$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa File: a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa (raw, json) Hash identifier: IzoJXkO2XsCsW+vfDbGD46czwKd0wpIEmv4C4aJGrV4= Subject key identifier: DD:D4:5A:9F:7B:A2:2D:CC:02:80:39:3D:4F:6F:F6:9E:AF:80:59:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62EB7748319E60583EE295ADD946B485F4839579 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa Signing time: Mon 19 May 2025 17:30:20 +0000 ROA not before: Mon 19 May 2025 17:30:20 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.24.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:eb:77:48:31:9e:60:58:3e:e2:95:ad:d9:46:b4:85:f4:83:95:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:30:20 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=e3a8a70e5184d33c5cabaec13e262c12862faec33aba998d003d0def434998e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:0b:3f:de:d1:93:b3:99:72:3d:c5:83:aa: 9d:48:da:46:ed:ff:3c:75:92:aa:d8:90:fb:83:f3: 08:9b:e0:08:c3:c0:da:cf:97:75:a2:2b:e9:76:ee: 30:1d:85:73:2a:11:c3:15:0a:3d:f5:a3:4b:42:ca: 9f:a4:3e:6c:ce:54:85:d5:3a:23:1d:18:43:37:92: b3:13:ff:d7:89:a2:c9:dc:51:90:c5:45:a7:41:79: df:6a:34:e3:cf:a1:fe:ef:46:98:13:a8:f3:3e:aa: c0:cd:ce:f4:1f:94:60:fe:64:e1:e6:01:a1:ed:3d: 6e:16:84:02:9f:44:1f:96:fa:0b:7c:dd:76:fe:a2: a2:9a:ce:50:8d:d9:91:ff:fd:b7:d2:eb:87:3b:a7: 65:bd:41:6f:fc:73:8b:0f:7a:07:bc:98:c2:9c:7e: 08:9e:51:77:66:c4:57:49:4a:02:b4:3f:d6:ef:98: 87:56:42:fd:80:4a:bb:3a:cf:52:76:20:9b:06:83: 75:95:0c:f3:66:69:50:33:6a:88:8d:75:fd:d3:03: 5c:be:ad:d7:40:31:92:12:51:ba:c5:ee:2e:0c:fc: e5:aa:1d:80:46:83:41:79:4b:4e:22:55:69:08:8b: ac:28:e9:09:ac:77:8a:f8:a0:76:33:48:6a:a5:72: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:5A:9F:7B:A2:2D:CC:02:80:39:3D:4F:6F:F6:9E:AF:80:59:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a2f6a8-3e69-4d87-82a9-ab06bfa8dc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.24.0.0/15 Signature Algorithm: sha256WithRSAEncryption 04:58:8d:bd:5c:2c:1c:c4:e0:80:06:b6:0c:95:25:04:d9:1b: 8d:a3:2d:ea:33:9d:88:bf:5b:b8:c1:ba:68:32:81:c5:65:fd: b5:a2:8c:e2:b9:4a:7a:1b:c3:53:fb:63:3d:5a:29:9a:72:27: 28:a6:df:61:b3:6f:aa:64:a1:c2:49:29:b9:ce:6c:16:fc:f2: ca:59:33:a9:94:c5:eb:ef:e6:f9:d0:66:5f:10:38:60:c5:4e: cf:92:63:f9:59:34:3a:6f:c8:8a:08:be:d3:e0:4b:d0:15:15: 00:6a:e4:ef:f5:08:0e:bf:b7:13:dd:49:28:5f:74:cb:5d:3f: 12:e7:e6:ea:18:16:c7:8a:84:a1:59:80:21:f6:9b:e1:0f:55: 72:1d:57:03:5b:22:fd:0f:fc:03:30:55:04:c4:d6:92:1c:9a: f2:3f:ea:cd:94:4e:26:93:03:7a:da:d4:75:7e:fe:3a:bb:f0: 58:b3:39:16:b3:53:0d:96:81:11:68:75:c5:18:7d:a0:3a:61: d1:d2:a7:8f:16:13:90:f3:f7:32:99:56:fe:6c:7b:04:16:93: c2:00:c4:0b:3f:10:81:a1:62:db:41:af:ba:2b:bf:5f:ce:83: 4c:4d:aa:6b:d4:04:b8:b0:e9:58:32:64:3f:30:96:f2:cc:28: 15:01:c7:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYut3SDGeYFg+4pWt2Ua0hfSDlXkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTczMDIwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2E4YTcwZTUxODRkMzNjNWNhYmFlYzEzZTI2MmMxMjg2 MmZhZWMzM2FiYTk5OGQwMDNkMGRlZjQzNDk5OGUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2WAs/3tGTs5lyPcWDqp1I2kbt/zx1kqrYkPuD8wib4AjD wNrPl3WiK+l27jAdhXMqEcMVCj31o0tCyp+kPmzOVIXVOiMdGEM3krMT/9eJosnc UZDFRadBed9qNOPPof7vRpgTqPM+qsDNzvQflGD+ZOHmAaHtPW4WhAKfRB+W+gt8 3Xb+oqKazlCN2ZH//bfS64c7p2W9QW/8c4sPege8mMKcfgieUXdmxFdJSgK0P9bv mIdWQv2ASrs6z1J2IJsGg3WVDPNmaVAzaoiNdf3TA1y+rddAMZISUbrF7i4M/OWq HYBGg0F5S04iVWkIi6wo6Qmsd4r4oHYzSGqlcplhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3dRan3uiLcwCgDk9T2/2nq+AWQcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1YTJmNmE4LTNlNjktNGQ4Ny04MmE5LWFiMDZiZmE4ZGMyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQGDANBgkqhkiG9w0BAQsFAAOCAQEABFiNvVwsHMTggAa2DJUlBNkbjaMt 6jOdiL9buMG6aDKBxWX9taKM4rlKehvDU/tjPVopmnInKKbfYbNvqmShwkkpuc5s FvzyylkzqZTF6+/m+dBmXxA4YMVOz5Jj+Vk0Om/Iigi+0+BL0BUVAGrk7/UIDr+3 E91JKF90y10/Eufm6hgWx4qEoVmAIfab4Q9Vch1XA1si/Q/8AzBVBMTWkhya8j/q zZROJpMDetrUdX7+OrvwWLM5FrNTDZaBEWh1xRh9oDph0dKnjxYTkPP3MplW/mx7 BBaTwgDECz8QgaFi20Gvuiu/X86DTE2qa9QEuLDpWDJkPzCW8swoFQHHUQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:25:55 2025 by rpki-client