$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff27f213-18d8-4b1e-9075-9c1cf1b4f475.roa File: ff27f213-18d8-4b1e-9075-9c1cf1b4f475.roa (raw, json) Hash identifier: RoFefQRtg+WI9lvA7Nvtg/EWmj6vLlzqCAr9bGLqcr8= Subject key identifier: D3:AA:2D:15:63:30:1B:7B:D4:86:E8:28:8C:BA:D8:E4:F4:CF:96:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76E57D426CABAD7BC6E96270C7B661F174067AAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff27f213-18d8-4b1e-9075-9c1cf1b4f475.roa Signing time: Mon 12 May 2025 15:30:25 +0000 ROA not before: Mon 12 May 2025 15:30:25 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 94.36.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e5:7d:42:6c:ab:ad:7b:c6:e9:62:70:c7:b6:61:f1:74:06:7a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:30:25 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=1bfc2967b47a648bb112cf0eea542f90c4b3a9175ec924f58537f53758d381e5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:b8:90:4d:7f:73:d3:d8:bd:1f:b5:c2:91: 68:0f:19:f4:61:d3:a7:b4:54:ec:cc:61:b3:00:2b: c6:3c:de:9d:2b:99:85:b0:f9:67:3a:c6:87:5c:65: c8:96:94:e7:00:c3:51:2c:d8:60:60:ba:94:4a:70: 97:d1:4d:11:32:28:9d:82:c1:89:df:a4:0d:40:c7: 6d:31:98:c3:24:b0:dd:38:fb:f9:18:9e:1f:9f:03: 0c:8d:33:a0:8b:32:11:2d:bd:c1:80:8a:0a:66:07: f6:b3:01:a7:d8:b0:99:54:df:cd:c1:07:25:98:4d: 5c:ba:89:08:99:08:e0:9d:9f:d1:71:90:ec:2f:69: 9d:8d:14:b5:34:6b:22:83:10:3d:73:88:5a:c5:1d: d2:56:71:67:9f:6a:ac:7a:80:0c:01:85:a3:c2:ba: 02:06:2d:8a:3c:f2:b1:16:a2:ac:f0:7f:99:c9:4e: 28:0b:da:d4:87:c5:dd:9c:56:dc:34:7d:f8:f5:9a: c6:bd:2e:b4:25:b8:a5:f9:fe:1e:4e:f7:5a:07:65: 65:6f:1d:a9:8c:b3:c7:ce:92:e2:3f:c8:c9:4f:e7: c4:26:17:5c:e1:a1:36:03:5e:45:5a:6e:e9:87:aa: 97:bc:23:7d:eb:80:7b:06:1a:db:fe:16:e8:d1:32: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AA:2D:15:63:30:1B:7B:D4:86:E8:28:8C:BA:D8:E4:F4:CF:96:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff27f213-18d8-4b1e-9075-9c1cf1b4f475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.36.0.0/15 Signature Algorithm: sha256WithRSAEncryption 87:72:63:92:c1:2f:75:f5:3d:60:ca:7f:4e:dd:fb:84:11:63: 53:88:10:e4:8c:9d:83:5f:d6:43:2f:cb:b3:35:04:5e:84:82: 82:b9:a6:6c:df:75:57:08:1c:c3:53:36:be:41:13:bc:95:6a: 2a:e6:92:df:01:ad:ed:68:2b:92:68:51:fe:08:09:fd:19:e8: b4:8f:14:2d:f8:23:5b:30:f6:d1:ab:4f:e9:ba:a1:3c:46:25: da:e6:d1:ba:3a:b6:40:87:f9:c9:a2:d0:93:97:25:0c:c8:15: 0d:78:81:51:e2:8b:16:0d:5a:3d:8a:50:01:c0:2e:ff:33:e1: d4:41:95:d1:20:8d:cd:65:da:e3:e0:3f:53:f0:32:97:8d:43: d7:3f:61:1f:4b:a5:6c:d3:fb:ff:19:49:42:fb:3a:1c:a4:ce: 0b:44:ff:d5:a6:4f:69:c3:93:d3:3c:99:ef:e9:ca:d9:6f:10: 60:1b:69:0e:c8:55:f3:4c:ab:95:0a:9a:b4:5e:74:5a:2d:b9: 3c:cb:fa:a8:8c:4f:03:f8:f0:c4:45:2d:84:c6:89:3a:6b:52: 3a:6a:33:f0:c1:81:77:ea:4f:5b:bc:ac:15:65:6a:ed:65:b2: 01:22:be:a3:df:42:37:54:b7:dc:7e:9b:ee:2b:55:4c:7d:3f: df:e3:a0:38 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUduV9QmyrrXvG6WJwx7Zh8XQGeq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUzMDI1WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmZjMjk2N2I0N2E2NDhiYjExMmNmMGVlYTU0MmY5MGM0 YjNhOTE3NWVjOTI0ZjU4NTM3ZjUzNzU4ZDM4MWU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK7biQTX9z09i9H7XCkWgPGfRh06e0VOzMYbMAK8Y83p0r mYWw+Wc6xodcZciWlOcAw1Es2GBgupRKcJfRTREyKJ2CwYnfpA1Ax20xmMMksN04 +/kYnh+fAwyNM6CLMhEtvcGAigpmB/azAafYsJlU383BByWYTVy6iQiZCOCdn9Fx kOwvaZ2NFLU0ayKDED1ziFrFHdJWcWefaqx6gAwBhaPCugIGLYo88rEWoqzwf5nJ TigL2tSHxd2cVtw0ffj1msa9LrQluKX5/h5O91oHZWVvHamMs8fOkuI/yMlP58Qm F1zhoTYDXkVabumHqpe8I33rgHsGGtv+FujRMhTFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU06otFWMwG3vUhugojLrY5PTPllIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmMjdmMjEzLTE4ZDgtNGIxZS05MDc1LTljMWNmMWI0ZjQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFeJDANBgkqhkiG9w0BAQsFAAOCAQEAh3JjksEvdfU9YMp/Tt37hBFjU4gQ 5Iydg1/WQy/LszUEXoSCgrmmbN91Vwgcw1M2vkETvJVqKuaS3wGt7WgrkmhR/ggJ /RnotI8ULfgjWzD20atP6bqhPEYl2ubRujq2QIf5yaLQk5clDMgVDXiBUeKLFg1a PYpQAcAu/zPh1EGV0SCNzWXa4+A/U/Ayl41D1z9hH0ulbNP7/xlJQvs6HKTOC0T/ 1aZPacOT0zyZ7+nK2W8QYBtpDshV80yrlQqatF50Wi25PMv6qIxPA/jwxEUthMaJ OmtSOmoz8MGBd+pPW7ysFWVq7WWyASK+o99CN1S33H6b7itVTH0/3+OgOA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:56 2025 by rpki-client