$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa File: 5ca6bffe-b0c2-452a-ba04-285ef047a139.roa (raw, json) Hash identifier: LtQsD4zCeqhbgFOeaxPA5nXc4HyACt5iWbGBdaLwIjk= Subject key identifier: 8A:99:66:B9:97:54:97:8C:74:F4:77:3C:E4:72:B4:CB:A2:E8:7F:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0FD3250CA24BA8DB0BE0FB799A33066D96CE41A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa Signing time: Fri 30 May 2025 00:22:20 +0000 ROA not before: Fri 30 May 2025 00:22:20 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d3:25:0c:a2:4b:a8:db:0b:e0:fb:79:9a:33:06:6d:96:ce:41:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:22:20 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=aff98e65acd90537076b129dd859c6ffc26135ca71ed9c58c9194ae9c3a217b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:a5:92:1a:00:41:2f:4f:ae:db:67:24:ca: b5:74:27:65:82:ba:4c:24:b8:44:d2:43:97:90:0b: 48:b1:b0:7a:ce:c5:f0:3d:a6:c2:3b:bb:32:ad:1a: 99:ed:8e:ef:77:82:86:33:e9:f3:96:38:09:4e:02: bc:68:53:a9:1b:a8:47:fc:3b:57:d0:16:92:78:b6: a4:d8:dd:ea:60:ca:15:de:88:e9:43:b2:73:1a:04: 1c:7f:69:98:6e:b1:c3:7e:37:49:96:cb:0f:50:56: 83:3c:16:35:9b:c9:64:eb:c8:60:31:74:1b:37:dc: 2f:08:98:82:b9:9b:75:49:5d:7d:29:0b:4a:9a:03: e4:60:59:da:45:fe:b3:7c:38:ae:7a:ff:23:ba:9c: 0e:e3:c6:8f:74:e8:ec:1c:f0:83:ff:29:48:3e:92: f0:c5:96:ff:8b:a6:52:f0:ba:95:d0:7d:f8:d6:60: 17:d8:d9:c2:4b:80:82:3a:97:6b:3c:83:65:a3:fb: 3d:54:83:02:59:01:d7:2c:94:09:ef:21:08:75:cf: 7e:42:f7:18:3e:3e:cf:0c:dc:11:d7:14:c0:36:4e: 64:b6:ae:5d:93:94:02:c2:9b:90:0d:03:08:b6:40: 5d:a1:06:0a:dc:f7:36:ee:8a:b8:b8:bf:4e:ca:25: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:99:66:B9:97:54:97:8C:74:F4:77:3C:E4:72:B4:CB:A2:E8:7F:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca6bffe-b0c2-452a-ba04-285ef047a139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption c5:43:fd:73:74:97:5b:45:ec:40:38:41:7d:f9:5f:f1:f4:35: e2:e9:a7:d4:70:14:b9:57:74:c3:81:95:48:de:22:af:65:cd: 65:48:36:fc:13:c3:48:d1:82:9f:0c:a2:a0:c0:d7:8f:e3:e6: 3b:2e:08:d6:a1:91:fc:11:2d:29:c3:30:cd:51:1f:84:95:be: 0e:d5:51:cb:c6:b9:56:91:ea:ee:93:37:00:e9:b6:b2:29:f5: 3c:a7:83:2c:9c:1c:a9:91:6d:6f:03:b8:61:83:74:77:d7:eb: de:32:0c:a1:1c:0c:1c:6b:a9:2d:c4:9a:5b:74:cb:c7:f2:cb: 8b:be:b6:f5:48:03:aa:b7:65:6d:8e:85:f5:13:80:ac:92:60: 59:da:b9:5f:b5:e6:7d:cf:f6:b9:8b:67:63:c2:6d:a5:ce:bf: dc:b3:7c:82:fe:39:bc:9a:cc:f3:be:ee:14:31:64:86:c2:d8: 1e:f3:af:b4:64:cd:b0:b9:6d:f0:61:65:6d:03:2b:7c:ea:d7: a4:a6:9e:79:c9:1f:35:fd:48:7b:35:72:3d:c1:e2:a4:98:bb: 56:ee:06:a5:78:ad:65:81:81:de:e9:2d:0d:d1:d5:f6:7a:a9: c8:45:da:92:a6:41:dd:9d:91:ec:bb:d3:4d:b3:89:7b:37:b4: 72:72:1f:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD9MlDKJLqNsL4Pt5mjMGbZbOQaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAyMjIwWhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmY5OGU2NWFjZDkwNTM3MDc2YjEyOWRkODU5YzZmZmMy NjEzNWNhNzFlZDljNThjOTE5NGFlOWMzYTIxN2IxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2TaWSGgBBL0+u22ckyrV0J2WCukwkuETSQ5eQC0ixsHrO xfA9psI7uzKtGpntju93goYz6fOWOAlOArxoU6kbqEf8O1fQFpJ4tqTY3epgyhXe iOlDsnMaBBx/aZhuscN+N0mWyw9QVoM8FjWbyWTryGAxdBs33C8ImIK5m3VJXX0p C0qaA+RgWdpF/rN8OK56/yO6nA7jxo906Owc8IP/KUg+kvDFlv+LplLwupXQffjW YBfY2cJLgII6l2s8g2Wj+z1UgwJZAdcslAnvIQh1z35C9xg+Ps8M3BHXFMA2TmS2 rl2TlALCm5ANAwi2QF2hBgrc9zbuiri4v07KJWUvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiplmuZdUl4x09Hc85HK0y6Lof8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjYTZiZmZlLWIwYzItNDUyYS1iYTA0LTI4NWVmMDQ3YTEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MTANBgkqhkiG9w0BAQsFAAOCAQEAxUP9c3SXW0XsQDhBfflf8fQ14umn 1HAUuVd0w4GVSN4ir2XNZUg2/BPDSNGCnwyioMDXj+PmOy4I1qGR/BEtKcMwzVEf hJW+DtVRy8a5VpHq7pM3AOm2sin1PKeDLJwcqZFtbwO4YYN0d9fr3jIMoRwMHGup LcSaW3TLx/LLi7629UgDqrdlbY6F9ROArJJgWdq5X7Xmfc/2uYtnY8Jtpc6/3LN8 gv45vJrM877uFDFkhsLYHvOvtGTNsLlt8GFlbQMrfOrXpKaeeckfNf1IezVyPcHi pJi7Vu4GpXitZYGB3uktDdHV9nqpyEXakqZB3Z2R7LvTTbOJeze0cnIfTg== -----END CERTIFICATE-----Generated at Sun Jun 1 05:01:17 2025 by rpki-client