$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa File: 171a8b54-dde7-4dd4-8e61-d987c2870176.roa (raw, json) Hash identifier: MAnepEc5GaDFusKsPaK4FFOR+iSRIPfpeVYt701RrXg= Subject key identifier: EF:3F:C3:69:68:1E:58:9F:B2:3D:AC:C7:D6:9D:B7:A5:7A:44:05:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B66A5B204FAF1C29F5ED16AD99032F8A625822A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa Signing time: Sat 07 Jun 2025 00:41:47 +0000 ROA not before: Sat 07 Jun 2025 00:41:47 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:a5:b2:04:fa:f1:c2:9f:5e:d1:6a:d9:90:32:f8:a6:25:82:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 7 00:41:47 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=467e707f31ca95714ce134c9c3ad58ebdafb0666b56009c9617bdbe088009729, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:93:1f:d2:b3:3c:85:96:83:bb:06:f9:20: 78:97:b9:3d:c4:0c:18:d8:59:21:68:cc:4c:36:33: 0e:81:d6:b5:38:c6:62:e9:11:82:12:9e:de:4c:44: 84:44:34:85:05:96:0b:63:5f:9c:14:dd:97:26:5c: 09:6e:32:43:92:f0:68:17:78:be:f3:95:55:85:e3: a1:16:2e:35:b3:ba:15:2a:af:95:7a:12:40:0d:ef: a1:5d:3a:24:19:de:f2:31:78:18:f6:ab:d8:2f:f5: 1e:10:ad:45:f6:15:83:eb:03:1c:ed:19:a1:9d:1f: 40:cc:65:be:e3:a3:7a:22:e5:67:d9:f9:a7:b5:9d: 13:77:9e:4d:cf:0b:cd:e3:4c:29:b7:7c:b3:ce:ce: ae:69:ab:85:fd:b1:17:2d:fd:d0:8e:a7:40:de:ec: aa:94:93:16:69:73:c7:d7:2a:94:f0:3d:12:e5:00: ae:82:77:6b:3f:18:dc:45:38:d0:26:4a:4a:a6:9b: 93:8a:72:d9:09:a2:7d:95:ab:34:11:e5:46:f5:b9: ab:b5:e5:54:f8:15:33:69:1c:d9:12:e5:30:5d:af: 59:93:f3:38:11:7e:c4:d7:74:0a:24:44:a2:26:cf: e0:b1:d4:9d:45:ba:84:d9:00:1a:78:e3:4a:78:23: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3F:C3:69:68:1E:58:9F:B2:3D:AC:C7:D6:9D:B7:A5:7A:44:05:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.224.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:23:de:0d:30:39:9e:6c:70:61:0a:47:e1:a9:a2:44:b5:39: 5f:98:4c:f0:b1:72:3d:fd:bf:32:51:07:30:9b:28:b6:4f:3a: 86:eb:93:cd:09:f6:f2:90:2c:fd:14:f2:07:67:0b:a7:33:dd: 06:b1:02:94:22:1d:57:e1:ab:db:1d:16:da:30:0a:3c:81:20: cb:37:e1:b8:67:17:12:c5:e4:d2:a9:ce:ab:d6:9a:16:e1:8d: a8:ac:62:6d:37:bb:6f:88:e1:4f:c4:dd:c5:73:d4:84:f6:fb: 7d:da:76:27:8d:f9:e6:35:56:0e:0b:63:ea:d0:fe:6e:d9:f7: 82:ca:77:c8:05:3a:3b:7b:5e:5c:10:5d:58:8b:06:ce:8f:d1: 02:62:8b:c7:f5:a3:03:f3:c7:a6:da:95:22:b4:58:2d:77:d4: 09:b2:6d:62:50:ad:33:df:1d:ae:d9:5b:78:b2:82:d9:32:f5: b9:f0:85:25:45:6c:b2:fe:51:89:bd:cf:c7:04:8e:36:f7:c2: ce:d1:7d:a1:5f:7a:4c:3e:c7:71:3c:ce:8f:85:d5:a8:b2:8f: 96:16:2a:6c:9e:3a:06:de:ab:f1:18:78:32:69:43:3c:ab:a3: c4:0d:ce:65:12:54:2c:fb:60:83:e3:68:d1:15:ce:7f:64:4f: d0:bc:72:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO2alsgT68cKfXtFq2ZAy+KYlgiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA3MDA0MTQ3WhcNMjUwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjdlNzA3ZjMxY2E5NTcxNGNlMTM0YzljM2FkNThlYmRh ZmIwNjY2YjU2MDA5Yzk2MTdiZGJlMDg4MDA5NzI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXB5Mf0rM8hZaDuwb5IHiXuT3EDBjYWSFozEw2Mw6B1rU4 xmLpEYISnt5MRIRENIUFlgtjX5wU3ZcmXAluMkOS8GgXeL7zlVWF46EWLjWzuhUq r5V6EkAN76FdOiQZ3vIxeBj2q9gv9R4QrUX2FYPrAxztGaGdH0DMZb7jo3oi5WfZ +ae1nRN3nk3PC83jTCm3fLPOzq5pq4X9sRct/dCOp0De7KqUkxZpc8fXKpTwPRLl AK6Cd2s/GNxFONAmSkqmm5OKctkJon2VqzQR5Ub1uau15VT4FTNpHNkS5TBdr1mT 8zgRfsTXdAokRKImz+Cx1J1FuoTZABp440p4I/3nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7z/DaWgeWJ+yPazH1p23pXpEBY0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3MWE4YjU0LWRkZTctNGRkNC04ZTYxLWQ5ODdjMjg3MDE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFAOAwDQYJKoZIhvcNAQELBQADggEBAEoj3g0wOZ5scGEKR+GpokS1OV+Y TPCxcj39vzJRBzCbKLZPOobrk80J9vKQLP0U8gdnC6cz3QaxApQiHVfhq9sdFtow CjyBIMs34bhnFxLF5NKpzqvWmhbhjaisYm03u2+I4U/E3cVz1IT2+33adieN+eY1 Vg4LY+rQ/m7Z94LKd8gFOjt7XlwQXViLBs6P0QJii8f1owPzx6balSK0WC131Amy bWJQrTPfHa7ZW3iygtky9bnwhSVFbLL+UYm9z8cEjjb3ws7RfaFfekw+x3E8zo+F 1aiyj5YWKmyeOgbeq/EYeDJpQzyro8QNzmUSVCz7YIPjaNEVzn9kT9C8cp0= -----END CERTIFICATE-----Generated at Tue Jun 17 06:22:47 2025 by rpki-client