$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa File: a51c6524-05cd-4515-90ee-87b113d6ce7d.roa (raw, json) Hash identifier: w3cJzScCynny8OoxtNbbrUmuaBpWiFmATVrT1InJ0DU= Subject key identifier: D7:D7:46:63:98:CF:A4:E2:6F:AC:1C:E5:BE:86:96:47:E6:E6:6D:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F6A4FCBC1D3C72A023B3E2FD47AC8CF86CA0B1B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa Signing time: Mon 19 May 2025 17:30:17 +0000 ROA not before: Mon 19 May 2025 17:30:17 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 146.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6a:4f:cb:c1:d3:c7:2a:02:3b:3e:2f:d4:7a:c8:cf:86:ca:0b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:30:17 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=15017ab775edbf4bd3547fe69ab2ec8e737c222bb48e44e7933154677a15423e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:e7:b8:a1:ce:3c:d9:33:ce:b4:18:c4:cf: ea:53:90:ba:f7:a6:d4:27:75:80:af:77:64:57:36: 9b:c8:40:eb:ca:a5:27:ce:ff:57:ca:aa:78:7b:0e: 1b:23:2d:df:b9:a9:42:60:af:68:bd:a0:53:8c:47: 62:7c:d2:db:3b:64:06:6b:f4:7a:c1:e3:57:c5:f3: 7c:b1:c8:65:50:1a:00:6a:98:3c:f8:18:36:99:b1: f6:e3:dc:cc:e7:d6:ef:d9:c0:b0:af:63:cf:5b:08: 1e:00:c6:21:fd:bb:8b:63:29:bb:89:85:68:b9:ec: b5:6a:56:6d:11:aa:82:73:47:4c:80:9e:c4:6d:11: 37:4d:7b:e0:15:35:28:f6:12:3f:a1:92:55:6a:10: 08:f4:5c:d7:d2:cd:c3:21:ea:3a:7b:49:4f:f0:4b: 78:c3:40:4e:ef:20:1d:7e:37:52:3d:27:47:4d:37: 24:74:75:2e:fe:67:04:31:60:c3:03:eb:c7:2e:b5: ce:7d:36:3b:6b:a3:94:41:3b:6f:fe:90:aa:e7:20: 04:b2:13:a2:0d:c8:47:20:b0:aa:e7:f6:79:7f:a1: a1:b0:82:7a:e2:2b:91:21:34:f2:80:9d:11:75:46: 4a:43:0b:42:ad:24:19:9f:6e:f7:1d:78:f8:f2:5b: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D7:46:63:98:CF:A4:E2:6F:AC:1C:E5:BE:86:96:47:E6:E6:6D:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:91:4f:80:ff:af:25:31:df:b4:9d:0d:36:e4:77:05:33:91: 22:88:6f:37:37:04:26:bd:0f:4e:4e:80:04:98:8e:e0:9a:77: 4e:f6:ed:6c:03:42:d1:1a:45:0f:13:5c:b6:56:84:c9:e6:14: f0:76:6a:dc:6d:ab:8e:5e:11:ef:06:d8:69:59:ac:81:8d:a5: db:95:56:70:c7:47:fe:e9:5d:c1:16:7d:f9:f3:3b:23:8d:65: 3f:9f:85:f8:af:e7:14:f0:39:7f:d8:56:b3:db:4a:2b:a8:26: a5:17:52:4a:54:a4:d9:63:9e:8a:55:98:49:1e:4b:06:95:a2: fb:6b:0d:90:bd:02:a5:fc:be:69:11:3d:7a:dc:2f:58:4b:5d: 0f:2e:a0:b4:72:3e:35:f3:96:51:ab:15:35:06:c3:13:ec:af: 3d:f3:e7:75:07:f8:0c:ac:43:62:07:1f:44:ea:a3:47:66:3c: 7e:e7:54:81:f3:f0:12:69:ae:ff:da:e5:57:2b:00:eb:b7:c9: cb:37:5c:5a:98:2b:47:17:9b:94:99:9d:4e:37:32:1d:43:7e: 6f:fd:45:ec:34:e2:cc:51:c0:52:73:84:2b:b3:16:cb:14:82: 00:32:4b:c8:89:f2:66:bf:15:fc:ed:ab:53:80:8b:40:04:c5: 2e:bb:35:3a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUD2pPy8HTxyoCOz4v1HrIz4bKCxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTczMDE3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTAxN2FiNzc1ZWRiZjRiZDM1NDdmZTY5YWIyZWM4ZTcz N2MyMjJiYjQ4ZTQ0ZTc5MzMxNTQ2NzdhMTU0MjNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjv+e4oc482TPOtBjEz+pTkLr3ptQndYCvd2RXNpvIQOvK pSfO/1fKqnh7DhsjLd+5qUJgr2i9oFOMR2J80ts7ZAZr9HrB41fF83yxyGVQGgBq mDz4GDaZsfbj3Mzn1u/ZwLCvY89bCB4AxiH9u4tjKbuJhWi57LVqVm0RqoJzR0yA nsRtETdNe+AVNSj2Ej+hklVqEAj0XNfSzcMh6jp7SU/wS3jDQE7vIB1+N1I9J0dN NyR0dS7+ZwQxYMMD68cutc59Njtro5RBO2/+kKrnIASyE6INyEcgsKrn9nl/oaGw gnriK5EhNPKAnRF1RkpDC0KtJBmfbvcdePjyWzoTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU19dGY5jPpOJvrBzlvoaWR+bmbZIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1MWM2NTI0LTA1Y2QtNDUxNS05MGVlLTg3YjExM2Q2Y2U3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCSTTANBgkqhkiG9w0BAQsFAAOCAQEArZFPgP+vJTHftJ0NNuR3BTORIohv NzcEJr0PTk6ABJiO4Jp3TvbtbANC0RpFDxNctlaEyeYU8HZq3G2rjl4R7wbYaVms gY2l25VWcMdH/uldwRZ9+fM7I41lP5+F+K/nFPA5f9hWs9tKK6gmpRdSSlSk2WOe ilWYSR5LBpWi+2sNkL0Cpfy+aRE9etwvWEtdDy6gtHI+NfOWUasVNQbDE+yvPfPn dQf4DKxDYgcfROqjR2Y8fudUgfPwEmmu/9rlVysA67fJyzdcWpgrRxeblJmdTjcy HUN+b/1F7DTizFHAUnOEK7MWyxSCADJLyInyZr8V/O2rU4CLQATFLrs1Og== -----END CERTIFICATE-----Generated at Sun Jun 1 05:09:21 2025 by rpki-client