$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa File: 0f453c42-9e01-4343-9d00-659e79e057bb.roa (raw, json) Hash identifier: JhWijCiQdHpsRmR+Or72MOXdeAte8NFhaXUn+KIGHRg= Subject key identifier: 8C:CE:BF:CA:CE:91:BB:C0:21:D8:A0:A3:60:40:CE:5D:68:08:F5:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E45B31514EB153EEF7413233582D70097D34B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa Signing time: Sat 10 May 2025 00:21:25 +0000 ROA not before: Sat 10 May 2025 00:21:25 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.201.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:45:b3:15:14:eb:15:3e:ef:74:13:23:35:82:d7:00:97:d3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:21:25 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=c9452463f2e03302f6b8539dd020dc59b16005483e5481e9496aa9fca25b2865, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:a9:1c:21:7c:8d:60:ef:32:0c:9d:54:85: 42:d6:93:49:fd:5c:33:92:df:09:a6:25:1a:0c:7f: 92:b4:3d:0e:2a:87:ef:4b:ab:b1:13:24:ef:1b:21: ba:82:3d:70:3d:0a:ce:18:98:99:4f:28:c7:7d:16: 77:d3:eb:6c:47:ca:91:89:7f:70:cd:85:fe:34:6b: b7:25:b1:e9:34:94:bb:e2:ad:0c:95:c8:c4:29:c1: db:e0:30:3b:6f:90:f6:a5:16:64:36:a8:b0:d9:82: bc:42:c0:86:66:fa:6b:ad:d5:87:d0:09:30:b8:76: 8c:ed:7f:ba:90:73:db:57:9a:df:f0:cc:c4:2e:bc: 0d:56:d2:c8:5b:ab:09:a7:00:51:25:3c:5e:bc:fe: e5:de:9f:90:01:9c:2d:25:48:1c:6f:94:78:89:c2: a4:d6:99:e5:77:2d:c0:12:d3:51:e7:e5:39:8d:3b: f1:fa:d6:2c:a3:a4:dc:d0:c1:91:c9:98:9e:c4:a2: 50:c3:87:5a:f2:f8:35:39:3b:6e:dd:9f:9c:00:c9: 79:c9:40:5e:0a:4f:22:83:93:ac:fb:83:fc:49:41: 29:c6:a8:cc:f0:f5:8d:e8:05:66:1a:f5:c8:00:2d: 60:17:be:01:6d:a6:c6:57:c5:27:7f:18:4a:99:2c: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CE:BF:CA:CE:91:BB:C0:21:D8:A0:A3:60:40:CE:5D:68:08:F5:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.201.0.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:68:55:53:14:97:0a:08:26:c0:33:db:c6:e1:25:6f:97:16: 4f:f5:22:ee:d6:53:1c:00:fa:e8:66:ff:17:8c:c3:95:37:9d: 54:96:f9:9b:98:38:6c:40:a7:02:40:d7:0d:91:23:84:b8:60: cc:b5:25:8b:4a:df:c8:51:af:ca:90:fe:46:c7:2e:07:96:a5: 09:40:fa:00:ae:da:51:6d:50:6d:2b:f2:70:63:22:2d:41:6f: 0e:13:98:b1:35:3e:f7:d9:32:9c:e8:6b:4f:47:44:91:b3:99: 5b:5b:10:e3:66:d9:a6:91:d3:9c:59:66:90:8c:fe:6e:79:5a: 0f:b8:bc:1b:9b:85:be:11:20:dd:f4:fb:fb:0a:ac:68:b6:b5: c0:24:03:da:83:d2:12:f2:e9:30:17:49:71:26:67:a9:0c:a1: ef:a6:7b:51:66:01:d0:7d:d3:b9:82:be:68:21:fa:08:1b:bb: 31:99:85:11:7a:ed:d0:0f:ac:29:00:1d:b4:38:02:5c:72:c0: ec:7c:ee:27:a9:84:a5:ba:69:c4:90:5f:32:11:c9:5c:8f:bc: 43:3a:f7:0c:62:18:17:d8:d1:a1:35:b7:0b:22:78:2b:71:0b: 24:c1:6c:41:e2:98:05:c2:3c:e8:8a:c6:50:ac:bf:7c:58:36: 85:7a:68:c4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITfkWzFRTrFT7vdBMjNYLXAJfTSzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA1MTAwMDIxMjVaFw0yNTA2MTQyMzU5NTla MHoxSTBHBgNVBAUTQGM5NDUyNDYzZjJlMDMzMDJmNmI4NTM5ZGQwMjBkYzU5YjE2 MDA1NDgzZTU0ODFlOTQ5NmFhOWZjYTI1YjI4NjUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMWYqRwhfI1g7zIMnVSFQtaTSf1cM5LfCaYlGgx/krQ9DiqH 70ursRMk7xshuoI9cD0KzhiYmU8ox30Wd9PrbEfKkYl/cM2F/jRrtyWx6TSUu+Kt DJXIxCnB2+AwO2+Q9qUWZDaosNmCvELAhmb6a63Vh9AJMLh2jO1/upBz21ea3/DM xC68DVbSyFurCacAUSU8Xrz+5d6fkAGcLSVIHG+UeInCpNaZ5XctwBLTUeflOY07 8frWLKOk3NDBkcmYnsSiUMOHWvL4NTk7bt2fnADJeclAXgpPIoOTrPuD/ElBKcao zPD1jegFZhr1yAAtYBe+AW2mxlfFJ38YSpksF58CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSMzr/KzpG7wCHYoKNgQM5daAj1YDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMGY0NTNjNDItOWUwMS00MzQzLTlkMDAtNjU5ZTc5ZTA1N2JiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBUDJADANBgkqhkiG9w0BAQsFAAOCAQEASmhVUxSXCggmwDPbxuElb5cWT/Ui 7tZTHAD66Gb/F4zDlTedVJb5m5g4bECnAkDXDZEjhLhgzLUli0rfyFGvypD+Rscu B5alCUD6AK7aUW1QbSvycGMiLUFvDhOYsTU+99kynOhrT0dEkbOZW1sQ42bZppHT nFlmkIz+bnlaD7i8G5uFvhEg3fT7+wqsaLa1wCQD2oPSEvLpMBdJcSZnqQyh76Z7 UWYB0H3TuYK+aCH6CBu7MZmFEXrt0A+sKQAdtDgCXHLA7HzuJ6mEpbppxJBfMhHJ XI+8Qzr3DGIYF9jRoTW3CyJ4K3ELJMFsQeKYBcI86IrGUKy/fFg2hXpoxA== -----END CERTIFICATE-----Generated at Mon May 12 12:49:33 2025 by rpki-client