$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa File: 79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa (raw, json) Hash identifier: G4xV2dF564YXSoe45yKR9HISh+ZkNwo/NamE7y74OqQ= Subject key identifier: D8:63:C6:AD:36:9C:5F:0B:99:E4:2C:46:C0:56:76:53:40:8F:BD:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44164C52C61C620B471079FC50243B8B3D6905A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa Signing time: Wed 21 May 2025 20:36:55 +0000 ROA not before: Wed 21 May 2025 20:36:55 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:16:4c:52:c6:1c:62:0b:47:10:79:fc:50:24:3b:8b:3d:69:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 20:36:55 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=ba65c0c1ff5bce57e9e33e5f082dc719bf00dc819105ed08d150d937b529bce3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:a6:82:4e:f6:fd:09:b7:43:e8:98:b4:d6: d5:08:30:f1:5f:a5:b7:e5:7c:c7:aa:df:f3:99:aa: c8:3a:5d:b4:5e:4c:70:21:b4:7d:c1:4e:b4:c0:2b: c1:f6:65:1f:ab:48:a8:52:f4:a4:24:df:98:e2:42: a4:b6:75:e5:ca:96:e2:bd:c4:28:98:30:47:f6:f5: f5:23:e5:1f:fa:b6:c2:29:6c:4b:4a:80:fc:7f:6f: f0:10:48:ee:6e:42:df:14:5b:0e:6e:a6:69:3e:2d: f1:11:28:5d:8b:45:92:be:72:57:aa:49:b1:cb:57: 40:f4:27:45:2e:33:8d:51:1c:9f:47:f5:13:4f:e2: 82:37:52:93:bd:e5:17:50:cd:f4:33:e3:79:29:eb: 6c:32:68:e2:d2:b2:e1:9a:5e:ad:da:c3:f0:ba:3a: d3:3b:34:b0:f8:48:aa:5b:8f:10:b9:44:13:cf:3e: fa:72:9a:f8:3d:e5:53:54:88:24:57:58:08:10:bb: f1:2b:a5:7c:1a:8a:af:eb:79:73:75:b5:65:b9:6d: d4:af:90:ed:1d:2f:59:32:4a:77:b1:e1:33:43:00: 38:04:c1:d3:c6:87:03:3d:f8:54:45:dd:54:4a:94: dd:ee:2f:70:cb:47:92:74:6c:75:7a:a3:09:02:82: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:63:C6:AD:36:9C:5F:0B:99:E4:2C:46:C0:56:76:53:40:8F:BD:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79b61ca4-67b3-4ea2-95eb-ba7f6e611072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.221.0/24 Signature Algorithm: sha256WithRSAEncryption b3:d2:aa:70:10:43:b5:fe:d6:fb:9b:e6:f4:70:ff:6b:67:56: 6f:60:92:4b:ff:37:ba:db:0a:79:84:02:14:20:df:bc:31:29: 13:f9:a1:e7:64:14:6f:ef:93:c7:7e:56:ff:ad:00:25:d6:e9: 4d:36:99:00:c1:06:be:28:0e:8b:24:1b:be:27:77:ec:f9:00: cd:cc:30:02:ea:02:c1:db:bb:65:0a:69:0b:9c:3f:74:ef:53: 10:d0:1f:b4:e8:47:1d:5f:bd:1e:67:8b:3f:6a:43:67:3b:20: 47:7c:4b:a6:1f:92:21:41:5e:6e:9a:a3:21:f2:d0:b7:43:09: 46:25:fe:3a:5a:39:97:ae:fd:30:32:73:71:31:b9:e7:b6:c6: fe:65:ad:fb:14:db:db:0a:61:92:e7:b1:a3:9c:35:f7:23:21: 8e:bb:9d:44:11:c7:6c:b6:b7:98:0e:53:60:9b:df:ce:ce:1a: 7c:52:50:55:5c:ba:68:c4:14:36:a4:d2:80:70:90:e8:0a:7c: 7b:b2:d5:b9:64:cc:7e:e0:bf:70:ab:e2:66:8c:2c:8f:c0:19: 77:79:66:27:9b:61:74:21:1b:99:2a:8c:fd:55:5b:1f:96:c7: 8e:ba:64:11:1e:c8:4f:9b:80:6d:07:01:d2:74:55:e2:d6:5f: 3e:1f:34:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURBZMUsYcYgtHEHn8UCQ7iz1pBaEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMjAzNjU1WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTY1YzBjMWZmNWJjZTU3ZTllMzNlNWYwODJkYzcxOWJm MDBkYzgxOTEwNWVkMDhkMTUwZDkzN2I1MjliY2UzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgMqaCTvb9CbdD6Ji01tUIMPFfpbflfMeq3/OZqsg6XbRe THAhtH3BTrTAK8H2ZR+rSKhS9KQk35jiQqS2deXKluK9xCiYMEf29fUj5R/6tsIp bEtKgPx/b/AQSO5uQt8UWw5upmk+LfERKF2LRZK+cleqSbHLV0D0J0UuM41RHJ9H 9RNP4oI3UpO95RdQzfQz43kp62wyaOLSsuGaXq3aw/C6OtM7NLD4SKpbjxC5RBPP Pvpymvg95VNUiCRXWAgQu/ErpXwaiq/reXN1tWW5bdSvkO0dL1kySnex4TNDADgE wdPGhwM9+FRF3VRKlN3uL3DLR5J0bHV6owkCgpYrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2GPGrTacXwuZ5CxGwFZ2U0CPvU8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5YjYxY2E0LTY3YjMtNGVhMi05NWViLWJhN2Y2ZTYxMTA3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA4t0wDQYJKoZIhvcNAQELBQADggEBALPSqnAQQ7X+1vub5vRw/2tnVm9g kkv/N7rbCnmEAhQg37wxKRP5oedkFG/vk8d+Vv+tACXW6U02mQDBBr4oDoskG74n d+z5AM3MMALqAsHbu2UKaQucP3TvUxDQH7ToRx1fvR5niz9qQ2c7IEd8S6YfkiFB Xm6aoyHy0LdDCUYl/jpaOZeu/TAyc3Exuee2xv5lrfsU29sKYZLnsaOcNfcjIY67 nUQRx2y2t5gOU2Cb387OGnxSUFVcumjEFDak0oBwkOgKfHuy1blkzH7gv3Cr4maM LI/AGXd5ZiebYXQhG5kqjP1VWx+Wx466ZBEeyE+bgG0HAdJ0VeLWXz4fNIk= -----END CERTIFICATE-----Generated at Sun Jun 1 05:28:55 2025 by rpki-client