$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57bcef1-b811-4c33-8250-10863c654d10.roa File: c57bcef1-b811-4c33-8250-10863c654d10.roa (raw, json) Hash identifier: lF+KDizUI2LhA6TP5dIX06h7KDawxd8KjOV17/u2fRc= Subject key identifier: FB:1B:B7:26:81:1B:DB:56:D4:5B:FC:BB:4A:20:48:84:D8:4B:15:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79A0532D98A346E9E20E07D38BB0E53B36141143 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57bcef1-b811-4c33-8250-10863c654d10.roa Signing time: Tue 13 May 2025 00:31:43 +0000 ROA not before: Tue 13 May 2025 00:31:43 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.33.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a0:53:2d:98:a3:46:e9:e2:0e:07:d3:8b:b0:e5:3b:36:14:11:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:31:43 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=88a547a1234c444a9cc81675cc0d40c7773c780e8086dea1f4b909fc7475a537, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:b7:cb:78:86:73:4a:a4:bf:35:0d:72:7a: 3f:25:8f:98:67:e9:90:7c:e0:c8:b7:ae:fa:2b:67: 9b:5c:5a:1b:1a:c2:18:68:e7:52:70:80:2c:fa:ab: 28:f2:36:a1:25:73:2d:97:19:f6:8f:49:17:bf:0f: b5:c4:79:b3:c7:98:2b:0d:d6:2c:d0:2a:c4:42:5d: 86:09:cb:fb:54:b9:87:99:de:b3:4f:99:2a:5c:12: a6:3e:d7:3a:f6:f7:fe:b6:37:c3:b3:c7:45:49:eb: 80:71:d4:98:4d:9c:0a:2b:be:82:e5:0c:48:e4:a2: 08:e2:35:b6:86:e8:9f:a2:fa:c7:c1:9c:52:32:ee: 20:16:36:38:1a:e0:8e:32:7f:aa:2c:6b:56:b3:32: bc:87:2e:c4:4f:d3:cb:d6:49:eb:14:96:fb:62:1f: 0b:8c:bb:29:48:44:1e:40:de:d7:ad:de:99:96:97: 1e:a2:cd:c4:3a:98:d2:23:cd:29:ce:91:3b:b9:7d: 6a:17:d3:fc:85:f6:4a:52:05:ee:c8:ae:ca:66:84: 6c:ad:87:9c:bc:2d:80:dd:3c:8c:06:8b:9f:9f:3d: f9:f1:f2:c8:a4:7e:e1:b9:8f:c7:c9:ad:c1:90:1b: b9:8a:0a:f1:55:89:e7:9f:1e:8a:af:7e:28:1c:24: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:B7:26:81:1B:DB:56:D4:5B:FC:BB:4A:20:48:84:D8:4B:15:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57bcef1-b811-4c33-8250-10863c654d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.33.160.0/20 Signature Algorithm: sha256WithRSAEncryption 56:ae:f7:52:2f:fe:07:5b:f7:cd:3b:ec:ee:d6:16:29:3b:d7: fa:f7:42:9d:05:ee:1c:7d:e2:f1:c6:33:11:c3:7f:67:50:75: 95:ff:10:9c:ab:9d:e1:0a:bc:46:c7:73:51:ba:4b:02:1e:aa: a2:73:5d:5e:e9:21:37:48:16:7b:18:aa:4a:6f:23:d1:14:71: f5:63:0e:55:b9:97:73:f6:34:e0:c3:ab:36:b7:63:eb:a9:76: 34:aa:fd:f8:86:93:19:c1:bb:ae:63:e2:62:ab:d7:09:f4:d3: 5f:b2:b6:8d:59:96:30:e3:5b:d0:c6:38:ab:4e:21:38:8b:39: 2c:a6:e1:70:90:ba:46:ce:c2:aa:01:c1:88:01:b3:85:9a:f4: a6:68:fb:ef:82:06:d3:8d:a2:d5:a7:91:41:21:46:72:43:74: 9c:13:05:81:9e:47:2b:75:14:68:f0:66:92:d3:77:65:4e:e6: 31:66:ab:40:f5:05:68:82:d4:58:8f:d2:c5:1b:c3:b9:32:62: dc:1d:b9:a0:58:c1:03:bd:f7:26:00:ca:37:71:a5:e3:a9:92: 0a:6b:c4:3e:4f:2c:e9:b3:b4:f8:ec:c2:8d:25:43:7a:c5:21: 3f:20:c9:a7:d6:5f:87:ca:74:a2:f7:32:c4:3a:a6:19:62:74: 98:b7:49:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeaBTLZijRuniDgfTi7DlOzYUEUMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAzMTQzWhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGE1NDdhMTIzNGM0NDRhOWNjODE2NzVjYzBkNDBjNzc3 M2M3ODBlODA4NmRlYTFmNGI5MDlmYzc0NzVhNTM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMGbfLeIZzSqS/NQ1yej8lj5hn6ZB84Mi3rvorZ5tcWhsa whho51JwgCz6qyjyNqElcy2XGfaPSRe/D7XEebPHmCsN1izQKsRCXYYJy/tUuYeZ 3rNPmSpcEqY+1zr29/62N8Ozx0VJ64Bx1JhNnAorvoLlDEjkogjiNbaG6J+i+sfB nFIy7iAWNjga4I4yf6osa1azMryHLsRP08vWSesUlvtiHwuMuylIRB5A3tet3pmW lx6izcQ6mNIjzSnOkTu5fWoX0/yF9kpSBe7IrspmhGyth5y8LYDdPIwGi5+fPfnx 8sikfuG5j8fJrcGQG7mKCvFVieefHoqvfigcJFH9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+xu3JoEb21bUW/y7SiBIhNhLFQIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1N2JjZWYxLWI4MTEtNGMzMy04MjUwLTEwODYzYzY1NGQxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATMIaAwDQYJKoZIhvcNAQELBQADggEBAFau91Iv/gdb98077O7WFik71/r3 Qp0F7hx94vHGMxHDf2dQdZX/EJyrneEKvEbHc1G6SwIeqqJzXV7pITdIFnsYqkpv I9EUcfVjDlW5l3P2NODDqza3Y+updjSq/fiGkxnBu65j4mKr1wn001+yto1ZljDj W9DGOKtOITiLOSym4XCQukbOwqoBwYgBs4Wa9KZo+++CBtONotWnkUEhRnJDdJwT BYGeRyt1FGjwZpLTd2VO5jFmq0D1BWiC1FiP0sUbw7kyYtwduaBYwQO99yYAyjdx peOpkgprxD5PLOmztPjswo0lQ3rFIT8gyafWX4fKdKL3MsQ6phlidJi3Sec= -----END CERTIFICATE-----Generated at Sun Jun 1 05:15:46 2025 by rpki-client