$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa File: 75dc0196-dbba-412b-92e6-c3cb6a606623.roa (raw, json) Hash identifier: JKOEWdhmQNI9RhJPzncMKuXJFgLr50FYuWmxO7OHv+U= Subject key identifier: DE:9B:B4:D1:49:51:30:EB:97:A3:F6:57:5C:5F:78:C4:17:6E:5E:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0166AE64599822F8599F07E93B5FA8A13C812E83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa Signing time: Wed 07 May 2025 00:41:24 +0000 ROA not before: Wed 07 May 2025 00:41:24 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.145.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:66:ae:64:59:98:22:f8:59:9f:07:e9:3b:5f:a8:a1:3c:81:2e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:41:24 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=eed6539bcdc8d166c19090030b7e223286212385ea9b1b828f995c6d7bb32af0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:6a:86:01:d3:87:cd:55:5b:bf:cd:7c:a4: d8:03:7c:7a:d6:1b:88:38:c2:b2:fe:0d:11:25:81: 91:eb:ba:7d:a6:be:3b:df:84:69:28:3c:14:e1:fd: d6:97:7e:bb:ae:eb:3f:ae:4a:ab:cb:df:d4:49:c7: 47:ef:a1:2b:fc:a4:3f:d4:26:57:d9:99:1f:c7:9e: 48:94:33:43:65:19:9e:8d:4d:73:ed:99:8b:03:4e: 7a:c7:15:74:55:83:f6:e0:e7:ac:4f:20:ea:a2:26: 4b:f7:2a:95:a2:04:95:df:cf:c4:1e:8f:46:99:18: 5a:f4:0d:63:9d:c8:bb:ce:4b:f4:09:ad:47:c8:64: 7f:5f:52:b8:4e:0f:22:13:da:75:ab:a1:29:3e:52: 33:e0:45:e1:3d:d9:18:8c:14:cf:d3:88:42:97:3c: 39:ee:b1:25:df:23:9d:79:76:ad:8c:64:7e:70:fc: c0:c7:b4:b6:ac:6a:7e:c2:67:41:cd:d1:f6:d2:35: 1b:86:e0:de:17:9e:84:10:64:66:8b:a1:07:41:b1: 02:04:09:d9:5b:7b:35:41:d9:3b:b7:ef:fd:61:b0: fa:da:05:48:f3:4a:22:c0:09:69:d5:cf:be:51:d0: 53:d2:c1:ad:95:0b:b1:83:86:ec:68:f5:f0:90:88: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9B:B4:D1:49:51:30:EB:97:A3:F6:57:5C:5F:78:C4:17:6E:5E:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75dc0196-dbba-412b-92e6-c3cb6a606623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.145.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:2d:52:0d:e0:40:3a:80:84:90:23:93:f0:41:33:61:f2:38: d9:8f:01:43:50:43:b2:59:1c:69:3f:90:ef:35:1b:43:ec:a1: 43:60:af:f5:eb:37:a9:f7:20:0f:db:f7:7e:88:20:19:0c:76: 33:21:c9:c2:85:63:67:04:e6:f2:69:bc:30:98:c4:f4:f0:ba: c2:27:21:89:17:6c:1d:88:80:05:ff:66:a0:3b:1f:40:97:5e: 52:b2:3b:41:62:3b:af:b4:a8:7e:5e:8d:23:93:eb:7c:8c:3b: e4:a3:39:f5:10:45:7d:9a:2d:e0:a3:11:fc:5d:ff:80:15:8f: 9d:41:02:73:2e:5e:50:c2:43:7a:99:14:1d:cc:ac:62:0d:d5: da:6e:11:48:67:4d:cc:dd:ee:ce:f9:70:b6:0d:45:31:8f:93: a8:9a:57:4f:ce:ca:f1:b9:a5:8e:bf:27:44:bc:bc:22:53:c4: f4:04:05:23:7d:60:72:9d:0f:ce:36:a1:ab:2e:f8:5a:b1:b1: 64:82:b1:48:a8:e5:b0:3c:4c:85:c1:e9:af:3c:61:6d:7d:93: da:d3:c5:66:9b:92:8a:47:e1:75:e8:76:6e:c4:ee:b3:a8:14: bc:63:70:b5:36:aa:2c:9d:a7:45:d0:c6:07:f4:c5:c3:55:44: e7:08:5c:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAWauZFmYIvhZnwfpO1+ooTyBLoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDA0MTI0WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWQ2NTM5YmNkYzhkMTY2YzE5MDkwMDMwYjdlMjIzMjg2 MjEyMzg1ZWE5YjFiODI4Zjk5NWM2ZDdiYjMyYWYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf+WqGAdOHzVVbv818pNgDfHrWG4g4wrL+DRElgZHrun2m vjvfhGkoPBTh/daXfruu6z+uSqvL39RJx0fvoSv8pD/UJlfZmR/HnkiUM0NlGZ6N TXPtmYsDTnrHFXRVg/bg56xPIOqiJkv3KpWiBJXfz8Qej0aZGFr0DWOdyLvOS/QJ rUfIZH9fUrhODyIT2nWroSk+UjPgReE92RiMFM/TiEKXPDnusSXfI515dq2MZH5w /MDHtLasan7CZ0HN0fbSNRuG4N4XnoQQZGaLoQdBsQIECdlbezVB2Tu37/1hsPra BUjzSiLACWnVz75R0FPSwa2VC7GDhuxo9fCQiDaHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3pu00UlRMOuXo/ZXXF94xBduXoAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1ZGMwMTk2LWRiYmEtNDEyYi05MmU2LWMzY2I2YTYwNjYyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4kTANBgkqhkiG9w0BAQsFAAOCAQEASC1SDeBAOoCEkCOT8EEzYfI42Y8B Q1BDslkcaT+Q7zUbQ+yhQ2Cv9es3qfcgD9v3foggGQx2MyHJwoVjZwTm8mm8MJjE 9PC6wichiRdsHYiABf9moDsfQJdeUrI7QWI7r7Sofl6NI5PrfIw75KM59RBFfZot 4KMR/F3/gBWPnUECcy5eUMJDepkUHcysYg3V2m4RSGdNzN3uzvlwtg1FMY+TqJpX T87K8bmljr8nRLy8IlPE9AQFI31gcp0Pzjahqy74WrGxZIKxSKjlsDxMhcHprzxh bX2T2tPFZpuSikfhdeh2bsTus6gUvGNwtTaqLJ2nRdDGB/TFw1VE5whcUQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:37:35 2025 by rpki-client