$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa File: 5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa (raw, json) Hash identifier: EDmKtTpPks/MPidGL2mScpRUFnA+03/3EABs/Sz9V70= Subject key identifier: FE:04:77:EE:3F:6A:0F:7A:F7:2B:AA:7B:7F:BE:AA:0C:6D:03:76:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 203CF50E3D83DF941A6559AFEF353D65197F9B82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa Signing time: Sat 10 May 2025 00:21:33 +0000 ROA not before: Sat 10 May 2025 00:21:33 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 66.240.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3c:f5:0e:3d:83:df:94:1a:65:59:af:ef:35:3d:65:19:7f:9b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:21:33 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=46fcf0e9f0b023734c5adf95eaa6aca9c2a102318d4c3fdc9879bdd43ab488eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:19:71:d3:a1:ee:74:97:71:88:e7:1c:32: 45:d3:cd:6c:44:cb:f8:cd:38:ce:ca:95:86:53:2f: 5b:47:9d:e0:91:55:92:98:3a:47:c9:e2:09:fe:b5: 6a:28:27:83:c5:62:6c:b1:23:4b:04:d1:a0:92:53: e3:38:fa:e4:4c:4b:62:fc:95:85:9b:71:e5:63:c8: d5:98:a4:17:f8:62:a2:26:2e:03:cd:d8:7e:56:55: 6c:e4:d6:06:d2:3f:65:fa:91:2a:b7:be:81:6a:dc: f8:96:c3:25:2e:61:4d:b8:fb:85:e3:cc:c6:92:22: 6e:a3:01:89:d6:fb:ac:90:2c:a3:b3:8c:a7:db:28: a9:0c:7f:38:cf:e5:ce:50:1e:4b:9a:6a:68:87:dd: 10:56:e9:a8:c8:a9:1d:11:2e:e2:9e:c4:c8:d2:45: 0e:3d:01:09:d0:90:5f:56:ae:8a:0e:24:89:03:77: 83:5c:fb:18:97:5c:85:e8:1f:37:8a:34:8d:32:56: 6f:67:d6:36:60:50:3d:94:58:d0:a4:88:ed:38:f6: 73:6d:f5:b6:35:8d:58:8c:4b:b4:92:48:8e:14:96: 07:68:60:0d:47:ea:5e:a5:16:a9:5a:08:5e:9e:3a: c0:c1:7a:2a:d3:1d:4e:fd:d9:85:91:d4:95:7c:d1: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:04:77:EE:3F:6A:0F:7A:F7:2B:AA:7B:7F:BE:AA:0C:6D:03:76:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d50dae9-a2f6-42d1-a23e-9f361c3fed24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.240.64.0/18 Signature Algorithm: sha256WithRSAEncryption 6c:b4:ee:f6:03:42:92:22:f4:c5:33:a7:c6:df:29:0a:b1:13: ef:52:53:36:21:5a:0f:2b:89:2e:b8:23:ca:51:0d:ab:9a:39: 95:f9:a2:34:a9:0b:87:cd:ed:9d:92:3a:4f:3a:0e:36:b9:50: 32:c7:82:7c:c2:30:fe:43:1f:8c:ae:f1:38:9c:d3:97:ca:c7: 2f:25:72:81:0e:17:4e:ac:15:af:69:45:15:e1:fa:54:6f:b7: 53:f1:d9:a9:6a:7c:42:ec:85:c8:87:0f:07:b8:61:59:2b:36: f1:e4:70:73:0c:ca:4b:43:32:78:26:f8:d6:ba:e9:5e:37:51: 4d:9c:fe:1c:0a:67:68:13:12:91:8d:5a:75:5b:e4:9f:53:f1: 9a:85:5d:b4:fb:3a:f6:8d:3d:df:86:fa:bc:cc:35:fc:0d:42: 89:8c:d8:75:7c:fc:f3:3e:2e:a6:bb:b4:df:92:f5:d3:e4:4c: 97:5a:33:a3:8f:73:8f:3b:07:47:eb:28:e7:0d:e2:67:11:34: 1f:0f:41:ef:c4:e6:91:3e:1b:6c:3d:fb:3f:0e:db:7c:77:d4: 53:c5:93:2a:34:28:f0:3b:80:ac:ea:8e:27:6f:99:98:22:d0: 87:ea:75:54:88:6d:9c:4f:f6:6e:47:27:68:85:c7:50:c6:79: fc:ff:ef:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIDz1Dj2D35QaZVmv7zU9ZRl/m4IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAyMTMzWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmZjZjBlOWYwYjAyMzczNGM1YWRmOTVlYWE2YWNhOWMy YTEwMjMxOGQ0YzNmZGM5ODc5YmRkNDNhYjQ4OGViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCPhlx06HudJdxiOccMkXTzWxEy/jNOM7KlYZTL1tHneCR VZKYOkfJ4gn+tWooJ4PFYmyxI0sE0aCSU+M4+uRMS2L8lYWbceVjyNWYpBf4YqIm LgPN2H5WVWzk1gbSP2X6kSq3voFq3PiWwyUuYU24+4XjzMaSIm6jAYnW+6yQLKOz jKfbKKkMfzjP5c5QHkuaamiH3RBW6ajIqR0RLuKexMjSRQ49AQnQkF9WrooOJIkD d4Nc+xiXXIXoHzeKNI0yVm9n1jZgUD2UWNCkiO049nNt9bY1jViMS7SSSI4Ulgdo YA1H6l6lFqlaCF6eOsDBeirTHU792YWR1JV80X4zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/gR37j9qD3r3K6p7f76qDG0DdtgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkNTBkYWU5LWEyZjYtNDJkMS1hMjNlLTlmMzYxYzNmZWQyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZC8EAwDQYJKoZIhvcNAQELBQADggEBAGy07vYDQpIi9MUzp8bfKQqxE+9S UzYhWg8riS64I8pRDauaOZX5ojSpC4fN7Z2SOk86Dja5UDLHgnzCMP5DH4yu8Tic 05fKxy8lcoEOF06sFa9pRRXh+lRvt1Px2alqfELshciHDwe4YVkrNvHkcHMMyktD Mngm+Na66V43UU2c/hwKZ2gTEpGNWnVb5J9T8ZqFXbT7OvaNPd+G+rzMNfwNQomM 2HV8/PM+Lqa7tN+S9dPkTJdaM6OPc487B0frKOcN4mcRNB8PQe/E5pE+G2w9+z8O 23x31FPFkyo0KPA7gKzqjidvmZgi0IfqdVSIbZxP9m5HJ2iFx1DGefz/73s= -----END CERTIFICATE-----Generated at Sun Jun 1 04:27:40 2025 by rpki-client