$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa File: 06f60828-42c6-42a0-b210-4f859b5cc846.roa (raw, json) Hash identifier: /ikHcEAB7AEdEZ/tabXyJuPdPGZf21oCRlh+R6BEwmk= Subject key identifier: A5:63:0D:95:D3:8D:7D:98:FC:1A:75:11:1F:B1:D1:5E:C5:97:1D:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AE6E27798D6A652A1D5E7A4D2BF151ED756D695 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa Signing time: Sat 03 May 2025 00:01:56 +0000 ROA not before: Sat 03 May 2025 00:01:56 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e6:e2:77:98:d6:a6:52:a1:d5:e7:a4:d2:bf:15:1e:d7:56:d6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:01:56 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=7c18fd8e8fee6fd3c77b94e4867b522d225b2a333a999848e5ef743ea456e355, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:fb:d8:6d:f8:9a:56:df:60:90:4b:b5:55: aa:67:fe:00:e0:46:f8:4a:26:c3:89:4b:d4:b9:5e: f2:06:0c:52:1e:4b:1f:f1:74:5e:0e:d7:fb:d0:ef: d4:57:d8:2d:1a:77:5b:51:87:e5:ba:9c:0a:ca:8b: 2b:73:ff:f8:82:28:02:bf:4d:49:ef:06:6b:96:3d: 62:05:7e:f2:29:b5:3d:bc:da:cc:10:df:08:0a:6c: 92:61:46:76:77:df:05:3f:bc:6a:13:49:02:ec:58: ef:8e:bd:3d:70:06:c3:79:fd:a5:80:13:32:a6:5b: 47:8f:90:70:13:55:85:90:0d:14:57:e0:a0:a4:c7: bd:d0:a0:3b:88:7c:88:96:e9:f1:d8:84:07:3d:b5: bb:aa:f8:c1:75:88:0c:66:c3:f7:6b:47:38:67:60: 20:b9:8b:ed:20:5c:1a:93:3c:d8:17:0d:16:4f:a2: 4c:3f:e6:9c:09:c7:5a:c8:77:2d:e7:83:f6:fc:64: a6:66:57:d9:81:d1:d2:56:98:cc:7a:b4:9b:ce:2b: f7:dd:bd:04:11:ed:db:af:c8:47:88:81:4b:76:63: 8a:fd:69:15:83:e7:fc:18:51:0c:1d:1f:5d:bd:bc: 2c:0c:d2:93:44:54:34:5d:ad:51:b0:68:dc:f3:33: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:0D:95:D3:8D:7D:98:FC:1A:75:11:1F:B1:D1:5E:C5:97:1D:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06f60828-42c6-42a0-b210-4f859b5cc846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:6f:57:55:3b:45:30:f1:fa:69:70:7b:f8:1b:84:c1:dd:90: 31:13:6b:46:dc:ec:d6:a9:b6:90:68:26:88:83:f7:02:65:2c: 05:13:f3:33:20:46:00:e4:df:1e:e7:50:90:dd:a8:7a:48:eb: 07:50:fb:ad:18:82:49:2b:d1:e1:e5:87:49:ab:0b:3f:d2:4b: a7:9d:88:db:6f:ca:12:ae:b5:3b:40:8d:e2:41:89:4d:68:a4: 0c:47:45:4d:3e:87:35:22:89:7d:a1:65:07:af:4e:f4:87:71: 4c:cb:e6:dd:e0:72:6d:51:cd:46:33:a6:00:7d:72:a9:91:ff: df:be:38:e7:7c:00:4d:a6:f6:c4:a1:98:0b:fa:41:82:5a:b9: cf:4c:a0:00:38:eb:57:81:77:cb:be:27:df:fe:0c:b8:ba:62: 3d:69:f5:e1:7b:ec:32:f0:54:b4:21:1f:75:6a:f0:55:2e:1c: 47:7d:e4:e5:8d:66:15:41:e7:cc:79:d0:2a:94:20:d6:87:53: f4:c9:b4:bd:d2:35:36:03:c1:55:64:93:e9:58:a9:54:b4:e0: 3e:53:c8:9e:d7:84:28:7d:f0:1f:39:b6:0f:09:90:c1:ba:60: ed:44:4e:7a:12:76:9c:7d:4e:2e:70:36:16:26:50:72:c3:8b: 6f:f9:30:06 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKubid5jWplKh1eek0r8VHtdW1pUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAwMTU2WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzE4ZmQ4ZThmZWU2ZmQzYzc3Yjk0ZTQ4NjdiNTIyZDIy NWIyYTMzM2E5OTk4NDhlNWVmNzQzZWE0NTZlMzU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYQvvYbfiaVt9gkEu1Vapn/gDgRvhKJsOJS9S5XvIGDFIe Sx/xdF4O1/vQ79RX2C0ad1tRh+W6nArKiytz//iCKAK/TUnvBmuWPWIFfvIptT28 2swQ3wgKbJJhRnZ33wU/vGoTSQLsWO+OvT1wBsN5/aWAEzKmW0ePkHATVYWQDRRX 4KCkx73QoDuIfIiW6fHYhAc9tbuq+MF1iAxmw/drRzhnYCC5i+0gXBqTPNgXDRZP okw/5pwJx1rIdy3ng/b8ZKZmV9mB0dJWmMx6tJvOK/fdvQQR7duvyEeIgUt2Y4r9 aRWD5/wYUQwdH129vCwM0pNEVDRdrVGwaNzzM7mdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUpWMNldONfZj8GnURH7HRXsWXHZMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2ZjYwODI4LTQyYzYtNDJhMC1iMjEwLTRmODU5YjVjYzg0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQVjANBgkqhkiG9w0BAQsFAAOCAQEAfW9XVTtFMPH6aXB7+BuEwd2QMRNr Rtzs1qm2kGgmiIP3AmUsBRPzMyBGAOTfHudQkN2oekjrB1D7rRiCSSvR4eWHSasL P9JLp52I22/KEq61O0CN4kGJTWikDEdFTT6HNSKJfaFlB69O9IdxTMvm3eBybVHN RjOmAH1yqZH/374453wATab2xKGYC/pBglq5z0ygADjrV4F3y74n3/4MuLpiPWn1 4XvsMvBUtCEfdWrwVS4cR33k5Y1mFUHnzHnQKpQg1odT9Mm0vdI1NgPBVWST6Vip VLTgPlPInteEKH3wHzm2DwmQwbpg7UROehJ2nH1OLnA2FiZQcsOLb/kwBg== -----END CERTIFICATE-----Generated at Thu May 8 00:50:27 2025 by rpki-client