$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa File: 91d5664a-8248-46da-9cb9-0b09e0fab78e.roa (raw, json) Hash identifier: o0sQ8Iuh85DCTXhgunHh4DU07Jv4MGgaNhjZStrPcnU= Subject key identifier: EC:D6:34:00:7B:56:F7:FC:EC:7E:67:21:8D:6D:22:08:73:25:4E:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44B15D91C7152814E669FAEDF68553D351C45379 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa Signing time: Wed 07 May 2025 00:20:25 +0000 ROA not before: Wed 07 May 2025 00:20:25 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.216.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b1:5d:91:c7:15:28:14:e6:69:fa:ed:f6:85:53:d3:51:c4:53:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:20:25 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=07c846ce62790335982d06c696b562280e924acfc9bcb0b96202a491d41d47ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:c6:b2:e9:eb:6a:f3:b9:d4:c5:06:81:a4: af:ee:ac:5b:14:cc:5a:31:2d:65:49:7a:5b:66:50: 19:a9:f5:3f:7e:43:3d:9c:ed:d3:8f:d4:8d:41:1b: e6:f7:14:4f:67:a8:4c:ca:fd:47:b2:85:f2:0d:82: 3e:ae:f9:94:d2:f1:5c:a7:ca:95:25:8a:14:47:cc: 33:f9:1d:a1:bc:83:18:1d:9a:70:68:ae:22:4c:21: 4e:ea:63:4c:43:ef:69:8e:c8:92:56:bb:5a:5b:23: 6b:0f:b9:93:de:37:b7:fe:a0:0c:6a:3a:47:d7:9a: 9b:38:ab:c9:86:87:a9:7e:f3:75:e1:41:07:40:00: 15:1e:7b:24:0b:d0:1c:b9:1d:fc:94:e2:1e:1c:49: 8a:59:d2:19:8b:ff:ce:4f:e7:c0:e0:c8:bd:17:27: 1d:6d:7c:0f:15:84:a2:1a:fa:00:df:9e:a8:46:de: ff:eb:57:ab:7d:f4:78:57:3a:d0:5f:d8:c3:c6:b8: 71:ac:0b:ef:b2:77:c1:bd:1d:9e:c5:38:c1:2d:fa: 3c:68:c8:37:d7:9a:fb:cf:2d:a1:1a:16:0a:77:1d: b0:a1:4e:33:0a:b3:24:83:bc:2e:91:f0:bf:58:26: c1:7e:77:6e:8a:1f:d6:81:b5:1a:8d:f6:7c:3b:06: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:34:00:7B:56:F7:FC:EC:7E:67:21:8D:6D:22:08:73:25:4E:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.216.200.0/22 Signature Algorithm: sha256WithRSAEncryption 29:92:a5:20:dc:0d:68:52:62:1a:ab:c1:7b:42:8c:f3:c8:6a: 70:eb:77:c7:ee:26:53:ab:16:57:d7:e4:00:7f:c6:90:21:7d: 7b:5a:aa:65:3c:32:0a:42:aa:85:b5:33:eb:2a:21:db:4d:96: 09:78:9c:af:77:9c:3c:80:19:d9:3d:b1:ce:27:f2:62:20:19: e8:f5:a7:3e:99:46:a2:60:69:66:5e:cb:2f:a3:9c:02:91:fe: 86:a6:6a:ce:93:de:70:73:26:1a:70:b9:89:de:80:8f:e5:8c: bd:d7:3b:0d:33:6d:26:e8:c8:05:3c:31:ea:9a:6e:9a:c3:5d: 84:df:df:6b:4e:5b:ef:32:b8:30:13:7d:98:e2:a8:b6:cd:3e: 98:9a:ea:ca:51:ed:73:d1:40:f8:b5:3e:19:78:51:82:c9:27: 26:00:a1:5a:c2:c3:ca:b3:27:62:cc:a4:20:c4:ff:13:27:38: 50:c9:97:c2:6c:81:ac:81:f4:ba:1a:5d:d7:b7:c9:d0:c0:bb: ac:d4:9a:c1:0c:ad:37:97:3b:3a:bc:d4:6f:6f:e2:4e:4d:51: 9e:36:bf:71:89:44:c0:71:87:d5:b3:46:f2:31:10:00:20:91: 8e:91:7c:73:4d:c5:2e:0e:04:89:08:72:09:1a:cb:8e:ce:41: 8d:4b:f7:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURLFdkccVKBTmafrt9oVT01HEU3kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAyMDI1WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2M4NDZjZTYyNzkwMzM1OTgyZDA2YzY5NmI1NjIyODBl OTI0YWNmYzliY2IwYjk2MjAyYTQ5MWQ0MWQ0N2VmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5h8ay6etq87nUxQaBpK/urFsUzFoxLWVJeltmUBmp9T9+ Qz2c7dOP1I1BG+b3FE9nqEzK/UeyhfINgj6u+ZTS8VynypUlihRHzDP5HaG8gxgd mnBoriJMIU7qY0xD72mOyJJWu1pbI2sPuZPeN7f+oAxqOkfXmps4q8mGh6l+83Xh QQdAABUeeyQL0By5HfyU4h4cSYpZ0hmL/85P58DgyL0XJx1tfA8VhKIa+gDfnqhG 3v/rV6t99HhXOtBf2MPGuHGsC++yd8G9HZ7FOMEt+jxoyDfXmvvPLaEaFgp3HbCh TjMKsySDvC6R8L9YJsF+d26KH9aBtRqN9nw7BhaPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7NY0AHtW9/zsfmchjW0iCHMlTgYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxZDU2NjRhLTgyNDgtNDZkYS05Y2I5LTBiMDllMGZhYjc4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs2MgwDQYJKoZIhvcNAQELBQADggEBACmSpSDcDWhSYhqrwXtCjPPIanDr d8fuJlOrFlfX5AB/xpAhfXtaqmU8MgpCqoW1M+sqIdtNlgl4nK93nDyAGdk9sc4n 8mIgGej1pz6ZRqJgaWZeyy+jnAKR/oamas6T3nBzJhpwuYnegI/ljL3XOw0zbSbo yAU8MeqabprDXYTf32tOW+8yuDATfZjiqLbNPpia6spR7XPRQPi1Phl4UYLJJyYA oVrCw8qzJ2LMpCDE/xMnOFDJl8JsgayB9LoaXde3ydDAu6zUmsEMrTeXOzq81G9v 4k5NUZ42v3GJRMBxh9WzRvIxEAAgkY6RfHNNxS4OBIkIcgkay47OQY1L9y8= -----END CERTIFICATE-----Generated at Tue May 13 10:32:26 2025 by rpki-client