$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/347888cb-61ca-4405-8189-2c03a4e05bc6.roa File: 347888cb-61ca-4405-8189-2c03a4e05bc6.roa (raw, json) Hash identifier: pV9HBmOZLkrqSWmnuCn4m5CUnoMt/uB0LInv5jmdD68= Subject key identifier: 6A:C5:D0:CC:2F:61:87:82:E7:FB:9F:B1:96:C6:F0:98:3F:95:BC:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C8BF9EC2087E4235BCA2E35424AB04D4F656077 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/347888cb-61ca-4405-8189-2c03a4e05bc6.roa Signing time: Fri 30 May 2025 00:40:15 +0000 ROA not before: Fri 30 May 2025 00:40:15 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8b:f9:ec:20:87:e4:23:5b:ca:2e:35:42:4a:b0:4d:4f:65:60:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:40:15 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=f52bca06e5bf0dfd2f633944c377c6f66364ea08db0585e038487ab25b3c4234, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:e1:43:c7:a9:59:a2:42:67:3e:6e:bb:a6: 7a:f8:5d:09:00:11:91:56:65:2f:99:05:ce:df:76: 56:83:b1:07:ec:0b:6c:43:31:11:ad:80:97:66:fa: ec:ec:bf:64:0d:50:af:52:09:c4:0e:57:64:d8:4b: ea:37:0e:9a:46:96:bc:03:d3:02:1e:75:1c:e0:fd: d4:27:eb:d6:db:06:f0:af:b0:f7:80:77:b3:88:c9: 60:d2:4f:af:01:9f:2c:50:aa:2e:67:5a:37:49:9b: b8:81:fb:43:1a:bf:8a:98:8d:d8:ad:72:45:a3:ae: 2e:87:be:2f:3c:47:32:17:63:b9:dd:7b:e9:5a:90: a6:3f:e3:d6:bc:71:eb:70:23:ad:d4:20:e5:11:3a: 94:58:8d:96:b2:fc:7a:a0:3d:2e:c3:ee:7c:a9:13: dd:5a:3c:82:60:c3:68:64:23:e0:e2:1f:d7:b6:e9: eb:fd:2b:50:4c:c0:ed:a8:c9:97:20:eb:50:d4:62: a2:bd:c0:ec:9e:9c:79:34:8b:78:b2:82:46:21:fc: aa:6a:a8:d4:6f:cd:39:42:93:d0:e0:d3:c4:b0:f3: b7:79:b4:d8:1c:7b:b7:b9:b5:b5:05:79:e7:40:7b: 7c:64:84:fb:f2:08:51:2f:39:72:a2:5d:f3:42:a4: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C5:D0:CC:2F:61:87:82:E7:FB:9F:B1:96:C6:F0:98:3F:95:BC:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/347888cb-61ca-4405-8189-2c03a4e05bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.165.0/24 Signature Algorithm: sha256WithRSAEncryption 49:cb:3a:48:9c:5a:2e:7e:43:52:e3:a1:35:6a:f5:59:ee:1b: 0d:53:96:ff:06:3d:4c:3d:71:22:d2:80:34:7e:5f:54:4a:d3: d4:1b:12:b8:9e:c1:71:4a:b6:aa:2f:1f:1e:ec:4d:4f:bd:3d: 76:bb:73:d4:5e:43:a0:21:ef:4f:70:77:b1:db:ce:09:9a:33: d9:33:b9:39:81:85:13:7e:a7:5f:d9:07:cc:dd:3b:b9:1f:a0: 65:d2:a1:f5:e7:d6:55:7c:f3:14:ac:cf:7c:88:f7:e5:32:df: 12:b2:48:5c:0a:2d:16:e9:00:44:a1:79:ae:3d:5a:20:fb:36: 1a:1f:28:0f:76:92:cd:e0:55:92:57:a2:ed:08:59:92:9a:62: 62:dd:e9:7f:c7:81:6f:2a:b3:71:de:d5:07:85:1c:84:f7:92: a5:2e:86:a6:c8:58:e1:b9:6f:63:ea:db:e4:06:79:1c:2a:1e: 72:26:ec:2f:48:e6:36:bd:34:30:72:84:7c:69:b2:04:6e:1b: 11:df:a7:b7:16:06:8f:f3:1f:4f:22:29:8c:5e:6a:47:ab:80: 62:3f:ae:2a:79:00:fa:43:a4:2c:45:cc:0b:6f:3b:9a:86:19: 1f:f0:63:d0:5e:00:1b:ad:29:54:6b:c9:c5:e7:bc:0f:09:99: a1:df:70:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHIv57CCH5CNbyi41QkqwTU9lYHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDA0MDE1WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTJiY2EwNmU1YmYwZGZkMmY2MzM5NDRjMzc3YzZmNjYz NjRlYTA4ZGIwNTg1ZTAzODQ4N2FiMjViM2M0MjM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF8eFDx6lZokJnPm67pnr4XQkAEZFWZS+ZBc7fdlaDsQfs C2xDMRGtgJdm+uzsv2QNUK9SCcQOV2TYS+o3DppGlrwD0wIedRzg/dQn69bbBvCv sPeAd7OIyWDST68BnyxQqi5nWjdJm7iB+0Mav4qYjditckWjri6Hvi88RzIXY7nd e+lakKY/49a8cetwI63UIOUROpRYjZay/HqgPS7D7nypE91aPIJgw2hkI+DiH9e2 6ev9K1BMwO2oyZcg61DUYqK9wOyenHk0i3iygkYh/KpqqNRvzTlCk9Dg08Sw87d5 tNgce7e5tbUFeedAe3xkhPvyCFEvOXKiXfNCpANZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUasXQzC9hh4Ln+5+xlsbwmD+VvHMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0Nzg4OGNiLTYxY2EtNDQwNS04MTg5LTJjMDNhNGUwNWJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM36UwDQYJKoZIhvcNAQELBQADggEBAEnLOkicWi5+Q1LjoTVq9VnuGw1T lv8GPUw9cSLSgDR+X1RK09QbEriewXFKtqovHx7sTU+9PXa7c9ReQ6Ah709wd7Hb zgmaM9kzuTmBhRN+p1/ZB8zdO7kfoGXSofXn1lV88xSsz3yI9+Uy3xKySFwKLRbp AEShea49WiD7NhofKA92ks3gVZJXou0IWZKaYmLd6X/HgW8qs3He1QeFHIT3kqUu hqbIWOG5b2Pq2+QGeRwqHnIm7C9I5ja9NDByhHxpsgRuGxHfp7cWBo/zH08iKYxe akergGI/rip5APpDpCxFzAtvO5qGGR/wY9BeAButKVRrycXnvA8JmaHfcHU= -----END CERTIFICATE-----Generated at Sat Jun 14 07:15:51 2025 by rpki-client