$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa File: 03dd229f-85c7-4158-82b5-da756c839c84.roa (raw, json) Hash identifier: BAZflHEfs36vFQeyBi6REpj1o5HvzfoO3KXa/1KpzW0= Subject key identifier: 17:AE:1E:66:CB:DC:AB:12:52:8F:C3:B3:57:C7:67:1E:83:4E:99:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 263EFD24ACA0E925D5292D53AE2F1D43E004CEE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa Signing time: Tue 17 Jun 2025 00:12:17 +0000 ROA not before: Tue 17 Jun 2025 00:12:17 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3e:fd:24:ac:a0:e9:25:d5:29:2d:53:ae:2f:1d:43:e0:04:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:12:17 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=cae1f06e3c520165200b911c2a8ccd38d9cdaa59ec92129616a75a02dc3eddda, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:2c:28:69:56:b5:26:9f:99:54:a2:22:a6: 62:27:56:62:47:d6:74:eb:53:ef:44:a2:ac:1a:92: 41:27:e2:f5:2e:87:c9:25:3b:ce:f3:78:ee:bb:fe: dd:a6:34:74:df:c8:c6:a1:d4:48:1b:ae:cc:01:54: 41:d1:87:1f:f6:09:80:8a:db:e7:c7:ea:b7:fb:6e: 79:03:bd:ef:0c:09:b8:5b:9d:bb:b2:87:aa:8a:18: 03:3e:53:91:01:c3:ec:b1:b4:aa:8b:3a:b9:c7:e5: 50:11:94:b1:2c:52:ca:a6:c2:28:0b:c1:70:29:99: 28:51:dc:5f:ba:53:2d:ec:43:18:ea:e2:35:df:60: cb:87:3e:65:b5:15:7d:82:56:ca:fd:4f:37:e4:a1: ba:cf:40:f7:86:27:fe:34:f8:92:e7:1d:56:54:31: c3:84:a5:1c:09:3a:ca:bd:25:70:f0:a6:92:80:74: d8:ea:e0:9e:66:5c:69:9b:61:cc:e5:40:74:95:b5: ab:00:fb:7d:bb:d9:72:6b:32:bc:54:11:5c:98:04: 94:34:e7:53:0e:2a:4d:8f:4e:6d:7b:76:50:13:77: ad:5f:cd:e3:6e:c6:55:8a:e7:bb:23:cd:9b:49:40: 8a:ac:e5:b8:ea:e3:b4:cf:92:66:e1:d9:7c:c1:62: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AE:1E:66:CB:DC:AB:12:52:8F:C3:B3:57:C7:67:1E:83:4E:99:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption c4:9f:4f:dc:3c:73:56:73:89:80:58:03:56:f3:a3:7f:d6:4c: 1b:3f:08:dc:9d:f8:12:17:f6:b5:2f:83:69:77:44:c9:f6:4f: d4:a8:08:d0:35:2d:de:d8:e7:bb:28:aa:d0:46:e9:5a:06:c3: 44:7a:8d:49:62:88:aa:02:f5:69:84:ea:37:5f:5b:3b:83:99: 39:cc:1b:8e:88:38:1e:ca:23:f8:01:f4:2c:78:e0:af:e3:fe: d7:ad:3c:3c:7c:5b:8d:4b:59:55:d2:62:af:c1:d2:fa:8c:97: 67:a6:71:55:15:be:ad:14:e0:de:38:f9:93:03:77:1b:7b:49: 1e:2d:8e:0a:93:94:02:38:53:6e:b2:b5:30:34:9b:55:c8:c5: e3:64:eb:cf:b8:4b:63:6f:cb:a6:7f:61:b2:92:27:70:51:74: a8:bc:fe:07:a8:39:59:e3:84:12:77:a4:09:f3:7f:85:ef:98: 38:6b:9d:4f:4f:60:64:b1:98:52:9a:26:9c:ae:a2:1c:86:0a: 3e:00:a9:96:f1:7b:9c:e5:50:5a:c2:14:95:67:68:02:d4:8b: bf:2c:67:ac:03:ce:fc:0a:4c:8f:38:9e:c6:1e:ae:93:50:b2: d3:6e:60:06:45:9b:ae:2f:4a:2e:19:a1:39:d3:71:6e:89:e6: 41:fd:94:c5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJj79JKyg6SXVKS1Tri8dQ+AEzuEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMjE3WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWUxZjA2ZTNjNTIwMTY1MjAwYjkxMWMyYThjY2QzOGQ5 Y2RhYTU5ZWM5MjEyOTYxNmE3NWEwMmRjM2VkZGRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeMSwoaVa1Jp+ZVKIipmInVmJH1nTrU+9EoqwakkEn4vUu h8klO87zeO67/t2mNHTfyMah1EgbrswBVEHRhx/2CYCK2+fH6rf7bnkDve8MCbhb nbuyh6qKGAM+U5EBw+yxtKqLOrnH5VARlLEsUsqmwigLwXApmShR3F+6Uy3sQxjq 4jXfYMuHPmW1FX2CVsr9TzfkobrPQPeGJ/40+JLnHVZUMcOEpRwJOsq9JXDwppKA dNjq4J5mXGmbYczlQHSVtasA+3272XJrMrxUEVyYBJQ051MOKk2PTm17dlATd61f zeNuxlWK57sjzZtJQIqs5bjq47TPkmbh2XzBYoQPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUF64eZsvcqxJSj8OzV8dnHoNOmbQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZGQyMjlmLTg1YzctNDE1OC04MmI1LWRhNzU2YzgzOWM4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+TANBgkqhkiG9w0BAQsFAAOCAQEAxJ9P3DxzVnOJgFgDVvOjf9ZMGz8I 3J34Ehf2tS+DaXdEyfZP1KgI0DUt3tjnuyiq0EbpWgbDRHqNSWKIqgL1aYTqN19b O4OZOcwbjog4Hsoj+AH0LHjgr+P+1608PHxbjUtZVdJir8HS+oyXZ6ZxVRW+rRTg 3jj5kwN3G3tJHi2OCpOUAjhTbrK1MDSbVcjF42Trz7hLY2/Lpn9hspIncFF0qLz+ B6g5WeOEEnekCfN/he+YOGudT09gZLGYUpomnK6iHIYKPgCplvF7nOVQWsIUlWdo AtSLvyxnrAPO/ApMjziexh6uk1Cy025gBkWbri9KLhmhOdNxbonmQf2UxQ== -----END CERTIFICATE-----Generated at Sun Jun 29 08:54:33 2025 by rpki-client