$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa File: d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa (raw, json) Hash identifier: Z9jkn+A2g0NRcgNmP+9BG7BxJt5RCC2sRAbkKIBM16c= Subject key identifier: D5:6E:7A:39:10:D6:8D:90:42:85:92:DC:C1:C0:D6:25:DA:6E:69:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 310D502995EA4D5491590A7459E91345F11143A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa Signing time: Mon 05 May 2025 15:00:33 +0000 ROA not before: Mon 05 May 2025 15:00:33 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 163.158.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0d:50:29:95:ea:4d:54:91:59:0a:74:59:e9:13:45:f1:11:43:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:00:33 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=a8e8fd4de4d8ba0e21c08b91bb36f33f5e6d34a7ff7807a2ab74c635fefb6a6d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:dc:04:0b:ea:89:dc:fe:c0:95:85:b6:09: a4:70:b2:c8:38:00:d5:b0:a9:11:50:94:7f:84:3c: 1b:1c:61:11:83:c1:ca:cc:76:8b:9e:96:14:ce:dd: 3c:53:cf:38:5a:86:25:f2:7f:c4:84:1c:24:69:39: bc:a3:95:58:de:fb:3d:ef:66:00:e2:21:c0:6f:de: 3d:16:89:a3:13:34:15:64:40:75:c6:0c:f0:5c:8c: cc:a5:f4:21:04:46:a4:d5:e7:78:f6:10:65:ca:35: 4d:9e:f0:90:3d:f7:64:06:64:76:c7:36:6a:b2:e9: 12:bc:ce:0b:24:1c:60:d5:57:ad:bb:07:5a:75:94: 9c:31:79:e0:ae:4d:8c:ac:d1:5d:e1:4c:d1:2c:48: c2:90:8b:39:a7:ca:42:cf:b5:c4:d1:ba:06:b2:c8: 88:80:53:e1:ad:d5:15:17:fe:8a:44:a0:4f:8c:36: 7a:e8:70:5f:c8:b4:a1:5c:77:5b:12:c0:0b:2e:04: e8:ad:81:82:4a:87:19:df:33:7f:c2:89:b8:fd:2d: 63:cb:27:13:9a:ed:58:5e:85:8d:f7:eb:13:ff:54: 24:c1:4d:fc:7c:a4:84:23:ef:06:f6:8d:3a:51:0d: 22:2b:0c:05:06:b1:c3:84:65:d2:4e:81:b2:82:51: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:7A:39:10:D6:8D:90:42:85:92:DC:C1:C0:D6:25:DA:6E:69:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3fc5871-a159-4c3b-84ff-ef51ff0080f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption c0:94:c7:37:fc:db:4f:72:7f:ae:33:80:7a:f7:df:88:64:5e: 6f:34:e4:63:12:62:10:f6:b7:1b:5c:4a:6e:df:13:77:d2:89: 8a:a5:72:ca:ff:7e:74:df:e2:30:f0:0a:df:95:db:20:c8:d9: e3:c0:73:6f:a2:e0:97:c4:57:a2:db:a0:06:44:1c:2d:2f:3d: 92:7e:82:78:f5:86:da:39:71:90:82:9c:28:02:85:4c:55:1f: 5d:b7:d0:16:15:dc:12:fe:68:21:bd:d4:14:5a:07:c7:5e:87: 54:0d:07:97:9c:b7:27:3c:4e:58:4f:6d:9d:d7:56:2a:34:b3: 61:e6:a0:30:3d:19:aa:00:ac:64:71:7f:85:63:8b:96:08:1c: a7:81:82:c8:8a:cb:d9:61:ea:6d:c4:dd:de:32:5a:7e:7f:94: 0b:c2:25:4d:d4:c7:fa:db:ab:23:82:a7:cb:11:2f:14:3b:d8: af:cf:d1:4e:cd:48:f0:f2:a9:46:58:37:1a:0a:2e:b9:5f:fe: 0c:ab:d2:4c:58:03:0f:04:af:51:f6:ff:91:d7:d3:3f:73:8f: 65:d1:0c:a1:20:68:92:3e:b6:d5:82:b2:df:7c:8a:e8:36:d8: c9:dd:c3:80:a7:4b:4e:57:89:d5:12:8a:ee:30:da:fc:37:7f: f9:b2:24:e8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMQ1QKZXqTVSRWQp0WekTRfERQ6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUwMDMzWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGU4ZmQ0ZGU0ZDhiYTBlMjFjMDhiOTFiYjM2ZjMzZjVl NmQzNGE3ZmY3ODA3YTJhYjc0YzYzNWZlZmI2YTZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnstwEC+qJ3P7AlYW2CaRwssg4ANWwqRFQlH+EPBscYRGD wcrMdouelhTO3TxTzzhahiXyf8SEHCRpObyjlVje+z3vZgDiIcBv3j0WiaMTNBVk QHXGDPBcjMyl9CEERqTV53j2EGXKNU2e8JA992QGZHbHNmqy6RK8zgskHGDVV627 B1p1lJwxeeCuTYys0V3hTNEsSMKQizmnykLPtcTRugayyIiAU+Gt1RUX/opEoE+M NnrocF/ItKFcd1sSwAsuBOitgYJKhxnfM3/Cibj9LWPLJxOa7VhehY336xP/VCTB Tfx8pIQj7wb2jTpRDSIrDAUGscOEZdJOgbKCUUMVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1W56ORDWjZBChZLcwcDWJdpuaYAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzZmM1ODcxLWExNTktNGMzYi04NGZmLWVmNTFmZjAwODBmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCjnjANBgkqhkiG9w0BAQsFAAOCAQEAwJTHN/zbT3J/rjOAevffiGRebzTk YxJiEPa3G1xKbt8Td9KJiqVyyv9+dN/iMPAK35XbIMjZ48Bzb6Lgl8RXotugBkQc LS89kn6CePWG2jlxkIKcKAKFTFUfXbfQFhXcEv5oIb3UFFoHx16HVA0Hl5y3JzxO WE9tnddWKjSzYeagMD0ZqgCsZHF/hWOLlggcp4GCyIrL2WHqbcTd3jJafn+UC8Il TdTH+turI4KnyxEvFDvYr8/RTs1I8PKpRlg3GgouuV/+DKvSTFgDDwSvUfb/kdfT P3OPZdEMoSBokj621YKy33yK6DbYyd3DgKdLTleJ1RKK7jDa/Dd/+bIk6A== -----END CERTIFICATE-----Generated at Mon May 12 07:26:47 2025 by rpki-client