$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa File: 9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa (raw, json) Hash identifier: a+FLXLh+iC001NLJLFjdXulpjh+9dKzs7yUqGtBH8w8= Subject key identifier: B8:E2:D0:5F:34:BE:2E:D3:14:34:66:F8:04:34:F6:0D:BB:1E:F6:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FE17DA41C3DFF03301FEC3834AB644936214F74 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa Signing time: Fri 23 May 2025 00:22:18 +0000 ROA not before: Fri 23 May 2025 00:22:18 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e1:7d:a4:1c:3d:ff:03:30:1f:ec:38:34:ab:64:49:36:21:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:22:18 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=2019fa77a94f08d0d47caac24eeda5074faf66cee631a92cfa88f50df5cf25d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:8a:37:c9:56:a0:63:10:5a:99:d7:1a:60: 73:fc:ec:b1:b8:e5:69:39:00:9c:86:c5:bb:0f:8f: 3b:8e:b9:b0:3b:d6:f2:22:55:46:03:1e:e1:ad:b7: ca:4a:c1:e3:a4:7e:71:fe:62:b8:44:e4:03:86:d0: ab:24:da:35:71:11:26:53:4c:6c:b0:d1:ff:b7:5b: 9b:47:23:29:f2:c8:7f:bf:d2:d4:5d:8a:55:9c:ed: f7:f3:b0:0f:2b:25:10:d4:58:72:95:e6:78:01:07: f0:03:9a:c3:80:0a:c3:8f:0a:f8:57:aa:8e:bc:e3: 7c:ea:e4:84:2c:8f:5c:fd:e1:3e:44:66:51:6e:6f: b8:5a:15:80:07:d0:a7:e1:31:43:df:11:eb:9f:d7: 36:7e:05:83:1e:84:41:6f:4d:6f:b1:ad:7f:7a:7e: 6c:5f:21:25:c4:83:7b:0b:65:b1:b8:51:70:c8:36: fb:e0:76:e2:04:8c:0a:33:4e:9f:21:f7:47:c3:12: fe:fe:bd:dc:77:5a:60:a4:e1:fe:fb:9a:a7:ec:03: 49:ed:99:7a:ab:03:8d:d6:03:69:eb:6a:25:f9:a3: b4:3a:25:3b:0d:3e:fd:20:49:70:36:65:b2:50:b3: 41:12:12:6f:5d:28:33:bd:b3:6d:5b:da:50:79:25: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:D0:5F:34:BE:2E:D3:14:34:66:F8:04:34:F6:0D:BB:1E:F6:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:d6:c9:c3:b9:4e:70:62:35:d3:a5:c0:5e:8b:90:cf:77:24: d1:97:2b:6e:f3:c0:2f:6c:26:cf:60:2b:d2:83:c6:d2:ad:75: 98:91:c3:98:41:5f:36:29:f2:a1:91:1b:a5:50:36:9d:d1:d0: 00:b6:a2:d9:35:17:15:0d:8d:c8:be:53:f5:91:22:2c:ad:15: 2a:6b:55:2e:89:44:3d:41:1c:03:26:78:62:97:87:ac:aa:c0: 5b:83:3b:30:a4:8c:b4:61:32:ba:0e:5a:4a:2d:38:e5:0b:dc: 05:9d:c6:05:65:ab:ea:f4:1e:94:51:c1:40:a1:1d:91:66:00: bf:ba:65:53:8f:a0:0d:35:a8:c5:7d:09:45:2d:b4:a7:fb:1f: ec:7e:bb:38:a4:45:84:7b:2d:9f:09:8e:6d:14:0b:bc:2c:bb: 0e:e5:2a:57:b4:c6:73:db:3a:51:c1:f5:40:84:8a:89:b8:8c: b9:8b:82:cb:b1:98:75:b6:3f:b7:7a:62:f0:f2:00:c9:6d:a3: 48:6b:9c:51:7b:18:a8:2e:23:f9:d5:27:f9:ab:da:d9:5a:eb: b7:5f:7b:55:a4:84:07:70:ba:da:3a:c9:ba:7e:b9:f2:bd:aa: 60:65:75:6a:a2:73:aa:39:94:4a:bd:db:f6:01:fe:22:ce:20: a9:61:70:f9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT+F9pBw9/wMwH+w4NKtkSTYhT3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAyMjE4WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDE5ZmE3N2E5NGYwOGQwZDQ3Y2FhYzI0ZWVkYTUwNzRm YWY2NmNlZTYzMWE5MmNmYTg4ZjUwZGY1Y2YyNWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5wYo3yVagYxBamdcaYHP87LG45Wk5AJyGxbsPjzuOubA7 1vIiVUYDHuGtt8pKweOkfnH+YrhE5AOG0Ksk2jVxESZTTGyw0f+3W5tHIynyyH+/ 0tRdilWc7ffzsA8rJRDUWHKV5ngBB/ADmsOACsOPCvhXqo6843zq5IQsj1z94T5E ZlFub7haFYAH0KfhMUPfEeuf1zZ+BYMehEFvTW+xrX96fmxfISXEg3sLZbG4UXDI NvvgduIEjAozTp8h90fDEv7+vdx3WmCk4f77mqfsA0ntmXqrA43WA2nraiX5o7Q6 JTsNPv0gSXA2ZbJQs0ESEm9dKDO9s21b2lB5JQixAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuOLQXzS+LtMUNGb4BDT2Dbse9jAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliOTYyNGY2LWY0YzQtNDZkNS05N2M5LTA5NTBiNWFlMTI0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4kzANBgkqhkiG9w0BAQsFAAOCAQEAOdbJw7lOcGI106XAXouQz3ck0Zcr bvPAL2wmz2Ar0oPG0q11mJHDmEFfNinyoZEbpVA2ndHQALai2TUXFQ2NyL5T9ZEi LK0VKmtVLolEPUEcAyZ4YpeHrKrAW4M7MKSMtGEyug5aSi045QvcBZ3GBWWr6vQe lFHBQKEdkWYAv7plU4+gDTWoxX0JRS20p/sf7H67OKRFhHstnwmObRQLvCy7DuUq V7TGc9s6UcH1QISKibiMuYuCy7GYdbY/t3pi8PIAyW2jSGucUXsYqC4j+dUn+ava 2Vrrt197VaSEB3C62jrJun658r2qYGV1aqJzqjmUSr3b9gH+Is4gqWFw+Q== -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:08 2025 by rpki-client