$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866cfc98-63c3-4934-b0ba-88eefffde781.roa File: 866cfc98-63c3-4934-b0ba-88eefffde781.roa (raw, json) Hash identifier: tRb3m7mWyTcXtf7giMCc9ruDof0lqXzhGe05q6WCTiA= Subject key identifier: 97:37:DE:06:65:0D:A1:38:6C:76:A3:03:5A:FE:16:02:CC:7D:9C:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 703032460C265C877B4C66FD3EF5A898CEB5F26F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866cfc98-63c3-4934-b0ba-88eefffde781.roa Signing time: Tue 20 May 2025 15:11:43 +0000 ROA not before: Tue 20 May 2025 15:11:43 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.101.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:30:32:46:0c:26:5c:87:7b:4c:66:fd:3e:f5:a8:98:ce:b5:f2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:11:43 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=bc1cbfcd540b3153c28854ef04101fb84a7f444b21bf9dec8642fbd5c46c268c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:59:49:1d:b7:91:a4:af:6a:ed:b4:68:1a: a6:f0:24:cf:2d:bb:a4:d1:e2:74:37:9d:cc:36:07: f4:57:8c:24:88:45:9e:40:e0:58:df:7b:94:c1:af: 15:ba:07:19:95:65:fc:ad:15:85:e5:53:ac:91:38: b2:a2:af:75:ac:97:b0:6a:17:f4:c0:6b:a6:bc:c8: 9d:c4:18:ab:d9:0c:56:a0:bf:73:45:2c:ab:2b:46: 79:1a:64:bb:50:dd:b7:47:b9:d4:4d:e9:1e:ac:68: 73:c2:58:bf:b4:3e:5c:82:80:28:f2:0a:30:47:3f: a6:3e:d1:66:4c:2d:ca:e0:09:06:0d:ab:e6:54:4e: 12:27:81:a0:83:b6:3a:b5:b6:7e:84:5d:b4:b6:ad: 07:4b:a5:34:1b:eb:5d:06:44:22:d4:1c:32:bc:34: 7e:3a:bc:6b:71:3c:8e:26:94:b9:8a:55:23:79:76: 9a:19:52:fd:82:c3:6a:f5:8b:df:76:b3:21:89:6a: 2a:bf:a9:29:9c:a8:32:64:17:7d:53:18:95:7d:0d: 6f:3a:b3:f9:ca:38:cb:57:ea:3e:dd:dd:18:87:73: 8d:58:89:de:9f:61:2b:ab:fe:a0:17:3d:90:26:26: 4d:cb:6f:6e:e6:bb:8b:d6:1c:25:d2:e0:70:4f:27: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:37:DE:06:65:0D:A1:38:6C:76:A3:03:5A:FE:16:02:CC:7D:9C:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866cfc98-63c3-4934-b0ba-88eefffde781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.101.162.0/23 Signature Algorithm: sha256WithRSAEncryption 14:6e:95:bd:53:76:da:d0:11:af:c2:8d:15:fa:65:3f:2a:64: 19:d8:ab:7e:90:e3:26:3b:b8:59:18:37:49:4c:bd:5c:2f:4e: 37:bf:9c:03:f4:99:4c:0d:52:af:45:12:33:1b:2b:64:42:80: a8:03:3f:8d:d0:f9:d6:30:70:38:39:2f:96:30:90:35:91:3b: c2:c9:9e:f0:38:32:b2:c6:ac:a3:f7:1a:dc:31:50:70:94:7b: de:1b:ae:31:57:9a:8f:8e:ac:ae:30:2c:fd:a3:5f:ba:6c:1e: b8:94:f6:a8:7b:04:5a:71:15:cf:a1:6d:55:5c:1d:5a:e7:33: 14:b2:a7:32:2c:d0:19:97:7f:54:1e:c7:ba:7d:ec:b0:c6:06: 37:89:12:f4:5c:87:eb:4a:d0:e2:9d:99:34:43:1b:0a:27:4b: 3b:fc:c3:4c:73:35:a0:c7:42:5b:c8:d6:fc:c3:fe:69:42:48: 99:32:a8:fc:ed:92:73:06:39:03:d3:ca:5b:bc:b0:7f:7f:ae: 7d:e6:cb:26:73:14:ea:62:2f:ea:19:83:8d:06:69:a8:d4:f7: 9f:39:2a:9c:f9:2b:f8:98:6e:51:44:fb:88:f3:22:d6:bc:3d: 7e:5d:6f:18:80:36:79:c6:2e:03:66:e8:64:23:94:86:90:06: f3:5e:88:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcDAyRgwmXId7TGb9PvWomM618m8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUxMTQzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzFjYmZjZDU0MGIzMTUzYzI4ODU0ZWYwNDEwMWZiODRh N2Y0NDRiMjFiZjlkZWM4NjQyZmJkNWM0NmMyNjhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWJVlJHbeRpK9q7bRoGqbwJM8tu6TR4nQ3ncw2B/RXjCSI RZ5A4Fjfe5TBrxW6BxmVZfytFYXlU6yROLKir3Wsl7BqF/TAa6a8yJ3EGKvZDFag v3NFLKsrRnkaZLtQ3bdHudRN6R6saHPCWL+0PlyCgCjyCjBHP6Y+0WZMLcrgCQYN q+ZUThIngaCDtjq1tn6EXbS2rQdLpTQb610GRCLUHDK8NH46vGtxPI4mlLmKVSN5 dpoZUv2Cw2r1i992syGJaiq/qSmcqDJkF31TGJV9DW86s/nKOMtX6j7d3RiHc41Y id6fYSur/qAXPZAmJk3Lb27mu4vWHCXS4HBPJ8jzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlzfeBmUNoThsdqMDWv4WAsx9nKMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2NmNmYzk4LTYzYzMtNDkzNC1iMGJhLTg4ZWVmZmZkZTc4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFLZaIwDQYJKoZIhvcNAQELBQADggEBABRulb1TdtrQEa/CjRX6ZT8qZBnY q36Q4yY7uFkYN0lMvVwvTje/nAP0mUwNUq9FEjMbK2RCgKgDP43Q+dYwcDg5L5Yw kDWRO8LJnvA4MrLGrKP3GtwxUHCUe94brjFXmo+OrK4wLP2jX7psHriU9qh7BFpx Fc+hbVVcHVrnMxSypzIs0BmXf1Qex7p97LDGBjeJEvRch+tK0OKdmTRDGwonSzv8 w0xzNaDHQlvI1vzD/mlCSJkyqPztknMGOQPTylu8sH9/rn3myyZzFOpiL+oZg40G aajU9585Kpz5K/iYblFE+4jzIta8PX5dbxiANnnGLgNm6GQjlIaQBvNeiI0= -----END CERTIFICATE-----Generated at Sun Jun 1 05:29:55 2025 by rpki-client