$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e449706c-f72a-49ad-b65d-3cc66fcb72b4.roa File: e449706c-f72a-49ad-b65d-3cc66fcb72b4.roa (raw, json) Hash identifier: j4OmMTIbMqrtFgM/oZdIUZoJQdGFypcV73RkPRTa/CI= Subject key identifier: 5A:AD:1A:A3:0F:7B:16:40:6C:F0:2A:3B:9F:65:A3:FE:A9:09:BF:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5175793607F8C08E2D5C44A20614F8979625AC4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e449706c-f72a-49ad-b65d-3cc66fcb72b4.roa Signing time: Mon 12 May 2025 15:21:03 +0000 ROA not before: Mon 12 May 2025 15:21:03 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.146.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:75:79:36:07:f8:c0:8e:2d:5c:44:a2:06:14:f8:97:96:25:ac:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:21:03 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=1d00b183dd942bc633c61a2761c116cca8fab89af3a64d99a5f1b0a0b515f058, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:c7:08:18:98:6d:c4:b1:21:bb:ef:92:4f: 9b:c3:45:e5:a8:b7:ea:59:c2:b2:b0:98:56:fb:5f: 17:ee:e7:01:2c:ab:02:b8:b8:a1:d1:6e:9e:40:11: aa:18:78:5b:43:34:d7:7c:26:be:f7:1f:04:f6:eb: 98:af:ab:de:56:3b:1e:b5:aa:94:73:7a:de:b3:6c: fd:ec:77:19:1f:a5:7a:af:c8:5c:ca:3c:d7:01:57: 0f:fa:23:d4:38:f7:55:e3:a1:29:c1:a8:4b:87:ce: fe:a7:d6:84:10:ba:04:e4:29:06:04:ed:f0:1e:76: c4:b2:24:8b:03:56:b3:10:c3:5e:2e:38:10:c6:c9: 0c:31:7a:00:1f:e5:78:40:a1:96:90:dd:e3:5f:3e: e1:67:1f:b6:ba:02:3e:12:af:67:6f:3c:63:b0:2e: 6a:60:1e:01:46:1a:2f:6b:21:29:ee:b7:a8:33:2a: c5:36:6c:3c:dd:80:37:0e:47:a0:64:08:9d:56:98: 8b:0e:1e:58:e5:3e:67:b4:80:26:55:80:04:c8:18: a5:d7:49:45:d6:21:8e:9f:de:fa:0b:6c:28:71:b7: 85:03:a6:5c:52:61:37:f1:d1:d8:fb:41:1f:9a:18: 23:b7:0b:76:26:b4:5f:38:76:82:8c:f9:5e:dd:3b: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AD:1A:A3:0F:7B:16:40:6C:F0:2A:3B:9F:65:A3:FE:A9:09:BF:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e449706c-f72a-49ad-b65d-3cc66fcb72b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.146.0.0/17 Signature Algorithm: sha256WithRSAEncryption bf:9f:e1:b6:3f:79:38:66:45:38:86:38:28:d4:1a:72:28:4c: 29:bf:3a:b0:78:d7:b8:31:58:a8:79:f2:4c:07:0e:1d:15:5c: 12:69:48:21:71:bc:1c:24:9d:9d:2a:07:6f:8e:79:83:52:53: ab:82:93:9f:5c:05:f8:85:62:b6:7b:ac:e7:6e:f2:1c:6e:dd: 91:0b:bc:57:f0:b0:8c:38:65:80:33:4f:2b:c1:4e:d3:7d:80: 86:71:53:82:d8:f2:f5:9f:82:b3:b6:8f:6f:95:03:da:1f:34: 9a:66:56:32:23:ab:d8:4e:a2:b9:c4:ff:31:f1:a8:bd:1f:18: 99:d9:b2:b7:5a:1d:01:9a:28:10:03:d5:66:6c:8c:d9:1c:3f: 33:83:9a:6c:a2:60:ea:79:ea:e1:b4:da:13:11:3d:f5:3c:84: 36:7e:80:65:1e:c3:2b:46:1d:46:ba:71:35:d9:6a:da:77:6e: 65:33:ba:f5:f9:ae:06:2f:1c:a4:1a:ee:89:8b:79:de:c5:0c: af:0e:28:e0:84:90:a5:c2:fe:ef:79:c0:e3:05:a8:10:4e:2a: 23:67:95:0f:d1:3a:d7:7d:33:bd:f1:51:8e:3c:91:bc:a0:c5: aa:ed:84:0b:d8:42:1e:06:61:0a:d3:62:0d:b5:fe:b6:d7:86: 5f:b0:83:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUXV5Ngf4wI4tXESiBhT4l5YlrEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMTAzWhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDAwYjE4M2RkOTQyYmM2MzNjNjFhMjc2MWMxMTZjY2E4 ZmFiODlhZjNhNjRkOTlhNWYxYjBhMGI1MTVmMDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv/8cIGJhtxLEhu++ST5vDReWot+pZwrKwmFb7Xxfu5wEs qwK4uKHRbp5AEaoYeFtDNNd8Jr73HwT265ivq95WOx61qpRzet6zbP3sdxkfpXqv yFzKPNcBVw/6I9Q491XjoSnBqEuHzv6n1oQQugTkKQYE7fAedsSyJIsDVrMQw14u OBDGyQwxegAf5XhAoZaQ3eNfPuFnH7a6Aj4Sr2dvPGOwLmpgHgFGGi9rISnut6gz KsU2bDzdgDcOR6BkCJ1WmIsOHljlPme0gCZVgATIGKXXSUXWIY6f3voLbChxt4UD plxSYTfx0dj7QR+aGCO3C3YmtF84doKM+V7dO9thAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWq0aow97FkBs8Co7n2Wj/qkJv7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0NDk3MDZjLWY3MmEtNDlhZC1iNjVkLTNjYzY2ZmNiNzJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdAkgAwDQYJKoZIhvcNAQELBQADggEBAL+f4bY/eThmRTiGOCjUGnIoTCm/ OrB417gxWKh58kwHDh0VXBJpSCFxvBwknZ0qB2+OeYNSU6uCk59cBfiFYrZ7rOdu 8hxu3ZELvFfwsIw4ZYAzTyvBTtN9gIZxU4LY8vWfgrO2j2+VA9ofNJpmVjIjq9hO ornE/zHxqL0fGJnZsrdaHQGaKBAD1WZsjNkcPzODmmyiYOp56uG02hMRPfU8hDZ+ gGUewytGHUa6cTXZatp3bmUzuvX5rgYvHKQa7omLed7FDK8OKOCEkKXC/u95wOMF qBBOKiNnlQ/ROtd9M73xUY48kbygxarthAvYQh4GYQrTYg21/rbXhl+wg3Y= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:55 2025 by rpki-client