$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f289b71b-a606-4b35-9b8d-cdf5f9bd9783.roa File: f289b71b-a606-4b35-9b8d-cdf5f9bd9783.roa (raw, json) Hash identifier: wJb7Ddl1hJdGR4CP8Z1KnZngCjrjDcOm8HnXJpeUuLk= Subject key identifier: EE:88:66:1B:D9:C4:73:0F:39:40:A7:B5:02:81:BC:C8:29:29:62:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AF3AA083C121FF5256F4F9C72C9552201068A4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f289b71b-a606-4b35-9b8d-cdf5f9bd9783.roa Signing time: Mon 19 May 2025 17:30:18 +0000 ROA not before: Mon 19 May 2025 17:30:18 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 155.41.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f3:aa:08:3c:12:1f:f5:25:6f:4f:9c:72:c9:55:22:01:06:8a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:30:18 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=17284e8a60cd3ad7b3e1bcb897cdd19c447fe21526fde695011cb701e6bea69e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:db:4f:5d:61:a0:0a:e5:ae:fd:1f:ee:5a: ef:22:63:0d:01:d0:94:36:a2:fd:dd:93:28:05:6e: 96:19:45:eb:be:bf:43:bc:33:91:ca:c8:36:73:54: 94:ff:15:be:ee:19:59:e8:73:5e:15:b9:2c:96:94: 0d:44:d6:80:36:17:c0:e6:37:f0:2c:73:73:eb:91: 45:97:b8:fd:2b:08:bd:39:01:de:d0:80:ab:3b:c3: 19:08:28:f8:eb:3c:de:39:9e:b4:4c:be:c1:71:ea: 0c:3d:00:e5:b7:86:83:23:4b:2a:ee:8a:20:97:81: c3:65:c6:63:06:a3:a0:8e:eb:1d:e0:b2:75:16:45: 11:8f:95:96:5b:46:7d:63:5a:67:3a:fc:bb:36:6b: 49:35:f4:eb:8d:02:e6:63:57:c2:d4:59:ef:48:e5: be:fc:f4:7d:55:9c:53:4b:1c:d9:2c:04:b2:27:89: 26:ce:b1:db:cd:af:15:3a:28:00:dc:c9:ed:cc:57: 27:76:9c:4f:f2:27:d6:a0:bb:f5:f0:4a:75:22:74: ae:58:3e:ee:25:ae:19:b1:12:39:99:9e:f1:9c:78: 60:f8:74:3d:f5:79:9c:d5:31:50:88:b2:d7:05:75: 5e:57:ce:ab:6a:d9:01:8a:f2:a8:72:07:23:52:a3: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:66:1B:D9:C4:73:0F:39:40:A7:B5:02:81:BC:C8:29:29:62:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f289b71b-a606-4b35-9b8d-cdf5f9bd9783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.41.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5e:a7:83:29:28:41:37:1e:d0:de:b9:0c:04:d8:94:13:5e:21: 08:53:27:51:a9:76:1c:23:9d:dc:d2:e0:9e:56:16:98:e5:1e: 80:5b:67:ac:68:2a:c3:54:88:d4:f6:b2:70:de:e8:97:c2:fb: 53:39:91:92:28:7b:38:67:b9:88:7d:01:e0:9c:ed:5f:ef:39: 1f:66:bd:e0:45:09:b8:f8:70:b3:d1:aa:8c:bb:c7:f9:ee:06: 9d:b0:a3:5e:5e:0c:3c:82:8e:58:3c:a8:c7:a2:1f:c7:19:f0: 72:6c:45:e8:ff:41:09:c8:43:67:1d:f5:5e:88:cf:4e:15:4f: 05:c4:3e:39:3a:47:a1:87:be:39:15:29:4c:14:a2:a3:e0:42: 11:7a:dc:69:65:f6:7b:9d:c9:c0:7f:7e:7c:b9:93:55:df:8c: 62:fa:10:b2:3c:fa:3b:5a:9a:5c:1d:f7:1c:64:ff:92:69:d6: 37:c7:96:a2:37:2e:73:3f:35:67:a1:d5:f1:1a:08:b0:a5:78: bd:d1:85:66:39:87:f2:7b:c5:f3:3c:08:41:0f:fc:79:29:4e: 1c:4f:5d:7d:b2:d7:31:e8:fa:c0:66:bd:0f:34:8d:3f:62:5f: e9:04:09:38:ab:29:95:76:f9:51:2d:0b:3d:4a:4f:21:79:5e: 6a:9f:53:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCvOqCDwSH/Ulb0+ccslVIgEGikowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTczMDE4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzI4NGU4YTYwY2QzYWQ3YjNlMWJjYjg5N2NkZDE5YzQ0 N2ZlMjE1MjZmZGU2OTUwMTFjYjcwMWU2YmVhNjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnYttPXWGgCuWu/R/uWu8iYw0B0JQ2ov3dkygFbpYZReu+ v0O8M5HKyDZzVJT/Fb7uGVnoc14VuSyWlA1E1oA2F8DmN/Asc3PrkUWXuP0rCL05 Ad7QgKs7wxkIKPjrPN45nrRMvsFx6gw9AOW3hoMjSyruiiCXgcNlxmMGo6CO6x3g snUWRRGPlZZbRn1jWmc6/Ls2a0k19OuNAuZjV8LUWe9I5b789H1VnFNLHNksBLIn iSbOsdvNrxU6KADcye3MVyd2nE/yJ9agu/XwSnUidK5YPu4lrhmxEjmZnvGceGD4 dD31eZzVMVCIstcFdV5Xzqtq2QGK8qhyByNSo0GNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7ohmG9nEcw85QKe1AoG8yCkpYn0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyODliNzFiLWE2MDYtNGIzNS05YjhkLWNkZjVmOWJkOTc4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAebKQAwDQYJKoZIhvcNAQELBQADggEBAF6ngykoQTce0N65DATYlBNeIQhT J1GpdhwjndzS4J5WFpjlHoBbZ6xoKsNUiNT2snDe6JfC+1M5kZIoezhnuYh9AeCc 7V/vOR9mveBFCbj4cLPRqoy7x/nuBp2wo15eDDyCjlg8qMeiH8cZ8HJsRej/QQnI Q2cd9V6Iz04VTwXEPjk6R6GHvjkVKUwUoqPgQhF63Gll9nudycB/fny5k1XfjGL6 ELI8+jtamlwd9xxk/5Jp1jfHlqI3LnM/NWeh1fEaCLCleL3RhWY5h/J7xfM8CEEP /HkpThxPXX2y1zHo+sBmvQ80jT9iX+kECTirKZV2+VEtCz1KTyF5XmqfU+w= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:04 2025 by rpki-client