$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3b8fad-9258-46d6-b69b-f0193aa2914e.roa File: 4a3b8fad-9258-46d6-b69b-f0193aa2914e.roa (raw, json) Hash identifier: AB7/Z4z7e5bEGGlZqdQBQ70VaqHDKBN7wjIdV5Q4jQo= Subject key identifier: C5:5A:0E:FD:CD:D3:1E:7A:97:6A:32:93:B5:90:A1:79:47:F3:6A:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17B8279DB2B5429C056B12BB58F8681C61500445 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3b8fad-9258-46d6-b69b-f0193aa2914e.roa Signing time: Wed 04 Jun 2025 00:00:21 +0000 ROA not before: Wed 04 Jun 2025 00:00:21 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 157.52.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b8:27:9d:b2:b5:42:9c:05:6b:12:bb:58:f8:68:1c:61:50:04:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:00:21 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=f69055f3971f1a06b035224c204283ef3c20782b67e3fe14c61d52df7604d82b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:49:f1:a3:e6:02:77:77:a5:23:55:3a:69:ab: b5:58:ec:91:c6:8c:76:74:db:27:0d:f7:84:42:df: ae:26:6d:a4:ba:d1:76:ea:1a:34:fa:00:e1:fc:6d: 24:11:64:18:d3:22:34:10:5b:b7:53:72:fa:7a:48: 2d:fd:8f:68:f1:23:ad:3e:38:40:af:46:96:bb:40: 39:5e:90:e6:9a:07:56:48:24:92:df:60:c5:87:3d: 33:f8:7e:51:b5:a7:52:1e:53:e8:19:ec:d4:f6:86: e9:aa:1d:1a:50:8b:9c:fd:b7:9e:e7:be:8d:27:8e: 86:24:64:09:0d:3d:08:94:81:39:af:7d:f8:b4:c1: 29:11:a3:57:89:98:6e:d1:fa:ff:bb:07:86:e5:40: 15:03:7a:39:a4:dc:69:75:d1:6f:85:24:68:0d:f0: b7:26:67:69:68:ab:1b:06:ea:33:40:f8:04:8a:67: f1:b6:34:c9:6b:64:94:79:b8:f7:8f:b1:f2:13:a3: 68:08:6e:43:42:e3:8d:16:80:1b:33:a4:88:b1:1d: f1:1a:b9:f6:e7:91:4f:e6:92:61:02:98:aa:a5:5a: 2a:31:c7:7c:58:71:6f:d2:65:cb:1e:72:46:aa:29: 9a:ba:14:13:8a:73:8f:c6:a0:38:8a:61:85:44:03: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:0E:FD:CD:D3:1E:7A:97:6A:32:93:B5:90:A1:79:47:F3:6A:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a3b8fad-9258-46d6-b69b-f0193aa2914e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.52.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:7a:dc:e3:78:0c:6b:13:72:8c:68:fb:c8:38:93:f9:e5:f5: b0:dc:de:b8:5c:b7:8a:6a:f9:d2:c2:f4:90:3b:bf:85:d8:9a: 90:08:7e:1f:4c:51:c9:40:a3:3d:61:7a:6f:1b:ac:a9:88:a3: de:b2:ba:74:fd:68:2f:4e:d5:9a:91:48:26:0b:39:11:c4:d8: b2:e0:4f:93:51:f7:7b:e7:7d:b8:33:4b:97:44:ef:2d:71:74: e3:da:1d:c7:1d:42:c8:8a:fa:07:59:eb:40:47:31:07:87:db: 86:cb:aa:5e:f8:2e:90:cc:f8:36:3d:98:68:51:ce:6b:4a:87: 48:49:fc:6c:49:56:9f:e9:ef:27:18:91:82:6d:a7:28:d5:7e: 32:f7:77:ed:ca:b2:51:d0:cc:74:e4:ef:51:ff:f4:f2:64:7a: af:39:8b:2d:63:1e:b2:a0:43:c6:ea:12:1a:2e:19:ca:b5:4e: 79:33:a2:2e:1f:ff:30:a0:5b:0c:cc:7c:6d:2d:3f:8d:21:49: 0d:64:cb:b8:9e:0b:cd:62:42:92:cd:12:b9:07:d3:b5:d7:5f: 34:30:da:d2:37:2f:eb:4a:ea:46:60:e1:a2:f7:b9:0f:1a:89: bf:0c:8f:af:5c:4e:4a:5c:c2:e0:b3:25:24:5a:3b:89:17:03: 12:c0:b2:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF7gnnbK1QpwFaxK7WPhoHGFQBEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAwMDIxWhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjkwNTVmMzk3MWYxYTA2YjAzNTIyNGMyMDQyODNlZjNj MjA3ODJiNjdlM2ZlMTRjNjFkNTJkZjc2MDRkODJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlSfGj5gJ3d6UjVTppq7VY7JHGjHZ02ycN94RC364mbaS6 0XbqGjT6AOH8bSQRZBjTIjQQW7dTcvp6SC39j2jxI60+OECvRpa7QDlekOaaB1ZI JJLfYMWHPTP4flG1p1IeU+gZ7NT2humqHRpQi5z9t57nvo0njoYkZAkNPQiUgTmv ffi0wSkRo1eJmG7R+v+7B4blQBUDejmk3Gl10W+FJGgN8LcmZ2loqxsG6jNA+ASK Z/G2NMlrZJR5uPePsfITo2gIbkNC440WgBszpIixHfEaufbnkU/mkmECmKqlWiox x3xYcW/SZcseckaqKZq6FBOKc4/GoDiKYYVEAyK3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxVoO/c3THnqXajKTtZCheUfzajowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhM2I4ZmFkLTkyNTgtNDZkNi1iNjliLWYwMTkzYWEyOTE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAedNIAwDQYJKoZIhvcNAQELBQADggEBAJ163ON4DGsTcoxo+8g4k/nl9bDc 3rhct4pq+dLC9JA7v4XYmpAIfh9MUclAoz1hem8brKmIo96yunT9aC9O1ZqRSCYL ORHE2LLgT5NR93vnfbgzS5dE7y1xdOPaHccdQsiK+gdZ60BHMQeH24bLql74LpDM +DY9mGhRzmtKh0hJ/GxJVp/p7ycYkYJtpyjVfjL3d+3KslHQzHTk71H/9PJkeq85 iy1jHrKgQ8bqEhouGcq1Tnkzoi4f/zCgWwzMfG0tP40hSQ1ky7ieC81iQpLNErkH 07XXXzQw2tI3L+tK6kZg4aL3uQ8aib8Mj69cTkpcwuCzJSRaO4kXAxLAsrI= -----END CERTIFICATE-----Generated at Tue Jun 17 19:42:11 2025 by rpki-client