$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/537c046e-5a56-4195-932d-8cb70983c76c.roa File: 537c046e-5a56-4195-932d-8cb70983c76c.roa (raw, json) Hash identifier: Np06TX7bf5K2+p13o8iXb9l+nH6OyCVIzvhuPJIrahE= Subject key identifier: A5:EA:84:F2:05:C8:6D:BE:4C:D5:D1:40:20:77:FE:DF:D4:31:5B:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 671CAF183979162B504955E23736C7B004738899 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/537c046e-5a56-4195-932d-8cb70983c76c.roa Signing time: Sat 14 Jun 2025 00:30:31 +0000 ROA not before: Sat 14 Jun 2025 00:30:31 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1c:af:18:39:79:16:2b:50:49:55:e2:37:36:c7:b0:04:73:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:30:31 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=ba964b920f1fb8fb6bbf4506ab4f53284a93211d098b670afe39c7b69ac8d575, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:43:ac:b6:1c:ac:26:94:bb:b0:3c:b9:7b: 28:0c:d8:02:90:c7:d4:fa:50:29:81:a6:c1:10:8e: a3:f6:6d:5a:92:5c:81:fd:46:8d:ca:53:ea:07:55: 73:98:a7:4e:4b:0e:ac:26:98:69:4b:49:02:c7:f8: ef:15:07:cb:39:96:dc:79:84:c3:a8:2b:d4:bf:f4: 01:31:73:66:58:84:4e:89:e9:c4:2c:37:55:8a:ba: 8d:75:92:fd:b5:2d:22:78:ba:5b:2d:6b:82:21:16: a6:d3:fe:fa:bf:0b:61:20:6b:53:f9:4a:2f:8f:1e: 96:e7:9e:06:5e:34:f6:b3:f2:5d:91:67:e7:2e:ef: 46:f4:23:1a:9e:4f:f9:c0:92:73:e7:fb:4f:b9:f0: 9e:ea:bb:d8:77:27:3e:88:7e:e1:d0:d2:03:f1:7d: c6:24:66:a7:88:2f:9a:cd:60:48:03:96:0b:15:5f: 86:e1:c3:c2:27:89:34:b0:fd:de:ca:fb:9e:c1:a4: 99:7d:b5:51:15:7e:1a:96:66:03:06:c8:6b:ca:55: 06:3c:62:44:b7:f9:ef:1a:84:82:05:79:a8:e8:e1: a5:79:73:aa:c6:0d:28:1a:09:d4:c9:d1:04:fd:9b: a5:f8:e9:7a:d1:14:cf:91:07:9b:7e:8e:64:c5:48: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:84:F2:05:C8:6D:BE:4C:D5:D1:40:20:77:FE:DF:D4:31:5B:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/537c046e-5a56-4195-932d-8cb70983c76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.8.0/22 Signature Algorithm: sha256WithRSAEncryption 49:aa:8f:bf:67:05:ac:77:81:b3:3e:ba:39:9c:d8:c5:98:5c: 22:b0:b4:f0:aa:fc:b6:18:86:f5:a3:7c:04:30:bc:5c:eb:3c: 44:b4:fd:c7:c8:90:da:bf:f9:27:f0:77:04:f0:8d:ab:51:9c: 86:d7:5e:d0:4d:cb:ba:a0:da:1e:cf:3a:0a:cd:e1:ce:3d:f8: 8c:d5:50:99:d2:4c:87:43:6b:b3:ee:69:05:73:01:58:67:33: 37:a5:d8:bb:7b:6f:3f:a2:db:ec:24:21:5c:f9:10:17:ee:35: 85:fe:e8:2a:46:c2:6d:4e:fa:ff:f1:30:61:06:2e:ef:91:93: 24:01:54:f2:16:71:ca:68:c0:71:47:c2:f4:1a:52:da:02:e2: b4:85:79:ff:36:70:83:97:2b:94:df:12:ee:f1:a7:31:11:37: c8:88:8f:52:f9:56:be:d0:7f:50:7a:da:2a:cc:6e:5b:7c:b3: 9e:50:54:5f:68:46:a7:18:ed:d2:9c:65:00:05:cd:ce:56:cf: 98:f5:7c:27:62:a0:46:81:1e:04:21:34:e2:95:4c:a9:4d:3a: c6:48:af:4f:50:66:7e:91:f7:ea:d4:ea:3a:ea:34:1b:31:4e: 9c:66:c2:46:ef:af:f3:75:e7:2c:a6:11:ec:35:00:99:e3:48: 36:c2:be:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZxyvGDl5FitQSVXiNzbHsARziJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAzMDMxWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTk2NGI5MjBmMWZiOGZiNmJiZjQ1MDZhYjRmNTMyODRh OTMyMTFkMDk4YjY3MGFmZTM5YzdiNjlhYzhkNTc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfrUOsthysJpS7sDy5eygM2AKQx9T6UCmBpsEQjqP2bVqS XIH9Ro3KU+oHVXOYp05LDqwmmGlLSQLH+O8VB8s5ltx5hMOoK9S/9AExc2ZYhE6J 6cQsN1WKuo11kv21LSJ4ulsta4IhFqbT/vq/C2Ega1P5Si+PHpbnngZeNPaz8l2R Z+cu70b0IxqeT/nAknPn+0+58J7qu9h3Jz6IfuHQ0gPxfcYkZqeIL5rNYEgDlgsV X4bhw8IniTSw/d7K+57BpJl9tVEVfhqWZgMGyGvKVQY8YkS3+e8ahIIFeajo4aV5 c6rGDSgaCdTJ0QT9m6X46XrRFM+RB5t+jmTFSMYZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpeqE8gXIbb5M1dFAIHf+39QxW5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzN2MwNDZlLTVhNTYtNDE5NS05MzJkLThjYjcwOTgzYzc2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/ggwDQYJKoZIhvcNAQELBQADggEBAEmqj79nBax3gbM+ujmc2MWYXCKw tPCq/LYYhvWjfAQwvFzrPES0/cfIkNq/+SfwdwTwjatRnIbXXtBNy7qg2h7POgrN 4c49+IzVUJnSTIdDa7PuaQVzAVhnMzel2Lt7bz+i2+wkIVz5EBfuNYX+6CpGwm1O +v/xMGEGLu+RkyQBVPIWccpowHFHwvQaUtoC4rSFef82cIOXK5TfEu7xpzERN8iI j1L5Vr7Qf1B62irMblt8s55QVF9oRqcY7dKcZQAFzc5Wz5j1fCdioEaBHgQhNOKV TKlNOsZIr09QZn6R9+rU6jrqNBsxTpxmwkbvr/N15yymEew1AJnjSDbCvlI= -----END CERTIFICATE-----Generated at Sat Jun 14 19:13:49 2025 by rpki-client