$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c69534-e366-48e6-b04a-56bd3a94dba6.roa File: 68c69534-e366-48e6-b04a-56bd3a94dba6.roa (raw, json) Hash identifier: joGvv97FbetN4v4JOrswl/BJkVy67ePNhLZW0g8mb9c= Subject key identifier: 94:22:B5:4E:64:59:77:CF:D2:00:6B:58:1A:81:06:C9:8F:BD:DE:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21AE39A4B5082823FBAE6301556617E9BDAB7F22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c69534-e366-48e6-b04a-56bd3a94dba6.roa Signing time: Tue 20 May 2025 00:51:59 +0000 ROA not before: Tue 20 May 2025 00:51:59 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.146.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ae:39:a4:b5:08:28:23:fb:ae:63:01:55:66:17:e9:bd:ab:7f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:51:59 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=d8446f0cefbfb1d50599141add6a22c20144f4e383a4e6f67faf72a0462467ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:d6:8a:1f:21:ba:4f:24:b6:25:46:ed:20: a4:02:86:bc:8f:a8:e1:1b:d9:1c:a3:f3:13:43:3f: 1f:91:d4:ec:ea:7b:99:d3:6e:e5:2c:7c:e3:00:01: c3:14:85:77:07:92:c8:6d:b6:d4:e0:6f:45:e3:a3: 55:1c:e9:1f:9b:e0:e9:e1:3a:b0:d1:5e:44:09:91: 78:ef:e3:79:1a:20:b2:41:ac:52:1d:62:ee:85:75: 50:7e:8d:32:29:2d:a1:49:bd:5a:65:73:e1:be:5d: df:09:ca:75:99:5d:31:2a:ac:dc:db:2e:41:90:9d: ff:40:7c:22:85:2a:b0:51:2b:10:bc:23:50:47:2e: 98:0b:ee:cc:ae:dc:d7:84:27:27:ba:92:07:44:cb: d9:48:0c:3c:8d:f5:22:0c:09:a6:7f:91:56:e7:cb: 96:01:84:0b:9f:41:52:46:f8:f6:78:df:94:5a:e3: e1:39:27:e5:d5:67:7f:a4:eb:14:24:7b:45:a3:81: c4:57:a1:a8:37:9d:b5:65:20:0c:dc:6f:5c:58:da: c5:e8:e3:df:19:20:22:2a:31:c3:9d:4f:e5:c8:18: df:2d:87:e6:99:fb:7c:71:4e:a4:5c:4d:ba:a1:6f: 6f:8f:6e:42:c5:8c:96:12:b8:9b:90:bf:98:53:de: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:B5:4E:64:59:77:CF:D2:00:6B:58:1A:81:06:C9:8F:BD:DE:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c69534-e366-48e6-b04a-56bd3a94dba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.146.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:10:12:06:62:f4:a7:c5:6f:58:87:54:40:21:85:9c:19:73: a1:e8:f8:bd:61:e8:93:3a:1b:b5:d6:0c:53:96:9a:50:42:23: 1d:4d:9a:6e:cf:5a:b0:0a:47:8c:41:a3:4a:46:b1:51:95:95: f4:65:af:d0:36:79:7e:ce:39:11:e7:53:a7:df:8f:7a:2b:a0: 65:54:19:39:5f:fb:f6:2b:c3:37:e5:0b:7d:09:89:26:90:e8: 44:3b:b0:42:42:5f:d3:b5:da:57:ae:8f:4c:90:68:c3:1f:0a: 23:f9:41:eb:da:70:2f:bb:4a:80:70:94:5b:cf:fe:d0:ff:97: 85:b3:f9:74:95:59:db:b4:5c:69:04:fa:67:99:8e:18:8f:e4: 52:87:be:85:f9:d3:9f:fd:a5:25:01:f9:c1:46:aa:38:ed:72: b2:12:fa:b8:38:c5:d0:68:92:9c:39:51:d8:a0:9b:8a:ad:92: 5e:c8:80:5e:2f:26:ba:dd:3a:9b:56:c8:b4:f4:80:cc:f3:70: 23:57:bc:6a:ab:a4:4e:d3:8e:dd:15:ba:82:30:98:3d:1d:17: 6c:f7:82:a2:26:00:94:8b:31:b9:16:b5:8b:67:73:c3:d1:58: cd:d5:23:61:d5:73:d9:ce:3c:eb:73:17:8f:0c:f7:47:4a:23: 04:b6:78:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIa45pLUIKCP7rmMBVWYX6b2rfyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA1MTU5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODQ0NmYwY2VmYmZiMWQ1MDU5OTE0MWFkZDZhMjJjMjAx NDRmNGUzODNhNGU2ZjY3ZmFmNzJhMDQ2MjQ2N2VkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/xdaKHyG6TyS2JUbtIKQChryPqOEb2Ryj8xNDPx+R1Ozq e5nTbuUsfOMAAcMUhXcHkshtttTgb0Xjo1Uc6R+b4OnhOrDRXkQJkXjv43kaILJB rFIdYu6FdVB+jTIpLaFJvVplc+G+Xd8JynWZXTEqrNzbLkGQnf9AfCKFKrBRKxC8 I1BHLpgL7syu3NeEJye6kgdEy9lIDDyN9SIMCaZ/kVbny5YBhAufQVJG+PZ435Ra 4+E5J+XVZ3+k6xQke0WjgcRXoag3nbVlIAzcb1xY2sXo498ZICIqMcOdT+XIGN8t h+aZ+3xxTqRcTbqhb2+PbkLFjJYSuJuQv5hT3hYDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUlCK1TmRZd8/SAGtYGoEGyY+93p0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4YzY5NTM0LWUzNjYtNDhlNi1iMDRhLTU2YmQzYTk0ZGJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4kjANBgkqhkiG9w0BAQsFAAOCAQEAoBASBmL0p8VvWIdUQCGFnBlzoej4 vWHokzobtdYMU5aaUEIjHU2abs9asApHjEGjSkaxUZWV9GWv0DZ5fs45EedTp9+P eiugZVQZOV/79ivDN+ULfQmJJpDoRDuwQkJf07XaV66PTJBowx8KI/lB69pwL7tK gHCUW8/+0P+XhbP5dJVZ27RcaQT6Z5mOGI/kUoe+hfnTn/2lJQH5wUaqOO1yshL6 uDjF0GiSnDlR2KCbiq2SXsiAXi8mut06m1bItPSAzPNwI1e8aqukTtOO3RW6gjCY PR0XbPeCoiYAlIsxuRa1i2dzw9FYzdUjYdVz2c4863MXjwz3R0ojBLZ41g== -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:12 2025 by rpki-client