$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf8c2352-31e2-451c-8d45-f20afbc2351c.roa File: cf8c2352-31e2-451c-8d45-f20afbc2351c.roa (raw, json) Hash identifier: YW0ycYyWl+aHOfOfJ5siPUtrzygELH9Dzfzs7XxP0HA= Subject key identifier: 23:7A:BE:86:1F:69:5A:F8:A6:59:26:99:3B:4A:0A:9F:A5:B9:B9:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DB9CC4E25BB08F5EACFE1AB3FBC6C585FB2F315 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf8c2352-31e2-451c-8d45-f20afbc2351c.roa Signing time: Tue 20 May 2025 00:20:23 +0000 ROA not before: Tue 20 May 2025 00:20:23 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 208.86.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b9:cc:4e:25:bb:08:f5:ea:cf:e1:ab:3f:bc:6c:58:5f:b2:f3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:20:23 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=4633abced0f9b4033a432c95da1c9d7dab2acf277039f9dc84d0de416928766e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:c7:29:34:ee:6e:d0:ee:6b:0e:8a:c5:3d: 7d:02:12:aa:f7:0a:39:04:1c:a8:17:21:c5:69:98: ee:7d:dc:a2:03:dc:af:09:d3:ef:8f:2a:55:0e:c7: ac:0c:de:7f:af:9a:20:50:0f:22:4d:0f:4f:7e:1e: 76:3c:19:96:4b:6b:fd:a5:0c:f7:32:c2:40:b5:0c: c8:08:ef:98:87:69:eb:80:3b:11:a0:c0:25:b3:c9: 58:9e:ae:4c:06:2c:58:53:8d:80:cd:31:90:8e:ec: d1:32:5d:43:12:89:3a:a5:04:b7:c4:06:8e:06:17: 0c:8b:00:f0:38:65:2a:ed:41:f0:39:21:3a:70:a4: 93:24:52:e6:6c:ff:a5:11:c4:bf:0f:bf:6a:76:b9: f8:a8:3d:f5:0a:8d:6d:9d:ca:d6:9e:38:ad:8f:31: b7:7c:62:5f:08:c4:15:44:19:05:6f:d7:7f:00:06: 71:db:6c:49:f4:e1:66:4a:5d:d8:46:ce:c0:b4:a6: 8b:84:ef:f3:fd:fa:44:84:43:3a:bf:34:9a:3c:4a: d9:0e:5e:b3:5c:b1:af:7f:9d:3c:db:b1:61:88:26: 30:39:4b:2e:36:14:0d:d3:ee:4e:ad:20:5b:71:28: c2:d7:5e:14:46:d1:d0:68:68:7b:91:8c:5e:05:dc: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7A:BE:86:1F:69:5A:F8:A6:59:26:99:3B:4A:0A:9F:A5:B9:B9:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf8c2352-31e2-451c-8d45-f20afbc2351c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.86.88.0/22 Signature Algorithm: sha256WithRSAEncryption 38:56:a7:b7:76:c6:ec:d4:3d:f6:9b:92:37:c7:af:e2:2c:f6: a2:17:40:84:26:cb:85:9d:98:68:ff:32:11:7a:d5:fb:2f:9a: 5b:30:ca:de:2d:bb:90:3b:77:24:1e:c0:3d:bc:51:99:e4:64: 41:a6:86:6b:c2:c6:c6:45:4f:d2:d5:e6:0b:97:05:50:42:f8: a6:f6:a0:dd:fb:23:5f:ad:99:61:6b:d8:03:56:63:3c:65:7c: c7:57:42:c8:fa:de:74:9f:13:62:7d:bb:8b:0d:68:6d:8c:34: 67:38:e4:3a:22:26:75:55:99:1f:f7:8a:5b:e6:3d:1a:14:24: 13:14:eb:fe:aa:ff:99:11:84:b5:77:9e:e3:70:6d:ca:4a:28: b3:88:7a:71:32:cd:88:df:90:89:76:8e:7d:c2:05:67:32:8e: cd:36:58:17:95:8b:6f:1d:e8:ce:92:2f:ba:fd:9a:5d:5f:89: 8f:ea:19:23:59:69:2f:b0:a6:3d:8d:89:41:a2:00:90:9c:73: ed:f2:0f:07:ef:56:91:06:33:fe:01:84:32:55:20:c2:20:18: 60:69:ec:cf:2d:16:00:8c:7b:b7:8e:f7:e4:04:92:6b:d7:3c: 69:9b:ad:2b:c7:38:a0:2b:2b:f2:41:c0:45:88:fa:38:ae:75: 27:a8:62:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXbnMTiW7CPXqz+GrP7xsWF+y8xUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAyMDIzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjMzYWJjZWQwZjliNDAzM2E0MzJjOTVkYTFjOWQ3ZGFi MmFjZjI3NzAzOWY5ZGM4NGQwZGU0MTY5Mjg3NjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTB8cpNO5u0O5rDorFPX0CEqr3CjkEHKgXIcVpmO593KID 3K8J0++PKlUOx6wM3n+vmiBQDyJND09+HnY8GZZLa/2lDPcywkC1DMgI75iHaeuA OxGgwCWzyVierkwGLFhTjYDNMZCO7NEyXUMSiTqlBLfEBo4GFwyLAPA4ZSrtQfA5 ITpwpJMkUuZs/6URxL8Pv2p2ufioPfUKjW2dytaeOK2PMbd8Yl8IxBVEGQVv138A BnHbbEn04WZKXdhGzsC0pouE7/P9+kSEQzq/NJo8StkOXrNcsa9/nTzbsWGIJjA5 Sy42FA3T7k6tIFtxKMLXXhRG0dBoaHuRjF4F3MSHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI3q+hh9pWvimWSaZO0oKn6W5uWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmOGMyMzUyLTMxZTItNDUxYy04ZDQ1LWYyMGFmYmMyMzUxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALQVlgwDQYJKoZIhvcNAQELBQADggEBADhWp7d2xuzUPfabkjfHr+Is9qIX QIQmy4WdmGj/MhF61fsvmlswyt4tu5A7dyQewD28UZnkZEGmhmvCxsZFT9LV5guX BVBC+Kb2oN37I1+tmWFr2ANWYzxlfMdXQsj63nSfE2J9u4sNaG2MNGc45DoiJnVV mR/3ilvmPRoUJBMU6/6q/5kRhLV3nuNwbcpKKLOIenEyzYjfkIl2jn3CBWcyjs02 WBeVi28d6M6SL7r9ml1fiY/qGSNZaS+wpj2NiUGiAJCcc+3yDwfvVpEGM/4BhDJV IMIgGGBp7M8tFgCMe7eO9+QEkmvXPGmbrSvHOKArK/JBwEWI+jiudSeoYuc= -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:13 2025 by rpki-client