$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa File: 984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa (raw, json) Hash identifier: ijutcSPmbBI/MkA4+UD00AlXUDHhyyAzBqAdyh6qdaY= Subject key identifier: 0A:AB:32:A2:13:D4:85:57:02:98:93:39:87:D1:2E:C1:46:2C:61:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A9D02AF824D84901D228155252679748321956C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa Signing time: Mon 26 May 2025 15:00:40 +0000 ROA not before: Mon 26 May 2025 15:00:40 +0000 ROA not after: Mon 30 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 129.235.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9d:02:af:82:4d:84:90:1d:22:81:55:25:26:79:74:83:21:95:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 26 15:00:40 2025 GMT Not After : Jun 30 23:59:59 2025 GMT Subject: serialNumber=ac174a61f042829f61469d35d0bd9482b093dbdc267f15cbaaab5766de7912bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:f1:86:c9:7b:68:6b:41:ee:6d:cf:53:39: 6c:01:98:3f:70:ac:df:33:f4:ca:b6:5c:4b:01:67: a5:d7:6e:fe:31:c1:22:08:f6:f5:c5:dd:7e:d1:43: 3f:ae:83:8e:56:e7:69:ff:06:28:ff:f7:9e:94:83: 24:25:b3:a3:8e:b8:d0:a0:46:83:ef:fd:99:55:68: b5:a6:66:a0:ff:ba:4a:07:76:fb:f9:dd:7d:36:e1: 79:c8:6d:3f:75:c7:24:40:55:b1:0c:79:7f:b9:9c: 3b:b0:03:53:9c:a1:79:2a:40:c5:98:b7:5f:61:b1: b1:22:07:5b:07:2b:8b:e3:2b:69:75:2a:53:1e:00: 8e:24:b6:29:98:82:f0:8e:89:27:ca:48:34:de:96: 5c:89:64:2a:73:69:d1:5c:8a:a5:83:05:fc:40:60: 45:75:2a:50:83:25:e3:f2:e8:7b:31:ff:ec:ad:59: 06:43:b1:8e:01:79:25:06:d3:82:86:29:29:be:f1: 9b:ea:44:d9:40:e2:39:dc:76:f9:ad:bd:f1:d4:0c: 70:fb:80:15:e8:a0:fe:f3:ee:1b:f2:6d:43:b1:b4: da:d0:64:fa:2e:27:cb:7b:4f:d6:38:94:3d:73:32: d7:f3:29:71:bd:a9:36:a8:f1:4c:5d:50:a2:ce:dd: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AB:32:A2:13:D4:85:57:02:98:93:39:87:D1:2E:C1:46:2C:61:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984a59d5-e044-49ef-ae66-4b6be4d4d9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.235.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:b9:35:6e:37:51:97:f4:1c:86:c7:8e:36:f0:12:90:eb:5a: 54:63:66:fb:65:37:22:52:5f:4c:42:18:6f:e7:34:dd:71:a0: 69:fe:8d:e9:54:18:5d:2b:a8:44:71:ce:f6:bb:ac:06:a6:9c: cc:1b:08:b0:c6:21:3a:6a:98:4c:81:e1:ab:49:1c:95:97:fd: ef:26:98:5e:3b:04:c7:3d:e7:40:41:27:23:9f:ed:61:ea:0a: dc:e1:e5:fd:5d:53:d4:11:e0:ed:17:bc:09:5a:7f:b0:5a:55: 0a:15:4e:f6:75:42:4d:1b:3e:c9:28:23:e4:63:6c:ee:22:e3: be:55:f3:6a:1e:e1:b9:57:7c:bc:2d:1b:f4:f5:c8:78:11:62: fe:b8:51:91:b6:50:82:de:8a:07:f5:32:e5:70:71:1d:87:6f: 33:75:4b:a9:9c:e2:80:c8:ba:15:2f:5f:d5:26:61:eb:da:c8: 9a:8c:67:b8:1f:86:7a:04:70:12:0c:61:87:16:c8:4d:2b:0b: 7d:e3:21:4e:24:02:d1:1b:f4:8c:05:df:a5:e5:51:79:8a:d0: c1:f8:b3:bb:c7:ee:10:a4:2e:44:d7:53:13:a5:26:90:8b:ea: a6:31:a1:7a:85:b0:10:e9:98:67:6f:a0:01:a0:da:73:de:de: d5:88:b5:1f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGp0Cr4JNhJAdIoFVJSZ5dIMhlWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI2MTUwMDQwWhcNMjUwNjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzE3NGE2MWYwNDI4MjlmNjE0NjlkMzVkMGJkOTQ4MmIw OTNkYmRjMjY3ZjE1Y2JhYWFiNTc2NmRlNzkxMmJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqkvGGyXtoa0Hubc9TOWwBmD9wrN8z9Mq2XEsBZ6XXbv4x wSII9vXF3X7RQz+ug45W52n/Bij/956UgyQls6OOuNCgRoPv/ZlVaLWmZqD/ukoH dvv53X024XnIbT91xyRAVbEMeX+5nDuwA1OcoXkqQMWYt19hsbEiB1sHK4vjK2l1 KlMeAI4ktimYgvCOiSfKSDTellyJZCpzadFciqWDBfxAYEV1KlCDJePy6Hsx/+yt WQZDsY4BeSUG04KGKSm+8ZvqRNlA4jncdvmtvfHUDHD7gBXooP7z7hvybUOxtNrQ ZPouJ8t7T9Y4lD1zMtfzKXG9qTao8UxdUKLO3QpzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCqsyohPUhVcCmJM5h9EuwUYsYWowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4NGE1OWQ1LWUwNDQtNDllZi1hZTY2LTRiNmJlNGQ0ZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCB6zANBgkqhkiG9w0BAQsFAAOCAQEAmLk1bjdRl/QchseONvASkOtaVGNm +2U3IlJfTEIYb+c03XGgaf6N6VQYXSuoRHHO9rusBqaczBsIsMYhOmqYTIHhq0kc lZf97yaYXjsExz3nQEEnI5/tYeoK3OHl/V1T1BHg7Re8CVp/sFpVChVO9nVCTRs+ ySgj5GNs7iLjvlXzah7huVd8vC0b9PXIeBFi/rhRkbZQgt6KB/Uy5XBxHYdvM3VL qZzigMi6FS9f1SZh69rImoxnuB+GegRwEgxhhxbITSsLfeMhTiQC0Rv0jAXfpeVR eYrQwfizu8fuEKQuRNdTE6UmkIvqpjGheoWwEOmYZ2+gAaDac97e1Yi1Hw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:51:31 2025 by rpki-client