$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa File: e32e9d70-77da-4d7f-838c-cace7dac9464.roa (raw, json) Hash identifier: QLGiEQP2AgmWoFVtaRKQAgamk3p5nyI1E6fOha+VLes= Subject key identifier: 55:1C:E2:FE:0D:E1:F7:50:DC:FB:AB:BF:FA:4C:7D:EE:2E:46:7C:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65F3392D8FB9B71C5F0970847396E3D56C975006 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa Signing time: Wed 28 May 2025 00:12:07 +0000 ROA not before: Wed 28 May 2025 00:12:07 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.231.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f3:39:2d:8f:b9:b7:1c:5f:09:70:84:73:96:e3:d5:6c:97:50:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:12:07 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=9db2127a6781fc1aba2fb42293e9b855926f149e53522631401ce0aa5ea86457, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:6d:09:11:ef:1e:d6:bf:66:26:4a:c4:6f: 1c:41:24:cf:25:fe:ad:50:9e:dc:e0:a2:a8:ef:a2: 9f:3c:c5:16:bf:4d:7d:35:71:54:48:f4:78:a9:f3: ec:4c:5c:29:f4:fe:f3:05:cd:a7:54:c6:9b:70:5d: c4:75:75:da:f9:ca:36:c5:e9:c3:fc:32:4f:6d:3f: c1:d3:e1:e0:bc:71:f9:b8:84:82:ec:35:f0:8f:d0: e4:3a:0c:02:3c:5b:d1:67:43:1f:bb:b2:9e:3b:3e: b3:84:cd:f3:89:6c:06:3a:3d:ae:ab:68:cb:62:6f: 31:68:84:1d:e2:75:59:63:a6:43:d6:7a:55:c7:2c: 47:2a:53:f4:b1:b1:58:c0:6c:67:de:37:49:b3:81: b1:91:35:2d:a3:c3:a2:09:9c:5e:19:a5:c8:c6:80: b4:0a:fe:59:f2:25:95:4d:af:43:84:b0:98:6c:eb: 08:bb:53:71:bd:93:ff:d7:52:36:bd:ae:bd:9b:f8: 46:29:8e:51:47:c7:28:a7:66:d1:6a:a6:51:8a:a7: cf:ef:c1:76:dd:43:2b:1d:30:ed:ef:bd:57:6e:1b: 0f:58:f9:4f:2f:49:9f:5c:43:40:06:d1:d5:32:a1: 7a:67:83:da:d0:07:83:80:ba:0f:0f:b8:ff:6c:09: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1C:E2:FE:0D:E1:F7:50:DC:FB:AB:BF:FA:4C:7D:EE:2E:46:7C:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e32e9d70-77da-4d7f-838c-cace7dac9464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.231.96.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:f5:fc:e9:16:15:4a:a8:80:d4:7d:83:bf:f2:c0:4a:f1:ed: f9:c0:ca:b5:5f:74:18:58:91:22:2b:38:75:8b:e5:c6:c5:8e: cd:ec:46:73:cb:e6:cd:03:a4:db:97:a4:f7:bb:7b:58:19:2f: f2:4a:d3:06:5f:25:c2:19:26:d9:79:b1:4c:d7:0b:43:44:a1: 92:ea:c7:4d:42:4c:74:55:6e:ad:6b:dc:41:af:1e:5d:fd:bb: cf:18:bf:86:85:56:0d:85:b4:4c:dc:3e:53:e8:de:5e:a4:99: 0d:74:71:06:7a:58:87:04:0f:ca:5b:06:7d:7f:a9:da:7d:f1: 20:2c:9e:3b:22:da:9b:7d:cc:43:4b:92:e6:c1:18:56:ef:8b: b6:3c:19:9e:b1:8a:7a:90:36:18:a4:b3:39:17:6b:b9:ee:97: 22:65:d6:91:d3:dd:65:66:fb:1c:6b:1c:9e:fd:0b:a8:42:64: 7d:1c:a0:8f:3d:14:c5:ab:77:40:4d:6b:c4:52:74:f9:7a:1c: 3e:82:c9:ad:4e:01:0f:d1:a3:48:70:fd:4d:98:b8:ea:40:1b: b2:54:f7:21:7a:1c:f2:77:01:11:49:a1:91:ba:57:d1:8e:34: 6d:3e:6f:f8:e0:fb:ac:29:28:c6:98:11:0f:36:86:a8:0b:ef: 5f:41:40:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZfM5LY+5txxfCXCEc5bj1WyXUAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAxMjA3WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGIyMTI3YTY3ODFmYzFhYmEyZmI0MjI5M2U5Yjg1NTky NmYxNDllNTM1MjI2MzE0MDFjZTBhYTVlYTg2NDU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClom0JEe8e1r9mJkrEbxxBJM8l/q1Qntzgoqjvop88xRa/ TX01cVRI9Hip8+xMXCn0/vMFzadUxptwXcR1ddr5yjbF6cP8Mk9tP8HT4eC8cfm4 hILsNfCP0OQ6DAI8W9FnQx+7sp47PrOEzfOJbAY6Pa6raMtibzFohB3idVljpkPW elXHLEcqU/SxsVjAbGfeN0mzgbGRNS2jw6IJnF4ZpcjGgLQK/lnyJZVNr0OEsJhs 6wi7U3G9k//XUja9rr2b+EYpjlFHxyinZtFqplGKp8/vwXbdQysdMO3vvVduGw9Y +U8vSZ9cQ0AG0dUyoXpng9rQB4OAug8PuP9sCe/JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVRzi/g3h91Dc+6u/+kx97i5GfHowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzMmU5ZDcwLTc3ZGEtNGQ3Zi04MzhjLWNhY2U3ZGFjOTQ2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXY52AwDQYJKoZIhvcNAQELBQADggEBAG71/OkWFUqogNR9g7/ywErx7fnA yrVfdBhYkSIrOHWL5cbFjs3sRnPL5s0DpNuXpPe7e1gZL/JK0wZfJcIZJtl5sUzX C0NEoZLqx01CTHRVbq1r3EGvHl39u88Yv4aFVg2FtEzcPlPo3l6kmQ10cQZ6WIcE D8pbBn1/qdp98SAsnjsi2pt9zENLkubBGFbvi7Y8GZ6xinqQNhikszkXa7nulyJl 1pHT3WVm+xxrHJ79C6hCZH0coI89FMWrd0BNa8RSdPl6HD6Cya1OAQ/Ro0hw/U2Y uOpAG7JU9yF6HPJ3ARFJoZG6V9GONG0+b/jg+6wpKMaYEQ82hqgL719BQLs= -----END CERTIFICATE-----Generated at Sun Jun 1 04:36:39 2025 by rpki-client