$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa File: 7db05471-313d-42cf-86d0-866ce19bc5fc.roa (raw, json) Hash identifier: jacFc/P7LtrI1K/X2eGlZTgHe4h7iyI1tu9if7KJvPQ= Subject key identifier: 05:D4:50:BD:99:F6:70:C5:BD:6D:6D:8C:08:69:66:37:B6:B9:99:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53F61408971BC1C70ABED9946CB120291DC0D7AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa Signing time: Thu 08 May 2025 17:22:09 +0000 ROA not before: Thu 08 May 2025 17:22:09 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f6:14:08:97:1b:c1:c7:0a:be:d9:94:6c:b1:20:29:1d:c0:d7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 17:22:09 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=77243a71722baaa7b756f93dc3b55d5ab9d1ffe361f1d005f8a65bae79d131d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:d3:ab:2d:54:49:2a:d2:a2:5b:4d:4d:72: da:2a:17:23:9d:fa:b3:17:6e:8f:04:4e:17:8d:50: 6e:61:e7:16:7d:0e:8d:cb:a9:cd:46:06:b0:f4:3f: 0d:50:52:34:3e:db:2b:cf:d7:c4:75:08:50:07:70: eb:06:84:74:01:2b:84:9e:01:39:74:46:e6:7f:c6: 72:fd:aa:e8:2c:41:e1:5b:82:a6:14:55:f7:37:d1: 9f:c2:73:42:28:10:87:d5:01:e8:43:08:a1:d8:31: 51:f4:c0:2a:09:8d:ba:cb:f9:99:35:8b:d9:7d:1b: 28:2f:bf:99:cc:e9:a8:60:a5:cc:11:35:f9:a1:1d: ff:33:3c:be:fa:ad:bc:12:76:5f:14:d8:c9:1a:f6: 5d:b4:5b:a6:08:ca:33:5a:4d:85:d8:63:80:de:13: 3a:f2:c5:92:99:1e:67:3b:45:d1:7b:9e:40:c2:19: 15:75:08:64:c0:7e:e1:a3:ea:83:c3:12:8f:78:84: 53:3f:09:df:fe:58:33:6b:c3:e9:94:9d:45:ce:ae: e1:99:49:e0:60:7f:3d:3c:2b:50:1d:52:d0:16:e6: 8f:e8:3e:14:1e:bb:37:af:1c:cc:ed:7c:61:79:f1: 83:2a:b6:35:a5:72:ce:95:61:28:ab:b3:27:17:0d: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D4:50:BD:99:F6:70:C5:BD:6D:6D:8C:08:69:66:37:B6:B9:99:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.80.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:d7:a3:e4:7c:da:a2:33:06:d2:50:8c:c3:99:63:3e:6b:79: 74:21:30:62:5d:b8:67:f6:a6:94:73:69:02:dc:26:77:4a:f9: 3b:73:b1:db:04:49:d9:2f:5b:52:04:d0:5e:76:65:e9:47:aa: 44:a0:de:00:2f:35:88:8d:ad:c8:d0:e7:2f:9f:ec:82:7a:64: e4:d1:5a:d2:17:da:a7:fa:7f:16:77:4d:37:b4:0a:d6:34:71: f9:e6:51:ac:70:9d:9d:2c:16:fd:66:f5:8d:92:8a:2b:dc:9b: 81:5a:8b:7c:3e:4a:11:14:11:78:1e:88:79:42:44:e5:8a:bf: a1:e8:c0:cd:c1:8e:8b:a0:a8:f9:c3:a1:ef:ca:4f:1b:c5:10: 45:9b:cb:65:aa:a4:d4:7a:a9:50:48:53:13:05:f9:ea:d3:2b: 69:b0:fe:e1:d6:87:cf:aa:9f:5d:e2:78:69:9b:3a:e7:0f:18: 9e:6a:f6:8a:2e:98:9e:37:12:a6:2c:01:4a:42:e8:a9:cc:56: a1:29:c0:e2:60:6b:89:34:a1:b9:b4:88:d6:02:60:d2:a0:84: 08:21:b9:ea:0a:cf:e6:0e:2b:ab:32:06:b9:c6:99:6f:d2:33: 78:5c:50:56:16:06:27:b5:11:cb:3c:30:26:77:3e:50:2c:c0: a4:7e:25:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU/YUCJcbwccKvtmUbLEgKR3A168wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTcyMjA5WhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzI0M2E3MTcyMmJhYWE3Yjc1NmY5M2RjM2I1NWQ1YWI5 ZDFmZmUzNjFmMWQwMDVmOGE2NWJhZTc5ZDEzMWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQMNOrLVRJKtKiW01NctoqFyOd+rMXbo8ETheNUG5h5xZ9 Do3Lqc1GBrD0Pw1QUjQ+2yvP18R1CFAHcOsGhHQBK4SeATl0RuZ/xnL9qugsQeFb gqYUVfc30Z/Cc0IoEIfVAehDCKHYMVH0wCoJjbrL+Zk1i9l9Gygvv5nM6ahgpcwR NfmhHf8zPL76rbwSdl8U2Mka9l20W6YIyjNaTYXYY4DeEzryxZKZHmc7RdF7nkDC GRV1CGTAfuGj6oPDEo94hFM/Cd/+WDNrw+mUnUXOruGZSeBgfz08K1AdUtAW5o/o PhQeuzevHMztfGF58YMqtjWlcs6VYSirsycXDbnBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBdRQvZn2cMW9bW2MCGlmN7a5mYowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkYjA1NDcxLTMxM2QtNDJjZi04NmQwLTg2NmNlMTliYzVmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgFAwDQYJKoZIhvcNAQELBQADggEBAG7Xo+R82qIzBtJQjMOZYz5reXQh MGJduGf2ppRzaQLcJndK+TtzsdsESdkvW1IE0F52ZelHqkSg3gAvNYiNrcjQ5y+f 7IJ6ZOTRWtIX2qf6fxZ3TTe0CtY0cfnmUaxwnZ0sFv1m9Y2Siivcm4Fai3w+ShEU EXgeiHlCROWKv6HowM3BjougqPnDoe/KTxvFEEWby2WqpNR6qVBIUxMF+erTK2mw /uHWh8+qn13ieGmbOucPGJ5q9ooumJ43EqYsAUpC6KnMVqEpwOJga4k0obm0iNYC YNKghAghueoKz+YOK6syBrnGmW/SM3hcUFYWBie1Ecs8MCZ3PlAswKR+JV0= -----END CERTIFICATE-----Generated at Sun Jun 1 05:19:10 2025 by rpki-client