$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef504dee-d869-4e21-9d5f-bf36e67ea248.roa File: ef504dee-d869-4e21-9d5f-bf36e67ea248.roa (raw, json) Hash identifier: +BQE+g1x3cIuVVbC88ovMoOFiZ4PR4+AMZ0UvG5e93A= Subject key identifier: 2D:EA:62:D2:93:0E:B2:DE:DC:CF:7B:AE:8C:66:36:14:A3:3E:2F:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EAE9011F777787C1870BFB07F2F49530FAA2F09 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef504dee-d869-4e21-9d5f-bf36e67ea248.roa Signing time: Sat 10 May 2025 00:20:10 +0000 ROA not before: Sat 10 May 2025 00:20:10 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 74.221.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ae:90:11:f7:77:78:7c:18:70:bf:b0:7f:2f:49:53:0f:aa:2f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:20:10 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=bfbe4dde46f2ab9fdb69593a60f57654d33fe3eecfe3446db72b1e4a19b0ba06, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:b6:d9:ed:8c:4e:84:7d:e0:28:1c:85:c9: 74:73:28:06:f2:d8:9b:00:1b:cb:82:3f:b8:62:a7: f0:cb:83:c2:b1:16:5e:5f:5b:eb:2a:4c:d0:05:a1: 4f:b4:ca:d0:91:5a:b5:2b:47:49:25:36:46:bf:0e: 3c:67:ab:0c:ba:a0:4e:47:ca:e3:4e:cf:86:1f:f3: c2:97:a1:3f:14:9e:d2:0a:80:a9:f3:bd:5e:c6:44: d8:db:eb:d3:de:d4:76:91:19:e4:8c:12:b3:6b:79: cc:aa:53:b7:8f:22:fa:fd:9d:de:82:12:0a:08:1f: 19:02:26:85:2d:1a:c8:15:27:0d:2e:e4:37:b6:3a: f6:9c:33:a3:36:c9:00:fd:36:79:88:30:8c:46:c7: 80:b9:3d:b2:8a:36:c4:ca:56:8b:b8:61:5e:44:85: 46:e5:44:d9:67:7c:1b:91:d0:c7:2d:e8:e9:33:a7: 3b:57:4c:f6:47:b8:4d:4d:11:d0:32:47:d7:b3:84: 82:7e:8f:9b:49:3c:20:eb:ee:32:10:97:c7:2f:59: 1c:0c:d6:d6:e2:cc:eb:7b:bc:e2:1f:84:61:79:a6: 5f:e6:bc:e4:4e:b9:00:d3:99:a1:69:ab:4a:2d:3e: 4f:ba:ef:c2:08:14:74:35:72:e0:80:74:7e:d8:fe: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EA:62:D2:93:0E:B2:DE:DC:CF:7B:AE:8C:66:36:14:A3:3E:2F:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef504dee-d869-4e21-9d5f-bf36e67ea248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.221.240.0/20 Signature Algorithm: sha256WithRSAEncryption c8:eb:1a:45:d9:64:46:c9:a8:5a:1e:a7:fd:a6:8f:7e:51:cd: 6e:a4:18:f4:ae:3c:59:71:1d:fc:a6:2e:bb:89:96:3c:80:2a: c6:4c:ef:63:7d:fa:7d:cd:89:1d:0c:ac:6f:e9:41:76:3e:56: 1a:1b:07:7d:60:01:fd:26:f7:eb:f8:4b:7e:2c:ed:13:eb:ed: 67:8a:d2:a6:0f:ad:39:13:e0:a5:5e:7e:be:c9:5b:01:d0:01: 16:83:37:1c:09:f9:ae:cf:12:59:7d:a9:f6:45:50:73:fc:c5: 57:a6:30:28:a5:94:8d:5e:7e:51:42:80:2b:a5:4d:af:36:1c: f8:6d:99:16:af:64:c9:87:b9:c0:3d:bc:7d:e6:05:48:ce:fb: d0:1a:96:c7:56:06:5a:3b:6b:e4:9a:2a:d0:d5:ed:26:25:3a: 18:c4:75:37:dd:2e:dc:ad:f1:f6:b6:c6:fc:c3:0f:e1:af:16: 32:13:b4:42:46:ea:19:d2:83:b3:2f:c2:d5:c7:35:04:3b:51: be:39:fd:c1:6f:e0:c8:34:16:51:01:9f:f9:51:6b:f0:3c:e2: d0:24:a6:25:4b:dd:b4:05:c2:2c:1d:27:11:4a:d3:65:cb:a9: 7f:d0:1d:69:6c:3a:07:74:48:bd:49:c1:55:1b:e2:cb:54:55: 50:9d:70:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDq6QEfd3eHwYcL+wfy9JUw+qLwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAyMDEwWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmJlNGRkZTQ2ZjJhYjlmZGI2OTU5M2E2MGY1NzY1NGQz M2ZlM2VlY2ZlMzQ0NmRiNzJiMWU0YTE5YjBiYTA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5YbbZ7YxOhH3gKByFyXRzKAby2JsAG8uCP7hip/DLg8Kx Fl5fW+sqTNAFoU+0ytCRWrUrR0klNka/Djxnqwy6oE5HyuNOz4Yf88KXoT8UntIK gKnzvV7GRNjb69Pe1HaRGeSMErNrecyqU7ePIvr9nd6CEgoIHxkCJoUtGsgVJw0u 5De2OvacM6M2yQD9NnmIMIxGx4C5PbKKNsTKVou4YV5EhUblRNlnfBuR0Mct6Okz pztXTPZHuE1NEdAyR9ezhIJ+j5tJPCDr7jIQl8cvWRwM1tbizOt7vOIfhGF5pl/m vOROuQDTmaFpq0otPk+678IIFHQ1cuCAdH7Y/tODAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULepi0pMOst7cz3uujGY2FKM+L1YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNTA0ZGVlLWQ4NjktNGUyMS05ZDVmLWJmMzZlNjdlYTI0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARK3fAwDQYJKoZIhvcNAQELBQADggEBAMjrGkXZZEbJqFoep/2mj35RzW6k GPSuPFlxHfymLruJljyAKsZM72N9+n3NiR0MrG/pQXY+VhobB31gAf0m9+v4S34s 7RPr7WeK0qYPrTkT4KVefr7JWwHQARaDNxwJ+a7PEll9qfZFUHP8xVemMCillI1e flFCgCulTa82HPhtmRavZMmHucA9vH3mBUjO+9AalsdWBlo7a+SaKtDV7SYlOhjE dTfdLtyt8fa2xvzDD+GvFjITtEJG6hnSg7MvwtXHNQQ7Ub45/cFv4Mg0FlEBn/lR a/A84tAkpiVL3bQFwiwdJxFK02XLqX/QHWlsOgd0SL1JwVUb4stUVVCdcFk= -----END CERTIFICATE-----Generated at Sun Jun 1 04:30:14 2025 by rpki-client