$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fde93da4-4d01-4cb4-b7cc-6df25cdd3ed5.roa File: fde93da4-4d01-4cb4-b7cc-6df25cdd3ed5.roa (raw, json) Hash identifier: b5W4p5zWLoMlxPyZqfJBFkPntAQGXtQkH/ZytylyNRA= Subject key identifier: AA:E1:39:40:C2:E9:DF:70:44:62:B2:6C:19:43:3A:B3:A1:17:EC:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53E8ABAB1AB894C66A746C44D09A562A870D916B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fde93da4-4d01-4cb4-b7cc-6df25cdd3ed5.roa Signing time: Tue 20 May 2025 00:32:30 +0000 ROA not before: Tue 20 May 2025 00:32:30 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e8:ab:ab:1a:b8:94:c6:6a:74:6c:44:d0:9a:56:2a:87:0d:91:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:32:30 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=0367103ff6d437e85a65a47ef83c159e2bfd446a99c69b3c328c93fb2c1c99b8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4b:e0:37:d0:06:44:81:6c:50:aa:41:4d:d7: 43:9b:d2:9e:39:2e:87:91:fd:c1:30:34:4b:79:8c: a5:72:24:f7:d0:43:f0:ae:9e:a8:cf:ac:44:ff:21: 88:ec:ee:a2:40:4e:1f:8e:4e:be:f1:c4:d6:12:4d: 7d:b5:b6:74:72:db:34:5e:e2:85:92:50:db:61:b4: 07:17:5c:cf:e5:bc:07:21:72:69:af:a5:f8:f0:06: 46:37:8a:73:65:14:c5:29:d6:20:7b:5c:51:3b:bd: 65:bd:7a:4e:99:79:21:93:98:26:c1:1a:ec:b1:09: 39:58:06:7b:eb:51:d7:42:1e:76:69:6f:ee:75:77: f0:82:02:11:0a:5b:7c:47:a7:5e:c1:43:32:de:79: 4c:2e:37:ea:39:7e:0f:3b:41:3e:ea:d4:da:4e:21: d6:9b:aa:62:51:83:d6:a2:d6:2c:ed:e0:37:56:5c: 19:91:48:31:ba:40:d5:27:38:1f:6a:de:49:e9:00: 40:20:4a:d1:90:4c:bc:08:1a:f4:f0:6f:51:7c:2f: f2:3c:41:1f:d2:25:04:da:8d:d1:c5:b7:8a:87:71: dc:6a:b9:88:b8:9d:b5:8d:6b:bb:30:70:49:5c:c9: cc:d0:91:4b:d6:d7:4b:52:f9:74:a4:e5:12:16:a2: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E1:39:40:C2:E9:DF:70:44:62:B2:6C:19:43:3A:B3:A1:17:EC:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fde93da4-4d01-4cb4-b7cc-6df25cdd3ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7d:39:68:85:46:11:64:90:95:05:0c:c1:bb:9a:54:c2:1f:3a: 1b:66:a3:5f:3f:fe:1c:d0:e1:c6:dc:90:4d:f9:3b:29:3f:ce: 0f:3e:2a:35:0c:5d:83:23:5b:94:52:0e:a6:1a:46:70:6d:f9: d8:f7:82:83:b3:60:25:60:2d:2e:86:01:24:97:a8:3c:d8:c2: a7:fc:9e:5d:29:6f:c6:86:c0:46:0f:06:fb:1a:28:7d:8e:b6: 02:b9:d0:5a:4b:68:7b:6d:8f:41:98:95:dc:56:b7:80:06:06: 90:c6:53:59:d4:a7:99:b9:0c:83:9f:11:b0:db:6e:6d:40:9e: 6b:9d:5a:76:d1:4f:5f:e2:54:76:fc:5c:88:7f:95:4c:77:f7: 56:08:0a:45:3f:33:33:b3:98:00:c1:90:8e:06:ed:ce:60:75: 52:8f:09:16:66:cf:f2:36:f8:ec:f2:54:f4:2f:0d:5d:24:b1: 69:c8:df:7b:33:73:31:c3:72:e1:b1:fe:47:2b:1f:d9:8e:1a: 42:60:2e:bd:74:99:35:6a:42:eb:f6:cb:b6:a1:92:13:b9:00: 57:dd:fd:ac:4e:01:92:82:00:07:5d:b7:e5:8d:71:be:74:4d: 82:e3:d9:a7:9c:79:f5:9e:93:ae:34:db:7d:83:71:88:07:19: 02:f7:70:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU+irqxq4lMZqdGxE0JpWKocNkWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIwMDAzMjMwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzY3MTAzZmY2ZDQzN2U4NWE2NWE0N2VmODNjMTU5ZTJi ZmQ0NDZhOTljNjliM2MzMjhjOTNmYjJjMWM5OWI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmS+A30AZEgWxQqkFN10Ob0p45LoeR/cEwNEt5jKVyJPfQ Q/CunqjPrET/IYjs7qJATh+OTr7xxNYSTX21tnRy2zRe4oWSUNthtAcXXM/lvAch cmmvpfjwBkY3inNlFMUp1iB7XFE7vWW9ek6ZeSGTmCbBGuyxCTlYBnvrUddCHnZp b+51d/CCAhEKW3xHp17BQzLeeUwuN+o5fg87QT7q1NpOIdabqmJRg9ai1izt4DdW XBmRSDG6QNUnOB9q3knpAEAgStGQTLwIGvTwb1F8L/I8QR/SJQTajdHFt4qHcdxq uYi4nbWNa7swcElcyczQkUvW10tS+XSk5RIWojI3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUquE5QMLp33BEYrJsGUM6s6EX7OAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkZTkzZGE0LTRkMDEtNGNiNC1iN2NjLTZkZjI1Y2RkM2VkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYXFwAwDQYJKoZIhvcNAQELBQADggEBAH05aIVGEWSQlQUMwbuaVMIfOhtm o18//hzQ4cbckE35Oyk/zg8+KjUMXYMjW5RSDqYaRnBt+dj3goOzYCVgLS6GASSX qDzYwqf8nl0pb8aGwEYPBvsaKH2OtgK50FpLaHttj0GYldxWt4AGBpDGU1nUp5m5 DIOfEbDbbm1AnmudWnbRT1/iVHb8XIh/lUx391YICkU/MzOzmADBkI4G7c5gdVKP CRZmz/I2+OzyVPQvDV0ksWnI33szczHDcuGx/kcrH9mOGkJgLr10mTVqQuv2y7ah khO5AFfd/axOAZKCAAddt+WNcb50TYLj2aecefWek640232DcYgHGQL3cG8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:06 2025 by rpki-client