$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa File: 3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa (raw, json) Hash identifier: WzwqJHEkiSf5HgYu1Fb8GXnHtSEM7liO8cnbgo73to0= Subject key identifier: 64:3F:EA:3A:6B:0B:CC:E5:0D:05:3E:94:FE:F0:54:F8:10:CF:7E:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FF62D877DF30F6CB6A0DB6AC4C8B7258D3ECCCB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa Signing time: Sat 14 Jun 2025 00:30:33 +0000 ROA not before: Sat 14 Jun 2025 00:30:33 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f6:2d:87:7d:f3:0f:6c:b6:a0:db:6a:c4:c8:b7:25:8d:3e:cc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:30:33 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=155526b474950523b979377d34f3cd8f7fc1ff599cf20b677ec6725e55510d0a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:5b:b5:16:9d:d6:26:e1:e9:b8:c6:0e:7e: d0:2d:f3:69:35:6b:f0:3e:4b:f3:0f:66:b6:fa:fd: 8e:e6:23:4a:80:aa:ff:09:b2:59:9a:fd:ee:8b:7a: 8f:7f:ca:9c:2f:3f:a6:49:04:4a:27:f9:be:f3:e0: 13:c3:8a:08:70:84:b0:56:54:8f:9d:4e:12:15:51: b6:f3:56:2f:f7:c4:f7:fc:4a:fb:2c:4a:41:7b:5f: 41:8b:00:74:99:d5:5d:0b:e9:fc:a9:c7:95:14:e4: 96:aa:d6:03:54:73:f0:1d:94:65:15:99:7d:fc:82: ea:f7:b2:c5:58:44:f1:04:c0:ff:cd:fd:d7:06:bd: c5:df:e4:89:27:61:d8:c1:5c:8b:22:81:96:69:54: e6:72:30:42:97:41:de:63:1b:68:13:7b:5a:ce:67: 6a:d3:fb:ec:98:7f:53:11:70:43:f9:0e:a5:70:ff: a4:34:83:eb:58:f4:d7:1e:bb:f1:cc:b1:dd:32:b9: dd:5b:aa:40:7a:63:cb:e8:e3:b5:e8:48:97:09:ec: 87:a2:ad:9d:d3:65:96:1e:a5:f5:a5:9e:c6:58:22: bf:22:2f:f3:0c:68:56:89:83:82:d7:93:5b:79:b5: 37:2f:ca:aa:73:ff:52:4c:ec:db:8b:06:f9:c2:4e: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:EA:3A:6B:0B:CC:E5:0D:05:3E:94:FE:F0:54:F8:10:CF:7E:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.0.0/22 Signature Algorithm: sha256WithRSAEncryption 01:46:bf:2d:4e:87:6a:75:35:23:30:65:e5:28:f4:4e:1d:9b: aa:a2:d0:a5:a7:92:cb:b6:95:64:b6:67:d2:41:6e:9f:65:99: 49:6e:e4:01:9f:21:57:bf:53:a3:0c:05:78:e0:fc:97:0e:51: 3d:ed:6b:4d:46:13:a8:4e:9a:c5:01:2a:88:55:17:a1:fe:c0: 8a:1a:ce:d8:93:d2:0c:ea:c7:aa:0e:61:fc:c0:e6:cd:6b:56: 1e:3e:ca:0c:fa:2e:30:6e:57:1f:93:a1:c4:ce:aa:7f:bc:b3: 49:42:b4:93:d1:ff:54:96:75:c8:ff:ee:a8:60:d3:42:42:1f: a5:cc:28:14:2d:2d:87:0b:f6:9d:86:32:70:bc:6f:f1:fc:68: 21:b1:49:a0:9e:16:e0:ad:0b:ef:86:be:fb:d8:1a:96:c2:89: 94:b3:68:fc:0f:9e:5f:88:7d:a0:3e:26:79:04:97:2c:81:b1: 71:85:ed:73:5a:fc:96:eb:b2:4e:91:f6:2c:0c:e7:48:ad:cd: 56:40:58:8b:5b:79:ff:8e:62:a1:54:44:7d:2a:44:d2:22:dd: 1c:01:ae:df:17:fa:20:2c:3e:ad:4b:62:7f:b8:04:85:58:31: 08:6e:7f:4e:93:22:53:43:2c:2a:01:5a:34:ae:8a:09:84:69: 60:1b:9d:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP/Yth33zD2y2oNtqxMi3JY0+zMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMDMzWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTU1MjZiNDc0OTUwNTIzYjk3OTM3N2QzNGYzY2Q4Zjdm YzFmZjU5OWNmMjBiNjc3ZWM2NzI1ZTU1NTEwZDBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0WVu1Fp3WJuHpuMYOftAt82k1a/A+S/MPZrb6/Y7mI0qA qv8Jslma/e6Leo9/ypwvP6ZJBEon+b7z4BPDighwhLBWVI+dThIVUbbzVi/3xPf8 SvssSkF7X0GLAHSZ1V0L6fypx5UU5Jaq1gNUc/AdlGUVmX38gur3ssVYRPEEwP/N /dcGvcXf5IknYdjBXIsigZZpVOZyMEKXQd5jG2gTe1rOZ2rT++yYf1MRcEP5DqVw /6Q0g+tY9Nceu/HMsd0yud1bqkB6Y8vo47XoSJcJ7IeirZ3TZZYepfWlnsZYIr8i L/MMaFaJg4LXk1t5tTcvyqpz/1JM7NuLBvnCTub7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZD/qOmsLzOUNBT6U/vBU+BDPfr4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkZWZhOWUzLTJkM2YtNDdkOC05OWNkLTYzMWQxNWZhOTM5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/gAwDQYJKoZIhvcNAQELBQADggEBAAFGvy1Oh2p1NSMwZeUo9E4dm6qi 0KWnksu2lWS2Z9JBbp9lmUlu5AGfIVe/U6MMBXjg/JcOUT3ta01GE6hOmsUBKohV F6H+wIoaztiT0gzqx6oOYfzA5s1rVh4+ygz6LjBuVx+TocTOqn+8s0lCtJPR/1SW dcj/7qhg00JCH6XMKBQtLYcL9p2GMnC8b/H8aCGxSaCeFuCtC++GvvvYGpbCiZSz aPwPnl+IfaA+JnkElyyBsXGF7XNa/Jbrsk6R9iwM50itzVZAWItbef+OYqFURH0q RNIi3RwBrt8X+iAsPq1LYn+4BIVYMQhuf06TIlNDLCoBWjSuigmEaWAbnZE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:49:50 2025 by rpki-client