$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa File: bd222a65-748c-46e7-882d-3919ea56fa41.roa (raw, json) Hash identifier: AWJgz+U7F8TkzQRYvFYpKoHkj6jHSGyLaXHxtobpYCE= Subject key identifier: 6F:64:60:DC:20:CA:D1:CD:95:24:59:FE:A8:EC:14:E2:54:16:C2:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 768A5D824176CFB85B5C8BFACC56227496354DAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa Signing time: Fri 02 May 2025 00:10:28 +0000 ROA not before: Fri 02 May 2025 00:10:28 +0000 ROA not after: Fri 06 Jun 2025 23:59:59 +0000 asID: 54113 IP address blocks: 162.219.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8a:5d:82:41:76:cf:b8:5b:5c:8b:fa:cc:56:22:74:96:35:4d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:10:28 2025 GMT Not After : Jun 6 23:59:59 2025 GMT Subject: serialNumber=ff843b6c0d163bd76eb3d6868b885a66d10848be5a4f9fa75979354e4eee6c4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:45:f6:1e:f6:aa:c2:bb:0c:3b:86:5b:f0: be:05:56:2f:bf:02:d9:0a:16:8a:e5:5e:88:13:9d: 9a:08:6d:ae:03:b6:f1:0c:ea:96:df:85:44:85:4e: d0:0b:66:fc:c1:87:22:fc:91:3a:6f:b7:ae:74:9b: 66:f3:51:64:6b:f4:0d:3c:54:cc:f4:29:1f:ce:83: d1:39:ad:67:29:11:2d:bf:74:40:3c:06:8f:99:c9: ad:9e:fb:71:08:db:72:da:8c:2c:67:d8:b3:15:be: 75:b4:49:aa:e9:cb:36:47:ee:c5:a5:f8:63:51:0e: 7c:9c:29:59:43:db:25:43:fb:a1:08:97:2c:2f:ce: 43:1c:0a:e0:b0:84:03:93:a6:99:f6:dc:8d:4d:96: 04:47:a1:14:e1:dd:70:02:e9:44:fc:5e:b1:a7:e6: 02:d7:a5:85:65:10:98:d4:77:3f:b8:24:7a:4a:b3: ae:bb:d0:6d:2b:15:65:fe:4b:1b:d3:34:64:b1:a8: de:32:e1:6b:bf:10:7b:f4:1f:f3:7a:1f:23:f2:24: 2e:ec:1e:09:a7:22:b1:2a:0b:ad:6a:86:29:ba:01: 86:38:c4:f1:68:d2:21:ca:37:95:a7:21:11:6e:fd: 4d:4e:5e:42:91:83:f2:50:8b:b9:0e:09:8b:2c:d6: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:64:60:DC:20:CA:D1:CD:95:24:59:FE:A8:EC:14:E2:54:16:C2:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd222a65-748c-46e7-882d-3919ea56fa41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.219.224.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:df:35:8d:96:54:e0:b0:ea:d6:2e:e0:ef:60:ae:cb:b2:4b: 8f:f6:dd:bb:5a:6a:c0:40:c2:ef:14:eb:2c:70:ab:8c:1e:d8: 2e:ce:9f:a8:f9:dc:5a:68:92:ef:31:58:4a:d3:0d:2c:0c:50: 1b:ff:43:29:e6:75:60:9b:13:33:ba:02:74:3d:38:49:52:74: 6c:40:46:b3:b0:6f:f0:c7:56:26:07:b0:18:3a:dc:97:c8:d9: 99:06:37:9e:53:12:10:4d:fa:98:05:ae:23:2a:2e:fb:ee:7d: 21:54:06:b0:07:2c:99:90:4b:ca:66:31:6d:27:4a:bb:b8:96: 72:19:e5:f5:06:db:73:8a:8b:e5:d1:cf:af:ec:76:c9:82:f3: 17:f2:36:a1:b9:6b:9b:ec:a7:d7:66:13:db:2c:b9:a5:45:45: 5d:bc:77:ab:ee:0f:0a:40:51:e4:e1:a4:04:bb:fa:12:6b:45: 56:81:13:e4:8a:5f:b7:2d:1c:c6:23:56:a4:74:67:ae:0d:9c: 00:78:35:40:c3:8c:4e:9f:49:74:66:9a:2d:07:ca:8e:cb:d9: 66:d5:70:b7:a1:d5:9b:ac:47:36:53:b1:7f:98:09:54:64:d7: 89:99:15:d3:65:d6:41:d3:70:ec:ec:79:22:2a:16:2e:1c:8b: 21:df:2d:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdopdgkF2z7hbXIv6zFYidJY1TaswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAyMDAxMDI4WhcNMjUwNjA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjg0M2I2YzBkMTYzYmQ3NmViM2Q2ODY4Yjg4NWE2NmQx MDg0OGJlNWE0ZjlmYTc1OTc5MzU0ZTRlZWU2YzRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf0UX2HvaqwrsMO4Zb8L4FVi+/AtkKForlXogTnZoIba4D tvEM6pbfhUSFTtALZvzBhyL8kTpvt650m2bzUWRr9A08VMz0KR/Og9E5rWcpES2/ dEA8Bo+Zya2e+3EI23LajCxn2LMVvnW0SarpyzZH7sWl+GNRDnycKVlD2yVD+6EI lywvzkMcCuCwhAOTppn23I1NlgRHoRTh3XAC6UT8XrGn5gLXpYVlEJjUdz+4JHpK s6670G0rFWX+SxvTNGSxqN4y4Wu/EHv0H/N6HyPyJC7sHgmnIrEqC61qhim6AYY4 xPFo0iHKN5WnIRFu/U1OXkKRg/JQi7kOCYss1qivAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb2Rg3CDK0c2VJFn+qOwU4lQWwhowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkMjIyYTY1LTc0OGMtNDZlNy04ODJkLTM5MTllYTU2ZmE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKi2+AwDQYJKoZIhvcNAQELBQADggEBAA7fNY2WVOCw6tYu4O9grsuyS4/2 3btaasBAwu8U6yxwq4we2C7On6j53Fpoku8xWErTDSwMUBv/QynmdWCbEzO6AnQ9 OElSdGxARrOwb/DHViYHsBg63JfI2ZkGN55TEhBN+pgFriMqLvvufSFUBrAHLJmQ S8pmMW0nSru4lnIZ5fUG23OKi+XRz6/sdsmC8xfyNqG5a5vsp9dmE9ssuaVFRV28 d6vuDwpAUeThpAS7+hJrRVaBE+SKX7ctHMYjVqR0Z64NnAB4NUDDjE6fSXRmmi0H yo7L2WbVcLeh1ZusRzZTsX+YCVRk14mZFdNl1kHTcOzseSIqFi4ciyHfLY8= -----END CERTIFICATE-----Generated at Tue May 13 19:37:54 2025 by rpki-client