$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa File: ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa (raw, json) Hash identifier: QhbAU3zzVA2+pl0J5cLVID6WW3fiXL3rUpvgg0N+blo= Subject key identifier: 5E:AE:01:BE:F5:40:0D:0E:ED:A6:38:06:BA:53:FE:2D:F3:35:2A:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E17053B9F0524834517DD547AC06BFFF757497F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa Signing time: Tue 20 May 2025 00:40:20 +0000 ROA not before: Tue 20 May 2025 00:40:20 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.176.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:17:05:3b:9f:05:24:83:45:17:dd:54:7a:c0:6b:ff:f7:57:49:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:40:20 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=ec94dc9f555d70aaf390b178d3082794af455de4a021e91f0372de920327307a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:fe:f8:30:b0:36:a2:86:fc:5b:35:32:6d: eb:cc:3e:d1:65:e1:36:c4:90:87:c8:33:95:1f:e4: 95:27:14:af:9f:d9:da:01:b6:b4:65:f0:32:12:45: cb:52:8d:68:54:a1:d2:e8:48:50:91:b3:6b:0e:45: 43:2d:ba:1b:27:7e:e0:73:b8:c0:67:f6:a8:7b:1e: b3:e8:f9:41:ef:5e:15:cb:b7:b5:f1:0c:f7:7a:f0: ea:e1:9d:ae:8e:0d:41:e9:2a:1e:6a:42:2f:44:3c: c2:03:69:47:2a:41:bd:0e:fc:1c:35:a5:d2:d0:e2: 5b:c1:8b:88:d2:b7:4b:9f:4b:3d:72:32:fc:1d:6c: 73:f9:f7:29:b5:82:fb:1c:97:bd:05:50:a1:7b:d6: b7:b8:70:5b:21:3d:4d:c0:71:19:67:d7:5b:b0:eb: eb:f8:4e:4a:6c:02:99:51:1e:55:8a:3e:31:ad:61: 6b:a1:68:18:82:13:6c:ef:10:ff:9f:58:b4:55:e1: c0:17:18:1e:e1:e1:a2:e3:2f:54:5d:6e:fb:6c:71: 58:54:b1:05:5b:c4:7b:51:0b:b0:21:c4:50:58:9b: 10:cd:69:64:9b:b1:23:86:83:12:32:ca:bc:0d:fe: ed:82:c4:75:92:d3:80:de:53:b7:99:2d:de:4a:ec: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AE:01:BE:F5:40:0D:0E:ED:A6:38:06:BA:53:FE:2D:F3:35:2A:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.176.82.0/24 Signature Algorithm: sha256WithRSAEncryption 98:75:b0:ea:39:9e:b4:5f:2d:a3:db:81:9a:6d:48:91:81:05: 2d:64:f4:97:4e:ef:04:28:98:cf:23:0b:6e:f2:7d:c5:9b:7e: 7c:6e:3c:ac:7c:66:21:a4:d7:d1:55:6a:83:ea:15:7c:c1:15: e1:88:85:7e:57:f4:92:31:ee:b3:93:ab:58:22:fa:1c:d4:51: 6c:29:12:2f:2e:75:bf:56:a3:33:87:57:f0:08:53:c5:76:07: b5:46:c1:a4:56:84:41:54:c6:36:da:a2:0c:7b:57:33:3c:f3: 19:df:24:cc:20:17:58:00:be:61:92:37:aa:fc:0e:29:95:d5: 30:0b:27:36:45:ad:b9:29:af:32:77:6e:fc:97:3c:5a:41:a5: 5f:8a:b9:3a:a8:6e:d3:02:7f:4f:5b:cf:5b:cb:52:69:0d:62: 92:cd:ad:91:8d:dd:0a:ac:49:3a:d1:1b:8f:f6:a2:8d:38:2b: 58:dc:c2:08:01:d5:ad:f5:82:69:b8:84:43:27:a4:01:b8:ae: 68:7f:37:be:5d:a2:b1:74:2a:58:ec:fd:2f:ac:8a:ca:d6:13: e8:62:15:9c:36:a7:ad:74:11:aa:b8:53:44:c9:61:de:ce:92: 32:a7:97:b4:4b:3f:a9:81:9b:8d:f4:90:9b:62:af:95:19:7f: 2c:46:7c:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfhcFO58FJINFF91UesBr//dXSX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDA0MDIwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzk0ZGM5ZjU1NWQ3MGFhZjM5MGIxNzhkMzA4Mjc5NGFm NDU1ZGU0YTAyMWU5MWYwMzcyZGU5MjAzMjczMDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9mv74MLA2oob8WzUybevMPtFl4TbEkIfIM5Uf5JUnFK+f 2doBtrRl8DISRctSjWhUodLoSFCRs2sORUMtuhsnfuBzuMBn9qh7HrPo+UHvXhXL t7XxDPd68Orhna6ODUHpKh5qQi9EPMIDaUcqQb0O/Bw1pdLQ4lvBi4jSt0ufSz1y MvwdbHP59ym1gvscl70FUKF71re4cFshPU3AcRln11uw6+v4TkpsAplRHlWKPjGt YWuhaBiCE2zvEP+fWLRV4cAXGB7h4aLjL1RdbvtscVhUsQVbxHtRC7AhxFBYmxDN aWSbsSOGgxIyyrwN/u2CxHWS04DeU7eZLd5K7I9FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXq4BvvVADQ7tpjgGulP+LfM1KqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjZjI3NWFlLTc5MzUtNGYwYS1iNGUxLTliMGJkMDUzMmFjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAosFIwDQYJKoZIhvcNAQELBQADggEBAJh1sOo5nrRfLaPbgZptSJGBBS1k 9JdO7wQomM8jC27yfcWbfnxuPKx8ZiGk19FVaoPqFXzBFeGIhX5X9JIx7rOTq1gi +hzUUWwpEi8udb9WozOHV/AIU8V2B7VGwaRWhEFUxjbaogx7VzM88xnfJMwgF1gA vmGSN6r8DimV1TALJzZFrbkprzJ3bvyXPFpBpV+KuTqobtMCf09bz1vLUmkNYpLN rZGN3QqsSTrRG4/2oo04K1jcwggB1a31gmm4hEMnpAG4rmh/N75dorF0Kljs/S+s isrWE+hiFZw2p610Eaq4U0TJYd7OkjKnl7RLP6mBm430kJtir5UZfyxGfGw= -----END CERTIFICATE-----Generated at Sun Jun 1 05:21:04 2025 by rpki-client