$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd23fdfa-1068-4736-b910-3260dbee7995.roa File: dd23fdfa-1068-4736-b910-3260dbee7995.roa (raw, json) Hash identifier: Kgq1Y7v0IoHOH+AqW0MaKSr7SM1O0ybCr7L5gUvwbrg= Subject key identifier: 9C:80:B5:23:15:8C:BA:8E:D9:C9:46:5A:F2:70:CF:E4:2F:0D:29:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CBF2124E5B99CE98EF5FAE947191714D92DE9AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd23fdfa-1068-4736-b910-3260dbee7995.roa Signing time: Fri 23 May 2025 00:11:45 +0000 ROA not before: Fri 23 May 2025 00:11:45 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.211.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bf:21:24:e5:b9:9c:e9:8e:f5:fa:e9:47:19:17:14:d9:2d:e9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:11:45 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=63801b77d9e6ec9bb853bb10534e679b02a8e7a7b3608b0ac85a4639bf95e1d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9f:1b:75:80:79:2a:d8:ac:0d:2a:29:84:93: 41:b3:5f:bb:22:c9:c5:61:92:56:42:3d:f8:be:2a: cd:a0:f6:a6:71:1a:3d:87:26:34:69:6a:33:93:69: fb:7d:28:a3:bf:40:22:2f:4f:31:a8:6c:8a:04:e9: 46:66:d6:de:25:92:58:42:8c:22:09:8f:dd:98:c1: 6b:b0:59:8a:bf:52:f5:43:d8:13:17:8d:8b:6d:7b: 74:bc:57:de:66:75:5f:16:f7:1a:20:5c:50:33:b8: b6:36:dc:a0:f5:e6:e3:bc:fd:ed:cf:e9:75:17:39: d3:6b:b1:84:13:bb:9d:84:8f:8b:c8:5f:10:74:b3: c9:c1:51:36:4f:3b:dd:7a:2a:13:2d:5c:5d:af:c9: 11:a1:d4:11:46:d0:e2:3c:66:9a:6b:8c:3e:d6:df: e0:f0:8f:7b:df:8b:12:e2:80:d2:ee:3a:e7:5a:e5: e2:66:1f:87:78:a1:ed:4c:3c:1e:cc:02:92:6a:d3: 95:c1:df:57:de:78:f8:2e:99:8a:d3:ec:55:83:80: af:46:93:c8:70:b1:cf:0b:70:98:f0:f7:2c:f0:47: ff:ee:7a:38:8b:13:b3:2e:94:43:80:87:aa:3d:24: 78:c9:bc:c4:b7:2f:39:cb:d3:b8:51:b4:5e:64:ce: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:80:B5:23:15:8C:BA:8E:D9:C9:46:5A:F2:70:CF:E4:2F:0D:29:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd23fdfa-1068-4736-b910-3260dbee7995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.211.0.0/18 Signature Algorithm: sha256WithRSAEncryption 2b:6c:b8:ac:d2:95:91:5a:aa:d0:75:50:c0:fa:05:e0:71:39: 9d:8a:4c:20:69:c5:1b:5c:2e:3c:2c:8f:32:1d:a6:dd:2b:4b: 4d:ce:ac:dd:4c:bb:c6:82:f8:7b:23:b4:7b:d4:08:69:b8:20: 73:8f:97:c6:d5:87:13:49:47:16:50:c1:b3:4d:30:3b:f0:66: 8e:16:57:e7:a5:02:10:a1:3a:c7:02:67:50:c9:17:09:6b:38: e6:73:c0:a1:cf:d2:9b:a8:66:0f:c6:72:78:ee:5f:a8:01:78: 84:3f:22:9b:64:ef:5d:c1:38:35:d7:91:51:64:55:4b:94:f4: 62:d4:43:1d:80:8e:ec:e1:93:cc:a1:1e:eb:41:ed:e0:5b:84: de:db:2c:38:bf:63:cf:ef:bd:22:20:14:41:92:96:ef:7e:cf: fc:d0:28:52:2d:1e:44:54:92:88:c3:9c:81:f1:f3:8a:00:f0: ad:d5:a7:a4:ad:46:13:89:1f:d0:75:51:65:dc:4b:94:01:74: f6:0b:a7:fa:c3:06:4c:e5:5c:73:ac:f3:bf:21:b1:4f:6e:a1: b7:05:9e:6f:e3:13:6f:5b:3c:5d:8f:2a:7a:39:25:63:03:6a: 89:f6:b1:f2:6d:4a:78:31:f7:3d:f7:b4:a8:96:e1:4a:52:b7: 5b:18:87:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPL8hJOW5nOmO9frpRxkXFNkt6a8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAxMTQ1WhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzgwMWI3N2Q5ZTZlYzliYjg1M2JiMTA1MzRlNjc5YjAy YThlN2E3YjM2MDhiMGFjODVhNDYzOWJmOTVlMWQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjnxt1gHkq2KwNKimEk0GzX7siycVhklZCPfi+Ks2g9qZx Gj2HJjRpajOTaft9KKO/QCIvTzGobIoE6UZm1t4lklhCjCIJj92YwWuwWYq/UvVD 2BMXjYtte3S8V95mdV8W9xogXFAzuLY23KD15uO8/e3P6XUXOdNrsYQTu52Ej4vI XxB0s8nBUTZPO916KhMtXF2vyRGh1BFG0OI8ZpprjD7W3+Dwj3vfixLigNLuOuda 5eJmH4d4oe1MPB7MApJq05XB31feePgumYrT7FWDgK9Gk8hwsc8LcJjw9yzwR//u ejiLE7MulEOAh6o9JHjJvMS3LznL07hRtF5kzno/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnIC1IxWMuo7ZyUZa8nDP5C8NKYgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkMjNmZGZhLTEwNjgtNDczNi1iOTEwLTMyNjBkYmVlNzk5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbG0wAwDQYJKoZIhvcNAQELBQADggEBACtsuKzSlZFaqtB1UMD6BeBxOZ2K TCBpxRtcLjwsjzIdpt0rS03OrN1Mu8aC+HsjtHvUCGm4IHOPl8bVhxNJRxZQwbNN MDvwZo4WV+elAhChOscCZ1DJFwlrOOZzwKHP0puoZg/GcnjuX6gBeIQ/Iptk713B ODXXkVFkVUuU9GLUQx2Ajuzhk8yhHutB7eBbhN7bLDi/Y8/vvSIgFEGSlu9+z/zQ KFItHkRUkojDnIHx84oA8K3Vp6StRhOJH9B1UWXcS5QBdPYLp/rDBkzlXHOs878h sU9uobcFnm/jE29bPF2PKno5JWMDaon2sfJtSngx9z33tKiW4UpSt1sYh2U= -----END CERTIFICATE-----Generated at Sun Jun 1 05:26:54 2025 by rpki-client