$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa File: 88f2ff63-7659-498d-b994-ed526db12b18.roa (raw, json) Hash identifier: hpz4wZCLA4SlNuIwAVXYo8SmVZ2pAIUDoqmBjPrRSc8= Subject key identifier: 6B:C4:1B:25:F9:83:C1:54:83:87:1D:FE:93:6B:0B:F4:B2:0A:98:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02B369F86931DA0A4888F820E7932B932AF2B44B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa Signing time: Mon 05 May 2025 15:41:06 +0000 ROA not before: Mon 05 May 2025 15:41:06 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b3:69:f8:69:31:da:0a:48:88:f8:20:e7:93:2b:93:2a:f2:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:41:06 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=c74df637c0b117fab8e3d49f97adae81fa154e6730747a5473842868a58b54a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:81:4b:97:a9:fa:53:1e:5f:96:48:26:67: 1c:67:82:71:67:61:d3:de:bf:ea:e6:30:7e:9e:f2: fe:6e:97:e2:35:53:0d:3f:71:7d:30:55:a2:bb:f7: 98:12:89:16:7f:7b:e8:14:72:9f:ee:ab:2c:6f:62: ac:27:3a:6a:d1:e3:66:5b:83:a9:af:14:a1:c3:cd: 12:82:0f:8e:c8:75:bf:4b:b7:77:7f:90:37:7a:45: 2d:11:41:09:01:e1:64:d0:a4:4c:82:04:62:c6:6f: a6:f9:c9:53:0d:86:b2:6f:d6:57:cd:64:50:19:f9: 83:38:ae:49:a7:0d:b1:8f:d2:4e:7e:f1:47:eb:36: 0b:b5:7e:df:d5:06:71:23:f6:7a:0b:91:15:d2:87: 95:c9:41:12:09:3f:6e:16:ad:b8:32:e6:57:cc:69: 45:f9:f1:d2:6b:66:6a:85:46:84:71:a6:93:39:af: ec:da:53:6e:e0:ed:d0:d0:10:21:8b:f6:e3:58:b5: 62:73:4e:0d:d8:1f:9c:e0:45:86:e3:9a:14:64:9d: eb:2f:40:f8:9d:2e:42:94:93:e0:25:56:b8:fd:44: 1b:29:30:2a:a6:ab:0f:bd:05:dc:bd:7e:48:e0:dd: 8a:24:ad:60:b8:84:2a:9d:31:e0:91:9e:2d:31:a9: ac:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:1B:25:F9:83:C1:54:83:87:1D:FE:93:6B:0B:F4:B2:0A:98:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.168.0/21 Signature Algorithm: sha256WithRSAEncryption 21:d5:07:76:40:b6:22:93:cf:6d:61:f1:f9:c2:25:be:6c:94: 47:6b:41:c0:25:41:ed:06:57:1f:b3:e0:78:f9:c8:50:e9:2c: a8:71:44:cf:a1:3f:51:8f:d6:90:79:7e:79:55:41:69:aa:60: d4:d3:91:ad:2d:79:af:a3:2c:4b:3a:48:fb:8a:8b:4e:cf:ed: c4:03:b5:94:b7:9f:f1:89:65:64:1d:cc:95:17:e2:32:14:e7: d9:73:17:ea:67:10:67:af:4a:e1:63:f1:34:4d:b5:c9:61:19: 27:e5:31:fc:71:bf:89:d0:e6:70:b8:41:9e:5b:a1:4a:ef:e1: bc:25:f4:44:4c:34:9b:84:8a:64:c2:14:62:fc:c9:cf:85:cc: 65:f4:a0:0d:59:11:38:d9:50:76:cb:ed:d2:1b:53:9d:05:f9: 8c:ff:e0:f7:3d:a8:69:fd:38:69:af:ce:94:f8:63:72:84:01: db:0d:9e:08:74:10:7c:40:f0:c3:03:c5:0e:d2:a9:59:29:04: e4:2a:04:1d:4f:bd:4a:e0:28:bd:3f:73:6f:75:8a:5a:4f:e2: 2d:6c:01:5b:9b:be:17:47:7e:ac:18:f3:78:b1:c6:8c:7f:af: 51:1d:ba:b4:99:92:c9:02:43:94:c2:54:90:60:c9:8c:3d:4b: d5:f9:b3:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUArNp+Gkx2gpIiPgg55MrkyrytEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTU0MTA2WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzRkZjYzN2MwYjExN2ZhYjhlM2Q0OWY5N2FkYWU4MWZh MTU0ZTY3MzA3NDdhNTQ3Mzg0Mjg2OGE1OGI1NGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8ooFLl6n6Ux5flkgmZxxngnFnYdPev+rmMH6e8v5ul+I1 Uw0/cX0wVaK795gSiRZ/e+gUcp/uqyxvYqwnOmrR42Zbg6mvFKHDzRKCD47Idb9L t3d/kDd6RS0RQQkB4WTQpEyCBGLGb6b5yVMNhrJv1lfNZFAZ+YM4rkmnDbGP0k5+ 8UfrNgu1ft/VBnEj9noLkRXSh5XJQRIJP24Wrbgy5lfMaUX58dJrZmqFRoRxppM5 r+zaU27g7dDQECGL9uNYtWJzTg3YH5zgRYbjmhRknesvQPidLkKUk+AlVrj9RBsp MCqmqw+9Bdy9fkjg3YokrWC4hCqdMeCRni0xqazpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa8QbJfmDwVSDhx3+k2sL9LIKmJ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4ZjJmZjYzLTc2NTktNDk4ZC1iOTk0LWVkNTI2ZGIxMmIxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANM36gwDQYJKoZIhvcNAQELBQADggEBACHVB3ZAtiKTz21h8fnCJb5slEdr QcAlQe0GVx+z4Hj5yFDpLKhxRM+hP1GP1pB5fnlVQWmqYNTTka0tea+jLEs6SPuK i07P7cQDtZS3n/GJZWQdzJUX4jIU59lzF+pnEGevSuFj8TRNtclhGSflMfxxv4nQ 5nC4QZ5boUrv4bwl9ERMNJuEimTCFGL8yc+FzGX0oA1ZETjZUHbL7dIbU50F+Yz/ 4Pc9qGn9OGmvzpT4Y3KEAdsNngh0EHxA8MMDxQ7SqVkpBOQqBB1PvUrgKL0/c291 ilpP4i1sAVubvhdHfqwY83ixxox/r1EdurSZkskCQ5TCVJBgyYw9S9X5s34= -----END CERTIFICATE-----Generated at Tue May 13 05:54:37 2025 by rpki-client