$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/034c3528-4b36-4ade-a86b-759701bbc55c.roa File: 034c3528-4b36-4ade-a86b-759701bbc55c.roa (raw, json) Hash identifier: JOf3G0TgtOzk76TdYzOJrSzUYE9iNS/Eb3ozOnnKg80= Subject key identifier: 15:87:AF:90:8D:3B:4D:35:E3:C0:7E:0F:80:FC:AD:FE:05:00:98:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 032745241C5731EC24B1063B3B8A2C53FB7B51AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/034c3528-4b36-4ade-a86b-759701bbc55c.roa Signing time: Sat 14 Jun 2025 00:31:40 +0000 ROA not before: Sat 14 Jun 2025 00:31:40 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:27:45:24:1c:57:31:ec:24:b1:06:3b:3b:8a:2c:53:fb:7b:51:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:31:40 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=d6dc397876a427a6e3582e71a378e7595cedcfb96e2999f105bade9ffb057440, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:bd:27:5c:09:23:4f:55:47:09:e7:65:d4: 09:18:08:38:0d:21:1c:af:93:32:3c:ec:42:c2:bb: 29:2f:06:1f:03:6b:af:1a:92:76:94:d5:c8:5d:fe: 41:bb:ef:6b:26:91:68:46:df:b8:5a:39:c4:58:63: 0f:db:1c:2b:49:9c:ef:f0:d2:ba:90:a2:9b:82:e3: 68:f4:c3:4b:31:fb:26:8f:b2:b9:81:e6:ff:f2:6a: 81:cb:25:ee:57:1e:75:52:34:f2:f3:1d:18:b3:13: d1:e6:79:cd:70:2a:2a:bc:f0:5a:45:bb:c3:9a:75: 0e:16:17:2e:b9:74:48:a9:c5:7f:1d:8b:af:57:74: 4e:1a:9c:8c:13:23:34:ca:3f:c9:00:0b:63:69:d8: 27:40:79:34:ff:f0:cc:74:05:b5:ac:3b:0a:5d:7f: 12:40:22:22:85:eb:62:8a:59:b4:05:0d:27:f1:b5: a8:93:f4:98:8e:21:64:0d:3d:ef:16:d8:85:c5:80: fe:5a:0b:60:52:67:a0:e4:3c:3e:4e:fd:8c:de:6e: ad:85:a5:b8:fe:36:87:0f:8c:ab:92:87:81:54:a5: 4b:17:2a:7d:64:c5:20:a2:bd:19:62:e2:d0:6e:ee: 0b:41:57:b8:17:e8:70:0f:4c:79:0c:7c:9f:63:a3: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:87:AF:90:8D:3B:4D:35:E3:C0:7E:0F:80:FC:AD:FE:05:00:98:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/034c3528-4b36-4ade-a86b-759701bbc55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.80.0/20 Signature Algorithm: sha256WithRSAEncryption c9:09:c1:10:8e:82:b4:c3:9f:c7:45:2e:0a:17:43:eb:ac:83: 17:bb:76:17:3c:ea:ed:68:49:5d:f3:c3:14:64:b2:60:1c:7f: 40:06:4a:93:ae:c8:f5:9a:c1:70:0d:56:b3:7a:fe:8f:17:de: 93:33:5c:06:8b:39:b9:01:fe:91:bb:7a:da:d9:b2:32:e3:52: 07:df:00:09:5a:aa:a2:f2:ef:ca:fa:62:f6:2e:24:e3:d4:0f: 37:f8:36:14:9f:72:09:d2:9b:c7:1a:29:f4:06:d1:5a:f8:48: 05:f9:06:a3:18:0c:6f:af:be:9b:b1:af:5a:64:f3:15:83:5f: 2a:33:6c:e7:74:d5:b0:78:17:49:d3:cd:5c:95:92:10:12:31: 7a:11:08:ae:5d:2c:ba:f8:0a:2f:30:93:2e:fb:de:22:40:ec: 51:6d:38:79:38:ee:ba:66:29:01:83:0d:1b:a1:ee:19:ca:d4: 73:58:7e:6b:30:f1:37:34:a5:c5:24:bf:ec:53:ba:58:a5:ea: c5:4d:75:40:ab:bb:88:e1:f8:b5:89:17:04:fd:6e:b3:22:15: 0d:73:ee:a2:0c:00:e4:6a:c5:6a:58:fd:55:41:38:42:f9:14: 63:75:4f:8d:2b:04:09:50:11:0f:07:1e:9c:0a:0f:6e:b0:26: 33:fd:42:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAydFJBxXMewksQY7O4osU/t7Ua4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMTQwWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmRjMzk3ODc2YTQyN2E2ZTM1ODJlNzFhMzc4ZTc1OTVj ZWRjZmI5NmUyOTk5ZjEwNWJhZGU5ZmZiMDU3NDQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDs070nXAkjT1VHCedl1AkYCDgNIRyvkzI87ELCuykvBh8D a68aknaU1chd/kG772smkWhG37haOcRYYw/bHCtJnO/w0rqQopuC42j0w0sx+yaP srmB5v/yaoHLJe5XHnVSNPLzHRizE9Hmec1wKiq88FpFu8OadQ4WFy65dEipxX8d i69XdE4anIwTIzTKP8kAC2Np2CdAeTT/8Mx0BbWsOwpdfxJAIiKF62KKWbQFDSfx taiT9JiOIWQNPe8W2IXFgP5aC2BSZ6DkPD5O/Yzebq2Fpbj+NocPjKuSh4FUpUsX Kn1kxSCivRli4tBu7gtBV7gX6HAPTHkMfJ9joyhjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFYevkI07TTXjwH4PgPyt/gUAmLYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzNGMzNTI4LTRiMzYtNGFkZS1hODZiLTc1OTcwMWJiYzU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQXF1AwDQYJKoZIhvcNAQELBQADggEBAMkJwRCOgrTDn8dFLgoXQ+usgxe7 dhc86u1oSV3zwxRksmAcf0AGSpOuyPWawXANVrN6/o8X3pMzXAaLObkB/pG7etrZ sjLjUgffAAlaqqLy78r6YvYuJOPUDzf4NhSfcgnSm8caKfQG0Vr4SAX5BqMYDG+v vpuxr1pk8xWDXyozbOd01bB4F0nTzVyVkhASMXoRCK5dLLr4Ci8wky773iJA7FFt OHk47rpmKQGDDRuh7hnK1HNYfmsw8Tc0pcUkv+xTulil6sVNdUCru4jh+LWJFwT9 brMiFQ1z7qIMAORqxWpY/VVBOEL5FGN1T40rBAlQEQ8HHpwKD26wJjP9QsM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:57:52 2025 by rpki-client