$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81d3e3cc-46e2-4979-9b16-2db16e3b9434.roa File: 81d3e3cc-46e2-4979-9b16-2db16e3b9434.roa (raw, json) Hash identifier: mGMSAzouYxnvYAC5R4Y4pVS1/fis5cxiwOCS1+zPMXc= Subject key identifier: B9:C9:7D:2A:D1:2E:59:7E:E7:5D:7A:95:86:CB:4C:58:B5:A0:0A:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FA3DFC237C83D2D613FD1CC7C3508BE4C0D6701 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81d3e3cc-46e2-4979-9b16-2db16e3b9434.roa Signing time: Tue 20 May 2025 15:12:33 +0000 ROA not before: Tue 20 May 2025 15:12:33 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:df:c2:37:c8:3d:2d:61:3f:d1:cc:7c:35:08:be:4c:0d:67:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:12:33 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=505d0de7989906f8df06755a629b34971c6216d7525873775370513738b8416c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f6:5e:85:25:d7:28:2c:4e:29:29:a8:7b:0e: b8:96:2e:4d:93:d0:0b:41:d0:37:0e:33:d6:8d:ae: 5f:ee:57:76:72:e1:98:33:bc:69:52:e8:15:36:5d: 6c:0c:d9:a8:f0:0a:47:17:69:85:85:93:e7:65:bd: 4d:73:1d:76:cf:08:74:12:f5:44:30:a0:67:27:c6: 82:0a:19:4c:d4:67:46:4a:53:94:e7:c9:f6:e1:e6: 05:67:46:14:a5:6e:03:b5:36:55:3c:ba:58:7d:de: fa:3e:a8:af:86:e4:c9:a5:00:f0:8c:e5:ab:75:87: 6b:bf:fb:8a:14:75:1f:93:6d:18:27:1d:07:18:81: 59:dd:88:08:cf:83:06:71:02:54:ef:88:06:ab:f1: 8e:8c:c4:ee:45:ee:bd:c6:a3:71:86:14:35:ca:66: c2:0a:64:ef:8c:0b:55:73:d9:4b:d6:2b:79:37:0c: 4d:28:bf:4e:6e:f7:b6:b6:62:b1:36:c1:39:bd:71: d8:36:e9:1c:f8:a2:ce:df:fb:66:dd:9d:c1:44:ea: 54:95:11:41:18:12:7f:59:6d:3c:07:d9:a4:86:d0: 89:3b:9e:4b:d5:6a:c1:42:c1:83:4e:36:88:49:39: 4a:0d:c5:1f:3d:e5:f4:96:fb:90:f2:f9:75:12:5b: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C9:7D:2A:D1:2E:59:7E:E7:5D:7A:95:86:CB:4C:58:B5:A0:0A:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81d3e3cc-46e2-4979-9b16-2db16e3b9434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.192.0/24 Signature Algorithm: sha256WithRSAEncryption 02:e6:e1:fb:04:bc:42:9b:e3:fb:60:f2:6d:a8:50:50:6c:4f: bb:43:7f:a3:24:b9:7c:15:6f:96:0c:6f:63:07:d5:58:f9:38: 05:29:7c:60:7b:c5:58:f1:65:a7:2a:39:fe:ea:2a:e5:15:37: 70:cc:51:88:0e:bf:13:0d:2c:fd:80:1b:d0:8f:7f:58:51:39: d4:14:20:2e:80:b8:aa:77:ae:62:44:dd:8d:ce:3c:28:be:c4: aa:8f:8e:de:2a:f7:ee:0b:f0:86:90:6f:a6:11:5f:1d:c2:3d: db:4e:4f:28:e7:c3:d8:35:98:07:1b:54:31:89:ee:f9:8d:03: 35:a5:2b:3f:f7:e2:f5:9c:fd:2c:01:ad:8f:b6:2d:c2:9a:20: 2e:a3:73:72:cb:74:3c:dd:2f:79:d1:81:70:e2:5e:38:f4:aa: ac:0b:f4:b8:c7:83:e5:91:95:92:82:d7:bb:18:0f:80:22:1d: 40:db:75:2e:01:bd:c8:5c:51:60:ab:7c:3a:21:3c:f2:24:c8: 4b:7f:57:50:d5:2d:b0:a0:4d:bd:c8:72:3d:76:24:81:d4:90: f3:47:93:ac:38:f7:9d:16:1d:6e:7f:ee:4a:aa:79:c1:bc:24: b5:bb:ef:8c:91:f1:79:92:72:4f:ca:b9:fd:49:b0:9a:d5:ae: 24:da:e7:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb6PfwjfIPS1hP9HMfDUIvkwNZwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUxMjMzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDVkMGRlNzk4OTkwNmY4ZGYwNjc1NWE2MjliMzQ5NzFj NjIxNmQ3NTI1ODczNzc1MzcwNTEzNzM4Yjg0MTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDx9l6FJdcoLE4pKah7DriWLk2T0AtB0DcOM9aNrl/uV3Zy 4ZgzvGlS6BU2XWwM2ajwCkcXaYWFk+dlvU1zHXbPCHQS9UQwoGcnxoIKGUzUZ0ZK U5Tnyfbh5gVnRhSlbgO1NlU8ulh93vo+qK+G5MmlAPCM5at1h2u/+4oUdR+TbRgn HQcYgVndiAjPgwZxAlTviAar8Y6MxO5F7r3Go3GGFDXKZsIKZO+MC1Vz2UvWK3k3 DE0ov05u97a2YrE2wTm9cdg26Rz4os7f+2bdncFE6lSVEUEYEn9ZbTwH2aSG0Ik7 nkvVasFCwYNONohJOUoNxR895fSW+5Dy+XUSW7UjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUucl9KtEuWX7nXXqVhstMWLWgCjkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxZDNlM2NjLTQ2ZTItNDk3OS05YjE2LTJkYjE2ZTNiOTQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABG4MAwDQYJKoZIhvcNAQELBQADggEBAALm4fsEvEKb4/tg8m2oUFBsT7tD f6MkuXwVb5YMb2MH1Vj5OAUpfGB7xVjxZacqOf7qKuUVN3DMUYgOvxMNLP2AG9CP f1hROdQUIC6AuKp3rmJE3Y3OPCi+xKqPjt4q9+4L8IaQb6YRXx3CPdtOTyjnw9g1 mAcbVDGJ7vmNAzWlKz/34vWc/SwBrY+2LcKaIC6jc3LLdDzdL3nRgXDiXjj0qqwL 9LjHg+WRlZKC17sYD4AiHUDbdS4BvchcUWCrfDohPPIkyEt/V1DVLbCgTb3Icj12 JIHUkPNHk6w4950WHW5/7kqqecG8JLW774yR8XmSck/Kuf1JsJrVriTa594= -----END CERTIFICATE-----Generated at Sun Jun 1 05:08:09 2025 by rpki-client