$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa File: 975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa (raw, json) Hash identifier: LCF0u4gAYW4UHvCjAnU8fV8yu44tZd30KNqf7Hc1Y08= Subject key identifier: A0:C7:8F:B9:0F:07:BC:ED:43:2B:B0:A8:47:C4:BA:56:59:6E:15:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F10EE9CDE0FDCCCE8219C815DAD96F43259DF0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa Signing time: Sat 03 May 2025 00:00:22 +0000 ROA not before: Sat 03 May 2025 00:00:22 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:10:ee:9c:de:0f:dc:cc:e8:21:9c:81:5d:ad:96:f4:32:59:df:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:00:22 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=39cc58c3cb472694471399614a2a55b89201a6210d09c5e10af4977ec16dee8b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:91:3e:95:55:fa:6b:7b:f3:8b:d0:fd:6c: ac:16:c2:0b:48:af:76:a3:e1:6c:d5:e9:45:de:6b: 21:c8:94:f2:43:8e:89:87:a2:7a:65:ed:be:6e:84: 9a:8a:dd:aa:ee:ba:66:52:ed:2f:fb:9b:7b:c5:b1: 3e:2f:fa:8d:f9:af:4f:ca:b9:83:55:55:6c:a5:c5: 49:c4:b6:f9:3e:c3:d5:81:26:66:65:5a:04:bc:74: 55:d5:ce:4a:ef:4e:ed:7c:98:c2:38:80:21:77:5f: 28:85:fe:b5:3d:75:57:f1:1b:00:36:d5:7c:0b:ed: 6e:5f:47:85:7f:5a:5b:1b:2a:b3:c3:6a:f0:b7:05: 41:80:e1:c3:8c:cb:6c:94:64:14:af:64:7d:35:0d: 2f:c7:e3:bd:51:45:6e:3c:5f:ac:99:95:7f:67:71: 7b:44:70:b4:2a:01:dc:32:a8:94:3c:54:95:7f:cf: 00:72:3f:8d:c8:d2:f6:6b:bf:a7:4f:bf:a8:ce:bc: ec:79:67:6f:5e:48:00:76:4b:f2:dd:fa:1a:bd:32: 01:52:74:81:5c:ef:83:25:34:19:fe:fe:12:02:f9: 5c:88:37:bd:b1:48:17:19:ba:f7:e1:5e:76:f8:bd: a7:ca:9c:ff:c2:0e:55:cf:fa:1a:4e:1e:2e:f5:ee: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:8F:B9:0F:07:BC:ED:43:2B:B0:A8:47:C4:BA:56:59:6E:15:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption 00:e5:23:a7:3f:0d:7c:07:81:0d:54:bf:46:23:ab:85:cc:e5: 5a:93:ee:ec:22:53:41:3b:67:a2:7e:1f:80:bb:50:fe:89:b7: 42:70:e0:01:6c:2b:e0:fd:b8:41:2a:53:fb:2b:d9:ae:1c:55: 32:77:33:26:bb:6d:ed:a5:f5:41:d3:9e:cf:17:0e:57:98:bc: 8a:20:72:d8:b4:06:51:99:9b:32:b7:36:bc:df:a1:14:52:a9: bc:15:e0:69:62:40:9d:86:56:d0:31:34:07:9b:99:75:bf:dd: a5:b8:32:21:0f:63:8f:28:a1:90:a0:8e:7d:c7:7d:5d:89:20: 91:39:c9:1e:6b:1e:9b:52:98:9d:c9:5b:ce:4c:81:b9:09:ff: fd:83:ca:10:9d:e1:5f:87:fc:67:6b:c6:d9:c7:b1:19:de:30: b0:ea:af:a6:4d:d0:55:59:f0:aa:31:39:f4:64:1d:8c:8f:f5: 86:6a:92:f8:cd:0e:13:d5:3d:fc:b8:dd:51:c5:92:12:c1:2e: 2a:7e:da:a0:30:28:70:98:59:0e:e0:29:f5:bf:06:2e:d3:58: e9:b5:ca:9a:f2:6f:3a:ed:97:18:1f:da:95:7b:30:78:80:90: 4f:75:42:17:de:40:f3:98:5b:c6:80:00:2d:86:21:3b:34:29: 0e:d7:f9:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPxDunN4P3MzoIZyBXa2W9DJZ3wowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAwMDIyWhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWNjNThjM2NiNDcyNjk0NDcxMzk5NjE0YTJhNTViODky MDFhNjIxMGQwOWM1ZTEwYWY0OTc3ZWMxNmRlZThiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO5ZE+lVX6a3vzi9D9bKwWwgtIr3aj4WzV6UXeayHIlPJD jomHonpl7b5uhJqK3aruumZS7S/7m3vFsT4v+o35r0/KuYNVVWylxUnEtvk+w9WB JmZlWgS8dFXVzkrvTu18mMI4gCF3XyiF/rU9dVfxGwA21XwL7W5fR4V/WlsbKrPD avC3BUGA4cOMy2yUZBSvZH01DS/H471RRW48X6yZlX9ncXtEcLQqAdwyqJQ8VJV/ zwByP43I0vZrv6dPv6jOvOx5Z29eSAB2S/Ld+hq9MgFSdIFc74MlNBn+/hIC+VyI N72xSBcZuvfhXnb4vafKnP/CDlXP+hpOHi717kKdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoMePuQ8HvO1DK7CoR8S6VlluFQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NWE5OGJhLWM0MzctNGQ2NS1iZjI2LWE0NmQ4ZDVkNDliZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBAADlI6c/DXwHgQ1Uv0Yjq4XM5VqT 7uwiU0E7Z6J+H4C7UP6Jt0Jw4AFsK+D9uEEqU/sr2a4cVTJ3Mya7be2l9UHTns8X DleYvIogcti0BlGZmzK3NrzfoRRSqbwV4GliQJ2GVtAxNAebmXW/3aW4MiEPY48o oZCgjn3HfV2JIJE5yR5rHptSmJ3JW85MgbkJ//2DyhCd4V+H/GdrxtnHsRneMLDq r6ZN0FVZ8KoxOfRkHYyP9YZqkvjNDhPVPfy43VHFkhLBLip+2qAwKHCYWQ7gKfW/ Bi7TWOm1yprybzrtlxgf2pV7MHiAkE91QhfeQPOYW8aAAC2GITs0KQ7X+f8= -----END CERTIFICATE-----Generated at Sat May 10 10:20:15 2025 by rpki-client