$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa File: 4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa (raw, json) Hash identifier: 8wuDXo8TRClB6WrvF4eWFmq6GeLO/nfyz9Bu9WwJNGY= Subject key identifier: 5B:C2:55:82:7B:7B:62:AE:9A:84:9D:DD:96:14:16:1E:FF:CE:AC:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2119E54C601D11ACFF5D21E16A9B20EE77BA9C97 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa Signing time: Sat 24 May 2025 00:20:22 +0000 ROA not before: Sat 24 May 2025 00:20:22 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 77.112.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:19:e5:4c:60:1d:11:ac:ff:5d:21:e1:6a:9b:20:ee:77:ba:9c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:20:22 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=d7594aceb04002656f59dccec4a1ad50d954713532c43ab66b1c220afa91f5ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:36:06:c7:c8:60:2e:14:0c:27:31:71:9f: 4c:9d:2b:d7:87:b8:d9:be:43:b3:9d:61:a8:be:98: a2:ce:9d:5e:b7:35:16:0f:4a:86:96:34:c1:a7:21: f6:0a:64:b5:a8:57:8c:ff:5c:6c:bc:10:d7:f0:dc: 4e:29:34:f1:13:f0:4b:f8:39:f6:56:79:89:df:02: bd:aa:92:24:3a:b1:bf:0b:4e:bc:23:ee:eb:4b:fa: e8:7c:3d:ed:4a:56:66:33:b7:d6:e7:62:7d:47:fd: 26:1a:3b:69:32:eb:3e:98:a2:e0:9a:da:5b:04:9a: fa:1a:b5:f3:96:67:38:ef:e8:2d:81:a6:4a:c4:c5: 7f:1b:c3:86:ca:c6:ba:79:7f:bc:52:67:9f:92:5e: a5:41:07:c4:43:be:e7:7a:f3:d4:ea:e4:3d:ce:29: d2:66:14:68:0b:04:e8:24:28:52:9d:ed:82:40:23: a8:c1:fd:b9:32:4e:e0:f4:2c:be:82:cd:65:2d:f8: 9c:3b:7b:08:25:60:7e:93:48:34:ec:42:0f:6d:c2: 60:12:33:5c:d8:42:a5:8f:f3:aa:57:b4:ed:21:f1: 54:d4:40:93:ee:31:a6:a0:5d:81:81:a7:1a:63:9b: 29:7e:1a:e4:24:5e:d4:02:d6:0a:ad:cd:3f:91:aa: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C2:55:82:7B:7B:62:AE:9A:84:9D:DD:96:14:16:1E:FF:CE:AC:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c3c97fa-c615-46e3-80f0-b7d0b8a094b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.112.0.0/14 Signature Algorithm: sha256WithRSAEncryption b0:10:19:16:ed:1c:16:35:74:5d:0c:6f:6b:bf:8d:91:0a:68: 51:28:6c:2f:36:f7:4a:85:da:42:f2:4f:9c:6f:54:a3:5c:a8: 8a:93:28:88:68:a9:89:f1:d7:dc:76:a2:d9:5e:03:94:86:e5: 56:7c:24:91:72:76:c6:ce:1a:95:7b:44:d1:2e:8c:dc:e7:db: 29:44:3d:95:be:fd:79:b8:91:55:e4:82:01:2e:15:27:71:0c: a9:eb:8c:0b:bc:bf:d3:be:ba:ab:b5:24:05:ae:44:7b:d8:f8: 49:44:b2:de:32:5e:71:2b:7c:d7:e2:af:ec:41:d3:e0:e2:ce: 1d:55:d9:ae:15:61:77:17:4d:e6:27:28:c9:1d:a7:f1:a9:64: d1:26:7a:0d:da:9f:c2:fe:8f:79:83:ca:a1:39:9b:d1:4a:31: 19:80:30:d0:a7:3f:f2:78:c6:45:73:9a:ef:66:ca:50:63:93: f9:1d:d0:c9:27:31:7c:e6:c5:24:cf:c2:c1:e6:4e:02:aa:b3: 42:bd:1a:1b:7f:df:ec:e4:6d:c9:a0:c9:2a:09:be:8d:1c:f2: 60:62:77:c4:bb:90:55:c3:17:22:39:fd:a1:16:e9:4c:ed:89: 5e:68:29:6f:4a:da:22:57:98:5e:95:2a:8a:6a:4f:a4:05:a4: 4c:94:8d:37 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIRnlTGAdEaz/XSHhapsg7ne6nJcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAyMDIyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzU5NGFjZWIwNDAwMjY1NmY1OWRjY2VjNGExYWQ1MGQ5 NTQ3MTM1MzJjNDNhYjY2YjFjMjIwYWZhOTFmNWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWRDYGx8hgLhQMJzFxn0ydK9eHuNm+Q7OdYai+mKLOnV63 NRYPSoaWNMGnIfYKZLWoV4z/XGy8ENfw3E4pNPET8Ev4OfZWeYnfAr2qkiQ6sb8L Trwj7utL+uh8Pe1KVmYzt9bnYn1H/SYaO2ky6z6YouCa2lsEmvoatfOWZzjv6C2B pkrExX8bw4bKxrp5f7xSZ5+SXqVBB8RDvud689Tq5D3OKdJmFGgLBOgkKFKd7YJA I6jB/bkyTuD0LL6CzWUt+Jw7ewglYH6TSDTsQg9twmASM1zYQqWP86pXtO0h8VTU QJPuMaagXYGBpxpjmyl+GuQkXtQC1gqtzT+RqmKrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUW8JVgnt7Yq6ahJ3dlhQWHv/OrA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjM2M5N2ZhLWM2MTUtNDZlMy04MGYwLWI3ZDBiOGEwOTRiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJNcDANBgkqhkiG9w0BAQsFAAOCAQEAsBAZFu0cFjV0XQxva7+NkQpoUShs Lzb3SoXaQvJPnG9Uo1yoipMoiGipifHX3Hai2V4DlIblVnwkkXJ2xs4alXtE0S6M 3OfbKUQ9lb79ebiRVeSCAS4VJ3EMqeuMC7y/0766q7UkBa5Ee9j4SUSy3jJecSt8 1+Kv7EHT4OLOHVXZrhVhdxdN5icoyR2n8alk0SZ6Ddqfwv6PeYPKoTmb0UoxGYAw 0Kc/8njGRXOa72bKUGOT+R3QyScxfObFJM/CweZOAqqzQr0aG3/f7ORtyaDJKgm+ jRzyYGJ3xLuQVcMXIjn9oRbpTO2JXmgpb0raIleYXpUqimpPpAWkTJSNNw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:40:59 2025 by rpki-client