$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa File: a802275d-709f-4188-a78c-52e40d99a48f.roa (raw, json) Hash identifier: Z1KiD2cwcXpUqzwm4+n5OoJ7+u53Oj+9mlmYUo5QML0= Subject key identifier: E6:95:2F:B9:C4:E2:A2:2A:C0:36:75:00:42:1A:33:D4:96:6C:52:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48BF63B9B34E014815D8C2078FA3282D422F2E07 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa Signing time: Tue 13 May 2025 00:40:19 +0000 ROA not before: Tue 13 May 2025 00:40:19 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bf:63:b9:b3:4e:01:48:15:d8:c2:07:8f:a3:28:2d:42:2f:2e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:40:19 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=a705374d56379689df8ae59748a5389fd002921d0ca8cbaf1fcb6c57b534bead, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:57:58:04:20:81:fd:18:33:1b:8d:ed:d0:cc: 98:7b:6b:45:96:75:20:2f:ee:fb:7e:da:26:c1:04: ad:1a:48:6d:97:19:c3:2d:e9:69:2d:53:97:91:55: 72:9d:24:8e:b6:3d:54:68:46:6f:9a:46:d5:7e:71: 51:a4:19:bf:bc:be:af:3a:88:a9:30:1d:9a:77:b7: 01:6e:6c:05:28:8d:de:07:df:0e:ce:8f:bb:23:5f: a4:53:a6:ea:88:93:49:82:8d:0c:4a:eb:26:c5:3b: 35:7d:2f:65:61:b2:e9:37:c6:83:2d:7c:03:da:fe: 95:45:dc:84:02:54:cd:7f:ed:f3:f9:01:1a:57:6c: ae:e5:d7:a0:38:de:b6:04:8c:8b:80:65:72:8f:d4: 4d:4d:75:4d:4f:94:0f:58:f0:a4:7e:53:39:dc:8f: c7:5d:8f:6a:21:05:38:b7:cf:51:41:74:32:e4:cc: e8:54:1c:1c:ff:31:cf:8c:0b:a6:0a:8d:63:f9:80: 98:3b:8c:cc:92:52:b4:25:0f:84:25:28:75:09:1d: 24:40:9b:0c:d0:17:5c:ea:7c:8a:d2:54:a7:ba:d4: fe:20:71:57:1d:c7:d4:35:0e:3b:29:6c:1e:d8:73: 37:d0:d7:5c:88:84:ce:a5:52:7b:ce:d9:ba:1f:bd: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:95:2F:B9:C4:E2:A2:2A:C0:36:75:00:42:1A:33:D4:96:6C:52:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.128.0/21 Signature Algorithm: sha256WithRSAEncryption 74:85:6d:b8:10:6d:ba:03:91:fb:4a:c1:ce:0e:65:8e:f5:6e: fa:17:0a:0b:e1:39:dc:23:dd:e7:55:0a:8f:e1:75:cc:19:18: 6a:9f:d9:ea:15:27:22:27:bf:e4:eb:4d:89:54:b3:5f:b7:e7: 77:b0:08:7a:f9:b1:26:33:58:3b:95:d0:20:85:81:14:8e:f7: 10:88:15:c5:25:95:be:0c:e9:f8:52:65:f2:7e:a8:fd:91:b7: a4:5d:24:fe:ff:17:38:33:0e:a0:10:bc:fb:63:a3:ff:f8:e5: fa:13:c9:f9:92:23:be:b1:09:e7:fa:10:a6:43:58:62:52:28: 26:fd:48:16:6a:71:af:89:81:d9:42:1b:1d:15:fb:13:21:74: 81:72:76:b9:ce:ee:f9:9e:7d:23:92:a7:b0:8e:7e:eb:ac:f6: 59:84:5b:fb:00:7f:ba:1a:ee:bc:64:ed:ff:1f:b5:7e:b7:4f: b6:ee:a8:e6:08:9c:8d:d2:c1:a4:e6:63:70:ec:68:e7:16:18: fc:91:2e:97:32:bd:0c:ea:bc:5f:d2:37:1e:ff:42:87:b6:76: b5:ac:c0:9b:35:41:ac:08:c0:61:07:ee:d8:15:99:2f:c6:39: cf:24:d0:24:9c:b2:e6:d7:44:b7:f8:55:bf:76:b8:f5:d9:f5: 2b:a8:a5:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSL9jubNOAUgV2MIHj6MoLUIvLgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDA0MDE5WhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzA1Mzc0ZDU2Mzc5Njg5ZGY4YWU1OTc0OGE1Mzg5ZmQw MDI5MjFkMGNhOGNiYWYxZmNiNmM1N2I1MzRiZWFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmV1gEIIH9GDMbje3QzJh7a0WWdSAv7vt+2ibBBK0aSG2X GcMt6WktU5eRVXKdJI62PVRoRm+aRtV+cVGkGb+8vq86iKkwHZp3twFubAUojd4H 3w7Oj7sjX6RTpuqIk0mCjQxK6ybFOzV9L2Vhsuk3xoMtfAPa/pVF3IQCVM1/7fP5 ARpXbK7l16A43rYEjIuAZXKP1E1NdU1PlA9Y8KR+Uzncj8ddj2ohBTi3z1FBdDLk zOhUHBz/Mc+MC6YKjWP5gJg7jMySUrQlD4QlKHUJHSRAmwzQF1zqfIrSVKe61P4g cVcdx9Q1DjspbB7YczfQ11yIhM6lUnvO2bofvTJLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5pUvucTioirANnUAQhoz1JZsUg4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4MDIyNzVkLTcwOWYtNDE4OC1hNzhjLTUyZTQwZDk5YTQ4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFAIAwDQYJKoZIhvcNAQELBQADggEBAHSFbbgQbboDkftKwc4OZY71bvoX CgvhOdwj3edVCo/hdcwZGGqf2eoVJyInv+TrTYlUs1+353ewCHr5sSYzWDuV0CCF gRSO9xCIFcUllb4M6fhSZfJ+qP2Rt6RdJP7/FzgzDqAQvPtjo//45foTyfmSI76x Cef6EKZDWGJSKCb9SBZqca+JgdlCGx0V+xMhdIFydrnO7vmefSOSp7COfuus9lmE W/sAf7oa7rxk7f8ftX63T7buqOYInI3SwaTmY3DsaOcWGPyRLpcyvQzqvF/SNx7/ Qoe2drWswJs1QawIwGEH7tgVmS/GOc8k0CScsubXRLf4Vb92uPXZ9Suopb8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:23:21 2025 by rpki-client