$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae676a97-17e8-43c8-b032-522076c501aa.roa File: ae676a97-17e8-43c8-b032-522076c501aa.roa (raw, json) Hash identifier: DcuKiUE/0a92PDECJChFh+9OdhyEJsbbyAYexqSfuCQ= Subject key identifier: 24:35:32:6E:AD:C6:F1:3F:16:40:46:FF:86:9A:DD:22:48:6A:9A:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43696DFF64EE28611433EE96925137399AB6293F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae676a97-17e8-43c8-b032-522076c501aa.roa Signing time: Tue 20 May 2025 15:12:31 +0000 ROA not before: Tue 20 May 2025 15:12:31 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:69:6d:ff:64:ee:28:61:14:33:ee:96:92:51:37:39:9a:b6:29:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:12:31 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=5bc0f86d8aafa7d32190513c5e6b6f37ed1d75c5b05e4810ceb298b8e1993c9a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:2e:f7:39:ed:d4:87:04:77:ae:f7:62:23: ba:46:28:df:e7:d8:7a:5c:2f:b3:68:cb:d8:7c:3a: 5a:8d:5c:e7:e0:1f:cc:cc:6a:e0:66:85:5c:7a:33: d0:17:70:51:a5:db:97:76:19:86:0e:18:25:b1:24: 68:c1:40:1f:e7:3a:13:38:c0:12:e7:68:06:61:af: bd:3e:f7:b8:93:40:8a:97:b5:09:72:90:96:e0:87: 84:1b:bc:27:4d:99:f1:50:41:cf:e2:52:47:d2:20: 0b:59:e4:b6:a8:1f:77:b5:eb:24:a5:b5:16:7e:4d: 5e:11:93:47:2e:0f:c2:73:dc:7b:7d:c7:ed:38:8a: 1c:f8:f9:c1:5a:9b:77:79:f8:3b:f4:9b:68:a2:6a: 44:c7:a5:b0:72:ed:18:e0:fd:c6:f0:d8:f4:d6:26: 8a:28:c5:ac:27:3a:4d:b2:71:2a:77:62:8e:c9:07: 98:ad:54:e1:da:db:05:f5:13:c5:7b:8b:12:11:ca: 0e:0b:28:42:4a:0c:12:9d:8f:c9:9d:c1:c5:2e:54: 0c:50:d7:61:dc:3a:68:96:ef:3c:55:4f:a0:34:8a: 53:fe:d6:42:e7:cc:c8:b5:b7:21:8e:96:e1:b8:ab: 60:39:bc:a8:ac:1b:ec:e7:cf:76:1e:81:42:af:d1: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:35:32:6E:AD:C6:F1:3F:16:40:46:FF:86:9A:DD:22:48:6A:9A:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae676a97-17e8-43c8-b032-522076c501aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.192.0/18 Signature Algorithm: sha256WithRSAEncryption 1a:87:0a:d3:e5:35:06:d9:ae:60:be:9c:5a:02:3b:a0:3f:f2: da:d4:b0:63:58:51:d0:2d:0a:ac:20:c6:d1:51:14:c6:e4:c9: 5d:9f:b5:28:80:0d:23:42:bd:92:6d:d1:36:b0:12:1a:77:2f: ea:af:60:07:f4:a7:24:2d:ca:7c:ff:fb:0a:7c:4a:6b:f4:75: 8c:11:52:9e:0b:a7:3a:c3:b2:18:42:25:69:e0:7e:d9:64:8a: 47:2b:95:c3:84:64:ed:15:e4:83:70:ca:2f:b6:89:83:0d:3f: be:f1:03:0b:25:87:27:28:c9:c1:0a:44:3a:aa:ff:ad:9e:8d: c3:e2:6c:fd:d1:fb:6f:7b:f8:a7:02:50:f0:06:c6:6b:51:e0: 12:ae:eb:5e:dc:4d:70:ae:20:77:71:bf:7e:11:c2:04:80:48: 54:94:60:9a:e3:3b:8e:07:09:8a:4f:a5:17:1e:96:f1:a7:43: 95:d9:6e:f9:2d:bb:5c:4b:33:49:ac:63:a5:e2:e3:66:54:f1: eb:c5:ae:c9:23:83:06:5c:e7:73:42:96:d5:4d:81:08:77:8a: fb:ad:69:ce:1c:3e:40:74:91:92:93:5e:3e:e2:f1:22:50:df: ed:b5:d2:06:38:8e:ec:07:04:8a:33:8c:91:aa:cb:49:f3:96: 9b:85:10:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ2lt/2TuKGEUM+6WklE3OZq2KT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUxMjMxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmMwZjg2ZDhhYWZhN2QzMjE5MDUxM2M1ZTZiNmYzN2Vk MWQ3NWM1YjA1ZTQ4MTBjZWIyOThiOGUxOTkzYzlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNyi73Oe3UhwR3rvdiI7pGKN/n2HpcL7Noy9h8OlqNXOfg H8zMauBmhVx6M9AXcFGl25d2GYYOGCWxJGjBQB/nOhM4wBLnaAZhr70+97iTQIqX tQlykJbgh4QbvCdNmfFQQc/iUkfSIAtZ5LaoH3e16ySltRZ+TV4Rk0cuD8Jz3Ht9 x+04ihz4+cFam3d5+Dv0m2iiakTHpbBy7Rjg/cbw2PTWJoooxawnOk2ycSp3Yo7J B5itVOHa2wX1E8V7ixIRyg4LKEJKDBKdj8mdwcUuVAxQ12HcOmiW7zxVT6A0ilP+ 1kLnzMi1tyGOluG4q2A5vKisG+znz3YegUKv0eG3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJDUybq3G8T8WQEb/hprdIkhqmvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlNjc2YTk3LTE3ZTgtNDNjOC1iMDMyLTUyMjA3NmM1MDFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG4MAwDQYJKoZIhvcNAQELBQADggEBABqHCtPlNQbZrmC+nFoCO6A/8trU sGNYUdAtCqwgxtFRFMbkyV2ftSiADSNCvZJt0TawEhp3L+qvYAf0pyQtynz/+wp8 Smv0dYwRUp4LpzrDshhCJWngftlkikcrlcOEZO0V5INwyi+2iYMNP77xAwslhyco ycEKRDqq/62ejcPibP3R+297+KcCUPAGxmtR4BKu617cTXCuIHdxv34RwgSASFSU YJrjO44HCYpPpRcelvGnQ5XZbvktu1xLM0msY6Xi42ZU8evFrskjgwZc53NCltVN gQh3ivutac4cPkB0kZKTXj7i8SJQ3+210gY4juwHBIozjJGqy0nzlpuFEKc= -----END CERTIFICATE-----Generated at Sun Jun 1 04:58:49 2025 by rpki-client