvNXAuYlUD4IJhRwXlPzyd4SKeilVubJEX4CR6h1wdJrnKScLknzA+M731IKApMQ yOA3FEzMqm1MzR4Oa4nFfTlYVpuZUvQZQppcjKLO1WUsujGjcrKnyh50byi8aNUt tNMrZjrw+YF54qr+OWRRpQrMdzF9rHMJY/iQVc+xAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUu51doGf8uKM+ROa+qMGlrebKFWkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0ZWI2OGZkLTljMDMtNDE3MC04NGU0LWRiYmNhNjk1MmNkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQZTANBgkqhkiG9w0BAQsFAAOCAQEAV91aTHda3kLsLEFGZIYqJCOlsUpc N5QRA3VxI0nLgwGL0ckl1PEVGMCJuqnJdq0LN9hAJITPzcyQ/bHp76UBg21wdbLl c5d0m/8F3rTn+1AUOnwd7n+jMVVM/2heQatwOeeBtCnp/9/PhFmHyOLpPnfbR2G5 FZinNwxksTF/8M7Vtcwj9bxegOo1lQ3hh/4z2fVoZqZHaIYQZpnrL/rfQytGJu6B 0s7h3XlxNK5Kjh/LMxHJmKuwxW6Xb1H2ZCovs3rv+XC6buCM5Po6kzjzOzSht8ze +7QY0KX2mh0jGBR7MMXOu6WWs5SdGJplzcUE5SX9GvVctqJgojH+0JPrxg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:21:43 2025 by rpki-client