$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa File: 25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa (raw, json) Hash identifier: Gdeok9TuFHUxPDDsESYcw6Rlbs4+IzgJiLbJ/G17FpY= Subject key identifier: A7:BB:F2:A0:28:93:32:97:77:28:09:F6:67:52:6E:16:33:53:AC:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6CD4B579223A37695725E7D1EC6641E1548D2AE8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa Signing time: Fri 25 Apr 2025 00:51:21 +0000 ROA not before: Fri 25 Apr 2025 00:51:21 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d4:b5:79:22:3a:37:69:57:25:e7:d1:ec:66:41:e1:54:8d:2a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:51:21 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=8af4ef8a6a1a0daa14cd155496ff1ff08b6b1be6d955127df3f0900cdd75d9bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:e6:6e:40:73:fe:f1:48:96:ca:e7:e0:e0: e2:c9:1d:fd:71:a3:38:00:2e:e3:10:4b:33:93:a7: 1d:11:42:6a:11:8b:86:1b:cf:f0:b4:2f:01:4d:1c: 66:dc:93:76:f8:15:38:9a:86:2d:45:b1:0e:1f:26: 02:96:08:03:64:61:e2:b9:98:71:94:7e:08:b0:c5: 53:d2:8c:6d:32:b8:67:16:fc:14:41:6b:b3:2f:58: 10:a5:63:88:da:aa:ec:f9:6b:f0:12:e4:2f:df:1b: 14:31:bb:0d:3d:1a:41:b4:de:89:6d:cf:56:aa:53: 7b:a3:53:ec:3d:78:67:4e:03:39:18:12:8e:a7:c9: a8:9c:9e:87:a9:2e:a8:ce:d4:36:d4:2b:fd:59:de: 44:1d:6d:dc:d7:fa:93:1e:44:6d:19:ec:63:66:a9: d2:03:4f:fb:ea:68:8a:c6:32:ac:c7:15:c1:e7:02: 52:4f:27:4d:e1:3c:f8:83:e2:1c:c3:7f:8e:eb:9e: 82:d6:6d:b0:20:75:81:bf:03:42:2d:aa:64:dd:4a: 27:7f:07:c4:2b:68:1d:3b:d4:87:6c:69:57:44:b1: ce:e0:0c:c9:7d:43:bd:15:8b:61:ae:6b:5e:fa:13: b4:b6:8e:f4:df:66:e6:71:38:d4:1b:3f:de:a7:1d: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BB:F2:A0:28:93:32:97:77:28:09:F6:67:52:6E:16:33:53:AC:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/25155f0e-306e-4adb-8e5e-8f1ee87796e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.68.0/24 Signature Algorithm: sha256WithRSAEncryption 72:41:67:b4:e3:6f:0a:30:4b:2b:21:ff:20:51:8d:8f:a5:c5: 01:36:15:f6:99:c5:ea:60:9f:f6:5f:d5:40:e8:a0:9b:4f:f0: 4a:47:eb:7f:2f:81:37:c7:c8:1b:ec:61:61:6e:83:24:14:d0: 92:54:e1:3b:f7:c0:e7:38:b8:ae:49:d9:85:74:63:de:5d:5d: f3:33:1b:c3:56:be:4a:95:5c:26:42:d7:4a:16:92:bd:20:29: a2:c4:a9:72:bd:67:19:56:ae:04:cc:25:f9:fd:59:77:29:64: aa:09:b8:06:c7:f2:44:e3:16:4c:f8:15:2d:81:c8:dc:93:14: 97:8f:a1:33:4a:69:c8:f4:c4:f7:d1:3f:de:da:b1:94:32:62: f8:17:30:cf:4b:d4:9f:e2:51:b9:3b:c2:49:5e:8c:a6:68:bb: 3f:e8:9d:fa:2f:23:a1:e8:6e:04:2f:03:8b:cc:30:b3:d9:99: 98:ff:aa:31:81:7c:70:6b:62:80:5f:a0:0f:57:d5:79:c1:40: 10:7d:66:04:1d:41:30:46:b1:b9:d7:16:90:28:53:13:e9:49: 90:07:78:fc:f9:59:dc:9a:68:87:01:cf:a4:da:2a:41:7c:7b: 68:88:52:21:1e:eb:b8:fc:f6:a3:44:fc:a6:f0:53:5e:93:8e: 21:0f:17:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbNS1eSI6N2lXJefR7GZB4VSNKugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDA1MTIxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWY0ZWY4YTZhMWEwZGFhMTRjZDE1NTQ5NmZmMWZmMDhi NmIxYmU2ZDk1NTEyN2RmM2YwOTAwY2RkNzVkOWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTPOZuQHP+8UiWyufg4OLJHf1xozgALuMQSzOTpx0RQmoR i4Ybz/C0LwFNHGbck3b4FTiahi1FsQ4fJgKWCANkYeK5mHGUfgiwxVPSjG0yuGcW /BRBa7MvWBClY4jaquz5a/AS5C/fGxQxuw09GkG03oltz1aqU3ujU+w9eGdOAzkY Eo6nyaicnoepLqjO1DbUK/1Z3kQdbdzX+pMeRG0Z7GNmqdIDT/vqaIrGMqzHFcHn AlJPJ03hPPiD4hzDf47rnoLWbbAgdYG/A0ItqmTdSid/B8QraB071IdsaVdEsc7g DMl9Q70Vi2Gua176E7S2jvTfZuZxONQbP96nHbd9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp7vyoCiTMpd3KAn2Z1JuFjNTrFcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MTU1ZjBlLTMwNmUtNGFkYi04ZTVlLThmMWVlODc3OTZlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GUQwDQYJKoZIhvcNAQELBQADggEBAHJBZ7TjbwowSysh/yBRjY+lxQE2 FfaZxepgn/Zf1UDooJtP8EpH638vgTfHyBvsYWFugyQU0JJU4Tv3wOc4uK5J2YV0 Y95dXfMzG8NWvkqVXCZC10oWkr0gKaLEqXK9ZxlWrgTMJfn9WXcpZKoJuAbH8kTj Fkz4FS2ByNyTFJePoTNKacj0xPfRP97asZQyYvgXMM9L1J/iUbk7wklejKZouz/o nfovI6HobgQvA4vMMLPZmZj/qjGBfHBrYoBfoA9X1XnBQBB9ZgQdQTBGsbnXFpAo UxPpSZAHePz5WdyaaIcBz6TaKkF8e2iIUiEe67j89qNE/KbwU16TjiEPF1k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:48 2025 by rpki-client