$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa File: 03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa (raw, json) Hash identifier: HPEDVH9SfaGDFNUCjW4v5AEUyLKADhrUEcqhe5XUPoY= Subject key identifier: D1:46:19:A3:48:8B:E9:4E:F2:5A:C4:20:02:7A:3D:28:F4:64:D1:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0688C3B45716BC5A842B62C7257B0A7E69A71509 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa Signing time: Sat 21 Jun 2025 00:10:17 +0000 ROA not before: Sat 21 Jun 2025 00:10:17 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:88:c3:b4:57:16:bc:5a:84:2b:62:c7:25:7b:0a:7e:69:a7:15:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:10:17 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=622c5aed5fab36e6866e121b0bbb695987852567db222c928e412a0e0d454e1f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:da:bf:a8:b0:92:54:c3:9e:d5:ab:d6:f2: 08:b3:5f:74:a9:3d:5e:a5:5f:af:c9:b4:cc:0b:9d: 5f:b8:27:f0:d4:d5:5b:cc:ec:bf:46:f8:74:dd:d6: c0:1c:75:97:44:57:d2:7c:af:7f:72:5f:0a:72:7d: da:d6:99:e1:58:b5:60:fe:c5:2b:4d:15:50:57:4d: c2:d6:aa:82:21:ac:0f:82:dc:35:3d:70:31:db:75: 03:61:84:26:e8:cc:9a:59:d0:da:84:f9:5f:62:33: 12:e7:0d:b4:59:20:08:4d:ba:38:23:cc:37:a3:40: d1:aa:d4:22:89:f3:50:09:8b:e5:d2:4a:7d:c5:76: 3e:a9:ea:29:ed:eb:1f:43:3d:25:f1:6d:b7:04:49: 6c:95:21:09:fe:13:9c:5b:f2:d7:23:c0:c5:46:e3: de:10:6e:03:bc:1e:7f:c7:27:a6:f7:44:f2:2f:35: 32:6e:2f:2b:27:4d:51:63:62:7f:2d:c8:d2:f4:03: 9f:95:5f:c3:73:35:7d:9d:9c:2c:b0:d9:6c:80:9e: 5e:75:2d:14:2d:3f:4f:c1:30:40:00:41:56:e6:dc: 03:12:61:0f:d3:52:51:5d:e8:8b:49:36:32:bb:58: 23:4f:a4:f0:a2:29:28:54:65:00:b4:49:73:a0:d7: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:46:19:A3:48:8B:E9:4E:F2:5A:C4:20:02:7A:3D:28:F4:64:D1:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f274e7-21f5-4aef-abd3-5f9f8050b35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:aa:d2:a6:66:74:1c:9b:f5:55:12:ef:92:06:ed:9a:65:30: 65:ea:43:d0:ce:0a:2e:4c:1e:e7:0a:22:6e:45:e6:9c:36:17: 6b:71:6c:6c:14:e8:14:01:c4:ca:31:04:99:e4:af:e8:8f:2c: f4:eb:76:72:d3:f8:72:8f:b7:fe:02:f6:c8:71:b2:e8:ca:c2: 8a:31:38:95:7a:df:78:95:aa:75:38:24:43:76:8f:d6:86:9e: b0:dd:2c:7f:22:93:34:21:53:6f:4b:fc:94:a6:4a:79:04:12: bf:df:e3:6f:d7:c0:7e:37:38:76:af:50:d7:91:d6:4f:61:32: 8c:04:9c:27:56:ad:80:70:15:c9:99:be:75:43:2d:59:f5:55: b2:32:19:57:10:c8:f6:57:ac:6b:a4:a7:15:fa:5f:9f:93:ca: a4:37:7a:ba:a8:9b:b1:9d:d0:5c:cb:e0:7c:03:65:06:e0:1d: 49:be:4e:b8:74:aa:27:f1:92:e2:36:49:36:36:1a:c5:48:5c: 1a:3d:17:0e:a5:1c:6e:90:7c:f3:8a:ea:a9:15:6a:99:61:f4: 48:7a:e6:9d:ea:10:47:ee:dc:b7:29:6e:8a:bd:ca:97:67:4b: 5c:76:53:f6:94:13:30:ad:71:fd:1a:92:4f:94:65:b1:4f:13: fa:b4:7d:98 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBojDtFcWvFqEK2LHJXsKfmmnFQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAxMDE3WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjJjNWFlZDVmYWIzNmU2ODY2ZTEyMWIwYmJiNjk1OTg3 ODUyNTY3ZGIyMjJjOTI4ZTQxMmEwZTBkNDU0ZTFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmwdq/qLCSVMOe1avW8gizX3SpPV6lX6/JtMwLnV+4J/DU 1VvM7L9G+HTd1sAcdZdEV9J8r39yXwpyfdrWmeFYtWD+xStNFVBXTcLWqoIhrA+C 3DU9cDHbdQNhhCbozJpZ0NqE+V9iMxLnDbRZIAhNujgjzDejQNGq1CKJ81AJi+XS Sn3Fdj6p6int6x9DPSXxbbcESWyVIQn+E5xb8tcjwMVG494QbgO8Hn/HJ6b3RPIv NTJuLysnTVFjYn8tyNL0A5+VX8NzNX2dnCyw2WyAnl51LRQtP0/BMEAAQVbm3AMS YQ/TUlFd6ItJNjK7WCNPpPCiKShUZQC0SXOg1/wxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0UYZo0iL6U7yWsQgAno9KPRk0W8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZjI3NGU3LTIxZjUtNGFlZi1hYmQzLTVmOWY4MDUwYjM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQ1jANBgkqhkiG9w0BAQsFAAOCAQEAD6rSpmZ0HJv1VRLvkgbtmmUwZepD 0M4KLkwe5woibkXmnDYXa3FsbBToFAHEyjEEmeSv6I8s9Ot2ctP4co+3/gL2yHGy 6MrCijE4lXrfeJWqdTgkQ3aP1oaesN0sfyKTNCFTb0v8lKZKeQQSv9/jb9fAfjc4 dq9Q15HWT2EyjAScJ1atgHAVyZm+dUMtWfVVsjIZVxDI9lesa6SnFfpfn5PKpDd6 uqibsZ3QXMvgfANlBuAdSb5OuHSqJ/GS4jZJNjYaxUhcGj0XDqUcbpB884rqqRVq mWH0SHrmneoQR+7ctyluir3Kl2dLXHZT9pQTMK1x/RqST5RlsU8T+rR9mA== -----END CERTIFICATE-----Generated at Sun Jun 29 04:22:47 2025 by rpki-client