$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa File: 8a7b1d2a-a694-4e2c-b292-4263660a9300.roa (raw, json) Hash identifier: sMtxJipTrlk3IHURJsddUPAHYp61M1LcIGX5afLXAqk= Subject key identifier: D4:B4:66:C4:70:57:97:BA:96:BA:2D:27:E6:32:07:77:1E:DA:C0:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C6344B3AA45D880C8C311C0E47F7CD6A587EBB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa Signing time: Sat 24 May 2025 00:01:58 +0000 ROA not before: Sat 24 May 2025 00:01:58 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:63:44:b3:aa:45:d8:80:c8:c3:11:c0:e4:7f:7c:d6:a5:87:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:01:58 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=9ed0d313e4258a0e87322aee4bde01b4aa419aedd50125dfe1508d74257c2e2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:98:fa:c3:78:37:20:86:b1:2e:52:64:7d: 2f:89:d9:33:c6:d7:66:dd:88:1c:93:04:0c:e2:48: 40:ef:df:b7:0f:58:c2:73:43:18:67:99:bd:83:b3: 15:c8:77:de:1f:69:e7:64:16:2b:a1:aa:2c:6e:49: a1:4f:cf:e0:6f:f8:0a:93:e8:f8:2c:42:d5:f0:66: 20:14:1b:97:c6:ca:ab:46:1e:a8:77:81:12:77:0b: 02:77:e9:8c:a7:1c:fb:e0:8f:88:47:a4:f6:a2:59: 16:75:11:47:ed:a8:17:9a:48:f7:39:c4:84:39:ef: f2:fa:29:d5:9a:2b:01:b3:f7:e8:ba:fa:6c:31:d7: 11:a1:16:79:63:86:7d:94:f2:ee:20:fc:75:99:9c: d6:0d:66:08:ee:eb:6a:11:f3:85:14:7c:3c:7b:cb: b2:64:fe:44:8b:f5:e1:12:d7:10:47:8c:7a:2e:72: fb:49:cb:89:2c:77:04:cb:d3:55:45:1f:bf:83:0d: 8e:aa:f4:26:43:e7:59:d8:d3:85:e6:64:ea:1b:1c: c7:42:7e:d5:4b:00:81:cb:70:c0:b5:d4:ec:f5:59: 8f:44:00:22:fa:b0:f8:76:89:e1:39:42:ba:67:5e: 8f:f2:ef:1c:24:7e:80:aa:8b:37:a2:fc:39:82:c6: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:66:C4:70:57:97:BA:96:BA:2D:27:E6:32:07:77:1E:DA:C0:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption cc:ab:16:2b:e9:a6:cf:c7:38:52:a9:4a:7b:02:b1:48:26:65: 6a:fb:c2:1b:bd:35:36:08:f5:0f:e6:45:9f:00:de:b8:c6:19: fa:5e:df:04:22:96:25:18:62:9b:10:e9:c3:e8:b7:56:7f:0e: 38:6b:79:d8:f3:48:c3:e2:18:09:7f:cd:ba:7c:11:a5:11:7d: de:d4:e9:be:d0:23:0f:f9:de:c4:4e:71:f7:f4:be:76:f4:2e: a6:15:6b:c5:dd:28:d8:b5:81:66:fb:bc:fc:9e:9a:da:5b:3d: 7f:30:b8:57:b9:bd:34:1a:7c:ca:fa:db:9c:85:00:c9:27:6a: 1d:4f:56:57:5d:85:73:db:06:f9:98:99:42:33:42:34:f7:79: 82:c7:f1:40:17:24:e2:23:bf:78:2c:5e:ce:a9:8b:90:81:08: 73:e4:fd:6f:f1:ab:ed:7d:47:2e:7f:c9:84:4d:f6:c8:82:be: 73:30:59:11:26:c5:ba:bc:21:ba:2f:0b:f5:71:82:6f:22:9a: 95:74:5b:d6:45:d3:2e:59:36:72:07:0d:29:59:2c:1e:b7:bd: 9f:4a:54:48:01:a2:c5:4b:51:00:5c:76:a3:f6:d9:60:59:b0: 9c:53:af:90:fa:79:1e:e7:5d:5d:c1:eb:e5:87:94:00:9b:22: 74:40:7f:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTGNEs6pF2IDIwxHA5H981qWH67UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAwMTU4WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWQwZDMxM2U0MjU4YTBlODczMjJhZWU0YmRlMDFiNGFh NDE5YWVkZDUwMTI1ZGZlMTUwOGQ3NDI1N2MyZTJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvWJj6w3g3IIaxLlJkfS+J2TPG12bdiByTBAziSEDv37cP WMJzQxhnmb2DsxXId94faedkFiuhqixuSaFPz+Bv+AqT6PgsQtXwZiAUG5fGyqtG Hqh3gRJ3CwJ36YynHPvgj4hHpPaiWRZ1EUftqBeaSPc5xIQ57/L6KdWaKwGz9+i6 +mwx1xGhFnljhn2U8u4g/HWZnNYNZgju62oR84UUfDx7y7Jk/kSL9eES1xBHjHou cvtJy4ksdwTL01VFH7+DDY6q9CZD51nY04XmZOobHMdCftVLAIHLcMC11Oz1WY9E ACL6sPh2ieE5QrpnXo/y7xwkfoCqizei/DmCxk6VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1LRmxHBXl7qWui0n5jIHdx7awIYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhN2IxZDJhLWE2OTQtNGUyYy1iMjkyLTQyNjM2NjBhOTMwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBAMyrFivpps/HOFKpSnsCsUgmZWr7 whu9NTYI9Q/mRZ8A3rjGGfpe3wQiliUYYpsQ6cPot1Z/DjhredjzSMPiGAl/zbp8 EaURfd7U6b7QIw/53sROcff0vnb0LqYVa8XdKNi1gWb7vPyemtpbPX8wuFe5vTQa fMr625yFAMknah1PVlddhXPbBvmYmUIzQjT3eYLH8UAXJOIjv3gsXs6pi5CBCHPk /W/xq+19Ry5/yYRN9siCvnMwWREmxbq8IbovC/Vxgm8impV0W9ZF0y5ZNnIHDSlZ LB63vZ9KVEgBosVLUQBcdqP22WBZsJxTr5D6eR7nXV3B6+WHlACbInRAf+U= -----END CERTIFICATE-----Generated at Sun Jun 1 05:12:53 2025 by rpki-client