$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa File: 45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa (raw, json) Hash identifier: vM/UXM3w6mKOYPZZoWiKse/BCNloavdmEtVKfcMIcJ0= Subject key identifier: B5:3C:55:F4:5D:DC:88:A2:DB:06:B7:82:03:BF:64:0C:15:08:58:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32B75F7C4F5D8AB410302CB961E66D8C53FDE959 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa Signing time: Sat 14 Jun 2025 00:30:25 +0000 ROA not before: Sat 14 Jun 2025 00:30:25 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b7:5f:7c:4f:5d:8a:b4:10:30:2c:b9:61:e6:6d:8c:53:fd:e9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:30:25 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=e1374e5609f93eb9adbcd8680ecfbafde556d84470ab2ff73daddc4efe8f150a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:72:1f:07:06:21:2d:0b:03:c0:16:a4:5c: 00:5e:3d:5a:91:42:ec:7b:86:2e:b4:48:46:ef:fc: ca:aa:c9:8a:d0:39:e9:ba:37:80:66:17:92:4b:06: ae:fb:6e:98:15:a6:14:b0:7d:cb:d9:b0:26:06:a4: 6e:e5:a0:89:91:eb:f8:2c:37:62:c5:ee:78:94:e6: f3:92:1d:e3:e8:32:9d:38:4f:dd:42:f6:78:d8:06: 00:46:e9:35:f8:6f:42:03:10:fa:41:82:4a:07:15: 70:2a:67:e7:fe:3b:8e:1c:b6:23:f4:00:08:11:a8: 4e:97:36:7d:ca:14:1d:3d:97:6e:a1:4d:8e:d0:cb: 12:f0:2c:e7:bb:55:c8:a0:a0:df:1b:ef:c0:1d:c8: 63:40:bd:83:db:39:5b:3a:cf:9c:87:09:f2:df:a0: 2a:68:fd:f9:64:37:6e:4c:1e:9b:d3:82:aa:51:a6: e2:c1:a6:fe:20:01:3d:5e:df:66:0c:be:36:9e:13: 36:81:0c:ef:b1:41:36:3f:ec:8c:82:71:41:52:dd: f8:c3:7b:fc:3c:22:a4:a3:81:52:eb:9e:bb:07:f4: c8:7d:a5:c7:43:07:f2:e0:c1:9f:46:03:80:c5:5c: e4:8e:bd:6e:52:36:36:e9:fc:b6:af:bb:4f:3b:4c: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3C:55:F4:5D:DC:88:A2:DB:06:B7:82:03:BF:64:0C:15:08:58:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8c:e5:ad:1a:1a:63:a4:fa:e1:9e:ca:6f:7e:82:e3:eb:1a:9c: af:bd:7b:54:a8:81:79:2f:f4:f1:7e:96:39:06:8f:a9:99:fc: 3d:d0:ab:ff:43:d6:58:c3:0c:eb:2c:91:ed:90:bf:a0:a2:ae: eb:4b:aa:cb:ad:68:10:9d:f4:96:f3:7f:65:69:7a:82:6f:33: c6:93:2b:3d:b1:d2:9a:5d:3d:b8:99:64:d3:8d:8c:e2:62:9a: c3:c9:77:1b:aa:dd:3b:0e:92:e5:da:96:6e:72:3e:d7:c1:1b: 23:89:08:a0:05:82:d0:bf:2a:ed:01:0a:3b:a4:e2:81:56:be: a8:4d:66:76:b4:00:fd:2f:7f:f1:4a:85:b1:e8:11:ff:cf:9f: 5f:0b:e7:7d:54:08:e9:bb:1c:8f:30:f8:45:5d:6a:d0:81:77: dc:99:6e:e8:c6:eb:ec:57:9d:4c:49:14:73:51:86:44:8d:35: 27:8a:b6:57:4a:c6:5a:ae:8a:75:a4:34:c0:86:6a:9a:63:93: 6c:56:72:08:00:72:a8:7c:96:17:f7:dc:82:f1:ca:26:74:1a: 7f:79:67:3c:b8:eb:9b:2b:e8:39:d2:c0:f1:95:10:78:68:19: c4:8c:2b:84:4d:66:e3:85:5b:30:c8:47:50:29:9c:36:5c:ef: f8:08:23:2d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMrdffE9dirQQMCy5YeZtjFP96VkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMDI1WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTM3NGU1NjA5ZjkzZWI5YWRiY2Q4NjgwZWNmYmFmZGU1 NTZkODQ0NzBhYjJmZjczZGFkZGM0ZWZlOGYxNTBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5LHIfBwYhLQsDwBakXABePVqRQux7hi60SEbv/MqqyYrQ Oem6N4BmF5JLBq77bpgVphSwfcvZsCYGpG7loImR6/gsN2LF7niU5vOSHePoMp04 T91C9njYBgBG6TX4b0IDEPpBgkoHFXAqZ+f+O44ctiP0AAgRqE6XNn3KFB09l26h TY7QyxLwLOe7VcigoN8b78AdyGNAvYPbOVs6z5yHCfLfoCpo/flkN25MHpvTgqpR puLBpv4gAT1e32YMvjaeEzaBDO+xQTY/7IyCcUFS3fjDe/w8IqSjgVLrnrsH9Mh9 pcdDB/LgwZ9GA4DFXOSOvW5SNjbp/Lavu087TCa1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtTxV9F3ciKLbBreCA79kDBUIWPIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1YTI5Y2I1LWVmMzYtNDliNi04ZDg0LWQ4N2ZiYjU0ZmQyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAXFDANBgkqhkiG9w0BAQsFAAOCAQEAjOWtGhpjpPrhnspvfoLj6xqcr717 VKiBeS/08X6WOQaPqZn8PdCr/0PWWMMM6yyR7ZC/oKKu60uqy61oEJ30lvN/ZWl6 gm8zxpMrPbHSml09uJlk042M4mKaw8l3G6rdOw6S5dqWbnI+18EbI4kIoAWC0L8q 7QEKO6TigVa+qE1mdrQA/S9/8UqFsegR/8+fXwvnfVQI6bscjzD4RV1q0IF33Jlu 6Mbr7FedTEkUc1GGRI01J4q2V0rGWq6KdaQ0wIZqmmOTbFZyCAByqHyWF/fcgvHK JnQaf3lnPLjrmyvoOdLA8ZUQeGgZxIwrhE1m44VbMMhHUCmcNlzv+AgjLQ== -----END CERTIFICATE-----Generated at Sun Jun 15 01:06:36 2025 by rpki-client