$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa File: 643f38bf-7102-4875-9b05-6243ebeaceb0.roa (raw, json) Hash identifier: wS2LmFjt3LA9c7QZ3XMeBG5E6qnQ1O9UnY2MGP3btHA= Subject key identifier: 95:63:A0:74:B4:C5:B9:EA:12:2A:92:ED:D2:DD:88:D5:64:8C:73:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A440B923703D3F6CE3D9297497562A4BF751461 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa Signing time: Tue 20 May 2025 15:21:46 +0000 ROA not before: Tue 20 May 2025 15:21:46 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 75.2.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:44:0b:92:37:03:d3:f6:ce:3d:92:97:49:75:62:a4:bf:75:14:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:21:46 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=88495222f4668348053f218c505a365d4159275da456715378f4875f137a9b1f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:df:e5:a4:5e:8f:ce:45:bb:a1:08:d0:2b: 57:74:c9:07:53:8b:9b:be:70:4c:f4:6c:08:54:91: f3:2b:11:32:e8:c9:59:54:d7:ca:e5:15:fe:c0:35: ad:2e:8c:90:6f:09:58:cd:44:e4:36:9b:81:d4:82: 1a:7a:31:45:23:b1:52:51:a3:9e:6a:44:56:ef:f5: 21:dd:b3:0b:ad:57:9e:e4:a7:f0:61:1e:c2:fd:43: 32:62:58:4a:ec:24:7c:7d:da:07:f6:da:a6:8c:6f: ac:93:98:fe:4c:f5:de:a7:bd:93:55:15:ed:36:8f: 99:1d:af:f7:af:a7:eb:d8:63:4f:11:58:76:35:e1: 1c:9a:de:bf:d5:06:7e:92:7e:03:fe:da:49:04:ca: 62:43:d4:24:b4:99:94:c0:2b:50:25:79:39:b0:87: 76:84:f0:78:ec:bd:d9:fc:38:f1:1a:94:64:d9:5a: 6b:0c:c4:97:44:1c:a5:7f:04:9a:fe:b8:b3:24:95: 44:27:45:69:15:99:95:1e:18:16:21:4e:1f:44:97: 53:bd:3b:b6:ba:b3:1d:d2:cd:56:1a:51:d6:36:a5: fa:fc:38:70:e1:94:e7:ad:5d:40:dc:a3:76:1f:00: 88:07:c5:a0:1f:93:81:d7:01:4e:1f:72:a6:6c:0d: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:63:A0:74:B4:C5:B9:EA:12:2A:92:ED:D2:DD:88:D5:64:8C:73:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.128.0/18 Signature Algorithm: sha256WithRSAEncryption bd:83:c2:3c:3e:09:ac:ee:72:62:20:10:dc:a1:47:c8:e2:a0: 17:fe:f7:5f:10:ba:16:34:b3:f0:b1:f2:f2:b6:42:d7:b4:a7: 56:17:7a:87:a4:71:2b:eb:e7:c1:b1:32:94:eb:3e:2a:bc:30: 6e:31:b5:d1:16:50:ca:bd:3c:9d:55:95:77:31:ed:b8:df:af: 2e:3b:28:b8:14:50:c0:bf:2e:39:cf:db:36:a6:79:bd:4d:6d: ed:09:86:44:fd:82:d3:d8:b9:8c:3d:ae:a7:24:b5:ba:b9:a5: 11:c0:1c:68:9d:c8:7b:58:69:ca:a0:39:9d:c2:36:c9:a3:09: db:ef:55:34:37:43:81:91:58:fc:dc:ff:02:e6:0c:7f:72:c0: 7c:95:2e:42:06:c0:ec:bb:d3:7b:5b:86:9f:8c:ea:21:57:ec: 84:c8:16:a1:56:98:9e:4d:43:8a:ab:db:a1:f5:82:1a:35:a5: 0c:f7:5c:ef:e2:d1:2d:a9:ed:16:88:5b:8f:cd:79:d5:b8:27: 2a:9e:db:85:1c:d3:bf:f6:99:b9:0e:df:67:94:c1:26:22:f5: 86:d2:8c:98:b3:38:88:6e:c1:49:ca:65:f8:4a:79:12:83:9c: 38:d1:37:a3:27:a3:bf:24:b6:31:bc:22:8a:26:51:0d:13:a4: f8:38:80:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGkQLkjcD0/bOPZKXSXVipL91FGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUyMTQ2WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODQ5NTIyMmY0NjY4MzQ4MDUzZjIxOGM1MDVhMzY1ZDQx NTkyNzVkYTQ1NjcxNTM3OGY0ODc1ZjEzN2E5YjFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHZ9/lpF6PzkW7oQjQK1d0yQdTi5u+cEz0bAhUkfMrETLo yVlU18rlFf7ANa0ujJBvCVjNROQ2m4HUghp6MUUjsVJRo55qRFbv9SHdswutV57k p/BhHsL9QzJiWErsJHx92gf22qaMb6yTmP5M9d6nvZNVFe02j5kdr/evp+vYY08R WHY14Rya3r/VBn6SfgP+2kkEymJD1CS0mZTAK1AleTmwh3aE8Hjsvdn8OPEalGTZ WmsMxJdEHKV/BJr+uLMklUQnRWkVmZUeGBYhTh9El1O9O7a6sx3SzVYaUdY2pfr8 OHDhlOetXUDco3YfAIgHxaAfk4HXAU4fcqZsDYphAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlWOgdLTFueoSKpLt0t2I1WSMc6UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0M2YzOGJmLTcxMDItNDg3NS05YjA1LTYyNDNlYmVhY2ViMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZLAoAwDQYJKoZIhvcNAQELBQADggEBAL2Dwjw+CazucmIgENyhR8jioBf+ 918QuhY0s/Cx8vK2Qte0p1YXeoekcSvr58GxMpTrPiq8MG4xtdEWUMq9PJ1VlXcx 7bjfry47KLgUUMC/LjnP2zameb1Nbe0JhkT9gtPYuYw9rqcktbq5pRHAHGidyHtY acqgOZ3CNsmjCdvvVTQ3Q4GRWPzc/wLmDH9ywHyVLkIGwOy703tbhp+M6iFX7ITI FqFWmJ5NQ4qr26H1gho1pQz3XO/i0S2p7RaIW4/NedW4Jyqe24Uc07/2mbkO32eU wSYi9YbSjJizOIhuwUnKZfhKeRKDnDjRN6Mno78ktjG8IoomUQ0TpPg4gJs= -----END CERTIFICATE-----Generated at Sun Jun 1 05:27:18 2025 by rpki-client