$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa File: 07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa (raw, json) Hash identifier: MLQ9mnsVsHKE7xaDAJUHIcddwMo0XbgMkQh2TAfYwCA= Subject key identifier: C5:A9:0B:04:B1:27:F9:AD:84:09:1E:A1:B2:E1:16:E2:06:FF:BB:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 012F2C688DF9BDAD457555837ECD793D369CF5F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa Signing time: Mon 23 Jun 2025 15:41:05 +0000 ROA not before: Mon 23 Jun 2025 15:41:05 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2f:2c:68:8d:f9:bd:ad:45:75:55:83:7e:cd:79:3d:36:9c:f5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:41:05 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=4ad1930a46f1a81acdf0a4b61140e00bb914454d89d3b0e9e73aec618593c12b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:4a:4f:fc:f4:14:b8:7b:20:0c:d1:f3:34: f0:3a:0e:1d:c7:26:65:37:9e:aa:f5:95:99:6d:e9: 9b:00:12:48:1e:7f:22:9e:13:b9:57:ec:06:0a:38: 15:17:d0:4d:99:42:36:14:b3:f7:73:a8:1f:23:4f: 99:2e:a2:f6:c9:59:08:06:77:ff:91:4e:72:e4:5b: 34:78:dd:51:37:cb:5f:62:58:1b:f9:f4:11:e3:7b: 59:9b:de:29:15:b1:80:f8:21:6c:52:3b:cd:b7:69: d0:5d:a3:be:f0:45:c2:76:60:fa:f8:f3:2d:e9:ad: 61:c3:08:a1:17:37:55:9c:df:99:8d:c2:76:d9:ed: be:75:ea:fa:21:2b:2e:c1:55:7e:a5:03:c4:dc:30: be:36:05:c8:10:54:a4:d1:70:c1:64:b4:70:2b:3a: 58:cc:f1:8c:bb:62:95:5a:ee:3c:19:0c:f9:91:76: 6f:9f:44:90:0c:3c:06:45:47:c0:de:51:78:05:de: 43:a0:71:a4:52:60:37:8c:39:f7:38:08:e1:c8:c6: fb:45:b4:d7:48:f9:c8:90:85:4e:25:cf:10:3b:18: 56:f9:c5:d7:4f:5d:13:ee:44:83:ae:e7:fa:20:59: da:30:3c:0a:74:de:ec:8d:91:1b:f9:ad:d2:39:a1: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:0B:04:B1:27:F9:AD:84:09:1E:A1:B2:E1:16:E2:06:FF:BB:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07333264-bbed-4b83-9c69-a27eb4a7b8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.66.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ca:7b:8d:67:bc:47:13:6d:4b:9d:63:63:a2:73:b3:82:ef: 7f:0e:96:35:93:b8:dc:03:e3:a9:ef:70:6f:e7:ae:dd:26:8e: ff:33:94:9e:5a:a2:d4:e9:f7:90:91:29:12:fd:26:44:b8:28: 13:f9:d4:5a:91:79:1a:fd:5b:25:61:f9:df:49:e8:bd:42:1a: 4e:34:6a:a0:61:ac:d6:b2:0c:3a:3f:67:f3:d4:75:f8:38:a5: dd:19:ec:ae:b3:2e:cb:a4:1d:80:72:21:19:b2:c0:9a:5e:cd: f1:dc:94:39:07:e0:b6:37:87:3b:80:b8:a4:8a:87:b0:25:54: fe:dd:ab:40:37:b2:7f:9e:74:31:a9:b2:b8:58:ce:6d:8f:68: 83:87:f7:ab:09:10:65:d0:d8:18:f6:9b:52:42:3e:46:cf:9a: 3b:79:19:e7:93:a6:b2:d9:f6:d5:ca:58:65:3a:e1:3d:d4:31: e1:38:a2:ff:00:9c:fa:d5:43:89:c1:0d:d4:4a:73:53:e3:e7: fc:e5:e4:6b:b6:8c:67:ba:69:cb:74:b4:39:be:ca:84:56:1b: 61:35:67:f8:62:38:89:c3:29:dd:66:1f:00:03:b5:be:b2:44: e7:b9:15:10:a5:13:b5:52:41:60:a9:60:12:e1:7e:81:6b:5a: b5:37:1d:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAS8saI35va1FdVWDfs15PTac9fQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTU0MTA1WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWQxOTMwYTQ2ZjFhODFhY2RmMGE0YjYxMTQwZTAwYmI5 MTQ0NTRkODlkM2IwZTllNzNhZWM2MTg1OTNjMTJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWWkpP/PQUuHsgDNHzNPA6Dh3HJmU3nqr1lZlt6ZsAEkge fyKeE7lX7AYKOBUX0E2ZQjYUs/dzqB8jT5kuovbJWQgGd/+RTnLkWzR43VE3y19i WBv59BHje1mb3ikVsYD4IWxSO823adBdo77wRcJ2YPr48y3prWHDCKEXN1Wc35mN wnbZ7b516vohKy7BVX6lA8TcML42BcgQVKTRcMFktHArOljM8Yy7YpVa7jwZDPmR dm+fRJAMPAZFR8DeUXgF3kOgcaRSYDeMOfc4COHIxvtFtNdI+ciQhU4lzxA7GFb5 xddPXRPuRIOu5/ogWdowPAp03uyNkRv5rdI5oV2TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxakLBLEn+a2ECR6hsuEW4gb/u+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3MzMzMjY0LWJiZWQtNGI4My05YzY5LWEyN2ViNGE3YjhhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EIwDQYJKoZIhvcNAQELBQADggEBAG/Ke41nvEcTbUudY2Oic7OC738O ljWTuNwD46nvcG/nrt0mjv8zlJ5aotTp95CRKRL9JkS4KBP51FqReRr9WyVh+d9J 6L1CGk40aqBhrNayDDo/Z/PUdfg4pd0Z7K6zLsukHYByIRmywJpezfHclDkH4LY3 hzuAuKSKh7AlVP7dq0A3sn+edDGpsrhYzm2PaIOH96sJEGXQ2Bj2m1JCPkbPmjt5 GeeTprLZ9tXKWGU64T3UMeE4ov8AnPrVQ4nBDdRKc1Pj5/zl5Gu2jGe6act0tDm+ yoRWG2E1Z/hiOInDKd1mHwADtb6yROe5FRClE7VSQWCpYBLhfoFrWrU3HRE= -----END CERTIFICATE-----Generated at Sun Jun 29 14:31:00 2025 by rpki-client