$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa File: dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa (raw, json) Hash identifier: Mf4/vI2sMvDyfPOk7KvtZnQ/+z61FHTjvV6ZXTrVV2o= Subject key identifier: 79:F8:EB:90:12:16:F6:E1:AA:F5:1F:65:9A:74:A4:1C:D3:4C:7B:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FC28FC204FFE8F78F434617E1FF90BC8FB7F3ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa Signing time: Wed 28 May 2025 00:01:27 +0000 ROA not before: Wed 28 May 2025 00:01:27 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 207.223.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c2:8f:c2:04:ff:e8:f7:8f:43:46:17:e1:ff:90:bc:8f:b7:f3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:01:27 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=407cf0e7d2be2018d32b3ce2feb8b13b3fa917f967d51f9ce139420789964bd2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:49:77:ab:36:89:7d:15:78:12:af:aa:8d: c1:b4:79:15:58:d1:9e:a2:8f:63:78:7b:85:0b:28: db:3f:4b:07:01:88:1c:f4:17:d7:90:4f:1e:86:e7: c6:99:62:a3:6f:60:ab:cc:0c:53:f4:bd:fe:95:04: ed:da:f9:a5:65:eb:00:ea:3a:e3:7e:ff:0d:07:ec: 1c:25:84:8c:1a:e1:62:85:21:4d:06:a9:bf:3d:39: e5:05:cc:1a:97:b2:50:6e:1c:cc:8b:a5:6e:56:e7: c0:8c:ab:01:1a:f4:ee:ad:7d:96:66:5d:ae:76:93: 32:74:cf:ae:7c:3d:a5:58:e0:47:2a:d4:42:0a:59: 05:ad:73:52:18:9b:d4:70:f9:18:2a:6a:3f:16:10: e9:27:79:ef:32:01:c6:cc:5f:d3:0d:8e:3f:19:d4: 4e:f6:09:ca:62:48:c5:73:7e:12:bd:9f:8a:75:2f: cf:67:1e:63:d6:44:85:ee:eb:56:d8:25:79:3b:d8: 9e:5a:9f:fd:73:c2:ef:58:18:23:c7:5f:1d:1b:f2: 3d:05:75:12:9b:7a:cc:ea:c3:3f:9f:83:38:67:3c: 23:11:de:56:88:3c:ee:0d:13:f5:89:7c:01:d5:f5: d0:45:69:33:0c:5a:7d:68:c3:91:12:df:98:9e:57: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F8:EB:90:12:16:F6:E1:AA:F5:1F:65:9A:74:A4:1C:D3:4C:7B:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbc8700e-e39c-46ed-b212-3e8897a5b36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.223.80.0/20 Signature Algorithm: sha256WithRSAEncryption 06:18:2c:f7:1e:c4:98:ff:ef:af:20:e2:31:77:c1:17:eb:ab: 22:88:71:61:4d:08:38:23:75:e4:0f:26:ce:90:3d:8a:f4:57: c0:fa:54:9d:d6:29:6d:85:4b:8f:35:a0:03:59:60:e5:42:ac: 5c:00:97:6f:e9:da:7f:29:e5:dc:d5:cf:1d:e5:17:56:3f:b0: 57:6b:e5:b1:58:0e:4f:94:e4:66:8d:bf:f7:43:18:5d:f4:a7: 6f:a8:e1:e1:6d:f4:22:7f:f8:af:d8:2e:bf:e8:1e:ab:4c:b5: 16:81:67:7f:95:9e:c0:41:e1:fa:65:24:29:08:2e:0d:aa:95: c1:ec:3c:d6:f3:cc:6c:b2:b2:a6:39:dd:bb:a9:63:5a:73:b2: 92:15:08:15:ff:38:d0:42:96:31:a7:ee:38:76:d4:f5:af:e6: f1:60:5a:07:b6:02:c6:b0:f0:b7:4c:1b:60:a1:3c:67:91:d9: 5d:ac:5b:63:21:8b:ac:dd:1e:a5:7a:8d:46:71:9a:23:1b:c8: cc:47:9e:5b:b3:93:5d:c1:0b:97:1b:b2:47:48:8d:72:b9:82: 25:b9:49:c4:4c:ca:5c:42:cf:65:36:b3:94:a1:7e:ca:dd:1d: c5:f6:0b:b6:09:94:92:c9:67:33:2a:1f:b1:8a:67:21:86:67: 75:12:29:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb8KPwgT/6PePQ0YX4f+QvI+38+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAwMTI3WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDdjZjBlN2QyYmUyMDE4ZDMyYjNjZTJmZWI4YjEzYjNm YTkxN2Y5NjdkNTFmOWNlMTM5NDIwNzg5OTY0YmQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjNkl3qzaJfRV4Eq+qjcG0eRVY0Z6ij2N4e4ULKNs/SwcB iBz0F9eQTx6G58aZYqNvYKvMDFP0vf6VBO3a+aVl6wDqOuN+/w0H7BwlhIwa4WKF IU0Gqb89OeUFzBqXslBuHMyLpW5W58CMqwEa9O6tfZZmXa52kzJ0z658PaVY4Ecq 1EIKWQWtc1IYm9Rw+Rgqaj8WEOknee8yAcbMX9MNjj8Z1E72CcpiSMVzfhK9n4p1 L89nHmPWRIXu61bYJXk72J5an/1zwu9YGCPHXx0b8j0FdRKbeszqwz+fgzhnPCMR 3laIPO4NE/WJfAHV9dBFaTMMWn1ow5ES35ieV5yXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUefjrkBIW9uGq9R9lmnSkHNNMe9MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiYzg3MDBlLWUzOWMtNDZlZC1iMjEyLTNlODg5N2E1YjM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATP31AwDQYJKoZIhvcNAQELBQADggEBAAYYLPcexJj/768g4jF3wRfrqyKI cWFNCDgjdeQPJs6QPYr0V8D6VJ3WKW2FS481oANZYOVCrFwAl2/p2n8p5dzVzx3l F1Y/sFdr5bFYDk+U5GaNv/dDGF30p2+o4eFt9CJ/+K/YLr/oHqtMtRaBZ3+VnsBB 4fplJCkILg2qlcHsPNbzzGyysqY53bupY1pzspIVCBX/ONBCljGn7jh21PWv5vFg Wge2Asaw8LdMG2ChPGeR2V2sW2Mhi6zdHqV6jUZxmiMbyMxHnluzk13BC5cbskdI jXK5giW5ScRMylxCz2U2s5ShfsrdHcX2C7YJlJLJZzMqH7GKZyGGZ3USKW8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:26:50 2025 by rpki-client