$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa File: 477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa (raw, json) Hash identifier: SqnBo5x3VJa27cK2WY4H2d2cI+c/KEMKkv/whUx3k7M= Subject key identifier: 56:43:77:AA:2C:E9:F4:FF:37:65:64:6D:D3:4A:6D:54:D7:64:01:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D85C880B75B1D662F77849E26DE72C04CA7089B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa Signing time: Wed 28 May 2025 00:01:52 +0000 ROA not before: Wed 28 May 2025 00:01:52 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:85:c8:80:b7:5b:1d:66:2f:77:84:9e:26:de:72:c0:4c:a7:08:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:01:52 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=d280e2a9b6c0b6256e78ff298380fd448152e391ec64908996e87bfadd9e47c5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:ea:38:92:3b:6d:03:b6:e4:c6:29:3a:81: 4f:b7:19:d4:16:7f:e4:26:94:a4:5c:d6:77:f3:b2: 8c:c7:47:05:6e:75:86:0c:c2:0e:74:d4:78:0a:4f: 7f:5d:48:c7:db:1f:b1:ed:1c:d2:ff:43:de:92:19: 3a:05:c8:c4:1d:84:1e:7b:37:f9:4c:be:da:89:f0: 15:21:15:5e:4f:89:07:0a:b5:1e:f6:cc:52:6e:2b: 68:ed:f0:41:26:2b:0e:a8:23:26:e9:e2:03:41:62: ca:47:aa:9a:a4:5b:78:a3:ee:e4:f5:2f:2f:b2:32: 6c:15:04:7f:3c:6d:35:54:80:35:0e:c7:bb:57:02: 06:db:18:b7:a7:d1:c5:a9:e6:26:be:e5:98:28:c0: a5:bb:94:43:92:fe:db:c4:80:3e:62:06:13:f1:eb: 7b:be:87:b5:e8:76:df:6e:67:f2:76:aa:c6:57:c4: ea:c6:e8:8e:aa:48:7c:50:0c:98:5a:94:45:0e:f8: a7:77:ff:f4:3f:08:a2:13:4f:f5:96:cb:d3:07:0b: e9:c0:dd:93:47:d3:dd:b4:7b:da:33:80:3c:73:2d: ee:0f:53:3f:8d:0e:0d:7b:d2:2e:24:5d:0f:25:b3: 4d:aa:81:34:0c:41:8a:e4:05:f5:4b:ee:9f:94:69: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:77:AA:2C:E9:F4:FF:37:65:64:6D:D3:4A:6D:54:D7:64:01:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/477773fa-f3e7-4272-9b64-ee0d3bacab6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:5d:5a:c8:42:ce:a7:70:17:89:76:4c:34:93:ca:d2:4e:4a: 3f:ef:ed:a0:39:e3:dd:d8:38:d4:7d:d7:8b:02:1f:e6:78:4f: bf:a7:43:d6:cb:c4:47:d0:bb:ff:1d:dc:c0:1b:b6:0a:c4:b4: fa:28:dd:f3:7a:93:fb:2c:2e:67:52:1d:79:73:f9:fd:cb:d3: f4:d8:f7:9b:6a:92:f3:ac:bf:3f:39:b8:42:cf:df:9b:8a:fe: 6d:09:34:8c:86:98:99:91:c4:ca:6a:4d:dd:25:1b:aa:49:e0: 7a:ab:a3:5f:db:75:2f:e7:cc:35:5a:ee:4a:86:03:21:92:5f: 69:b2:b1:c2:c6:23:cb:2a:5e:a7:f3:ae:15:19:9f:67:2a:26: 3b:a9:7f:d8:7c:0b:30:49:ad:aa:e3:4f:d6:70:e7:39:59:90: bf:b8:59:43:30:3a:79:ae:fe:89:90:90:c5:a0:49:57:94:7b: af:fc:bf:27:ab:37:85:0f:03:88:35:4f:dc:98:33:ca:a8:db: de:d0:20:93:72:cd:89:2c:64:d1:d9:87:95:e6:85:ce:77:bc: cf:a1:57:d8:6b:4b:46:87:63:d6:6d:e0:a5:eb:20:fb:15:5f: 31:7a:19:00:ab:18:80:ab:1a:30:bd:f8:05:13:e9:08:a9:43: 52:78:05:c8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTYXIgLdbHWYvd4SeJt5ywEynCJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAwMTUyWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjgwZTJhOWI2YzBiNjI1NmU3OGZmMjk4MzgwZmQ0NDgx NTJlMzkxZWM2NDkwODk5NmU4N2JmYWRkOWU0N2M1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt++o4kjttA7bkxik6gU+3GdQWf+QmlKRc1nfzsozHRwVu dYYMwg501HgKT39dSMfbH7HtHNL/Q96SGToFyMQdhB57N/lMvtqJ8BUhFV5PiQcK tR72zFJuK2jt8EEmKw6oIybp4gNBYspHqpqkW3ij7uT1Ly+yMmwVBH88bTVUgDUO x7tXAgbbGLen0cWp5ia+5ZgowKW7lEOS/tvEgD5iBhPx63u+h7Xodt9uZ/J2qsZX xOrG6I6qSHxQDJhalEUO+Kd3//Q/CKITT/WWy9MHC+nA3ZNH0920e9ozgDxzLe4P Uz+NDg170i4kXQ8ls02qgTQMQYrkBfVL7p+UabMRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVkN3qizp9P83ZWRt00ptVNdkAbQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3Nzc3M2ZhLWYzZTctNDI3Mi05YjY0LWVlMGQzYmFjYWI2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBo4zANBgkqhkiG9w0BAQsFAAOCAQEAgF1ayELOp3AXiXZMNJPK0k5KP+/t oDnj3dg41H3XiwIf5nhPv6dD1svER9C7/x3cwBu2CsS0+ijd83qT+ywuZ1IdeXP5 /cvT9Nj3m2qS86y/Pzm4Qs/fm4r+bQk0jIaYmZHEympN3SUbqkngequjX9t1L+fM NVruSoYDIZJfabKxwsYjyypep/OuFRmfZyomO6l/2HwLMEmtquNP1nDnOVmQv7hZ QzA6ea7+iZCQxaBJV5R7r/y/J6s3hQ8DiDVP3Jgzyqjb3tAgk3LNiSxk0dmHleaF zne8z6FX2GtLRodj1m3gpesg+xVfMXoZAKsYgKsaML34BRPpCKlDUngFyA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:26:00 2025 by rpki-client