$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa File: f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa (raw, json) Hash identifier: N9iNWp8fdwejsE7qjPZsA+g7hNwpTTCs6FmMw+Pn6rA= Subject key identifier: 5C:38:D8:9A:3A:D0:E6:5A:B3:92:A5:87:68:D4:1B:CA:A9:0B:3F:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CB82CC2A30C99DABB4FFDEDFE5BFF9F6CAFBE95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa Signing time: Sat 17 May 2025 00:01:12 +0000 ROA not before: Sat 17 May 2025 00:01:12 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.227.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b8:2c:c2:a3:0c:99:da:bb:4f:fd:ed:fe:5b:ff:9f:6c:af:be:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:01:12 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=be368af10c0d73ae4cc5b62a1cfa3f7d4b64510ef8506a921de4976b0938a5b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:3d:fe:72:41:3a:49:33:25:3e:11:6b:ab: 73:b2:91:89:83:a3:68:08:c6:09:9a:b2:6e:58:d1: db:01:d7:f1:57:8f:4e:8e:f1:04:6a:88:ef:d0:93: 2e:21:e9:42:b0:91:9b:0b:bd:a4:0c:a0:c6:4f:ee: 37:bb:f7:03:78:19:7c:dc:70:e0:85:77:b8:e0:ed: 11:44:e2:c1:88:41:c7:a5:51:42:8e:cd:82:97:58: 50:fe:d0:ad:82:ec:86:66:34:5c:7f:d5:fb:3e:fe: 9c:9c:1e:63:80:ed:17:90:e4:23:6f:8f:b1:5e:a9: fe:42:45:eb:a0:9b:7b:e6:2a:a8:5e:db:9a:cf:58: 41:e2:35:1b:ab:41:74:3e:35:7b:6d:a1:93:f0:39: d2:7b:1a:ec:c0:cb:99:50:d1:99:ca:5e:15:3a:64: 69:20:58:6e:5d:3b:f0:ab:2f:47:ad:fe:cc:57:bf: 8c:b4:0e:0f:0f:0b:0f:b6:96:6a:a4:e4:7f:ed:72: ff:c3:3b:88:02:4d:fb:31:25:70:f0:ea:6e:a0:9d: 3a:d1:d7:c5:41:36:4e:f9:72:bf:13:11:f1:db:87: 0d:56:7b:14:34:aa:56:90:7a:58:11:87:31:3d:dd: b4:cb:89:03:ef:5f:48:20:1a:a5:2e:72:8e:e9:ad: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:D8:9A:3A:D0:E6:5A:B3:92:A5:87:68:D4:1B:CA:A9:0B:3F:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4beabc7-a32b-43e4-a626-5326ff70b8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.227.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:d0:95:c1:64:4c:12:89:f2:a1:f3:bc:f0:69:f4:e1:d3:8d: 7c:a2:9f:67:02:26:74:b7:0a:4f:fc:7c:5e:94:d4:da:a6:82: b5:43:73:48:63:3e:07:4e:6f:22:b5:34:c0:a9:81:ec:e0:99: 9b:3f:b2:33:3f:23:ac:85:27:80:3f:46:7b:cb:96:6d:47:78: d5:00:85:a7:1c:1b:93:6a:d8:cc:a4:b3:9c:b7:9e:c2:45:90: 92:22:76:14:57:44:80:fe:4c:8a:e9:1e:02:17:e1:b3:8e:21: 58:1f:bb:fd:58:ae:4b:1b:d5:5e:c8:a6:fa:42:ae:09:b9:8b: a0:7f:d5:de:43:e1:77:1f:50:a0:a7:77:32:1e:6c:85:16:f1: 70:11:14:66:f2:22:c9:c1:31:93:b5:58:be:e3:cc:7c:9f:c3: aa:a5:74:c7:8f:0b:14:6b:20:f8:83:50:5e:3d:fc:ae:44:a0: 11:f3:e2:b4:29:5d:9e:41:ff:86:8c:57:c3:e6:2e:1c:ce:42: a4:71:96:09:34:db:36:98:be:27:3d:04:d6:01:fc:dd:1b:4c: 67:7d:6a:fc:7f:d0:67:5f:64:45:4f:fb:fb:e1:19:18:29:d2: 34:aa:df:40:a7:fd:98:60:71:54:5b:be:97:a0:b4:de:5f:36: 1a:c5:9f:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPLgswqMMmdq7T/3t/lv/n2yvvpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAwMTEyWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTM2OGFmMTBjMGQ3M2FlNGNjNWI2MmExY2ZhM2Y3ZDRi NjQ1MTBlZjg1MDZhOTIxZGU0OTc2YjA5MzhhNWI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf+T3+ckE6STMlPhFrq3OykYmDo2gIxgmasm5Y0dsB1/FX j06O8QRqiO/Qky4h6UKwkZsLvaQMoMZP7je79wN4GXzccOCFd7jg7RFE4sGIQcel UUKOzYKXWFD+0K2C7IZmNFx/1fs+/pycHmOA7ReQ5CNvj7Feqf5CReugm3vmKqhe 25rPWEHiNRurQXQ+NXttoZPwOdJ7GuzAy5lQ0ZnKXhU6ZGkgWG5dO/CrL0et/sxX v4y0Dg8PCw+2lmqk5H/tcv/DO4gCTfsxJXDw6m6gnTrR18VBNk75cr8TEfHbhw1W exQ0qlaQelgRhzE93bTLiQPvX0ggGqUuco7prXg9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXDjYmjrQ5lqzkqWHaNQbyqkLPzwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0YmVhYmM3LWEzMmItNDNlNC1hNjI2LTUzMjZmZjcwYjhmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP4zANBgkqhkiG9w0BAQsFAAOCAQEAUNCVwWRMEonyofO88Gn04dONfKKf ZwImdLcKT/x8XpTU2qaCtUNzSGM+B05vIrU0wKmB7OCZmz+yMz8jrIUngD9Ge8uW bUd41QCFpxwbk2rYzKSznLeewkWQkiJ2FFdEgP5MiukeAhfhs44hWB+7/ViuSxvV Xsim+kKuCbmLoH/V3kPhdx9QoKd3Mh5shRbxcBEUZvIiycExk7VYvuPMfJ/DqqV0 x48LFGsg+INQXj38rkSgEfPitCldnkH/hoxXw+YuHM5CpHGWCTTbNpi+Jz0E1gH8 3RtMZ31q/H/QZ19kRU/7++EZGCnSNKrfQKf9mGBxVFu+l6C03l82GsWfmQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:21:45 2025 by rpki-client