$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa File: f5549e53-ed77-4bbe-b75d-2559b91cb973.roa (raw, json) Hash identifier: RMkaNla8+oQKd4uXyYbNx3iqp+dmfy/95Dj2yBXCJbQ= Subject key identifier: 26:EA:F8:E9:6D:32:89:C0:71:47:D5:14:09:13:5A:7B:9B:C5:01:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B6862A58CDC4223ABF28DC854B9C7D79E8D2FC8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa Signing time: Fri 13 Jun 2025 00:51:27 +0000 ROA not before: Fri 13 Jun 2025 00:51:27 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:68:62:a5:8c:dc:42:23:ab:f2:8d:c8:54:b9:c7:d7:9e:8d:2f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:51:27 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=9f9001eaa6f1f62d125203f0ec5225634cc71497b48223a54fc473b1177e192d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:35:84:4f:ea:50:fc:a6:00:9b:92:a5:38: a6:0d:a0:73:b7:7f:ab:38:0d:e0:ef:96:16:43:90: 90:23:b5:90:69:75:94:6f:83:a3:4f:d6:1d:aa:08: ed:74:76:73:65:93:50:ba:32:91:02:c0:9b:45:8d: 99:7e:39:f3:1b:18:20:b0:66:07:c8:91:f4:f9:b6: bf:ef:9b:6b:ea:cb:66:13:e3:28:bc:cc:1d:5a:5f: 8e:61:8a:c4:2a:90:f5:ee:96:fe:06:11:bd:6b:22: 87:18:83:02:27:69:51:53:31:05:b9:7d:84:38:b2: 1f:34:e4:f2:cc:2b:03:9d:4b:3f:79:5e:66:2a:40: 0b:69:d6:04:00:2e:42:9d:7d:a5:3c:3c:3f:b7:6f: 72:ed:34:d5:b8:42:3f:44:b3:85:5d:98:9b:6d:f5: 29:d2:34:86:fb:84:83:7c:3c:52:14:7c:72:c6:26: 86:7a:77:3f:38:fb:ac:10:75:42:f7:02:e7:d9:d6: ef:b4:7b:2a:2d:61:3b:76:e0:e3:3f:57:f7:fa:20: 6b:38:6f:ce:ed:94:ba:80:f2:d6:29:13:5f:dd:25: 23:c6:82:82:25:0a:12:99:45:58:e6:fc:dc:cc:08: 23:b4:97:8c:17:5b:b5:50:ba:18:1c:ea:a7:b6:81: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:F8:E9:6D:32:89:C0:71:47:D5:14:09:13:5A:7B:9B:C5:01:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5549e53-ed77-4bbe-b75d-2559b91cb973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.240.0/20 Signature Algorithm: sha256WithRSAEncryption 31:54:db:30:4a:fc:30:02:88:3c:79:e0:ad:cc:eb:15:5b:58: da:36:af:4a:d7:49:df:30:bc:46:dc:56:18:8b:58:b9:b8:a6: 9b:27:a5:01:5b:62:08:0f:7a:38:f7:7e:1a:77:79:1a:45:1a: a4:05:de:de:66:0a:75:77:54:10:6a:ac:cb:8e:9d:49:84:1d: 83:0d:88:66:29:55:a6:e4:3b:94:89:06:b3:e5:84:86:27:ea: 30:49:ee:65:b3:7f:47:7d:34:a7:9b:17:9a:2a:14:8a:1f:dc: aa:3f:a0:41:bd:30:13:9e:77:5d:98:69:dc:a2:f7:06:13:6c: 37:0d:37:7d:00:14:b1:51:e8:4a:75:c4:41:18:f2:e7:f4:a1: d7:cc:c9:63:65:9a:c1:7c:3e:7d:9c:ce:19:8c:f5:48:30:40: 06:a1:f1:dc:57:ba:68:8e:aa:07:d7:ed:9b:20:b5:78:76:41: d9:45:27:75:53:97:e2:b0:35:b4:45:5e:9c:27:9d:ba:26:fb: 4a:49:5a:f7:ec:6a:be:0a:49:94:f3:7f:b6:44:e8:da:e8:2b: 16:55:49:f2:c0:96:44:95:7d:bf:ec:3b:df:d1:4b:b7:e3:27: 2e:ff:06:69:d5:3a:53:a7:68:39:5c:d7:f9:72:9b:eb:a5:02: c3:4c:d5:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa2hipYzcQiOr8o3IVLnH156NL8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA1MTI3WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjkwMDFlYWE2ZjFmNjJkMTI1MjAzZjBlYzUyMjU2MzRj YzcxNDk3YjQ4MjIzYTU0ZmM0NzNiMTE3N2UxOTJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI5jWET+pQ/KYAm5KlOKYNoHO3f6s4DeDvlhZDkJAjtZBp dZRvg6NP1h2qCO10dnNlk1C6MpECwJtFjZl+OfMbGCCwZgfIkfT5tr/vm2vqy2YT 4yi8zB1aX45hisQqkPXulv4GEb1rIocYgwInaVFTMQW5fYQ4sh805PLMKwOdSz95 XmYqQAtp1gQALkKdfaU8PD+3b3LtNNW4Qj9Es4VdmJtt9SnSNIb7hIN8PFIUfHLG JoZ6dz84+6wQdUL3AufZ1u+0eyotYTt24OM/V/f6IGs4b87tlLqA8tYpE1/dJSPG goIlChKZRVjm/NzMCCO0l4wXW7VQuhgc6qe2gcYpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJur46W0yicBxR9UUCRNae5vFAQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NTQ5ZTUzLWVkNzctNGJiZS1iNzVkLTI1NTliOTFjYjk3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATM7PAwDQYJKoZIhvcNAQELBQADggEBADFU2zBK/DACiDx54K3M6xVbWNo2 r0rXSd8wvEbcVhiLWLm4ppsnpQFbYggPejj3fhp3eRpFGqQF3t5mCnV3VBBqrMuO nUmEHYMNiGYpVabkO5SJBrPlhIYn6jBJ7mWzf0d9NKebF5oqFIof3Ko/oEG9MBOe d12Yadyi9wYTbDcNN30AFLFR6Ep1xEEY8uf0odfMyWNlmsF8Pn2czhmM9UgwQAah 8dxXumiOqgfX7ZsgtXh2QdlFJ3VTl+KwNbRFXpwnnbom+0pJWvfsar4KSZTzf7ZE 6NroKxZVSfLAlkSVfb/sO9/RS7fjJy7/BmnVOlOnaDlc1/lym+ulAsNM1bg= -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:57 2025 by rpki-client