$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa File: bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa (raw, json) Hash identifier: DxfCSne88b5U5GNcvdubvvNu9CWbc6olsoUMViH4V9c= Subject key identifier: 94:18:B0:FF:6A:77:ED:33:3D:C2:43:8B:72:77:83:EA:21:70:E4:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E56263A2CE38ED161FB4BD6DB55645370E9D4E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa Signing time: Tue 03 Jun 2025 00:21:37 +0000 ROA not before: Tue 03 Jun 2025 00:21:37 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:56:26:3a:2c:e3:8e:d1:61:fb:4b:d6:db:55:64:53:70:e9:d4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:21:37 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=bfa5746ac17f33062ea3be741c3cb0a465e459baed1eb3149328b2dcf708d502, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:1e:63:f3:92:a9:5b:12:8c:6f:a3:75:16: 77:6c:3a:2a:6f:0b:14:95:38:75:bc:56:17:af:5a: d9:05:12:00:28:5d:2b:0a:52:60:75:55:14:4a:c4: d3:28:90:f1:52:af:c6:a2:e7:eb:34:68:37:53:36: 3d:88:a1:20:3f:92:37:fe:4d:70:84:28:4b:25:d0: 87:fd:8e:91:28:51:17:d2:b8:f3:a6:18:26:9d:dd: df:69:9b:db:ff:08:39:e2:25:f8:89:b7:a4:20:f9: 93:a6:86:47:14:b0:6e:48:14:3f:3f:b5:0c:f8:88: cf:57:79:84:55:b6:ca:38:8a:a0:c1:a4:7f:92:17: ea:e1:f1:28:8b:d6:37:b3:a5:e5:39:e8:b9:0a:51: cd:b7:39:cb:87:4a:a8:ec:de:2a:fe:c7:27:6d:84: 81:ff:dd:a7:01:04:74:99:98:05:94:df:87:59:57: d0:75:ef:de:97:a4:b7:7d:c3:ae:f8:8a:8a:b9:4d: b7:b8:be:16:a3:a4:2f:b0:f4:29:ec:ef:d7:c1:23: 7c:dd:aa:70:f7:91:69:de:93:43:1d:a0:cc:e0:33: 04:a8:e1:d6:fe:a5:3b:92:05:7c:f4:cf:bd:71:74: ef:9b:d9:48:19:e4:0f:95:a1:79:64:48:61:60:08: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:B0:FF:6A:77:ED:33:3D:C2:43:8B:72:77:83:EA:21:70:E4:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6f:b5:cc:a3:43:87:6d:72:ba:9e:72:aa:b7:7e:93:92:ff:bd: d4:aa:26:40:18:ef:3c:0d:9b:72:f1:50:99:2d:86:9f:ea:c1: e4:23:d0:6f:9b:6f:50:b8:a6:04:07:89:68:03:79:f9:2a:9a: 2f:ea:cd:2b:9e:84:e6:55:d8:af:b8:36:4e:ff:39:96:eb:bb: e2:80:37:d3:3c:ff:b3:4c:c3:07:ea:f1:45:66:8a:1d:e2:e3: 57:78:64:cd:6b:21:4e:7d:21:2c:e3:a7:b1:68:08:ff:2e:e6: 68:83:43:6e:2c:bb:0f:a5:03:4d:de:5f:24:26:2c:79:9a:b7: 33:11:1d:85:53:1f:17:1c:6e:e2:ca:d9:8f:96:7d:fe:bc:7a: cd:dd:61:53:92:b8:b4:37:f8:8e:d4:ab:2d:c6:d6:d5:19:b4: 9a:ca:a7:62:0c:8f:94:e6:16:a8:bd:97:af:97:0f:a6:31:a0: d7:80:f0:bf:57:2c:64:b0:f7:a8:db:bd:c0:86:26:8a:85:f9: 4c:e9:5e:c6:23:78:02:e3:5d:3f:fb:65:12:31:6d:f0:db:4d: 96:fe:76:9a:1b:a9:1a:3e:fa:18:c8:1e:78:78:47:61:8d:a3: f9:7e:78:7c:ad:05:32:99:88:6f:a4:3b:ee:a7:2d:cd:ca:72: de:05:9f:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTlYmOizjjtFh+0vW21VkU3Dp1OgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAyMTM3WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmE1NzQ2YWMxN2YzMzA2MmVhM2JlNzQxYzNjYjBhNDY1 ZTQ1OWJhZWQxZWIzMTQ5MzI4YjJkY2Y3MDhkNTAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxBR5j85KpWxKMb6N1FndsOipvCxSVOHW8VhevWtkFEgAo XSsKUmB1VRRKxNMokPFSr8ai5+s0aDdTNj2IoSA/kjf+TXCEKEsl0If9jpEoURfS uPOmGCad3d9pm9v/CDniJfiJt6Qg+ZOmhkcUsG5IFD8/tQz4iM9XeYRVtso4iqDB pH+SF+rh8SiL1jezpeU56LkKUc23OcuHSqjs3ir+xydthIH/3acBBHSZmAWU34dZ V9B1796XpLd9w674ioq5Tbe4vhajpC+w9Cns79fBI3zdqnD3kWnek0MdoMzgMwSo 4db+pTuSBXz0z71xdO+b2UgZ5A+VoXlkSGFgCNgVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlBiw/2p37TM9wkOLcneD6iFw5GIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmOWQ4ZGQwLWU3YWEtNDY5OC1iZTM4LWFlY2Q4YmU1YWY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4SIAwDQYJKoZIhvcNAQELBQADggEBAG+1zKNDh21yup5yqrd+k5L/vdSq JkAY7zwNm3LxUJkthp/qweQj0G+bb1C4pgQHiWgDefkqmi/qzSuehOZV2K+4Nk7/ OZbru+KAN9M8/7NMwwfq8UVmih3i41d4ZM1rIU59ISzjp7FoCP8u5miDQ24suw+l A03eXyQmLHmatzMRHYVTHxccbuLK2Y+Wff68es3dYVOSuLQ3+I7Uqy3G1tUZtJrK p2IMj5TmFqi9l6+XD6YxoNeA8L9XLGSw96jbvcCGJoqF+UzpXsYjeALjXT/7ZRIx bfDbTZb+dpobqRo++hjIHnh4R2GNo/l+eHytBTKZiG+kO+6nLc3Kct4Fn/k= -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:32 2025 by rpki-client