$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df161574-9f7a-4266-b34d-1a7c5f87bf4e.roa File: df161574-9f7a-4266-b34d-1a7c5f87bf4e.roa (raw, json) Hash identifier: eJV1ZkYK9g1LryGsm70QpguJffukC643bEdO9F1a5VE= Subject key identifier: 4D:72:99:2E:EE:2D:FD:C7:7D:11:4C:31:03:C6:95:85:D7:70:DA:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59EED0DA5F5709B3534D27ECB9BF1B4508B592FA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df161574-9f7a-4266-b34d-1a7c5f87bf4e.roa Signing time: Tue 13 May 2025 00:31:10 +0000 ROA not before: Tue 13 May 2025 00:31:10 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.157.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ee:d0:da:5f:57:09:b3:53:4d:27:ec:b9:bf:1b:45:08:b5:92:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:31:10 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=42dede4e754df5da03035f46f696e6b98be874abcc0ed0773b709b54bdf51898, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:84:e3:06:b7:e3:bf:d5:e5:18:b5:5f:58: f5:6e:e2:c7:b6:85:b3:cc:88:09:98:8b:b3:e1:24: 88:e9:c1:e8:2b:0f:ae:f3:d8:8d:df:24:d1:5d:cc: 48:17:10:ea:26:a7:17:e4:05:3a:78:89:d8:b2:a9: 53:2f:a9:a1:5c:bf:df:db:b5:52:24:12:4b:aa:20: 96:37:01:ff:16:b6:26:0a:e5:c6:37:39:38:c4:20: 7e:55:f6:f6:4d:d1:66:14:c7:b2:c8:d6:78:4a:94: 1a:83:85:d2:db:fa:e2:89:73:a9:ce:74:16:ae:2d: 40:db:c5:b1:d5:14:3c:0c:a4:5d:49:60:ff:88:72: e6:1e:ec:53:b7:a4:9c:69:c0:cb:ea:f2:54:8b:d6: 67:1e:73:59:f4:58:69:ec:b7:7c:2c:4c:61:de:36: a0:8e:42:92:e4:a2:5b:9f:8b:d9:d6:60:e4:cd:0c: c8:14:b9:4b:37:b3:e1:91:64:ff:c9:9a:18:d8:a1: e2:1d:61:9d:b1:81:4e:46:a2:04:a0:7b:84:52:61: 4b:8a:33:8c:b0:e1:39:58:08:f3:a8:b3:c0:90:a2: a4:35:2c:3b:66:09:4a:9e:20:34:13:dd:43:23:3b: e0:1d:02:2f:d8:31:d5:4f:4e:05:cd:08:3e:3a:a8: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:99:2E:EE:2D:FD:C7:7D:11:4C:31:03:C6:95:85:D7:70:DA:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df161574-9f7a-4266-b34d-1a7c5f87bf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.157.48.0/20 Signature Algorithm: sha256WithRSAEncryption 75:71:af:25:43:f8:43:ca:87:0d:86:cc:58:aa:2b:65:43:0b: 4c:4f:0e:a5:04:21:83:4a:86:da:0d:a0:01:0e:93:1c:f5:96: f2:52:99:fd:55:2d:ab:a8:ee:f6:bf:1a:e4:a3:07:92:9e:bc: 0f:11:86:64:96:28:03:f0:e9:9e:7e:5e:7b:45:1f:3c:69:16: 77:95:3f:02:66:e6:74:38:63:e3:81:37:a4:4e:e6:08:3e:93: 61:8c:52:e8:2b:de:23:f1:56:cd:fc:b3:05:84:35:6e:de:d4: f3:cc:52:a9:1d:27:c6:44:c0:25:bb:b1:40:ae:93:f1:ca:de: 02:6f:56:a6:1f:76:8c:8b:b0:95:f6:02:1d:b3:84:dc:e1:4a: c7:b6:4e:f7:43:ad:52:97:2a:f2:d8:b5:54:aa:c2:02:d1:06: b8:0f:bf:77:03:45:ff:44:73:9d:fa:b3:2d:0c:cc:0c:8f:24: 28:18:40:b4:67:f5:f1:06:d2:b8:51:b7:4b:8f:21:b3:c8:e4: 15:54:f0:54:69:cf:6c:9c:50:16:65:17:3c:bb:c9:51:3d:51: cd:be:e4:bf:86:92:c1:cf:1d:b5:0e:78:3e:05:9c:5d:1a:64: 4e:5c:d6:f5:3f:4b:53:a1:ac:ea:95:f6:a4:1e:f5:0e:2f:ea: 36:28:dc:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWe7Q2l9XCbNTTSfsub8bRQi1kvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEzMDAzMTEwWhcNMjUwNjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmRlZGU0ZTc1NGRmNWRhMDMwMzVmNDZmNjk2ZTZiOThi ZTg3NGFiY2MwZWQwNzczYjcwOWI1NGJkZjUxODk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7MoTjBrfjv9XlGLVfWPVu4se2hbPMiAmYi7PhJIjpwegr D67z2I3fJNFdzEgXEOompxfkBTp4idiyqVMvqaFcv9/btVIkEkuqIJY3Af8WtiYK 5cY3OTjEIH5V9vZN0WYUx7LI1nhKlBqDhdLb+uKJc6nOdBauLUDbxbHVFDwMpF1J YP+IcuYe7FO3pJxpwMvq8lSL1mcec1n0WGnst3wsTGHeNqCOQpLkolufi9nWYOTN DMgUuUs3s+GRZP/JmhjYoeIdYZ2xgU5GogSge4RSYUuKM4yw4TlYCPOos8CQoqQ1 LDtmCUqeIDQT3UMjO+AdAi/YMdVPTgXNCD46qBKxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTXKZLu4t/cd9EUwxA8aVhddw2r0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmMTYxNTc0LTlmN2EtNDI2Ni1iMzRkLTFhN2M1Zjg3YmY0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATYnTAwDQYJKoZIhvcNAQELBQADggEBAHVxryVD+EPKhw2GzFiqK2VDC0xP DqUEIYNKhtoNoAEOkxz1lvJSmf1VLauo7va/GuSjB5KevA8RhmSWKAPw6Z5+XntF HzxpFneVPwJm5nQ4Y+OBN6RO5gg+k2GMUugr3iPxVs38swWENW7e1PPMUqkdJ8ZE wCW7sUCuk/HK3gJvVqYfdoyLsJX2Ah2zhNzhSse2TvdDrVKXKvLYtVSqwgLRBrgP v3cDRf9Ec536sy0MzAyPJCgYQLRn9fEG0rhRt0uPIbPI5BVU8FRpz2ycUBZlFzy7 yVE9Uc2+5L+GksHPHbUOeD4FnF0aZE5c1vU/S1OhrOqV9qQe9Q4v6jYo3JM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:00 2025 by rpki-client