$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa File: aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa (raw, json) Hash identifier: IgQjle4FKy4ucYSpyGYZNM3d5rGDYMtywBltE8QYp2k= Subject key identifier: AE:45:FA:49:9C:AC:32:96:64:8E:99:E6:37:CE:EC:EC:D1:CB:41:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C299DBF992CBE381BAF38EEE4AD3C7FC15137AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa Signing time: Fri 09 May 2025 00:20:17 +0000 ROA not before: Fri 09 May 2025 00:20:17 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.51.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:29:9d:bf:99:2c:be:38:1b:af:38:ee:e4:ad:3c:7f:c1:51:37:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:17 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=afe74aeb5f56425fe8a3877ce7c057a479d947a09b5672f94d148a8be821ae66, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:d8:8a:9c:54:75:e7:8f:9c:0e:61:2f:6f: 43:b1:5a:4a:39:3c:84:5f:60:4b:be:68:4f:e4:91: b4:7c:3e:7f:22:14:7e:ba:82:55:f0:35:46:be:02: 5e:4c:4e:19:13:72:f7:e8:0a:11:54:a0:ff:89:81: ed:71:e7:69:64:cc:61:e6:96:9e:42:05:2d:ff:7a: d0:90:9f:f6:70:9f:13:c2:bc:62:7d:5b:70:7b:ab: a8:46:6d:4e:b1:b8:75:5b:3c:77:70:c0:fa:1d:e4: b8:0f:07:76:7f:04:bb:08:13:b1:8c:af:0c:2b:3e: 35:6a:6f:18:c1:06:7d:94:c8:94:d7:3f:db:c2:08: fb:5b:24:9f:8b:c3:4a:d9:61:7e:65:9a:4a:fa:7e: d4:ab:47:25:63:c8:31:d0:6a:bc:c4:0b:38:45:a3: 4f:12:cb:3b:ce:a6:c0:7c:4b:44:36:23:d4:ff:4b: e5:e8:e0:f8:a2:e0:24:b9:7c:ed:88:3e:df:7e:d1: 0c:dc:fe:bc:9d:65:e4:17:15:d8:5f:d4:82:ed:f8: fb:2e:36:ea:01:6e:a8:cd:a4:e6:1e:32:1c:17:fb: c8:d6:b1:ac:20:04:c8:2f:f0:03:93:da:ee:a5:3f: 78:89:3a:2e:3b:23:14:22:34:96:d8:f4:c3:9b:33: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:FA:49:9C:AC:32:96:64:8E:99:E6:37:CE:EC:EC:D1:CB:41:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedb2d57-360e-4c9a-b5cf-c70a374aa393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.51.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9d:c0:39:a0:5f:54:3e:d5:fa:d2:c5:f6:50:ae:f2:95:a9:bc: 64:c5:85:2f:90:46:e5:e3:5b:70:2a:f7:d3:31:f5:44:03:95: 37:34:fe:a6:10:2b:89:32:e2:11:80:d1:c1:92:d4:82:4d:b9: 64:6e:a3:0a:85:d8:e9:67:5f:c9:fb:70:a2:0c:98:89:57:4d: 49:99:01:3f:97:87:f2:b2:8e:05:cc:15:92:cc:4d:4d:9c:d6: 27:92:7b:9b:4e:ae:2b:40:93:2c:d5:17:46:19:67:41:bd:2f: c3:97:0e:ea:67:3f:1d:01:c6:37:3c:6d:9d:58:71:44:8c:de: 81:0e:d3:f8:bb:64:9d:e0:36:9c:a4:41:d2:13:31:65:83:b0: a2:16:87:d1:ec:8f:e3:90:25:e5:73:4b:7a:57:53:59:7f:f7: 47:1e:9e:38:75:a3:61:a0:72:60:5a:b6:25:8c:ce:ae:9d:c2: 9a:83:51:da:2d:6f:30:13:c5:b0:46:47:1d:e5:b5:34:4d:ba: 76:4d:37:27:52:bd:b2:ac:e9:56:ef:7c:1e:4b:5d:41:0f:91: 2a:3d:46:a2:fe:31:48:5c:16:76:c6:1c:0e:c0:01:22:30:b4: 14:64:2a:97:bf:14:cb:03:fc:29:8f:e2:96:60:4c:c2:65:2a: 24:49:e3:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfCmdv5ksvjgbrzju5K08f8FRN64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAyMDE3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmU3NGFlYjVmNTY0MjVmZThhMzg3N2NlN2MwNTdhNDc5 ZDk0N2EwOWI1NjcyZjk0ZDE0OGE4YmU4MjFhZTY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8UNiKnFR154+cDmEvb0OxWko5PIRfYEu+aE/kkbR8Pn8i FH66glXwNUa+Al5MThkTcvfoChFUoP+Jge1x52lkzGHmlp5CBS3/etCQn/ZwnxPC vGJ9W3B7q6hGbU6xuHVbPHdwwPod5LgPB3Z/BLsIE7GMrwwrPjVqbxjBBn2UyJTX P9vCCPtbJJ+Lw0rZYX5lmkr6ftSrRyVjyDHQarzECzhFo08SyzvOpsB8S0Q2I9T/ S+Xo4Pii4CS5fO2IPt9+0Qzc/rydZeQXFdhf1ILt+PsuNuoBbqjNpOYeMhwX+8jW sawgBMgv8AOT2u6lP3iJOi47IxQiNJbY9MObM0PpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrkX6SZysMpZkjpnmN87s7NHLQbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZGIyZDU3LTM2MGUtNGM5YS1iNWNmLWM3MGEzNzRhYTM5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRM+AwDQYJKoZIhvcNAQELBQADggEBAJ3AOaBfVD7V+tLF9lCu8pWpvGTF hS+QRuXjW3Aq99Mx9UQDlTc0/qYQK4ky4hGA0cGS1IJNuWRuowqF2OlnX8n7cKIM mIlXTUmZAT+Xh/KyjgXMFZLMTU2c1ieSe5tOritAkyzVF0YZZ0G9L8OXDupnPx0B xjc8bZ1YcUSM3oEO0/i7ZJ3gNpykQdITMWWDsKIWh9Hsj+OQJeVzS3pXU1l/90ce njh1o2GgcmBatiWMzq6dwpqDUdotbzATxbBGRx3ltTRNunZNNydSvbKs6VbvfB5L XUEPkSo9RqL+MUhcFnbGHA7AASIwtBRkKpe/FMsD/CmP4pZgTMJlKiRJ4wY= -----END CERTIFICATE-----Generated at Sun Jun 1 04:39:24 2025 by rpki-client