$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dff5e1b0-47da-4a73-89ef-f0714ed3fd6e.roa File: dff5e1b0-47da-4a73-89ef-f0714ed3fd6e.roa (raw, json) Hash identifier: ydXgQCKmHeoyvC8GwYJtJhZFcJbLNAVgWIozRF8uAZc= Subject key identifier: C3:3E:5F:C1:6F:91:A8:FE:2C:E9:34:40:57:DD:54:A7:B0:90:D1:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23A6F2D7BC19067B836109A9295EC7FC8A73DDDD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dff5e1b0-47da-4a73-89ef-f0714ed3fd6e.roa Signing time: Wed 28 May 2025 00:31:07 +0000 ROA not before: Wed 28 May 2025 00:31:07 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a6:f2:d7:bc:19:06:7b:83:61:09:a9:29:5e:c7:fc:8a:73:dd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:31:07 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=a62359f146e05e9f64eff26b768ca6b6556dc5e50313694d60348777345fab97, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:49:27:d0:e5:36:21:d8:4c:0a:2a:01:0a: 48:53:a2:1d:50:b4:19:95:61:d2:a4:ad:7d:f0:92: 38:66:7f:be:c2:5f:50:fe:ca:b6:0d:60:0e:3c:05: db:87:86:e5:74:20:e5:15:2f:85:aa:7a:7b:ec:06: a9:a0:56:43:7e:69:25:3e:1f:11:9b:cd:f2:d9:f8: 53:ea:67:17:74:95:fb:13:d3:cd:0d:19:37:64:43: 88:ed:40:dc:1c:5e:31:dd:20:02:ba:a4:09:46:56: 76:78:2c:cf:c3:80:73:f5:27:3d:e2:c7:d8:20:b0: c7:1d:d8:95:20:2e:1b:31:d6:90:b8:cd:6d:eb:bf: c3:60:34:ea:c4:23:c6:ee:ad:6e:ed:40:e7:70:4b: 26:40:c6:5a:a9:c5:b1:ae:65:87:63:33:51:44:69: 8a:5c:4e:ec:f8:e6:49:84:46:9e:52:0a:62:d6:d2: 68:9b:b9:b4:6b:73:0c:90:8a:71:61:75:99:38:df: f1:3a:bf:a7:ae:e0:51:b8:74:14:24:1b:f6:fc:1a: 56:94:fd:58:98:84:f7:c5:ee:d6:24:b3:93:c7:87: ee:ae:46:5d:7e:24:95:1d:3e:34:7d:cf:34:a7:13: f2:1a:9b:30:04:d7:b9:9e:c8:94:42:38:7f:34:36: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3E:5F:C1:6F:91:A8:FE:2C:E9:34:40:57:DD:54:A7:B0:90:D1:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dff5e1b0-47da-4a73-89ef-f0714ed3fd6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.98.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3b:b5:3e:b4:ad:76:ce:0b:8c:e5:c4:2d:78:12:a8:c5:39:2a: 18:f9:d5:34:6d:e5:e6:4d:55:3e:08:40:d9:2a:16:88:47:19: 77:da:a3:62:05:43:d3:b5:af:25:c4:21:78:7e:4a:32:0a:97: f8:da:80:b5:f8:4f:fa:73:32:fc:f4:4d:2a:0e:2e:92:49:5b: 6e:be:23:75:a7:c8:d8:b4:b7:4a:49:52:2c:d7:ad:7b:de:a8: 85:71:6c:3b:b1:ab:be:9d:3e:fb:62:20:aa:f3:c2:72:ba:2b: 70:af:44:fa:3c:ee:1d:65:71:75:b3:16:b4:5e:ec:af:a7:7b: 9d:28:2d:0f:cb:ba:1d:a4:57:89:e7:be:c8:fc:49:26:16:e0: e1:70:f1:2e:e2:e6:47:e2:0f:fc:5a:92:80:29:b9:e6:a3:43: 69:f1:6f:e7:71:43:28:13:0e:8e:57:21:ce:1b:70:2f:ef:b9: 0a:63:1e:59:5d:f3:47:f6:6b:11:d0:c5:89:8f:50:b8:6b:9b: c3:4d:b1:2c:49:7d:48:50:c3:5a:bf:3f:f1:b5:06:ba:3c:af: 9c:2d:7e:77:ed:85:0c:01:1b:56:e3:ef:28:bb:ca:81:99:1a: eb:ed:dc:6f:b4:d3:85:7b:d1:8f:73:6e:c6:1f:e9:d4:9f:ae: c4:0d:17:c4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI6by17wZBnuDYQmpKV7H/Ipz3d0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAzMTA3WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjIzNTlmMTQ2ZTA1ZTlmNjRlZmYyNmI3NjhjYTZiNjU1 NmRjNWU1MDMxMzY5NGQ2MDM0ODc3NzM0NWZhYjk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRQkkn0OU2IdhMCioBCkhToh1QtBmVYdKkrX3wkjhmf77C X1D+yrYNYA48BduHhuV0IOUVL4WqenvsBqmgVkN+aSU+HxGbzfLZ+FPqZxd0lfsT 080NGTdkQ4jtQNwcXjHdIAK6pAlGVnZ4LM/DgHP1Jz3ix9ggsMcd2JUgLhsx1pC4 zW3rv8NgNOrEI8burW7tQOdwSyZAxlqpxbGuZYdjM1FEaYpcTuz45kmERp5SCmLW 0mibubRrcwyQinFhdZk43/E6v6eu4FG4dBQkG/b8GlaU/ViYhPfF7tYks5PHh+6u Rl1+JJUdPjR9zzSnE/IamzAE17meyJRCOH80NtttAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwz5fwW+RqP4s6TRAV91Up7CQ0RcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZjVlMWIwLTQ3ZGEtNGE3My04OWVmLWYwNzE0ZWQzZmQ2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4YjANBgkqhkiG9w0BAQsFAAOCAQEAO7U+tK12zguM5cQteBKoxTkqGPnV NG3l5k1VPghA2SoWiEcZd9qjYgVD07WvJcQheH5KMgqX+NqAtfhP+nMy/PRNKg4u kklbbr4jdafI2LS3SklSLNete96ohXFsO7Grvp0++2IgqvPCcrorcK9E+jzuHWVx dbMWtF7sr6d7nSgtD8u6HaRXiee+yPxJJhbg4XDxLuLmR+IP/FqSgCm55qNDafFv 53FDKBMOjlchzhtwL++5CmMeWV3zR/ZrEdDFiY9QuGubw02xLEl9SFDDWr8/8bUG ujyvnC1+d+2FDAEbVuPvKLvKgZka6+3cb7TThXvRj3Nuxh/p1J+uxA0XxA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:40:58 2025 by rpki-client