$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa File: be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa (raw, json) Hash identifier: Cz4N5oNRoAnBPUHF2Du+5EX0okUyN21ouSMCGDXJizg= Subject key identifier: D5:14:CC:10:30:48:F5:5D:E4:2F:5F:22:C9:0C:4B:83:A6:73:BD:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65596D9B89BD8A1114A9A1F5E8FE6870D7C52E2F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa Signing time: Fri 09 May 2025 00:20:19 +0000 ROA not before: Fri 09 May 2025 00:20:19 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:59:6d:9b:89:bd:8a:11:14:a9:a1:f5:e8:fe:68:70:d7:c5:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:20:19 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=517b5263b2cacd30c72513fb06f69daf6cf1f85d386f35585b0d21a33ead3769, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:8b:b0:e8:d4:3d:31:e3:86:3a:8c:00:23: fa:68:3f:9c:9c:08:8b:73:90:43:db:01:be:e1:2f: 9e:ba:d8:61:64:79:10:f6:c1:cb:1c:d7:f9:f8:21: e8:32:79:74:44:ec:96:fb:eb:14:27:2b:f2:cc:92: fb:09:42:47:e4:64:e0:d7:e0:32:05:29:4e:8e:1c: f9:f2:0a:d0:c0:0a:fb:99:7f:e8:c1:76:c4:42:fc: ba:fd:50:22:d7:8c:51:25:04:d6:10:d3:29:83:de: 93:f5:1c:9e:e0:5d:0b:44:a9:83:f6:9e:b9:09:1c: eb:19:2e:d6:0d:c7:16:e8:94:54:70:90:82:b1:9e: 2a:56:24:b2:4a:9e:cc:e1:6d:23:77:e4:24:37:e1: 4c:6c:ea:b3:92:19:79:48:ae:f9:a1:ac:76:cc:46: 80:2b:ba:84:18:21:01:b6:84:cd:16:81:4c:2e:3e: 37:f0:a6:d4:b2:a1:7f:fb:00:57:b1:c4:e9:65:ae: ff:75:ea:09:e9:dd:aa:77:5f:ed:3d:98:36:e6:cf: 18:f1:f9:f7:be:f3:42:c9:2c:ea:cb:62:6f:3b:21: 28:0c:5f:e1:24:9a:a4:49:ec:3f:8e:ab:04:7f:87: 03:91:5a:a3:b0:22:6e:89:bd:40:b0:91:2c:e8:e6: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:14:CC:10:30:48:F5:5D:E4:2F:5F:22:C9:0C:4B:83:A6:73:BD:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be837a1b-32c4-49b1-9b20-3b8e4d8e0724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:14:34:e7:a4:48:e5:bb:3d:91:20:22:d3:69:8c:17:2a:fa: 8c:ec:29:de:ec:83:2e:45:18:aa:76:15:af:4b:89:97:56:d9: fb:a7:5e:68:d5:96:a7:3e:2a:2c:34:13:e1:af:09:0b:96:da: 47:af:3f:d8:84:be:8d:ba:98:e0:c6:1a:b3:74:08:a2:2e:7f: d1:ce:a5:71:d6:da:6a:bd:02:d6:6e:56:10:3a:a1:d5:dd:62: cf:7a:f7:de:8e:8b:d3:a6:fe:b0:6a:77:3f:eb:50:8f:51:72: ac:9c:7d:1f:22:b0:06:53:e3:50:59:fd:84:76:2b:c8:0c:9b: be:31:99:4c:47:4a:a5:f7:b0:da:5a:aa:12:b4:9e:82:49:90: 4d:bd:ee:ed:64:cb:aa:a4:fb:df:e0:2d:6c:cd:19:4a:ca:7c: e1:2e:19:fc:9e:51:f3:ee:bc:3e:b0:87:46:da:05:a4:7e:ed: eb:f3:99:c8:81:1e:da:3a:d4:09:d5:55:3b:09:77:ec:da:3a: 10:dc:b2:2f:4b:8b:7b:7f:01:15:52:b5:15:6f:20:39:f3:e3: 6b:90:86:42:2c:fc:bd:76:cf:75:99:e1:ec:9b:b5:97:be:8c: a3:66:6e:19:9a:60:ce:b3:7c:60:e4:5a:9d:ca:84:d7:83:c0: 83:52:ea:5f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZVltm4m9ihEUqaH16P5ocNfFLi8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAyMDE5WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTdiNTI2M2IyY2FjZDMwYzcyNTEzZmIwNmY2OWRhZjZj ZjFmODVkMzg2ZjM1NTg1YjBkMjFhMzNlYWQzNzY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIDYuw6NQ9MeOGOowAI/poP5ycCItzkEPbAb7hL5662GFk eRD2wcsc1/n4IegyeXRE7Jb76xQnK/LMkvsJQkfkZODX4DIFKU6OHPnyCtDACvuZ f+jBdsRC/Lr9UCLXjFElBNYQ0ymD3pP1HJ7gXQtEqYP2nrkJHOsZLtYNxxbolFRw kIKxnipWJLJKnszhbSN35CQ34Uxs6rOSGXlIrvmhrHbMRoAruoQYIQG2hM0WgUwu PjfwptSyoX/7AFexxOllrv916gnp3ap3X+09mDbmzxjx+fe+80LJLOrLYm87ISgM X+EkmqRJ7D+OqwR/hwORWqOwIm6JvUCwkSzo5hQTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1RTMEDBI9V3kL18iyQxLg6Zzvd4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JlODM3YTFiLTMyYzQtNDliMS05YjIwLTNiOGU0ZDhlMDcyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRVjANBgkqhkiG9w0BAQsFAAOCAQEAoRQ056RI5bs9kSAi02mMFyr6jOwp 3uyDLkUYqnYVr0uJl1bZ+6deaNWWpz4qLDQT4a8JC5baR68/2IS+jbqY4MYas3QI oi5/0c6lcdbaar0C1m5WEDqh1d1iz3r33o6L06b+sGp3P+tQj1FyrJx9HyKwBlPj UFn9hHYryAybvjGZTEdKpfew2lqqErSegkmQTb3u7WTLqqT73+AtbM0ZSsp84S4Z /J5R8+68PrCHRtoFpH7t6/OZyIEe2jrUCdVVOwl37No6ENyyL0uLe38BFVK1FW8g OfPja5CGQiz8vXbPdZnh7Ju1l76Mo2ZuGZpgzrN8YORancqE14PAg1LqXw== -----END CERTIFICATE-----Generated at Fri May 9 07:05:59 2025 by rpki-client