$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa File: 6ba4f922-5b17-4233-add8-fdd64b141cce.roa (raw, json) Hash identifier: CB0sJr+kEgJHbkQl2/FPHek2C+NcFp+8sIIvwP2ZCsQ= Subject key identifier: 16:AC:D6:59:B7:2A:B2:BA:82:C9:B6:67:33:14:B2:A3:E1:89:48:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 203A1DEB8CB5D50F04F30D1897C9C48BCD2ED86B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa Signing time: Wed 11 Jun 2025 00:10:53 +0000 ROA not before: Wed 11 Jun 2025 00:10:53 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.21.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3a:1d:eb:8c:b5:d5:0f:04:f3:0d:18:97:c9:c4:8b:cd:2e:d8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:10:53 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=8ceb10b1c688f4cd9d19a8ef31b0cd404a30dce9d9b937872355c0b7c144559b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:8f:6b:c2:4a:3b:93:60:54:6a:3d:54:21: 45:21:89:10:67:95:13:17:be:bf:33:03:4f:d2:f9: aa:20:4b:3b:91:07:45:0c:60:83:ad:9f:9b:46:0c: fe:89:6b:83:4d:07:89:ad:f3:8d:5f:22:b8:39:48: c9:f2:ce:f8:65:50:e5:da:79:a7:bc:45:4c:15:f7: 82:eb:f1:5e:35:0f:c2:ac:13:51:66:97:40:6c:b3: 62:5d:e6:e7:b4:39:a0:33:39:43:f9:a5:43:1e:15: da:64:52:89:4f:95:87:09:43:89:23:80:65:4f:31: 4b:3e:54:b2:e8:9d:27:d8:32:52:3d:3b:4e:25:f0: b9:1e:d8:12:65:a3:f9:5f:33:26:85:2e:fd:ab:bf: 42:50:81:13:0d:4d:90:47:5e:71:97:31:b8:b0:88: 48:76:9e:21:13:cf:db:e5:42:25:c9:c6:f6:5f:80: 3f:1d:4d:12:19:93:20:72:0b:61:b0:75:a2:43:82: 0e:f8:79:9b:cf:c3:68:0f:81:6a:f1:92:1c:31:8a: f0:c1:b4:9c:f0:e8:62:76:d9:bb:d4:4a:86:4b:7d: 01:6d:19:e3:2c:fe:05:62:13:30:f1:e3:b1:ad:e2: 16:36:b8:9f:f7:02:71:e2:47:53:f3:29:06:96:0a: 61:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:D6:59:B7:2A:B2:BA:82:C9:B6:67:33:14:B2:A3:E1:89:48:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba4f922-5b17-4233-add8-fdd64b141cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.21.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5c:72:98:fc:b5:21:93:52:9a:ba:44:36:20:43:63:5a:7f:4b: 81:66:d5:00:70:8f:98:d9:78:68:f9:7d:7a:1a:25:fd:f3:fd: c8:2c:d9:e6:ea:93:f3:5e:4c:e1:bc:1e:75:aa:7b:85:2f:3f: 31:bc:fe:b6:5c:32:e5:42:c7:ed:96:15:81:5a:f3:89:2d:3c: df:1a:10:49:ca:22:b6:5d:fe:af:71:3e:1b:13:1b:83:93:34: b0:5f:0b:79:a0:47:87:71:82:66:72:e5:45:f3:03:6d:07:bb: d8:5f:70:07:18:a6:b1:33:6d:ed:da:83:7b:50:0a:14:42:ef: 16:d8:e6:4e:38:88:ff:a0:d9:0d:9d:c8:13:a1:6c:fa:75:d9: 08:48:ce:e2:d2:43:86:eb:1d:28:e6:60:a8:49:58:67:68:e0: c2:39:9b:52:10:a1:b6:c1:4a:1d:51:87:b6:51:9c:b2:ad:d7: fc:df:8b:c4:33:dd:64:f1:87:81:57:32:be:67:d2:21:a6:40: 03:2c:f4:8d:a2:69:95:1f:ee:ad:3f:1b:45:54:ec:bc:36:c8: 3e:7d:60:04:9e:0a:31:8c:e1:e1:f7:33:c1:90:a3:0f:fb:55: e0:31:5b:1a:19:0e:82:e5:1b:f6:8d:ad:d0:40:44:4f:d5:7e: 05:f6:e6:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIDod64y11Q8E8w0Yl8nEi80u2GswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAxMDUzWhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2ViMTBiMWM2ODhmNGNkOWQxOWE4ZWYzMWIwY2Q0MDRh MzBkY2U5ZDliOTM3ODcyMzU1YzBiN2MxNDQ1NTliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU649rwko7k2BUaj1UIUUhiRBnlRMXvr8zA0/S+aogSzuR B0UMYIOtn5tGDP6Ja4NNB4mt841fIrg5SMnyzvhlUOXaeae8RUwV94Lr8V41D8Ks E1Fml0Bss2Jd5ue0OaAzOUP5pUMeFdpkUolPlYcJQ4kjgGVPMUs+VLLonSfYMlI9 O04l8Lke2BJlo/lfMyaFLv2rv0JQgRMNTZBHXnGXMbiwiEh2niETz9vlQiXJxvZf gD8dTRIZkyByC2GwdaJDgg74eZvPw2gPgWrxkhwxivDBtJzw6GJ22bvUSoZLfQFt GeMs/gViEzDx47Gt4hY2uJ/3AnHiR1PzKQaWCmHRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFqzWWbcqsrqCybZnMxSyo+GJSCQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiYTRmOTIyLTViMTctNDIzMy1hZGQ4LWZkZDY0YjE0MWNjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbCFYAwDQYJKoZIhvcNAQELBQADggEBAFxymPy1IZNSmrpENiBDY1p/S4Fm 1QBwj5jZeGj5fXoaJf3z/cgs2ebqk/NeTOG8HnWqe4UvPzG8/rZcMuVCx+2WFYFa 84ktPN8aEEnKIrZd/q9xPhsTG4OTNLBfC3mgR4dxgmZy5UXzA20Hu9hfcAcYprEz be3ag3tQChRC7xbY5k44iP+g2Q2dyBOhbPp12QhIzuLSQ4brHSjmYKhJWGdo4MI5 m1IQobbBSh1Rh7ZRnLKt1/zfi8Qz3WTxh4FXMr5n0iGmQAMs9I2iaZUf7q0/G0VU 7Lw2yD59YASeCjGM4eH3M8GQow/7VeAxWxoZDoLlG/aNrdBARE/VfgX25oQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:32:21 2025 by rpki-client