$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/515d6f04-3964-43a0-97b1-51850a0bc0eb.roa File: 515d6f04-3964-43a0-97b1-51850a0bc0eb.roa (raw, json) Hash identifier: rV+0YsWkNLaR2nRs2SbKrLW6zsSNrKEoG2oiLNE5UqU= Subject key identifier: 12:8A:D8:FF:73:E6:ED:52:04:DE:31:39:A2:05:87:E0:9B:19:88:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5489B1A019282F9975C309958CFEB38405093B52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/515d6f04-3964-43a0-97b1-51850a0bc0eb.roa Signing time: Tue 27 May 2025 00:10:25 +0000 ROA not before: Tue 27 May 2025 00:10:25 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.250.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:89:b1:a0:19:28:2f:99:75:c3:09:95:8c:fe:b3:84:05:09:3b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:10:25 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=2bc40ac02708453ac9fbefb9f6b76d7a077eecd76c21e5a05850c62876d8722f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:b0:b3:b7:ad:ab:d3:6c:49:06:4f:36:4f: f9:bf:3d:a8:9d:3b:eb:41:a3:83:b7:50:94:4f:11: 62:14:46:8a:58:ed:1b:13:94:d0:c4:21:bd:35:ac: 29:9d:8e:8d:a8:fe:95:04:3a:48:fc:74:49:48:5f: 84:8b:fc:9c:5b:51:c1:a6:c9:11:09:71:01:4e:68: 12:7e:fc:88:3a:e4:34:87:4f:6f:ad:32:18:10:2d: fb:91:84:dc:6f:98:07:2d:15:ec:70:b0:45:cf:36: ed:e9:3c:ed:38:3a:19:07:7c:bc:d5:94:79:db:f1: 6a:f4:f3:8d:2e:b2:07:90:db:4f:cd:15:ce:17:92: cd:f5:8b:c7:b0:c1:32:e0:40:1a:ed:8d:13:80:cc: 80:e4:a7:5c:39:2f:ac:c6:c6:7d:76:d4:f6:7c:7f: 5d:f5:5c:cf:2c:df:e9:bf:e4:0c:b0:6a:fd:a5:f3: 86:48:69:7f:a7:be:1f:e8:2e:70:0d:62:cd:1a:e3: 24:17:c3:d2:7f:e6:2b:a8:fd:23:2a:92:96:65:ef: b6:48:c8:18:2f:a6:d9:fa:ec:d8:5b:6e:03:a0:31: 08:d0:5c:75:a3:52:51:14:bb:1c:76:6a:44:71:fd: ac:07:55:63:f9:4d:f9:2f:da:5a:0c:be:0f:ba:4d: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8A:D8:FF:73:E6:ED:52:04:DE:31:39:A2:05:87:E0:9B:19:88:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/515d6f04-3964-43a0-97b1-51850a0bc0eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.237.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e1:93:8f:98:97:e4:85:1f:78:49:9b:a6:48:b3:b3:61:0a: 0c:96:ad:e6:7a:4f:12:34:25:4a:b1:69:dd:f0:f4:a5:53:54: bb:cb:30:8b:86:af:71:19:38:d7:a0:c2:6e:98:d1:ca:0a:7d: e7:51:d4:70:6d:3c:ea:6e:7c:f3:56:fd:34:c0:99:0a:9c:5a: a5:a5:3a:88:f6:3b:f6:75:b0:61:56:82:39:5b:4e:df:87:ac: 04:ff:03:a7:70:0e:39:3c:6c:c6:2f:6e:37:09:44:d0:1d:a6: d0:ff:86:5b:4e:ea:cb:85:bf:eb:b3:fd:28:5d:84:15:f8:af: a3:2f:13:64:b9:e3:22:f1:42:8e:6a:6a:62:d3:ee:d6:c8:59: da:c9:cb:3b:bf:51:77:7c:6c:c4:08:cf:ef:94:52:df:5a:3f: 22:df:26:05:c7:d1:d5:5e:bb:d2:d1:6c:7c:1c:2c:6c:4e:79: ef:9c:61:58:b9:70:f0:d3:ed:e6:24:f9:ad:62:7c:82:44:d6: 79:8a:a2:a0:c6:3e:c5:ac:f8:06:ce:27:2f:22:00:da:21:54: da:ff:69:96:72:c4:8f:ad:c6:f3:74:7d:fc:34:fa:75:1a:5b: 98:38:dd:e6:23:b8:28:20:2d:77:37:98:2b:f2:08:4c:50:78: 98:81:74:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVImxoBkoL5l1wwmVjP6zhAUJO1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAxMDI1WhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmM0MGFjMDI3MDg0NTNhYzlmYmVmYjlmNmI3NmQ3YTA3 N2VlY2Q3NmMyMWU1YTA1ODUwYzYyODc2ZDg3MjJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKMbCzt62r02xJBk82T/m/PaidO+tBo4O3UJRPEWIURopY 7RsTlNDEIb01rCmdjo2o/pUEOkj8dElIX4SL/JxbUcGmyREJcQFOaBJ+/Ig65DSH T2+tMhgQLfuRhNxvmActFexwsEXPNu3pPO04OhkHfLzVlHnb8Wr0840usgeQ20/N Fc4Xks31i8ewwTLgQBrtjROAzIDkp1w5L6zGxn121PZ8f131XM8s3+m/5Aywav2l 84ZIaX+nvh/oLnANYs0a4yQXw9J/5iuo/SMqkpZl77ZIyBgvptn67NhbbgOgMQjQ XHWjUlEUuxx2akRx/awHVWP5Tfkv2loMvg+6TeTBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEorY/3Pm7VIE3jE5ogWH4JsZiFwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxNWQ2ZjA0LTM5NjQtNDNhMC05N2IxLTUxODUwYTBiYzBlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACi+u0wDQYJKoZIhvcNAQELBQADggEBAIvhk4+Yl+SFH3hJm6ZIs7NhCgyW reZ6TxI0JUqxad3w9KVTVLvLMIuGr3EZONegwm6Y0coKfedR1HBtPOpufPNW/TTA mQqcWqWlOoj2O/Z1sGFWgjlbTt+HrAT/A6dwDjk8bMYvbjcJRNAdptD/hltO6suF v+uz/ShdhBX4r6MvE2S54yLxQo5qamLT7tbIWdrJyzu/UXd8bMQIz++UUt9aPyLf JgXH0dVeu9LRbHwcLGxOee+cYVi5cPDT7eYk+a1ifIJE1nmKoqDGPsWs+AbOJy8i ANohVNr/aZZyxI+txvN0ffw0+nUaW5g43eYjuCggLXc3mCvyCExQeJiBdL0= -----END CERTIFICATE-----Generated at Sun Jun 1 05:01:16 2025 by rpki-client