$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69829938-06a4-482d-9a69-118d0b32c04c.roa File: 69829938-06a4-482d-9a69-118d0b32c04c.roa (raw, json) Hash identifier: XohI/wpfWTaoE/QeOhZqLyw6HQtcF6wLqjLkVlW9EpM= Subject key identifier: DC:78:B9:E9:03:90:43:22:32:D5:0B:CB:4C:ED:0F:0E:58:28:84:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2693E0EF0DFFB9F9864E4D914799F56489B87B51 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69829938-06a4-482d-9a69-118d0b32c04c.roa Signing time: Tue 13 May 2025 00:50:15 +0000 ROA not before: Tue 13 May 2025 00:50:15 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:93:e0:ef:0d:ff:b9:f9:86:4e:4d:91:47:99:f5:64:89:b8:7b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:50:15 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=5c2356cbc9ceecd898e3858797781cf9e215c87906f9b0ec019a42a85371ed78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:4b:ce:03:c9:7d:2a:21:93:dc:a9:ba:3a: b7:2f:06:37:14:4f:c9:c4:0e:37:2e:d2:cf:73:ff: b5:28:c5:2e:d1:21:e2:da:0e:4b:d8:b6:5f:52:f3: b3:0e:20:8a:2b:ac:17:ee:53:bc:97:12:f8:88:a1: f8:d1:42:f5:e0:8e:35:92:5c:49:e6:76:b1:cf:3b: f5:59:59:39:bc:ca:30:5c:17:9a:69:74:d0:77:bb: a4:bf:2a:b2:93:be:50:a7:f4:e9:ba:0c:15:c2:de: b6:fe:2b:05:74:2d:a7:7f:e9:e1:9a:ad:a4:46:cd: 20:49:24:ac:6b:fb:a4:d6:86:1d:48:d3:5a:be:48: c1:f2:cf:bb:5f:bc:c0:c6:7d:f9:a2:49:d2:e2:ea: 32:c0:91:31:0f:38:28:0a:fc:c4:03:46:d2:47:5e: 2d:10:cf:d3:22:c8:1a:76:24:25:fe:61:5b:83:6e: ff:99:36:e7:30:7e:80:ba:1f:93:1a:60:76:d4:66: 8f:83:a2:2e:cc:9d:e2:e6:0e:29:e5:0f:ce:64:ae: 50:0b:22:b5:60:f0:22:a5:9b:a0:3a:d3:5f:4b:2a: 53:6f:f6:80:60:67:45:5d:8e:30:56:1d:f9:a9:5d: 31:5e:bf:f2:26:e4:8c:9d:57:19:4c:95:0b:c1:58: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:78:B9:E9:03:90:43:22:32:D5:0B:CB:4C:ED:0F:0E:58:28:84:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69829938-06a4-482d-9a69-118d0b32c04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.248.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:89:05:53:66:3e:1a:5c:05:4b:21:4a:c0:29:75:e3:d0:ce: be:30:0f:df:62:4b:ed:ba:7c:ee:9e:10:e7:f4:b7:ac:d2:c1: 42:13:d0:d7:d2:c2:ec:56:1e:24:c6:53:39:57:b1:c8:87:96: f4:49:14:0c:23:75:f4:c3:c8:81:e6:70:5e:88:f0:b9:d3:aa: bd:91:46:6c:38:a1:21:08:e4:76:97:6f:9b:ae:11:38:26:9b: 28:68:46:dd:c0:46:62:0c:b0:f1:ad:62:36:e0:2a:fa:bb:ef: 50:8d:f1:80:07:20:e4:14:86:db:25:54:4a:d1:a2:88:6a:25: a4:72:65:46:fd:4d:4e:20:1e:1e:c7:54:f1:55:fb:bf:9e:49: 06:b6:36:64:ba:ce:7c:3a:00:82:fe:cb:b9:ae:de:81:35:88: b9:68:95:1d:a4:06:10:06:91:6a:38:5b:ad:dd:d4:60:9c:2f: 09:14:9d:bd:88:a5:97:fa:34:66:d3:76:4d:e8:87:5a:e3:7a: dd:7f:b4:e0:24:b9:12:87:c2:3f:ed:c3:82:58:a2:2d:dc:f2: 66:a9:9b:83:6b:20:e1:f2:7d:16:1d:8c:69:4a:c3:cc:04:20: 0f:8c:4f:4b:f6:6f:16:47:07:5b:53:cc:08:db:7d:dc:d4:b0: 20:10:db:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJpPg7w3/ufmGTk2RR5n1ZIm4e1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDA1MDE1WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzIzNTZjYmM5Y2VlY2Q4OThlMzg1ODc5Nzc4MWNmOWUy MTVjODc5MDZmOWIwZWMwMTlhNDJhODUzNzFlZDc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjkkvOA8l9KiGT3Km6OrcvBjcUT8nEDjcu0s9z/7UoxS7R IeLaDkvYtl9S87MOIIorrBfuU7yXEviIofjRQvXgjjWSXEnmdrHPO/VZWTm8yjBc F5ppdNB3u6S/KrKTvlCn9Om6DBXC3rb+KwV0Lad/6eGaraRGzSBJJKxr+6TWhh1I 01q+SMHyz7tfvMDGffmiSdLi6jLAkTEPOCgK/MQDRtJHXi0Qz9MiyBp2JCX+YVuD bv+ZNucwfoC6H5MaYHbUZo+Doi7MneLmDinlD85krlALIrVg8CKlm6A6019LKlNv 9oBgZ0VdjjBWHfmpXTFev/Im5IydVxlMlQvBWAIfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3Hi56QOQQyIy1QvLTO0PDlgohNQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5ODI5OTM4LTA2YTQtNDgyZC05YTY5LTExOGQwYjMyYzA0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFAPgwDQYJKoZIhvcNAQELBQADggEBAH2JBVNmPhpcBUshSsApdePQzr4w D99iS+26fO6eEOf0t6zSwUIT0NfSwuxWHiTGUzlXsciHlvRJFAwjdfTDyIHmcF6I 8LnTqr2RRmw4oSEI5HaXb5uuETgmmyhoRt3ARmIMsPGtYjbgKvq771CN8YAHIOQU htslVErRoohqJaRyZUb9TU4gHh7HVPFV+7+eSQa2NmS6znw6AIL+y7mu3oE1iLlo lR2kBhAGkWo4W63d1GCcLwkUnb2IpZf6NGbTdk3oh1rjet1/tOAkuRKHwj/tw4JY oi3c8mapm4NrIOHyfRYdjGlKw8wEIA+MT0v2bxZHB1tTzAjbfdzUsCAQ25g= -----END CERTIFICATE-----Generated at Sun Jun 1 04:27:42 2025 by rpki-client