$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fe5322-91ca-4110-b210-af46310a9592.roa File: f2fe5322-91ca-4110-b210-af46310a9592.roa (raw, json) Hash identifier: 7nVbpN9dUNmIP2gUqkD9yanzkaJku8NsprQdUTv0MOY= Subject key identifier: 1C:81:A2:67:02:0F:47:CF:53:2E:0D:6F:F5:90:69:87:99:24:3E:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54DA357A0599D515106FDBEBB1DBA1157C630D20 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fe5322-91ca-4110-b210-af46310a9592.roa Signing time: Tue 27 May 2025 00:20:15 +0000 ROA not before: Tue 27 May 2025 00:20:15 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 166.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:da:35:7a:05:99:d5:15:10:6f:db:eb:b1:db:a1:15:7c:63:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:20:15 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=9f7b2f231f7e49f590556d4a039c701b6b0b1d53a9e3b8d8597113d8a1bcced0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:82:f1:44:2c:5d:e5:42:a4:c0:6f:2f:57: 50:56:24:a9:5d:e9:ea:32:a7:c3:8f:cb:4e:de:84: dd:62:65:2b:97:22:f4:f4:34:12:3c:90:07:36:bb: c2:d4:3b:1a:43:f7:3b:56:1d:6f:f6:84:e6:2c:72: 1d:a4:a5:e7:12:79:6b:03:a4:fb:24:88:8d:ee:a6: 7f:e0:b2:d6:2e:50:0c:68:ed:bc:19:4b:8e:89:6d: d0:3e:b9:ff:76:8c:9d:b4:71:bc:aa:42:a9:c7:4b: 11:08:3b:cf:bb:23:e8:0e:6b:f1:ac:69:65:1d:36: 8e:c6:64:ad:83:99:01:70:35:22:e9:7c:84:d4:55: e2:df:5d:11:7b:18:80:b2:66:b4:3f:f3:77:69:ac: 03:47:3d:ea:0a:c9:c4:b9:81:97:e0:0c:9a:88:6c: 70:b5:27:90:49:41:25:7f:6b:94:5d:6d:b6:b7:40: 02:bb:70:d9:86:33:86:17:14:ad:b2:2b:ec:4f:88: 68:25:8c:77:6f:b7:02:63:96:58:c3:ce:e3:64:24: 6b:81:d1:3a:8c:e0:8c:0a:5f:20:48:9a:16:82:66: d8:37:2b:4d:fc:ff:52:b9:ed:6b:2b:f7:0f:fa:ea: d0:52:2f:f1:ce:1d:66:ee:ea:b5:d3:ce:5d:f9:7e: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:81:A2:67:02:0F:47:CF:53:2E:0D:6F:F5:90:69:87:99:24:3E:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2fe5322-91ca-4110-b210-af46310a9592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.92.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:13:9a:38:fe:53:65:dd:48:8d:df:93:bd:35:f1:3f:d3:8c: 8d:ca:07:5a:b0:ba:a7:a8:e0:e6:4f:fd:ee:3e:2d:d0:57:58: 92:5c:35:13:52:3f:8f:71:66:98:b7:61:50:1b:95:37:5f:38: e7:ca:78:38:a0:0a:de:73:7c:9d:e2:e7:97:4c:4a:b6:0b:57: d8:41:63:19:a4:a7:8d:fe:fa:5d:2d:35:70:12:38:48:95:9a: e5:72:af:8d:a9:e3:4e:b2:3a:72:8b:1d:ca:ee:5e:c2:ba:80: 34:f7:b1:2e:19:b9:bc:4f:42:76:83:95:a5:6a:ac:98:bf:9a: 4e:1c:48:b2:d1:42:a8:d5:67:89:70:3a:b9:de:97:22:d3:12: ef:c4:4a:af:3e:20:5d:04:6c:39:99:e7:8d:87:88:7c:f9:58: 7d:d8:3a:a1:32:b7:03:e4:29:9a:7e:41:e7:be:88:d2:61:49: fc:aa:4f:bc:4d:52:28:d9:d5:d1:91:67:9d:39:ec:9f:1c:a4: be:d8:f4:93:82:77:5f:fa:c6:3a:15:20:5f:8e:c2:b4:96:2d: 61:f8:0e:c0:68:19:71:b6:09:80:4f:bb:04:7e:90:9e:f2:1c: 7b:97:f6:ea:b3:b7:d3:5b:99:22:0a:7c:73:62:dc:e9:e8:2e: 01:e9:d5:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVNo1egWZ1RUQb9vrsduhFXxjDSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAyMDE1WhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjdiMmYyMzFmN2U0OWY1OTA1NTZkNGEwMzljNzAxYjZi MGIxZDUzYTllM2I4ZDg1OTcxMTNkOGExYmNjZWQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyBYLxRCxd5UKkwG8vV1BWJKld6eoyp8OPy07ehN1iZSuX IvT0NBI8kAc2u8LUOxpD9ztWHW/2hOYsch2kpecSeWsDpPskiI3upn/gstYuUAxo 7bwZS46JbdA+uf92jJ20cbyqQqnHSxEIO8+7I+gOa/GsaWUdNo7GZK2DmQFwNSLp fITUVeLfXRF7GICyZrQ/83dprANHPeoKycS5gZfgDJqIbHC1J5BJQSV/a5Rdbba3 QAK7cNmGM4YXFK2yK+xPiGgljHdvtwJjlljDzuNkJGuB0TqM4IwKXyBImhaCZtg3 K038/1K57Wsr9w/66tBSL/HOHWbu6rXTzl35fpEvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHIGiZwIPR89TLg1v9ZBph5kkPkUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyZmU1MzIyLTkxY2EtNDExMC1iMjEwLWFmNDYzMTBhOTU5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCmXDANBgkqhkiG9w0BAQsFAAOCAQEArxOaOP5TZd1Ijd+TvTXxP9OMjcoH WrC6p6jg5k/97j4t0FdYklw1E1I/j3FmmLdhUBuVN18458p4OKAK3nN8neLnl0xK tgtX2EFjGaSnjf76XS01cBI4SJWa5XKvjanjTrI6cosdyu5ewrqANPexLhm5vE9C doOVpWqsmL+aThxIstFCqNVniXA6ud6XItMS78RKrz4gXQRsOZnnjYeIfPlYfdg6 oTK3A+Qpmn5B576I0mFJ/KpPvE1SKNnV0ZFnnTnsnxykvtj0k4J3X/rGOhUgX47C tJYtYfgOwGgZcbYJgE+7BH6QnvIce5f26rO301uZIgp8c2Lc6eguAenVwg== -----END CERTIFICATE-----Generated at Sun Jun 1 05:25:15 2025 by rpki-client