$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddfc757-7acf-4f35-9789-c0e414f4126c.roa File: fddfc757-7acf-4f35-9789-c0e414f4126c.roa (raw, json) Hash identifier: mDUwx+Yi0Wb3PaDkr6Oi2Yvn0yoYO9QCgwNn0XiFDoM= Subject key identifier: 60:E8:08:6F:0D:C0:27:60:72:62:3A:DA:37:9C:AE:2F:2C:0C:75:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50EDBCC4CBFEB23077CA70882FCBCBC763862BF0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddfc757-7acf-4f35-9789-c0e414f4126c.roa Signing time: Wed 28 May 2025 00:30:24 +0000 ROA not before: Wed 28 May 2025 00:30:24 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.247.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ed:bc:c4:cb:fe:b2:30:77:ca:70:88:2f:cb:cb:c7:63:86:2b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:30:24 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=cb732cfdff475c088deb598d06768953383cb8fd847362da4827eff59ee5e903, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:ef:81:33:58:95:bd:be:f2:3e:c0:88:b2: f1:81:9b:36:50:fb:33:26:96:ba:ab:a1:2a:6a:3a: d9:8d:c3:41:d3:e5:93:2a:79:87:bc:b2:cb:ad:e5: 0b:4e:97:84:b6:2e:76:3f:f1:10:4d:95:89:4d:40: 05:e3:66:57:a9:68:a9:09:58:34:8b:42:13:3e:3b: 10:90:a1:44:46:56:d1:62:7a:4f:81:41:d5:6f:90: e0:56:ab:73:7d:d2:98:46:c7:05:04:92:ab:51:0d: 92:af:6a:97:63:ae:13:eb:80:0d:27:b2:38:58:75: fe:b8:62:8d:de:c4:e4:cc:40:e6:23:de:cf:72:5e: 4f:fa:a0:af:51:8a:89:f2:92:36:f2:d0:6d:45:0c: 3e:90:c0:e3:c2:a2:27:07:79:76:52:f9:be:1c:8f: a6:ca:90:a3:54:fc:6a:67:86:59:0f:df:12:b0:2f: 1b:32:dd:58:1c:b7:ef:42:a3:18:ea:d7:de:ea:11: db:cd:60:55:3c:82:62:2e:82:10:58:a6:91:f5:81: da:1f:e0:8e:9b:5f:0d:5e:aa:dc:80:c4:77:4e:42: 1d:35:46:38:13:83:a4:fa:66:41:30:18:22:31:64: 28:45:52:7f:e3:9c:68:63:ff:65:64:3c:ee:04:60: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:08:6F:0D:C0:27:60:72:62:3A:DA:37:9C:AE:2F:2C:0C:75:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddfc757-7acf-4f35-9789-c0e414f4126c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.247.224.0/19 Signature Algorithm: sha256WithRSAEncryption 66:fb:ee:da:b0:59:4d:8e:96:30:d3:f5:3e:db:5d:6b:42:4e: 0b:1b:1d:32:fe:77:20:62:2b:05:09:7b:96:d5:48:4f:89:7f: a3:8e:bd:97:d1:39:ce:44:33:2e:e5:2f:40:42:5f:07:cc:19: 48:7d:c6:3a:8c:9c:b1:10:8b:f0:04:46:af:ea:27:05:7e:87: 58:94:08:6d:62:cf:7e:3b:49:da:d6:39:aa:84:c8:bb:de:1f: 8e:92:5e:0a:9a:5b:76:f5:82:ae:c0:5d:0d:d8:6e:a8:8b:c2: 72:06:6c:0b:ac:3a:f9:6c:24:ed:6b:2e:da:00:16:6d:93:c6: 2b:d3:40:19:ac:c3:56:98:cd:9f:1a:c9:c2:1d:92:a2:1f:84: ad:7b:82:f1:54:b4:f4:4b:b5:cf:34:e8:9c:a8:3e:b1:93:a0: 01:dd:74:b4:32:b8:be:99:89:1d:30:59:fd:11:f3:d2:26:55: e1:2a:ed:d6:71:74:d1:96:f8:6c:62:97:ba:45:2f:d3:f4:49: e8:fb:a3:40:b7:52:2c:10:8f:81:aa:65:52:fd:db:b7:65:e5: 1f:c6:70:f2:51:a9:b4:b2:0c:56:5c:11:0d:6b:8e:fe:93:6b: 6d:55:d9:3a:5c:61:ce:ad:7e:6f:34:73:ab:77:de:f3:2a:ab: 4f:8f:43:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUO28xMv+sjB3ynCIL8vLx2OGK/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAzMDI0WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjczMmNmZGZmNDc1YzA4OGRlYjU5OGQwNjc2ODk1MzM4 M2NiOGZkODQ3MzYyZGE0ODI3ZWZmNTllZTVlOTAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbGO+BM1iVvb7yPsCIsvGBmzZQ+zMmlrqroSpqOtmNw0HT 5ZMqeYe8ssut5QtOl4S2LnY/8RBNlYlNQAXjZlepaKkJWDSLQhM+OxCQoURGVtFi ek+BQdVvkOBWq3N90phGxwUEkqtRDZKvapdjrhPrgA0nsjhYdf64Yo3exOTMQOYj 3s9yXk/6oK9Rionykjby0G1FDD6QwOPCoicHeXZS+b4cj6bKkKNU/GpnhlkP3xKw Lxsy3Vgct+9Coxjq197qEdvNYFU8gmIughBYppH1gdof4I6bXw1eqtyAxHdOQh01 RjgTg6T6ZkEwGCIxZChFUn/jnGhj/2VkPO4EYKTjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYOgIbw3AJ2ByYjraN5yuLywMdYAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkZGZjNzU3LTdhY2YtNGYzNS05Nzg5LWMwZTQxNGY0MTI2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVA9+AwDQYJKoZIhvcNAQELBQADggEBAGb77tqwWU2OljDT9T7bXWtCTgsb HTL+dyBiKwUJe5bVSE+Jf6OOvZfROc5EMy7lL0BCXwfMGUh9xjqMnLEQi/AERq/q JwV+h1iUCG1iz347SdrWOaqEyLveH46SXgqaW3b1gq7AXQ3YbqiLwnIGbAusOvls JO1rLtoAFm2TxivTQBmsw1aYzZ8aycIdkqIfhK17gvFUtPRLtc806JyoPrGToAHd dLQyuL6ZiR0wWf0R89ImVeEq7dZxdNGW+Gxil7pFL9P0Sej7o0C3UiwQj4GqZVL9 27dl5R/GcPJRqbSyDFZcEQ1rjv6Ta21V2TpcYc6tfm80c6t33vMqq0+PQ5M= -----END CERTIFICATE-----Generated at Sat Jun 14 06:40:31 2025 by rpki-client