$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa File: 732fe3d7-6476-4eae-a584-0a17e5012897.roa (raw, json) Hash identifier: uSIFztyE4z4qFodTxBi9NWvS9R08Nb1lGujgL6KAUbA= Subject key identifier: B9:1D:99:D2:91:C0:16:4C:1C:70:AC:40:CB:61:04:88:20:C8:DF:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 295B5AF8E24DF6D42DDECBB968CD57AFE4B1BE0D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa Signing time: Fri 30 May 2025 00:40:26 +0000 ROA not before: Fri 30 May 2025 00:40:26 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5b:5a:f8:e2:4d:f6:d4:2d:de:cb:b9:68:cd:57:af:e4:b1:be:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:40:26 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=f7dc0624fd8b6f3b8137eccec9f2d397267ef66dc81ba782ebee213d96b9e236, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:08:91:86:2e:c0:ce:81:79:a5:fb:cc:37: 23:49:dc:82:43:44:46:8e:1b:7f:17:80:70:bc:26: 9e:eb:ac:2c:88:4d:f3:67:47:78:98:e0:7e:df:6a: 89:85:0c:1b:96:ff:b7:0a:c2:c0:62:70:bb:aa:34: 6e:c9:d3:82:ed:84:90:4a:65:ae:8f:2a:dc:a4:75: 9d:ec:36:44:c1:ac:68:8b:7d:9d:e9:0b:8f:25:78: 36:2e:d4:5b:91:be:18:1b:44:f1:02:a7:c3:6a:60: 04:9c:61:3d:cc:4d:91:13:5c:25:f7:d8:e7:ad:cc: ce:82:70:34:47:8d:90:84:46:0f:da:a7:20:93:8e: 67:8a:e9:19:d7:99:b9:05:33:33:5a:23:09:8c:2f: 1a:41:25:01:c7:97:dd:2e:3a:04:fe:a8:43:49:2b: 81:41:a8:e5:7f:ec:d2:ca:08:4e:28:38:58:aa:84: 36:7d:2f:1c:ef:ec:20:a9:53:ae:16:e4:e1:ab:6a: 31:3e:27:c8:f1:d1:a8:db:7b:df:da:12:fd:6c:84: ba:c2:77:70:2d:bd:26:10:86:1c:63:78:f6:ca:a4: a4:99:45:92:9d:6f:ae:a4:38:a2:e1:76:58:54:41: 3d:3d:3a:a5:b1:18:5b:0f:29:41:fc:59:04:8a:bf: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:99:D2:91:C0:16:4C:1C:70:AC:40:CB:61:04:88:20:C8:DF:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/732fe3d7-6476-4eae-a584-0a17e5012897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.96.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:56:4e:9e:26:f1:d2:43:f2:e4:92:a5:64:38:ba:2c:ef:a5: 2d:4c:a0:33:fc:e3:e6:36:d8:ac:df:b2:5a:62:95:cc:55:62: c0:1e:cc:02:63:c1:64:ac:2f:83:23:c5:1a:b1:b0:ae:a8:4f: 2d:4a:fc:fe:39:46:c9:c8:52:21:f0:40:29:d0:d9:62:75:72: dd:0c:9c:6f:90:ae:45:20:be:2d:3f:37:7f:56:fb:95:e4:09: 30:dd:8c:ee:e2:b2:c7:6d:eb:28:5e:ba:b2:6c:bf:b5:d5:16: 31:d1:21:77:ee:2b:6e:c6:f5:b6:d6:b5:84:ba:63:0f:d2:d1: e0:1a:71:ed:8d:e4:3d:62:ce:f8:5b:d9:9f:43:c9:6e:88:da: f0:c7:36:cb:ce:26:3e:0e:d6:e8:09:63:fa:e3:9a:83:66:bf: a2:37:d6:43:d5:7d:70:d1:a5:cf:9a:14:92:00:7f:e3:ad:b0: 63:7d:4c:16:54:f4:7e:f8:23:69:43:65:ff:b4:5c:71:f0:aa: 6a:28:6a:9e:8e:ef:93:6f:30:86:8f:bc:ae:80:32:c9:ef:f8: 42:07:9d:b4:5c:42:d2:93:58:d3:76:88:4b:e9:0e:48:7c:c1: 84:d1:4f:14:b3:ea:a5:47:0c:85:2c:61:2b:cc:f9:b8:ea:90: e2:9d:e2:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKVta+OJN9tQt3su5aM1Xr+Sxvg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDA0MDI2WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2RjMDYyNGZkOGI2ZjNiODEzN2VjY2VjOWYyZDM5NzI2 N2VmNjZkYzgxYmE3ODJlYmVlMjEzZDk2YjllMjM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4QQiRhi7AzoF5pfvMNyNJ3IJDREaOG38XgHC8Jp7rrCyI TfNnR3iY4H7faomFDBuW/7cKwsBicLuqNG7J04LthJBKZa6PKtykdZ3sNkTBrGiL fZ3pC48leDYu1FuRvhgbRPECp8NqYAScYT3MTZETXCX32OetzM6CcDRHjZCERg/a pyCTjmeK6RnXmbkFMzNaIwmMLxpBJQHHl90uOgT+qENJK4FBqOV/7NLKCE4oOFiq hDZ9Lxzv7CCpU64W5OGrajE+J8jx0ajbe9/aEv1shLrCd3AtvSYQhhxjePbKpKSZ RZKdb66kOKLhdlhUQT09OqWxGFsPKUH8WQSKvyb7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuR2Z0pHAFkwccKxAy2EEiCDI33owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczMmZlM2Q3LTY0NzYtNGVhZS1hNTg0LTBhMTdlNTAxMjg5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgAGAwDQYJKoZIhvcNAQELBQADggEBAI1WTp4m8dJD8uSSpWQ4uizvpS1M oDP84+Y22KzfslpilcxVYsAezAJjwWSsL4MjxRqxsK6oTy1K/P45RsnIUiHwQCnQ 2WJ1ct0MnG+QrkUgvi0/N39W+5XkCTDdjO7issdt6yheurJsv7XVFjHRIXfuK27G 9bbWtYS6Yw/S0eAace2N5D1izvhb2Z9DyW6I2vDHNsvOJj4O1ugJY/rjmoNmv6I3 1kPVfXDRpc+aFJIAf+OtsGN9TBZU9H74I2lDZf+0XHHwqmooap6O75NvMIaPvK6A Msnv+EIHnbRcQtKTWNN2iEvpDkh8wYTRTxSz6qVHDIUsYSvM+bjqkOKd4qY= -----END CERTIFICATE-----Generated at Thu Jun 19 03:04:28 2025 by rpki-client