$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa File: 68262a77-03e2-4c18-92d9-7a34ebeac869.roa (raw, json) Hash identifier: /LYVOoibS6OARThM5ETbJZ4wzpZ4tZrYJ4cMUOoy3E4= Subject key identifier: B5:7D:67:79:3F:15:C4:54:A8:93:77:40:9C:40:4A:38:B8:D2:91:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09D2067C6A8C244B496FCD004D4B8496071B2FAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa Signing time: Mon 05 May 2025 15:31:21 +0000 ROA not before: Mon 05 May 2025 15:31:21 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 66.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d2:06:7c:6a:8c:24:4b:49:6f:cd:00:4d:4b:84:96:07:1b:2f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:31:21 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=14751afa3a40ba2cbf8883831027867cdb18da2728d36e07d8e7eddad4299bb8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:ab:17:05:04:4c:16:f3:c5:a1:d3:84:05: 65:5e:d5:87:ec:6d:1c:91:9c:9c:80:21:eb:9b:35: 96:54:6c:5a:2c:cc:fb:68:d0:ec:4b:fc:04:02:66: 05:48:c8:41:17:71:bb:17:a9:a0:57:6f:fd:7f:ab: c2:8e:7f:a1:d2:76:f4:98:25:8c:6e:ea:41:d5:3a: 51:89:64:62:13:b6:db:19:4e:77:8d:e1:a1:85:cf: 5f:78:46:68:23:8e:6c:0d:ed:48:01:39:a5:4d:cf: 15:b9:52:ca:0a:a3:cf:ff:45:d0:02:86:d0:85:ce: 3d:b6:04:75:fc:30:07:06:fd:4a:35:5d:00:f7:d9: b9:37:6d:1d:ab:73:1d:4a:67:e4:fd:45:85:49:aa: 68:d2:7a:78:96:59:75:52:50:1b:cd:93:59:e6:c9: 14:57:b2:80:f4:df:85:0b:99:2e:53:ad:5f:04:cb: cc:1d:dd:50:6d:1d:cd:e0:87:7d:d8:29:a2:49:0e: fa:fa:fc:5c:fb:a5:45:cb:7f:f2:c7:29:05:a6:4a: ab:dd:33:5f:1f:6c:0b:b2:b0:83:db:fd:f5:d0:ea: f3:27:c4:21:d3:e3:79:32:42:e9:07:23:ba:41:22: 6b:14:a2:48:a9:c1:4c:48:23:37:5d:f8:fb:48:a0: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:67:79:3F:15:C4:54:A8:93:77:40:9C:40:4A:38:B8:D2:91:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:57:ca:ec:15:54:4a:33:3c:c0:e2:05:bf:9b:c9:55:15:8f: ad:8d:54:8c:1c:8e:05:28:fd:fb:48:68:e1:25:e5:67:a9:64: 30:ec:17:77:97:c3:29:fa:58:d9:b2:90:b5:c1:b0:0c:a3:61: 77:87:2a:1e:04:fd:fc:7f:ea:d6:63:1b:46:41:a0:6a:49:5b: a4:06:aa:4a:d7:54:b7:6f:94:07:92:86:ea:0e:c8:d4:5b:36: 8c:0c:9b:a3:78:7d:da:2e:98:14:46:6c:cf:4c:69:ac:22:8c: 68:a8:61:43:0b:8d:58:18:bd:ca:43:91:15:dd:2a:f2:91:0f: 33:81:69:1d:62:30:3b:2f:da:69:f7:29:3c:82:04:27:02:4a: 06:06:d6:a5:6c:d3:0f:ea:09:ba:0b:72:1c:4b:48:c8:3f:f6: 13:54:9f:ea:b8:37:5b:b9:83:ac:89:72:f0:e9:b0:c3:63:7c: 1d:7e:b6:45:60:e7:21:00:8d:0d:f7:48:0c:5e:f9:94:92:0c: d1:2e:fc:5e:cb:bd:b9:6b:26:02:d8:c9:e4:ce:a5:25:d9:d2: 0b:82:af:26:10:a5:e7:38:6e:55:a6:9e:fc:65:f4:84:06:d1: cd:8b:99:c2:a2:f8:e7:15:ae:f4:45:ed:0b:da:b4:7f:6e:ba: 2a:1a:60:b4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCdIGfGqMJEtJb80ATUuElgcbL6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUzMTIxWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDc1MWFmYTNhNDBiYTJjYmY4ODgzODMxMDI3ODY3Y2Ri MThkYTI3MjhkMzZlMDdkOGU3ZWRkYWQ0Mjk5YmI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkd6sXBQRMFvPFodOEBWVe1YfsbRyRnJyAIeubNZZUbFos zPto0OxL/AQCZgVIyEEXcbsXqaBXb/1/q8KOf6HSdvSYJYxu6kHVOlGJZGITttsZ TneN4aGFz194RmgjjmwN7UgBOaVNzxW5UsoKo8//RdAChtCFzj22BHX8MAcG/Uo1 XQD32bk3bR2rcx1KZ+T9RYVJqmjSeniWWXVSUBvNk1nmyRRXsoD034ULmS5TrV8E y8wd3VBtHc3gh33YKaJJDvr6/Fz7pUXLf/LHKQWmSqvdM18fbAuysIPb/fXQ6vMn xCHT43kyQukHI7pBImsUokipwUxIIzdd+PtIoIvXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtX1neT8VxFSok3dAnEBKOLjSkVkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MjYyYTc3LTAzZTItNGMxOC05MmQ5LTdhMzRlYmVhYzg2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBCnTANBgkqhkiG9w0BAQsFAAOCAQEAYVfK7BVUSjM8wOIFv5vJVRWPrY1U jByOBSj9+0ho4SXlZ6lkMOwXd5fDKfpY2bKQtcGwDKNhd4cqHgT9/H/q1mMbRkGg aklbpAaqStdUt2+UB5KG6g7I1Fs2jAybo3h92i6YFEZsz0xprCKMaKhhQwuNWBi9 ykORFd0q8pEPM4FpHWIwOy/aafcpPIIEJwJKBgbWpWzTD+oJugtyHEtIyD/2E1Sf 6rg3W7mDrIly8Omww2N8HX62RWDnIQCNDfdIDF75lJIM0S78Xsu9uWsmAtjJ5M6l JdnSC4KvJhCl5zhuVaae/GX0hAbRzYuZwqL45xWu9EXtC9q0f266KhpgtA== -----END CERTIFICATE-----Generated at Sun May 11 16:51:43 2025 by rpki-client