$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa File: a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json) Hash identifier: UEkDul6pa71Sp6qIW93iH3/Gf79edIfQ+4pzPhfidVs= Subject key identifier: 38:10:1E:D0:AA:12:3F:92:24:0A:B8:2C:CA:64:D9:21:D3:9F:69:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FC8577FD9919FAAB86D6B0455B0B74785DCC653 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa Signing time: Fri 09 May 2025 00:21:32 +0000 ROA not before: Fri 09 May 2025 00:21:32 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c8:57:7f:d9:91:9f:aa:b8:6d:6b:04:55:b0:b7:47:85:dc:c6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:21:32 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=0d07db2d9a2bc55ff30eb546281794bbfb44c562b000d9014e31a4184f675242, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:8b:41:1b:20:2d:cf:59:30:3d:fb:26:8c: a4:e8:c5:87:d2:12:e7:a6:9e:0e:84:a1:88:33:b0: 50:99:a2:47:31:7f:89:20:60:a2:81:5c:80:09:ac: 42:d1:50:91:3b:d6:de:7f:d4:64:f1:fb:56:13:8a: 3f:d9:a4:f6:71:4d:f8:ac:0c:6b:15:4e:b4:8a:f4: 90:eb:bb:b9:3f:65:81:77:f6:40:4f:4f:9e:83:09: bb:e2:18:b0:8f:e4:13:44:44:6d:4c:14:0b:84:a2: c0:88:97:f7:ff:00:b2:7f:76:4b:83:29:6c:b1:40: 32:5f:cd:5b:3c:20:2d:00:97:4d:61:33:85:db:a0: 20:f7:32:9d:40:0c:76:cf:13:23:43:10:20:45:03: 46:95:17:fe:c6:42:64:0c:3c:df:86:93:c3:5d:d8: 26:51:15:f8:21:44:85:bb:51:7e:cb:72:d6:32:c9: 2e:e2:1d:ad:47:ff:cd:d2:9f:bd:0a:61:1e:c2:78: b0:6c:2a:ba:75:6f:41:58:1c:59:f9:6d:36:66:6d: 4e:e2:32:b7:2f:7c:05:e3:c2:f3:23:a9:d7:e0:05: 00:6a:70:14:63:42:46:7c:a6:b8:ba:f8:91:1a:81: 13:4e:d8:c5:1a:f1:94:87:db:6c:a5:2f:b1:e6:e7: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:1E:D0:AA:12:3F:92:24:0A:B8:2C:CA:64:D9:21:D3:9F:69:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.96.0/19 Signature Algorithm: sha256WithRSAEncryption a9:b9:b4:d5:91:fc:42:84:22:0b:95:bd:6e:42:23:7d:a7:a1: 48:7e:09:44:66:45:58:cf:6b:49:c4:d6:4f:11:51:c4:fb:b1: ef:98:88:05:83:86:6d:71:1e:f2:0b:25:38:6f:a4:29:2b:b6: 29:17:4b:7c:b1:3f:f9:79:12:31:be:14:ff:b6:16:a9:b4:7d: fa:14:80:1b:60:bc:13:01:6e:a0:c3:e8:61:0e:71:71:41:2c: 59:4f:db:e1:b7:b5:19:72:9e:0d:52:0c:40:8e:f6:48:67:ee: 2b:54:05:5a:63:dd:4a:2b:65:d3:e7:45:65:6c:84:4b:6c:08: 1e:1b:07:c5:82:01:ed:ff:60:a6:dd:61:30:a8:1a:7b:9b:6c: 90:b2:0a:a0:b9:31:e0:57:61:34:58:cb:51:6b:ed:89:e7:69: e1:97:c7:e2:f3:d9:a9:cf:40:f8:87:d1:15:f1:01:1a:c7:34: a2:f4:61:cc:51:75:11:9f:46:38:1b:2b:3b:d5:5c:93:2f:eb: b3:a3:c2:73:70:92:f1:6a:be:3f:cb:c5:34:84:2b:14:c7:63: f5:f8:d0:df:e0:2f:df:bf:29:05:7d:f4:46:18:68:75:41:f8: 49:0c:4f:ab:81:23:c9:7d:ca:1b:ba:38:90:96:74:a5:bd:5c: cf:bf:18:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb8hXf9mRn6q4bWsEVbC3R4XcxlMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAyMTMyWhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDA3ZGIyZDlhMmJjNTVmZjMwZWI1NDYyODE3OTRiYmZi NDRjNTYyYjAwMGQ5MDE0ZTMxYTQxODRmNjc1MjQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkG4tBGyAtz1kwPfsmjKToxYfSEuemng6EoYgzsFCZokcx f4kgYKKBXIAJrELRUJE71t5/1GTx+1YTij/ZpPZxTfisDGsVTrSK9JDru7k/ZYF3 9kBPT56DCbviGLCP5BNERG1MFAuEosCIl/f/ALJ/dkuDKWyxQDJfzVs8IC0Al01h M4XboCD3Mp1ADHbPEyNDECBFA0aVF/7GQmQMPN+Gk8Nd2CZRFfghRIW7UX7LctYy yS7iHa1H/83Sn70KYR7CeLBsKrp1b0FYHFn5bTZmbU7iMrcvfAXjwvMjqdfgBQBq cBRjQkZ8pri6+JEagRNO2MUa8ZSH22ylL7Hm54wjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOBAe0KoSP5IkCrgsymTZIdOfaYMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNTUxNTc1LWZkYTgtNDBjZC1hMDEyLTJkZDk4ZjU0YTM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGDWAwDQYJKoZIhvcNAQELBQADggEBAKm5tNWR/EKEIguVvW5CI32noUh+ CURmRVjPa0nE1k8RUcT7se+YiAWDhm1xHvILJThvpCkrtikXS3yxP/l5EjG+FP+2 Fqm0ffoUgBtgvBMBbqDD6GEOcXFBLFlP2+G3tRlyng1SDECO9khn7itUBVpj3Uor ZdPnRWVshEtsCB4bB8WCAe3/YKbdYTCoGnubbJCyCqC5MeBXYTRYy1Fr7YnnaeGX x+Lz2anPQPiH0RXxARrHNKL0YcxRdRGfRjgbKzvVXJMv67OjwnNwkvFqvj/LxTSE KxTHY/X40N/gL9+/KQV99EYYaHVB+EkMT6uBI8l9yhu6OJCWdKW9XM+/GB0= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:03 2025 by rpki-client