$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa File: 04405b6a-e9b7-4619-9fbc-a70457bae68e.roa (raw, json) Hash identifier: f9ltbyqvK5MrwxPrp49n6tkoQoOR7OWPXggD0FVKckM= Subject key identifier: C7:A8:28:9C:D1:4C:EF:22:18:EF:72:23:69:00:DA:AB:1E:AE:6D:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70F473952A87E8F28EC6B64462E89183B8226836 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa Signing time: Mon 16 Jun 2025 15:20:32 +0000 ROA not before: Mon 16 Jun 2025 15:20:32 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.155.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f4:73:95:2a:87:e8:f2:8e:c6:b6:44:62:e8:91:83:b8:22:68:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:20:32 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=6c6f636634eaa3b552682d1577ccc77c30b902f86774f551612982304f7ea2e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:d2:72:ab:02:3c:31:8e:22:b9:74:57:26: b7:fc:23:49:37:ed:e5:88:53:81:7f:16:61:00:ac: ba:9d:ea:8a:f4:c2:a5:d5:89:da:08:60:b0:03:42: ca:6e:4a:90:64:58:af:3c:d6:9d:95:f3:a7:be:d3: 2f:0f:30:61:55:c4:cc:95:81:95:68:17:11:1a:ac: 73:4b:b3:e6:3c:90:52:0c:50:0f:94:f4:ac:98:75: 75:fe:0b:c6:c7:86:31:90:8a:ac:0c:db:e9:c2:0b: 70:7a:b7:8d:e6:5a:12:da:f7:38:3e:21:1a:48:7f: 9c:99:52:8a:22:40:3d:08:f8:f5:fc:62:c9:a6:86: 18:bb:23:8a:e8:3e:46:62:17:c8:c2:43:74:93:db: 89:ec:c4:a2:7b:9a:86:f6:90:c3:8d:e1:a2:9e:6d: 06:ca:cf:ba:ee:7b:ea:a5:5b:4e:77:91:7a:af:93: 16:17:92:f5:30:7d:fc:d3:fa:ab:63:07:58:97:4d: e6:83:9c:ba:c6:55:e6:ed:21:4d:6f:42:70:37:14: 73:47:f4:0c:b7:d6:05:64:1c:8e:51:c9:3c:93:a6: 1f:f4:f7:4e:25:b4:d9:ee:56:e2:aa:65:00:48:3e: 30:78:24:ce:1c:bd:c6:ba:84:f6:f6:a9:c8:04:4f: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A8:28:9C:D1:4C:EF:22:18:EF:72:23:69:00:DA:AB:1E:AE:6D:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.155.128.0/17 Signature Algorithm: sha256WithRSAEncryption 09:9a:1e:e1:87:48:45:6b:ad:aa:57:19:cb:36:dc:74:7d:3b: 08:56:b2:a8:b3:ae:b2:8f:41:67:2a:59:f4:8b:70:57:b7:f5: b6:85:c8:aa:2d:65:bb:ca:f5:86:af:31:e5:56:a9:6d:24:b5: be:da:ff:fc:0b:c0:50:11:42:11:28:82:80:eb:6d:81:92:78: ac:a6:2e:e7:a1:7e:d6:89:d5:29:e7:a3:9c:a3:25:87:99:fc: d0:d3:cf:aa:9f:88:c3:05:95:42:bf:c4:4b:7c:7b:20:35:d1: 2a:f3:a0:03:c8:8f:1d:24:12:d4:fe:8d:44:dc:90:25:99:8e: ae:c7:4d:f2:b3:7f:41:79:12:2d:92:bf:95:2c:0d:c5:ab:ef: 8b:db:2a:3f:f1:58:04:b5:d5:35:15:c2:71:d4:78:32:20:bc: 92:0e:c1:97:e7:cd:59:2b:8c:27:74:b0:be:33:be:65:23:44: d1:c8:ab:1d:81:a0:d0:9d:b1:e4:3a:51:60:5c:fe:03:16:97: 6a:47:db:b9:e8:04:f8:34:3b:13:10:04:ef:a8:ea:0b:41:67: 08:b2:55:31:4d:bd:ee:e0:00:9d:77:0c:7d:e6:67:d0:2b:f2: a2:b0:56:a8:bb:07:fc:09:8d:d0:38:a8:37:33:7b:d8:c6:28: 0d:c5:47:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcPRzlSqH6PKOxrZEYuiRg7giaDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUyMDMyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzZmNjM2NjM0ZWFhM2I1NTI2ODJkMTU3N2NjYzc3YzMw YjkwMmY4Njc3NGY1NTE2MTI5ODIzMDRmN2VhMmU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJvtJyqwI8MY4iuXRXJrf8I0k37eWIU4F/FmEArLqd6or0 wqXVidoIYLADQspuSpBkWK881p2V86e+0y8PMGFVxMyVgZVoFxEarHNLs+Y8kFIM UA+U9KyYdXX+C8bHhjGQiqwM2+nCC3B6t43mWhLa9zg+IRpIf5yZUooiQD0I+PX8 Ysmmhhi7I4roPkZiF8jCQ3ST24nsxKJ7mob2kMON4aKebQbKz7rue+qlW053kXqv kxYXkvUwffzT+qtjB1iXTeaDnLrGVebtIU1vQnA3FHNH9Ay31gVkHI5RyTyTph/0 904ltNnuVuKqZQBIPjB4JM4cvca6hPb2qcgET5YNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx6gonNFM7yIY73IjaQDaqx6ubagwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDA1YjZhLWU5YjctNDYxOS05ZmJjLWE3MDQ1N2JhZTY4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4m4AwDQYJKoZIhvcNAQELBQADggEBAAmaHuGHSEVrrapXGcs23HR9OwhW sqizrrKPQWcqWfSLcFe39baFyKotZbvK9YavMeVWqW0ktb7a//wLwFARQhEogoDr bYGSeKymLuehftaJ1Snno5yjJYeZ/NDTz6qfiMMFlUK/xEt8eyA10SrzoAPIjx0k EtT+jUTckCWZjq7HTfKzf0F5Ei2Sv5UsDcWr74vbKj/xWAS11TUVwnHUeDIgvJIO wZfnzVkrjCd0sL4zvmUjRNHIqx2BoNCdseQ6UWBc/gMWl2pH27noBPg0OxMQBO+o 6gtBZwiyVTFNve7gAJ13DH3mZ9Ar8qKwVqi7B/wJjdA4qDcze9jGKA3FR9c= -----END CERTIFICATE-----Generated at Mon Jun 30 17:14:43 2025 by rpki-client