$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa File: 703d892d-ff7a-4463-88f7-014e2ca759c0.roa (raw, json) Hash identifier: pmj9MBcdIKfDLZA/ftNIPvrGa649tyMoIYw+UH5B5VQ= Subject key identifier: 64:82:FF:AA:2C:B9:CD:D4:A8:B2:C3:63:0F:C3:CF:B5:72:A2:29:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D9BFAF00A4FA6674EB055D9D4B589FB4646C869 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa Signing time: Wed 28 May 2025 00:40:31 +0000 ROA not before: Wed 28 May 2025 00:40:31 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.91.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9b:fa:f0:0a:4f:a6:67:4e:b0:55:d9:d4:b5:89:fb:46:46:c8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:40:31 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=e4c24e0332c8ca6c4b1171fb624d0fd03a8ba82fd68328308ace817aa62f7d8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:04:98:dd:bc:76:41:f3:0a:20:f9:ac:f3: 99:43:e0:8a:1f:cc:58:78:a3:70:6d:49:42:59:59: b4:51:44:f0:c5:29:7e:2e:ed:1e:15:7a:7c:f1:c5: bc:02:ba:3e:ba:03:e7:50:08:ac:d6:98:b3:c6:5a: 7f:dd:e1:44:db:9c:08:2e:c4:fa:3e:1e:19:37:df: 11:9c:62:87:c0:7b:b1:cc:b9:aa:c1:b1:22:19:fc: 34:5f:e2:aa:b9:3a:93:6d:04:de:fa:9e:01:ca:b3: 38:8d:9a:b5:1d:69:19:6f:e8:27:b0:21:c0:82:77: 2f:47:0d:ac:cc:63:45:32:61:a6:2e:ca:7c:da:89: e1:1f:5e:a6:30:9e:7c:0f:34:d4:ff:f0:9c:bf:d1: 60:28:03:9a:4c:86:86:86:4e:0b:33:b7:cb:a2:07: 07:78:a0:ac:5d:38:57:8f:7b:b0:29:24:52:e8:28: 01:07:61:1c:77:b3:c1:29:8a:59:2b:d5:2b:5f:a5: 33:aa:de:92:36:9b:c4:ef:3b:61:50:cb:a5:c1:23: b5:5d:fc:12:f3:46:6b:8d:ae:1b:e1:f8:85:e3:88: b3:f7:08:3f:f6:8b:e2:7c:f7:eb:ee:ef:c8:c9:27: ae:c6:db:72:63:d7:4a:f6:b4:57:35:ec:a1:52:99: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:FF:AA:2C:B9:CD:D4:A8:B2:C3:63:0F:C3:CF:B5:72:A2:29:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.91.128.0/18 Signature Algorithm: sha256WithRSAEncryption 20:6f:eb:32:91:69:6e:3d:e2:65:aa:9c:c5:7b:cd:73:47:6c: de:8c:65:44:14:83:31:f4:d1:92:eb:6d:66:8e:95:54:b1:38: e1:a9:43:20:97:22:56:ce:f2:57:88:c1:c1:cd:21:c0:b8:f0: 19:22:c3:70:14:2e:9e:ec:c4:26:6c:08:b4:a9:87:fe:03:6e: 7c:a5:0d:76:b5:6a:24:30:93:ca:98:1f:7f:40:d6:65:0a:0f: 7e:3d:9b:90:fd:a7:ad:2a:93:3f:91:e5:d1:60:ca:88:ba:39: 29:30:63:ac:79:ff:86:63:4c:ad:38:fd:aa:b7:08:7a:ca:55: 97:c6:67:06:89:c0:df:06:4a:3d:9d:60:26:55:f2:dc:74:c3: 90:34:38:81:8f:c3:9a:b2:d1:0a:4b:f4:2d:4a:f2:60:85:d2: 42:f3:b3:a1:c9:d9:e3:f7:28:d3:f9:35:9e:bc:48:8d:ed:65: 52:24:3d:9c:f2:34:54:db:ac:61:ce:3b:02:94:51:72:08:c2: f1:4d:e7:34:2c:6e:b1:20:52:ec:48:ed:b5:36:16:00:ae:7b: c4:72:db:5a:a7:63:a3:ab:06:21:79:6d:6f:62:55:1f:cc:cd: 87:4e:3e:93:70:47:1f:66:9e:02:bc:ff:58:7d:da:d3:cb:a5: a9:14:5b:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTZv68ApPpmdOsFXZ1LWJ+0ZGyGkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDA0MDMxWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGMyNGUwMzMyYzhjYTZjNGIxMTcxZmI2MjRkMGZkMDNh OGJhODJmZDY4MzI4MzA4YWNlODE3YWE2MmY3ZDhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDADQSY3bx2QfMKIPms85lD4IofzFh4o3BtSUJZWbRRRPDF KX4u7R4VenzxxbwCuj66A+dQCKzWmLPGWn/d4UTbnAguxPo+Hhk33xGcYofAe7HM uarBsSIZ/DRf4qq5OpNtBN76ngHKsziNmrUdaRlv6CewIcCCdy9HDazMY0UyYaYu ynzaieEfXqYwnnwPNNT/8Jy/0WAoA5pMhoaGTgszt8uiBwd4oKxdOFePe7ApJFLo KAEHYRx3s8Epilkr1StfpTOq3pI2m8TvO2FQy6XBI7Vd/BLzRmuNrhvh+IXjiLP3 CD/2i+J89+vu78jJJ67G23Jj10r2tFc17KFSma3jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZIL/qiy5zdSossNjD8PPtXKiKYMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwM2Q4OTJkLWZmN2EtNDQ2My04OGY3LTAxNGUyY2E3NTljMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAW4AwDQYJKoZIhvcNAQELBQADggEBACBv6zKRaW494mWqnMV7zXNHbN6M ZUQUgzH00ZLrbWaOlVSxOOGpQyCXIlbO8leIwcHNIcC48Bkiw3AULp7sxCZsCLSp h/4DbnylDXa1aiQwk8qYH39A1mUKD349m5D9p60qkz+R5dFgyoi6OSkwY6x5/4Zj TK04/aq3CHrKVZfGZwaJwN8GSj2dYCZV8tx0w5A0OIGPw5qy0QpL9C1K8mCF0kLz s6HJ2eP3KNP5NZ68SI3tZVIkPZzyNFTbrGHOOwKUUXIIwvFN5zQsbrEgUuxI7bU2 FgCue8Ry21qnY6OrBiF5bW9iVR/MzYdOPpNwRx9mngK8/1h92tPLpakUW6U= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:48 2025 by rpki-client