$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa File: b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa (raw, json) Hash identifier: aagYmoFgoELccuwNKcefMzZH17ckpcYOWAPF1JVOLuA= Subject key identifier: AE:30:F8:07:99:EB:A0:4A:60:15:0A:7B:6F:8F:EF:D9:68:EC:9F:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F60CFE6CF8DB630DD16EE22D6A03A287773294F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa Signing time: Tue 20 May 2025 00:21:12 +0000 ROA not before: Tue 20 May 2025 00:21:12 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.39.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:60:cf:e6:cf:8d:b6:30:dd:16:ee:22:d6:a0:3a:28:77:73:29:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:21:12 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=d3900370a765b8f6768393973ae174324faf687f1c7200fc109775116b10c1d9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:bb:77:06:55:f2:43:48:0f:f2:3c:f2:dc: ac:8e:bb:8b:dd:15:68:42:78:90:0e:2c:55:3a:42: 8c:56:39:9f:89:64:53:3e:c5:c1:0e:f8:b9:22:7a: b0:9d:dc:0c:d9:9e:45:57:18:07:a8:d1:8a:c6:25: f9:e0:5b:0f:2f:b6:95:26:46:a4:7b:7c:72:cd:d5: 7e:27:22:22:f1:f3:d4:da:a4:64:5e:54:c8:08:5a: ce:3a:f0:04:25:4b:ec:31:6e:6c:85:5d:de:6d:74: f4:f4:9c:0b:ee:36:db:68:3c:fc:e3:76:bf:73:dd: 0c:53:dd:78:81:c1:5e:39:81:64:6e:a8:c6:5d:fe: 88:5c:0d:59:0c:eb:fd:bc:3c:41:34:ee:5c:0a:89: b8:ad:1b:a7:29:f8:73:f6:ef:9d:b3:e1:7b:94:de: 19:94:7f:84:4c:cf:bc:91:fd:49:de:e1:4a:c5:e0: fc:f0:2d:e3:04:6e:62:fc:53:a8:61:94:b9:56:2c: 6e:e9:e9:c9:8d:d8:ec:29:68:6e:8a:2e:82:ec:df: 56:75:75:25:41:54:ed:b0:b6:d5:69:f1:92:66:ac: d3:03:4a:f2:e0:91:c9:29:b3:ea:7c:a2:9e:44:35: 55:a7:3f:68:d1:de:7a:f2:a6:c6:53:5a:01:19:48: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:30:F8:07:99:EB:A0:4A:60:15:0A:7B:6F:8F:EF:D9:68:EC:9F:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b459dde2-4ea8-4683-a8ce-4b2ae5cc7146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.39.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9d:5f:57:8f:3b:79:9f:36:6e:2a:89:58:80:ee:08:a7:1b:53: a7:eb:05:0b:16:7f:8f:41:0c:47:00:a8:84:1a:b9:cc:b0:5b: 55:9b:29:44:bf:e0:1e:7b:75:24:a0:3d:00:1e:b7:2f:6f:5d: 83:40:86:be:ca:80:9b:17:d6:da:9e:a3:40:00:ae:87:2a:43: 06:6a:9b:53:57:20:fd:15:40:c4:87:89:61:d8:2c:6e:2b:05: 0c:e5:8b:f3:e7:e0:07:5f:02:64:cd:81:71:b8:ee:95:cc:2d: e1:43:2d:d4:f5:1d:3b:d7:07:f0:f9:87:af:4d:88:a2:b9:a7: 69:3d:29:57:ae:a1:db:bb:34:93:60:08:1d:77:b5:76:53:6d: ba:e5:7a:b2:aa:25:50:21:8f:b5:37:37:8d:28:a4:28:6e:f6: ee:be:b0:2a:64:c7:0e:da:0e:06:89:24:35:5b:7e:d7:22:6c: c3:93:bc:64:ba:8a:85:0e:40:62:bb:96:16:77:20:9a:34:cd: 90:d6:9f:47:3f:dc:cf:e2:ca:b6:6a:df:63:77:44:ad:be:56: b0:92:93:23:89:07:94:8a:98:4a:74:fb:31:a5:95:86:54:96: fc:ae:08:91:dd:8a:f9:ce:54:c0:de:94:e5:9c:ef:94:08:e0: 39:cc:74:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL2DP5s+NtjDdFu4i1qA6KHdzKU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAyMTEyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzkwMDM3MGE3NjViOGY2NzY4MzkzOTczYWUxNzQzMjRm YWY2ODdmMWM3MjAwZmMxMDk3NzUxMTZiMTBjMWQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxV7t3BlXyQ0gP8jzy3KyOu4vdFWhCeJAOLFU6QoxWOZ+J ZFM+xcEO+LkierCd3AzZnkVXGAeo0YrGJfngWw8vtpUmRqR7fHLN1X4nIiLx89Ta pGReVMgIWs468AQlS+wxbmyFXd5tdPT0nAvuNttoPPzjdr9z3QxT3XiBwV45gWRu qMZd/ohcDVkM6/28PEE07lwKibitG6cp+HP2752z4XuU3hmUf4RMz7yR/Une4UrF 4PzwLeMEbmL8U6hhlLlWLG7p6cmN2OwpaG6KLoLs31Z1dSVBVO2wttVp8ZJmrNMD SvLgkckps+p8op5ENVWnP2jR3nrypsZTWgEZSE4NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrjD4B5nroEpgFQp7b4/v2Wjsn5UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0NTlkZGUyLTRlYTgtNDY4My1hOGNlLTRiMmFlNWNjNzE0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYJ4AwDQYJKoZIhvcNAQELBQADggEBAJ1fV487eZ82biqJWIDuCKcbU6fr BQsWf49BDEcAqIQaucywW1WbKUS/4B57dSSgPQAety9vXYNAhr7KgJsX1tqeo0AA rocqQwZqm1NXIP0VQMSHiWHYLG4rBQzli/Pn4AdfAmTNgXG47pXMLeFDLdT1HTvX B/D5h69NiKK5p2k9KVeuodu7NJNgCB13tXZTbbrlerKqJVAhj7U3N40opChu9u6+ sCpkxw7aDgaJJDVbftcibMOTvGS6ioUOQGK7lhZ3IJo0zZDWn0c/3M/iyrZq32N3 RK2+VrCSkyOJB5SKmEp0+zGllYZUlvyuCJHdivnOVMDelOWc75QI4DnMdLA= -----END CERTIFICATE-----Generated at Sun Jun 1 04:56:17 2025 by rpki-client