$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047471e9-5147-4aae-82fa-97d22965384b.roa File: 047471e9-5147-4aae-82fa-97d22965384b.roa (raw, json) Hash identifier: zdn+lX1m9CH6EalhNV2e42lQPd5P/jpOgtQxPXlKAHc= Subject key identifier: 52:9B:B8:B0:A8:CB:FB:B2:8C:B0:78:86:AC:57:CF:D7:29:BB:D2:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E6D48C2A1650D1585E3D18B0175943D8B9B9306 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047471e9-5147-4aae-82fa-97d22965384b.roa Signing time: Mon 16 Jun 2025 15:01:15 +0000 ROA not before: Mon 16 Jun 2025 15:01:15 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.46.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6d:48:c2:a1:65:0d:15:85:e3:d1:8b:01:75:94:3d:8b:9b:93:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:01:15 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=86cbbc3e6de9dd3533adaf188fbab631c2916ab3ee3ebda63ae667b7e18a128b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:66:d2:57:3c:c5:b7:5a:e7:8f:1c:65:26: 0b:d2:2e:64:fa:8c:29:e1:78:a2:49:15:1e:bf:ad: ce:4e:2b:c1:4b:c9:91:26:b0:09:53:02:38:55:fc: 1e:65:c9:53:a0:24:cd:98:8c:7d:80:21:86:aa:a6: b5:7a:1e:eb:6b:27:58:08:63:9c:75:ff:47:b3:cb: 20:c8:3f:c9:a9:8e:78:31:99:db:84:bd:1f:84:5a: 92:d0:b0:6b:4c:ad:46:5d:f8:14:fc:9f:6f:e3:41: d9:02:04:82:24:eb:86:4f:10:19:a1:54:78:e5:7f: f3:32:69:30:f4:49:f8:6c:a6:af:44:e4:16:68:33: 20:c9:6a:23:3f:62:07:d1:de:6e:1c:ee:ac:cf:c4: 9b:0f:fb:a4:b0:22:48:d0:0b:6e:15:4b:af:8a:69: 9c:62:a2:31:24:a3:8b:00:24:40:41:ef:3f:16:cf: a2:c5:dd:66:07:0d:a6:26:76:78:88:8a:ae:9c:4f: 8b:db:a5:8d:ce:30:f0:3b:2c:e0:30:11:ed:65:ec: 77:3a:9e:5d:27:04:cb:f8:74:ef:31:08:8c:5f:ce: 98:eb:9c:1e:ec:46:aa:2f:f3:ef:95:42:51:84:68: ef:f3:78:d4:d9:eb:50:96:28:01:a4:9f:2b:c4:74: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:B8:B0:A8:CB:FB:B2:8C:B0:78:86:AC:57:CF:D7:29:BB:D2:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047471e9-5147-4aae-82fa-97d22965384b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.46.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:ab:29:a3:d8:b5:e1:6b:b6:2a:ff:62:b8:fe:fb:4b:16:f2: ff:74:bc:b7:80:24:b8:72:1b:bf:a7:5e:f4:df:9b:46:a6:25: 59:da:a2:1b:b7:fa:79:e1:4e:77:6a:c3:d2:97:5e:85:f4:c2: 27:e4:8d:15:e5:d7:67:9c:0e:4f:9c:15:e9:e6:1e:ac:a2:e9: fb:aa:9a:c5:e7:93:7e:07:9a:10:9e:b8:06:7c:af:da:aa:29: dc:17:08:ed:6a:42:df:dd:a0:25:c6:ec:a7:09:65:da:38:79: 58:2d:ff:1d:39:39:06:42:06:c1:a9:64:a4:c2:bf:2e:2a:2d: d4:2e:3a:69:35:29:3c:a1:5e:8b:0d:32:4c:20:8c:cb:47:c8: de:1f:2a:70:e0:47:6c:d2:c5:cd:ee:71:27:8b:41:f5:39:27: 8d:64:a2:be:95:2a:d0:47:1e:56:a8:f5:99:d7:f7:43:b8:ad: ec:d2:55:25:85:ab:98:1c:07:b8:91:50:29:e1:db:9a:84:e0: c3:07:86:02:77:1a:b3:12:55:ba:02:5a:61:e2:6d:68:3b:c5: c2:dd:30:82:c4:ea:37:bb:60:18:34:57:5d:71:85:05:61:c1: 89:6e:60:00:82:4b:ae:aa:ca:66:62:0e:7c:95:bf:b9:29:0c: 48:dd:30:5b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbm1IwqFlDRWF49GLAXWUPYubkwYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUwMTE1WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmNiYmMzZTZkZTlkZDM1MzNhZGFmMTg4ZmJhYjYzMWMy OTE2YWIzZWUzZWJkYTYzYWU2NjdiN2UxOGExMjhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4S2bSVzzFt1rnjxxlJgvSLmT6jCnheKJJFR6/rc5OK8FL yZEmsAlTAjhV/B5lyVOgJM2YjH2AIYaqprV6HutrJ1gIY5x1/0ezyyDIP8mpjngx mduEvR+EWpLQsGtMrUZd+BT8n2/jQdkCBIIk64ZPEBmhVHjlf/MyaTD0Sfhspq9E 5BZoMyDJaiM/YgfR3m4c7qzPxJsP+6SwIkjQC24VS6+KaZxiojEko4sAJEBB7z8W z6LF3WYHDaYmdniIiq6cT4vbpY3OMPA7LOAwEe1l7Hc6nl0nBMv4dO8xCIxfzpjr nB7sRqov8++VQlGEaO/zeNTZ61CWKAGknyvEdC/3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUpu4sKjL+7KMsHiGrFfP1ym70i8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NzQ3MWU5LTUxNDctNGFhZS04MmZhLTk3ZDIyOTY1Mzg0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwChLjANBgkqhkiG9w0BAQsFAAOCAQEAXKspo9i14Wu2Kv9iuP77Sxby/3S8 t4AkuHIbv6de9N+bRqYlWdqiG7f6eeFOd2rD0pdehfTCJ+SNFeXXZ5wOT5wV6eYe rKLp+6qaxeeTfgeaEJ64Bnyv2qop3BcI7WpC392gJcbspwll2jh5WC3/HTk5BkIG walkpMK/Liot1C46aTUpPKFeiw0yTCCMy0fI3h8qcOBHbNLFze5xJ4tB9TknjWSi vpUq0EceVqj1mdf3Q7it7NJVJYWrmBwHuJFQKeHbmoTgwweGAncasxJVugJaYeJt aDvFwt0wgsTqN7tgGDRXXXGFBWHBiW5gAIJLrqrKZmIOfJW/uSkMSN0wWw== -----END CERTIFICATE-----Generated at Wed Jul 2 03:41:05 2025 by rpki-client