$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa File: abb7a40f-6237-40f4-a2b2-34645feeb43a.roa (raw, json) Hash identifier: SdYgL+6MA0GIMBrCBMoIv6dj/Hf841C59/QBSYR6HnQ= Subject key identifier: 62:72:8E:5D:8C:6E:DB:21:D4:B4:8C:A8:1E:C8:E7:58:8D:37:D8:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0327A28BF95FFDD627212030DE8155E980551872 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa Signing time: Sat 31 May 2025 00:10:15 +0000 ROA not before: Sat 31 May 2025 00:10:15 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.184.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:27:a2:8b:f9:5f:fd:d6:27:21:20:30:de:81:55:e9:80:55:18:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:10:15 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=e39468e228134e2fff96da3093479f14e98c0b904ebd265a9bb0f6e388f21d8d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:b6:57:b9:56:d0:6a:58:8a:17:4e:65:fb: e3:10:6d:ee:c7:f1:f9:28:9b:36:93:f0:11:0e:1d: 2e:22:f3:1c:a3:20:ee:e4:48:8d:a9:e2:52:81:bd: c4:68:1e:40:5a:32:9b:fb:40:ed:27:27:85:65:7a: d5:09:f6:c8:9a:8b:db:48:f1:3a:64:5b:50:c9:8f: 14:96:89:b0:81:ef:fe:e7:cc:bd:6e:fa:b9:af:2a: d7:43:de:61:f6:20:3c:04:2a:cd:79:08:0c:05:d3: bc:25:9a:79:50:53:9d:8a:c7:48:84:e9:30:15:69: 93:95:1c:c6:74:8b:ff:a8:92:59:37:39:49:db:de: b9:b7:de:c4:9a:ca:2f:c3:bf:89:25:bd:52:23:e7: 63:e2:4d:fb:f5:4f:5d:e9:23:17:81:43:64:d3:3d: 8c:75:7a:19:11:9e:26:aa:8e:b4:c0:2c:c0:50:bc: 90:dc:5c:7c:66:0a:89:c1:41:3a:fd:08:eb:42:f0: 72:11:1d:d8:c8:89:95:74:bc:02:a7:c3:7e:45:cc: db:61:7a:0f:4d:55:34:a6:bd:fa:1d:ea:43:88:a5: c9:76:bf:c3:66:4f:e6:25:c0:40:9b:38:c5:ed:52: 73:0c:f1:3e:7d:57:1d:dd:c5:b8:a0:67:b3:76:80: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:72:8E:5D:8C:6E:DB:21:D4:B4:8C:A8:1E:C8:E7:58:8D:37:D8:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.184.96.0/19 Signature Algorithm: sha256WithRSAEncryption 97:dc:a1:70:5b:40:2e:24:f1:3d:c1:d0:d8:55:bb:ec:97:60: da:57:b3:66:87:2a:ff:84:ca:9d:a5:35:dd:2f:6a:c5:e3:ad: f2:29:ca:d3:bf:2f:46:61:99:4c:7c:0b:a1:35:cb:3f:fc:1d: 0d:68:0f:cf:72:15:c8:1c:80:58:10:46:56:0e:f7:e8:ad:1c: 60:5e:2e:f4:6e:97:3a:5d:69:cc:79:7e:19:c7:9f:46:04:28: f3:6f:ce:ae:55:ea:fb:b2:ba:0f:91:ab:06:73:2c:d8:a4:04: 41:d5:d2:93:39:05:28:c3:a2:d5:ad:38:72:88:44:ab:ac:77: 7d:d9:29:3e:b1:02:9c:48:15:f9:a6:5a:aa:d7:20:9f:7e:ba: cc:bc:e0:b3:cc:0c:97:6e:56:0b:63:56:7f:45:92:08:8e:be: a6:2c:16:4a:61:56:b9:fd:6f:e8:98:ff:d9:1f:e1:58:40:1c: ec:24:1f:da:16:11:fd:46:b4:10:2d:bc:8a:f8:4b:f8:6b:c4: 92:72:1d:eb:35:76:e9:44:6b:4f:1c:16:81:c6:06:d0:fa:4c: ec:ba:c8:97:f6:04:4e:9a:c4:50:03:f2:77:88:bc:ae:26:4b: 13:bf:2b:ae:b8:ed:61:bd:a7:7c:f4:e5:54:3e:52:6a:be:97: 7c:94:cf:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAyeii/lf/dYnISAw3oFV6YBVGHIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMxMDAxMDE1WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzk0NjhlMjI4MTM0ZTJmZmY5NmRhMzA5MzQ3OWYxNGU5 OGMwYjkwNGViZDI2NWE5YmIwZjZlMzg4ZjIxZDhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMsLZXuVbQaliKF05l++MQbe7H8fkomzaT8BEOHS4i8xyj IO7kSI2p4lKBvcRoHkBaMpv7QO0nJ4VletUJ9siai9tI8TpkW1DJjxSWibCB7/7n zL1u+rmvKtdD3mH2IDwEKs15CAwF07wlmnlQU52Kx0iE6TAVaZOVHMZ0i/+oklk3 OUnb3rm33sSayi/Dv4klvVIj52PiTfv1T13pIxeBQ2TTPYx1ehkRniaqjrTALMBQ vJDcXHxmConBQTr9COtC8HIRHdjIiZV0vAKnw35FzNtheg9NVTSmvfod6kOIpcl2 v8NmT+YlwECbOMXtUnMM8T59Vx3dxbigZ7N2gG7XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYnKOXYxu2yHUtIyoHsjnWI032FAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiYjdhNDBmLTYyMzctNDBmNC1hMmIyLTM0NjQ1ZmVlYjQzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXNuGAwDQYJKoZIhvcNAQELBQADggEBAJfcoXBbQC4k8T3B0NhVu+yXYNpX s2aHKv+Eyp2lNd0vasXjrfIpytO/L0ZhmUx8C6E1yz/8HQ1oD89yFcgcgFgQRlYO 9+itHGBeLvRulzpdacx5fhnHn0YEKPNvzq5V6vuyug+RqwZzLNikBEHV0pM5BSjD otWtOHKIRKusd33ZKT6xApxIFfmmWqrXIJ9+usy84LPMDJduVgtjVn9FkgiOvqYs FkphVrn9b+iY/9kf4VhAHOwkH9oWEf1GtBAtvIr4S/hrxJJyHes1dulEa08cFoHG BtD6TOy6yJf2BE6axFAD8neIvK4mSxO/K6647WG9p3z05VQ+Umq+l3yUz9A= -----END CERTIFICATE-----Generated at Sun Jun 1 04:41:48 2025 by rpki-client