$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa File: b2c3c467-0357-412c-8f21-70113f26e16c.roa (raw, json) Hash identifier: Di+Q7f+bc8uXKu8K3XMjsaxgxp/XmnoIGGgS+x/s4DE= Subject key identifier: 8D:41:BE:5E:61:D6:72:E2:2B:C9:AB:8F:2C:70:4E:F3:EC:54:60:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28020AC1A3885E6ABDB8D1DCA227FDE05A283F07 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa Signing time: Sat 24 May 2025 00:00:15 +0000 ROA not before: Sat 24 May 2025 00:00:15 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.172.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:02:0a:c1:a3:88:5e:6a:bd:b8:d1:dc:a2:27:fd:e0:5a:28:3f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:00:15 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=c2dd2023b96351f1cbbf36f49da0cd3a52c612fc343c8ffcfbf0cf18e8a530d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:ec:fa:a7:d1:b7:98:cd:cb:43:a5:7c:ec: 52:4d:ed:10:e5:49:df:bf:84:c5:f9:b2:21:17:33: 4e:ea:61:e6:20:16:f9:6f:41:2c:70:39:4c:7a:8b: 78:31:23:4e:da:b3:00:31:5b:d7:59:f1:e0:22:47: 51:c4:e5:22:c6:b6:c4:c6:e4:94:fa:9f:55:ab:c7: 27:51:c9:1d:c2:2c:cc:72:9c:4f:33:cf:a3:3a:59: 3a:bd:61:f6:bc:a8:e4:3e:a6:b3:fb:8f:fe:cf:2a: 03:81:30:47:24:82:f6:b6:a4:f0:7d:3d:fc:a7:df: f4:db:95:80:d0:b8:d1:fa:b3:40:0e:6b:3e:8f:b1: b2:ef:37:88:b4:96:93:b5:af:bf:5b:a6:8a:f5:cd: e5:15:33:50:d3:66:2e:81:17:39:a1:89:f5:b5:58: 57:4e:0f:e3:e7:6b:6d:36:f3:4b:90:bb:82:5b:fd: f3:84:a4:44:41:98:e2:e1:68:b2:87:df:30:c6:ec: c7:a3:73:40:3f:96:df:ad:d6:15:45:01:b6:52:8c: 93:00:53:c5:c9:51:25:f7:ef:07:43:fb:5b:85:5a: 69:35:a9:6a:6a:f4:c9:70:84:0d:ba:03:fc:a6:a3: 0c:30:a2:4f:69:08:b6:34:d3:2a:79:5b:11:d7:f1: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:BE:5E:61:D6:72:E2:2B:C9:AB:8F:2C:70:4E:F3:EC:54:60:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2c3c467-0357-412c-8f21-70113f26e16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.172.176.0/22 Signature Algorithm: sha256WithRSAEncryption d4:54:c0:f6:b7:29:53:79:e9:63:c6:b3:ac:41:d3:f9:ed:2f: d7:3d:29:e6:bc:fc:ba:96:a3:03:97:ef:9f:46:fc:2c:9d:bb: 6f:72:f5:ff:ec:7c:b4:03:5d:6e:94:a1:73:b6:9a:b1:53:18: ea:f1:55:71:36:09:2e:e6:ff:b2:5b:24:11:69:18:89:f4:ce: 36:5e:f1:18:62:05:86:fe:0f:c6:7b:b7:e7:92:b3:e8:a4:c2: 65:eb:16:0e:ce:bf:af:81:a7:35:b4:57:e4:07:29:46:b2:ac: 4c:7d:85:01:f0:d2:f5:06:69:ad:20:e4:47:a0:7a:d8:fe:07: 4e:10:85:a7:51:fb:05:31:76:d9:7b:43:12:de:d6:03:b5:7a: e3:76:67:a1:b1:8a:b7:83:33:23:bf:87:64:67:18:d5:fe:ef: 76:3c:51:e3:e9:10:10:f5:ec:e9:f3:1d:0e:97:e0:38:5a:26: a1:b1:09:8b:ac:60:63:27:3f:0e:95:b4:45:fd:f3:c4:0c:7c: dd:7e:38:1d:18:00:2b:a9:0c:30:89:2b:4f:d5:a0:e1:4b:eb: 4e:5d:97:b5:d9:55:94:07:b9:63:f6:04:40:2b:8a:f8:32:18: 2d:13:0a:9e:d9:8d:da:50:e2:37:66:0b:ce:6f:49:a9:3c:2f: 67:7d:eb:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKAIKwaOIXmq9uNHcoif94FooPwcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAwMDE1WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmRkMjAyM2I5NjM1MWYxY2JiZjM2ZjQ5ZGEwY2QzYTUy YzYxMmZjMzQzYzhmZmNmYmYwY2YxOGU4YTUzMGQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCF6ez6p9G3mM3LQ6V87FJN7RDlSd+/hMX5siEXM07qYeYg FvlvQSxwOUx6i3gxI07aswAxW9dZ8eAiR1HE5SLGtsTG5JT6n1WrxydRyR3CLMxy nE8zz6M6WTq9Yfa8qOQ+prP7j/7PKgOBMEckgva2pPB9Pfyn3/TblYDQuNH6s0AO az6PsbLvN4i0lpO1r79bpor1zeUVM1DTZi6BFzmhifW1WFdOD+Pna20280uQu4Jb /fOEpERBmOLhaLKH3zDG7Mejc0A/lt+t1hVFAbZSjJMAU8XJUSX37wdD+1uFWmk1 qWpq9MlwhA26A/ymowwwok9pCLY00yp5WxHX8aHzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjUG+XmHWcuIryauPLHBO8+xUYHwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyYzNjNDY3LTAzNTctNDEyYy04ZjIxLTcwMTEzZjI2ZTE2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALNrLAwDQYJKoZIhvcNAQELBQADggEBANRUwPa3KVN56WPGs6xB0/ntL9c9 Kea8/LqWowOX759G/Cydu29y9f/sfLQDXW6UoXO2mrFTGOrxVXE2CS7m/7JbJBFp GIn0zjZe8RhiBYb+D8Z7t+eSs+ikwmXrFg7Ov6+BpzW0V+QHKUayrEx9hQHw0vUG aa0g5Eegetj+B04QhadR+wUxdtl7QxLe1gO1euN2Z6GxireDMyO/h2RnGNX+73Y8 UePpEBD17OnzHQ6X4DhaJqGxCYusYGMnPw6VtEX988QMfN1+OB0YACupDDCJK0/V oOFL605dl7XZVZQHuWP2BEArivgyGC0TCp7ZjdpQ4jdmC85vSak8L2d96+o= -----END CERTIFICATE-----Generated at Sun Jun 1 04:26:48 2025 by rpki-client