$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3f042f5-11b2-4ac9-b14b-3166847b3ce5.roa File: c3f042f5-11b2-4ac9-b14b-3166847b3ce5.roa (raw, json) Hash identifier: oi4/t7p1nJ41dYaRPPVv0KxA920TVbbzC/KAi5xkm/g= Subject key identifier: C8:C0:D3:47:B6:5A:BB:B1:6F:78:A5:60:34:A2:EC:E0:D5:97:93:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3381DF52A0BF08A73A1CE7D3892DFFE1546CD754 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3f042f5-11b2-4ac9-b14b-3166847b3ce5.roa Signing time: Tue 20 May 2025 15:02:53 +0000 ROA not before: Tue 20 May 2025 15:02:53 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:81:df:52:a0:bf:08:a7:3a:1c:e7:d3:89:2d:ff:e1:54:6c:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 15:02:53 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=9dcc0c45587d89ec3b267ff456d5d6729fe4a67ecd3f71092b4b7901b387d944, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:49:6b:ad:40:f6:fd:5c:eb:9d:06:81:15: a0:35:62:44:0c:34:59:99:1b:72:24:1a:44:88:f0: cb:75:64:79:d8:21:e9:5c:9e:e9:c7:46:c2:ff:08: 51:62:f8:3f:fe:61:6d:d3:f5:59:0c:63:12:90:53: 9d:20:f5:b5:66:54:fc:90:f5:c0:36:9d:44:5a:7e: 6b:25:e3:d1:1a:3d:61:2e:60:d8:03:2a:7d:5f:80: cb:b8:41:ac:3f:e0:c1:0e:7e:2c:62:8d:c0:a8:38: 89:f8:c3:78:01:ee:c9:88:c8:b6:2a:d2:33:fd:88: bf:0f:5c:c3:86:3c:ef:7b:a5:74:6c:ef:9c:98:01: 70:ac:16:3e:35:36:75:e6:71:cb:fc:52:f2:c9:76: 9c:39:28:c0:80:55:32:23:59:f5:cb:4f:9e:5c:fb: 7f:29:03:63:08:07:e3:6f:7a:02:8c:2e:73:62:6a: 6d:ca:75:8e:a2:a4:ab:5f:f8:87:37:04:fe:a2:88: bc:60:c0:15:77:d7:96:91:f4:ec:10:55:39:43:52: 11:b4:a6:be:c1:77:56:51:ae:1f:77:85:20:a8:ac: 8b:48:43:4a:8c:39:72:10:69:c4:06:da:c0:6e:65: f2:ef:cd:62:b0:0e:7f:af:cc:69:a3:79:63:03:de: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C0:D3:47:B6:5A:BB:B1:6F:78:A5:60:34:A2:EC:E0:D5:97:93:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3f042f5-11b2-4ac9-b14b-3166847b3ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:4d:8d:bc:9d:e3:8e:35:8e:a2:b4:44:84:2d:d6:cf:ca:9f: 87:d4:a1:b8:5b:5b:cd:9d:27:2a:a4:9b:ed:77:c4:5d:2d:7d: 01:ab:d5:9b:3f:9e:47:30:ff:a7:15:3e:ec:26:65:c9:29:00: 13:ac:ba:4b:6e:57:35:5e:05:a1:4e:19:e1:13:e8:f8:dc:e1: 2b:98:e2:8e:a7:b6:02:d9:a6:b0:6a:bf:a0:9d:db:c4:5e:e3: 10:77:c5:e8:65:e9:d7:52:b7:e6:51:e9:20:71:67:82:e5:45: 2c:cb:70:a9:bb:62:4c:bb:e7:5a:29:20:0c:b8:60:7e:7e:dd: 70:7a:8f:92:a8:30:36:c5:7e:1b:66:be:54:a7:32:f7:24:61: 6e:d0:ba:b8:07:9f:68:3f:8a:92:cb:dd:5b:19:7e:ef:cb:62: 3f:8a:f9:71:d1:9d:14:3c:fb:e7:29:c9:72:2b:52:da:1f:44: 9a:bf:77:3b:77:16:4d:8e:df:04:e9:b2:ee:e7:02:cd:96:6c: 46:86:3f:0e:0e:ac:8a:e1:6a:32:33:e3:dc:c3:77:41:ee:b1: 6f:5b:b0:67:54:85:03:5e:aa:ad:b0:9e:a5:f4:42:07:d6:73: e3:e7:5f:98:30:fb:1d:3e:62:fb:53:54:9f:9e:69:8d:c1:9f: d0:97:f7:30 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM4HfUqC/CKc6HOfTiS3/4VRs11QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMTUwMjUzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGNjMGM0NTU4N2Q4OWVjM2IyNjdmZjQ1NmQ1ZDY3Mjlm ZTRhNjdlY2QzZjcxMDkyYjRiNzkwMWIzODdkOTQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrMElrrUD2/VzrnQaBFaA1YkQMNFmZG3IkGkSI8Mt1ZHnY IelcnunHRsL/CFFi+D/+YW3T9VkMYxKQU50g9bVmVPyQ9cA2nURafmsl49EaPWEu YNgDKn1fgMu4Qaw/4MEOfixijcCoOIn4w3gB7smIyLYq0jP9iL8PXMOGPO97pXRs 75yYAXCsFj41NnXmccv8UvLJdpw5KMCAVTIjWfXLT55c+38pA2MIB+NvegKMLnNi am3KdY6ipKtf+Ic3BP6iiLxgwBV315aR9OwQVTlDUhG0pr7Bd1ZRrh93hSCorItI Q0qMOXIQacQG2sBuZfLvzWKwDn+vzGmjeWMD3o6nAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUyMDTR7Zau7FveKVgNKLs4NWXkyYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzZjA0MmY1LTExYjItNGFjOS1iMTRiLTMxNjY4NDdiM2NlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4HDANBgkqhkiG9w0BAQsFAAOCAQEApk2NvJ3jjjWOorREhC3Wz8qfh9Sh uFtbzZ0nKqSb7XfEXS19AavVmz+eRzD/pxU+7CZlySkAE6y6S25XNV4FoU4Z4RPo +NzhK5jijqe2AtmmsGq/oJ3bxF7jEHfF6GXp11K35lHpIHFnguVFLMtwqbtiTLvn WikgDLhgfn7dcHqPkqgwNsV+G2a+VKcy9yRhbtC6uAefaD+KksvdWxl+78tiP4r5 cdGdFDz75ynJcitS2h9Emr93O3cWTY7fBOmy7ucCzZZsRoY/Dg6siuFqMjPj3MN3 Qe6xb1uwZ1SFA16qrbCepfRCB9Zz4+dfmDD7HT5i+1NUn55pjcGf0Jf3MA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:52:14 2025 by rpki-client