$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59637748-f9e2-4c44-86a6-89a1c02f3f23.roa File: 59637748-f9e2-4c44-86a6-89a1c02f3f23.roa (raw, json) Hash identifier: q/DmzbhBn3fzihrNJbsrhKcZsy0ehqvxlVYirIAwAnQ= Subject key identifier: 64:43:71:1A:9C:5A:C7:79:86:16:70:F1:B6:70:C6:20:54:F3:16:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52A461FCB917358AD6B4B8E3C0348D9B90A8B08C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59637748-f9e2-4c44-86a6-89a1c02f3f23.roa Signing time: Wed 07 May 2025 00:10:17 +0000 ROA not before: Wed 07 May 2025 00:10:17 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 44.203.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:61:fc:b9:17:35:8a:d6:b4:b8:e3:c0:34:8d:9b:90:a8:b0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:10:17 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=3e216bf0e6a54d981da349e3f825570a7a77e987ac1662ab7d8f15b970836664, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:70:06:79:1b:e7:19:e2:bc:23:99:71:6d: 16:3c:bd:b0:f2:e9:9e:d3:ab:8a:c9:dc:f5:14:94: 4f:67:69:44:4c:f9:66:41:29:8f:6f:bf:65:c7:59: 50:3a:5b:f6:78:17:64:f7:7c:c7:2d:f5:d5:1c:d1: ce:ba:24:c0:a1:fa:e5:16:26:c6:2b:3e:d8:30:fb: 4d:ec:6f:9c:c1:f2:21:f8:7b:f9:0f:f5:3b:1a:e8: 34:2d:ed:59:41:29:e0:33:67:37:07:aa:62:50:5e: de:b5:38:62:a2:70:da:9d:ec:bc:64:14:90:58:fd: 95:8b:cf:56:14:54:65:09:22:9f:82:47:e7:86:6b: 0b:e1:b4:f6:e2:ec:c7:74:a4:01:76:35:03:97:ab: 3d:13:54:cc:fc:40:68:ec:6d:3a:c5:fb:1a:94:3c: 50:4f:7f:a4:66:58:29:f1:ed:ab:fa:8e:5d:49:b9: 99:d6:db:ee:26:41:c6:2b:e8:e8:e1:ba:c9:78:b4: 8e:16:b8:93:c1:5a:21:37:94:d1:28:30:ed:45:99: 5e:3b:80:5f:32:4c:c7:62:94:06:d0:8d:0d:94:1e: dc:68:70:4f:07:ac:9c:3c:e7:e2:15:91:a0:72:46: 79:d9:13:f7:a9:73:eb:71:62:7d:0a:86:57:ad:ef: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:43:71:1A:9C:5A:C7:79:86:16:70:F1:B6:70:C6:20:54:F3:16:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59637748-f9e2-4c44-86a6-89a1c02f3f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.203.128.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:b4:aa:43:0f:f2:84:ac:d1:8a:1e:52:6b:b7:23:8e:9e:60: c9:86:52:7d:da:9e:ee:10:b9:79:bb:8e:20:46:fd:64:e8:1d: bb:2c:83:4e:cc:35:02:4d:88:1e:4b:9b:74:71:e5:3d:12:4f: a2:ab:af:f8:44:76:47:96:e4:1e:60:1b:77:98:26:bc:23:02: 79:3a:4a:4a:15:4e:d2:d7:8e:7c:c5:04:16:83:71:cf:fb:a1: 33:39:8d:7f:69:2e:83:99:19:0e:f4:b7:39:fb:5c:de:6d:54: d3:86:b7:d2:8b:a1:83:85:26:56:05:a4:4c:97:b8:56:95:cd: 71:52:23:50:74:3d:8b:88:31:e4:73:f6:99:91:fb:ea:bd:fa: 6b:d8:f9:cc:69:eb:3d:82:ce:83:ca:cd:fc:4e:d7:5c:46:60: b5:b3:11:fb:8c:f0:74:87:52:09:66:1e:7b:9b:3f:9b:1f:34: 51:cb:7c:c3:29:48:1d:78:8f:2d:51:cf:c3:46:ab:f5:18:53: 11:97:27:78:20:ed:6e:3c:a8:17:65:a2:d3:29:41:61:ae:87: 0f:42:6c:78:90:27:5c:13:60:20:2b:ae:9f:5f:ee:9d:0d:7d: 6f:20:02:e5:cd:62:64:8d:9f:86:24:66:08:f8:84:0a:06:99: ac:a4:b1:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUqRh/LkXNYrWtLjjwDSNm5CosIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAxMDE3WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTIxNmJmMGU2YTU0ZDk4MWRhMzQ5ZTNmODI1NTcwYTdh NzdlOTg3YWMxNjYyYWI3ZDhmMTViOTcwODM2NjY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzXHAGeRvnGeK8I5lxbRY8vbDy6Z7Tq4rJ3PUUlE9naURM +WZBKY9vv2XHWVA6W/Z4F2T3fMct9dUc0c66JMCh+uUWJsYrPtgw+03sb5zB8iH4 e/kP9Tsa6DQt7VlBKeAzZzcHqmJQXt61OGKicNqd7LxkFJBY/ZWLz1YUVGUJIp+C R+eGawvhtPbi7Md0pAF2NQOXqz0TVMz8QGjsbTrF+xqUPFBPf6RmWCnx7av6jl1J uZnW2+4mQcYr6Ojhusl4tI4WuJPBWiE3lNEoMO1FmV47gF8yTMdilAbQjQ2UHtxo cE8HrJw85+IVkaByRnnZE/epc+txYn0Khlet771HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZENxGpxax3mGFnDxtnDGIFTzFhQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5NjM3NzQ4LWY5ZTItNGM0NC04NmE2LTg5YTFjMDJmM2YyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEsy4AwDQYJKoZIhvcNAQELBQADggEBAG+0qkMP8oSs0YoeUmu3I46eYMmG Un3anu4QuXm7jiBG/WToHbssg07MNQJNiB5Lm3Rx5T0ST6Krr/hEdkeW5B5gG3eY JrwjAnk6SkoVTtLXjnzFBBaDcc/7oTM5jX9pLoOZGQ70tzn7XN5tVNOGt9KLoYOF JlYFpEyXuFaVzXFSI1B0PYuIMeRz9pmR++q9+mvY+cxp6z2CzoPKzfxO11xGYLWz EfuM8HSHUglmHnubP5sfNFHLfMMpSB14jy1Rz8NGq/UYUxGXJ3gg7W48qBdlotMp QWGuhw9CbHiQJ1wTYCArrp9f7p0NfW8gAuXNYmSNn4YkZgj4hAoGmayksZ0= -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:00 2025 by rpki-client