$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a06395-9a1d-425d-bdc7-7ea11dc65ae7.roa File: f1a06395-9a1d-425d-bdc7-7ea11dc65ae7.roa (raw, json) Hash identifier: 0p83V3dF/2SOZ37Km2S9Ra2rkgJIrq+PzW8i+T8Fys0= Subject key identifier: 10:C9:14:7D:88:9D:75:B4:54:22:67:E6:52:35:A3:63:3B:B3:53:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BDF7437AD7F2E7C9599D9278B8DA572C5DFF1F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a06395-9a1d-425d-bdc7-7ea11dc65ae7.roa Signing time: Sat 10 May 2025 00:10:51 +0000 ROA not before: Sat 10 May 2025 00:10:51 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:df:74:37:ad:7f:2e:7c:95:99:d9:27:8b:8d:a5:72:c5:df:f1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:10:51 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=fddcb881a84f71062b40a1d713c293d5a0d0f40672d80c6c3a441aa949163710, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:d9:1d:67:84:02:eb:a8:a0:a0:c7:0b:28: 0b:84:4c:a3:cd:ac:eb:6c:d7:d7:0d:3c:bb:4c:9b: fe:6a:56:a0:84:6d:49:f0:10:04:e5:d0:0a:8f:d6: a0:e0:4d:32:61:5f:d7:6f:44:ff:82:9b:0e:9f:06: ef:68:47:51:6d:bc:42:9f:05:5c:e1:c1:64:be:ce: 3a:0b:db:75:d7:80:e1:c2:d3:3e:0c:54:6d:e4:bd: 48:30:9d:1c:07:97:94:23:0f:64:79:d8:27:6d:9b: 75:4a:a2:1b:63:56:b0:80:bc:04:c4:01:5e:0f:16: c2:33:ac:bd:20:e1:1d:e3:a5:94:ff:18:a4:33:a0: 85:84:54:bc:76:46:d0:fd:cb:56:14:07:17:63:d0: bb:0c:73:97:49:5f:99:4b:f1:5f:55:86:19:6c:84: 0d:b9:d7:e8:82:a1:c0:b4:78:7b:04:64:4d:31:52: 59:ff:80:f4:61:14:81:88:1e:fa:ab:50:b0:b7:da: fb:08:00:cc:91:b3:5a:94:61:67:a7:29:14:53:d2: 6c:1a:a6:05:32:42:31:0a:6d:0a:0a:1f:ca:bb:3e: 66:10:04:b8:fd:59:4a:a0:48:34:b1:a9:2b:87:ba: 2e:2d:c6:f9:29:3f:66:0b:ee:09:71:95:12:b0:66: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:14:7D:88:9D:75:B4:54:22:67:E6:52:35:A3:63:3B:B3:53:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1a06395-9a1d-425d-bdc7-7ea11dc65ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption 38:54:3e:f6:6e:88:6b:56:d6:65:8d:1e:a5:bd:21:92:07:60: 14:d5:08:19:ab:a5:7f:18:4d:78:e3:fd:48:09:16:66:da:b2: 5f:bf:63:6b:fc:8d:d7:0d:be:1e:c3:fb:f6:73:b8:e2:1b:6d: 90:9d:5a:18:79:2b:c5:49:5f:fc:bf:ca:9d:a3:70:31:0b:8d: 58:11:4d:08:4d:9b:76:a2:88:82:fd:22:ce:52:2f:7a:e4:a6: 0d:27:c4:f4:64:20:6f:57:6d:4b:6c:4a:e4:a1:ad:1c:cd:ef: 1a:d1:27:af:0c:c8:4b:ce:07:90:58:30:11:22:85:a4:06:71: af:c6:d7:2d:c6:be:92:1f:45:5e:28:81:73:0a:7b:92:c2:be: 0c:aa:9e:ef:b6:f3:54:d4:eb:7b:c0:29:05:c7:cc:28:8c:2f: 88:bc:9b:d8:d4:07:76:a4:37:83:17:aa:c1:a8:20:21:3f:91: d2:47:86:4f:17:0d:9e:9d:a2:3f:8d:4c:f7:7d:3d:76:20:98: 49:b8:01:7a:c7:13:c4:00:a7:74:b7:51:83:dd:1a:01:da:a1: 8d:85:73:b6:fb:2c:2b:4f:59:3a:42:ab:f2:40:44:f2:7b:a8: d8:57:4d:f3:54:e3:87:03:4a:78:24:3e:53:d7:5f:d2:85:ec: b2:1a:4d:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUC990N61/LnyVmdkni42lcsXf8fIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAxMDUxWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGRjYjg4MWE4NGY3MTA2MmI0MGExZDcxM2MyOTNkNWEw ZDBmNDA2NzJkODBjNmMzYTQ0MWFhOTQ5MTYzNzEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrj9kdZ4QC66igoMcLKAuETKPNrOts19cNPLtMm/5qVqCE bUnwEATl0AqP1qDgTTJhX9dvRP+Cmw6fBu9oR1FtvEKfBVzhwWS+zjoL23XXgOHC 0z4MVG3kvUgwnRwHl5QjD2R52Cdtm3VKohtjVrCAvATEAV4PFsIzrL0g4R3jpZT/ GKQzoIWEVLx2RtD9y1YUBxdj0LsMc5dJX5lL8V9VhhlshA251+iCocC0eHsEZE0x Uln/gPRhFIGIHvqrULC32vsIAMyRs1qUYWenKRRT0mwapgUyQjEKbQoKH8q7PmYQ BLj9WUqgSDSxqSuHui4txvkpP2YL7glxlRKwZqppAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEMkUfYiddbRUImfmUjWjYzuzU1cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxYTA2Mzk1LTlhMWQtNDI1ZC1iZGM3LTdlYTExZGM2NWFlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4DjANBgkqhkiG9w0BAQsFAAOCAQEAOFQ+9m6Ia1bWZY0epb0hkgdgFNUI GaulfxhNeOP9SAkWZtqyX79ja/yN1w2+HsP79nO44httkJ1aGHkrxUlf/L/KnaNw MQuNWBFNCE2bdqKIgv0izlIveuSmDSfE9GQgb1dtS2xK5KGtHM3vGtEnrwzIS84H kFgwESKFpAZxr8bXLca+kh9FXiiBcwp7ksK+DKqe77bzVNTre8ApBcfMKIwviLyb 2NQHdqQ3gxeqwaggIT+R0keGTxcNnp2iP41M9309diCYSbgBescTxACndLdRg90a AdqhjYVztvssK09ZOkKr8kBE8nuo2FdN81TjhwNKeCQ+U9df0oXsshpNmQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:50 2025 by rpki-client