$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa File: 97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa (raw, json) Hash identifier: sZ9ttZaMSxoE4bxuO8ATTnrxAkMiEX4zh20nSS+wJTw= Subject key identifier: E6:B9:8A:05:FC:2B:EF:10:49:DC:57:7D:EF:E4:E9:1A:B1:4E:5E:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6337E200A3242E4C93A8003793A58D22458DD42A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa Signing time: Tue 20 May 2025 00:21:54 +0000 ROA not before: Tue 20 May 2025 00:21:54 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:37:e2:00:a3:24:2e:4c:93:a8:00:37:93:a5:8d:22:45:8d:d4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:21:54 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=17585cfac7b166f3658485c505c5a8e54ccdb9fbc8c0bb9723ab1c264be69859, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:84:66:bc:d6:3a:3b:9f:b7:6f:7c:4a:73: 06:23:96:6c:4e:5f:95:50:75:34:6f:e8:ea:6d:70: d3:78:85:0b:2f:21:4d:e5:9f:9e:41:1a:c1:b0:fd: d9:7c:3f:0d:d3:1f:27:5a:c0:19:87:62:38:29:b3: 3d:cf:db:df:c1:cd:d1:f4:22:5c:fe:60:36:7a:94: 10:c3:83:ca:6d:65:1d:17:a6:bf:c7:b2:09:e2:5e: 2e:e5:cc:4a:28:ee:07:0c:fb:2d:08:4c:14:52:49: 9e:d2:01:e1:7b:bb:d7:c6:3a:1d:af:c7:be:e6:b3: 71:e9:f3:3c:1e:65:16:3c:6d:0d:37:4d:44:5f:dd: d3:88:aa:50:fa:66:9c:bc:5d:6c:56:2b:a4:eb:ba: 5e:47:56:3f:50:b2:aa:f5:5e:91:02:3b:ad:96:73: 24:d9:1a:54:de:a7:5e:8a:61:0f:cc:23:eb:90:a1: 57:77:0c:42:fb:32:b5:a3:58:81:48:33:c6:12:54: 77:f7:3b:27:7e:55:9e:99:78:59:22:f9:01:d4:85: 44:84:c5:0a:2e:87:31:e7:26:36:7b:b7:30:79:85: 3c:d7:0f:ed:32:4e:d3:96:e4:ba:6e:08:7e:4e:f5: b8:a5:c2:05:57:4c:d7:ce:bf:ad:e7:76:a5:00:05: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:8A:05:FC:2B:EF:10:49:DC:57:7D:EF:E4:E9:1A:B1:4E:5E:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97124c90-e9d4-44e2-aad7-a1d216f69aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.76.0/22 Signature Algorithm: sha256WithRSAEncryption 33:ab:b1:35:04:f5:c7:87:69:52:f5:98:a9:b5:2c:50:29:44: 6c:e1:77:d8:fd:07:db:15:4b:98:ed:0f:16:45:69:7a:de:4a: 4f:e0:15:eb:c6:b8:b1:91:bb:f1:b4:1a:81:8d:77:43:22:87: df:13:56:dc:9b:6d:9b:2d:1a:d9:51:14:92:d1:36:12:b2:eb: 9d:c5:18:11:79:ae:a8:55:fe:3c:21:86:7f:2d:1f:1e:80:fc: c0:26:59:8d:9d:fd:db:c2:35:9c:e8:be:a2:d4:ac:ac:1b:ae: 08:0c:30:7a:33:fc:01:c1:ff:d5:1f:9c:9e:b7:e6:ed:71:88: da:70:b2:25:1b:dd:59:13:cd:db:8e:33:df:d3:14:49:d2:e7: 0a:f8:56:17:bb:05:52:77:5c:2f:5a:48:e0:e0:2e:e0:72:bf: 78:1d:2e:e6:11:d1:a1:b2:7a:30:7d:82:20:a9:de:41:44:03: b9:a1:9e:63:db:27:82:5d:72:e3:96:19:46:2a:54:af:cb:c6: fe:f1:b0:40:8a:2b:ee:63:7a:f7:5d:50:fe:82:a5:55:70:96: c0:cd:17:6d:6c:ba:7c:45:3e:13:92:10:ba:fb:5f:17:50:e6: 8a:e2:50:db:24:58:8c:df:63:1f:79:bb:91:70:86:89:33:4d: db:5d:8f:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYzfiAKMkLkyTqAA3k6WNIkWN1CowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAyMTU0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzU4NWNmYWM3YjE2NmYzNjU4NDg1YzUwNWM1YThlNTRj Y2RiOWZiYzhjMGJiOTcyM2FiMWMyNjRiZTY5ODU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYeIRmvNY6O5+3b3xKcwYjlmxOX5VQdTRv6OptcNN4hQsv IU3ln55BGsGw/dl8Pw3THydawBmHYjgpsz3P29/BzdH0Ilz+YDZ6lBDDg8ptZR0X pr/HsgniXi7lzEoo7gcM+y0ITBRSSZ7SAeF7u9fGOh2vx77ms3Hp8zweZRY8bQ03 TURf3dOIqlD6Zpy8XWxWK6Trul5HVj9Qsqr1XpECO62WcyTZGlTep16KYQ/MI+uQ oVd3DEL7MrWjWIFIM8YSVHf3Oyd+VZ6ZeFki+QHUhUSExQouhzHnJjZ7tzB5hTzX D+0yTtOW5LpuCH5O9bilwgVXTNfOv63ndqUABWh1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5rmKBfwr7xBJ3Fd97+TpGrFOXhYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3MTI0YzkwLWU5ZDQtNDRlMi1hYWQ3LWExZDIxNmY2OWFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXF0wwDQYJKoZIhvcNAQELBQADggEBADOrsTUE9ceHaVL1mKm1LFApRGzh d9j9B9sVS5jtDxZFaXreSk/gFevGuLGRu/G0GoGNd0Mih98TVtybbZstGtlRFJLR NhKy653FGBF5rqhV/jwhhn8tHx6A/MAmWY2d/dvCNZzovqLUrKwbrggMMHoz/AHB /9UfnJ635u1xiNpwsiUb3VkTzduOM9/TFEnS5wr4Vhe7BVJ3XC9aSODgLuByv3gd LuYR0aGyejB9giCp3kFEA7mhnmPbJ4JdcuOWGUYqVK/Lxv7xsECKK+5jevddUP6C pVVwlsDNF21sunxFPhOSELr7XxdQ5oriUNskWIzfYx95u5FwhokzTdtdjzM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:25:11 2025 by rpki-client