$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa File: 08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa (raw, json) Hash identifier: W5EowBHU9SqpPFRPyGqdNPb0m4rZPi7QU2UX1VRdowM= Subject key identifier: 60:29:F3:E3:B7:7E:A7:D3:57:BD:2A:89:A7:9C:32:AF:E3:8C:A1:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BCC78C41D5D5E6ECF4FFA94278598E4BF9AEBCC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa Signing time: Mon 16 Jun 2025 15:00:17 +0000 ROA not before: Mon 16 Jun 2025 15:00:17 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.153.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cc:78:c4:1d:5d:5e:6e:cf:4f:fa:94:27:85:98:e4:bf:9a:eb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:00:17 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=226ead8f12ffa9c19cc0afea7dde7741f22ecbc8328a0a39005430df5fa7ebb3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:d0:63:42:61:44:aa:f3:64:af:f1:96:72: 49:a0:a5:7b:22:2b:72:c5:61:6c:a0:c1:ac:fb:df: 4d:00:17:f6:ae:21:e7:ce:84:70:b3:6f:9a:bc:d9: c4:63:1b:94:c1:55:1f:9a:56:2c:5f:e3:0d:cf:04: 6a:79:db:f9:cf:6e:80:a9:8d:81:08:74:39:fb:ed: 61:0e:5f:11:dc:d5:b3:47:b8:95:ad:bd:1b:15:2d: 54:bf:27:ec:6a:95:23:dd:7f:2a:3a:98:c8:c8:79: 09:91:39:a3:7b:e7:54:8c:2c:11:25:32:ea:3d:44: 44:83:7a:ee:4a:d5:a7:8f:8b:68:11:15:79:38:f0: 83:df:70:50:66:a4:3a:61:cd:5c:ba:a4:ca:aa:e3: 30:0d:a3:74:b4:1d:fd:e0:7f:ef:36:8f:12:61:c7: fd:3a:04:14:84:fd:ef:51:b6:57:b4:b7:d5:82:93: d7:e0:3c:3f:39:d8:42:9f:ff:b6:f2:24:70:fc:18: 5e:29:48:31:50:bd:09:8c:64:ed:3c:32:42:f5:94: 42:97:eb:7d:d7:c7:3b:6e:7d:7c:cc:90:2d:cf:7a: be:01:b3:76:70:3f:32:0d:7c:16:da:78:c1:c5:21: 0b:de:73:2a:c2:32:14:22:ca:a2:6b:31:e6:12:c1: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:29:F3:E3:B7:7E:A7:D3:57:BD:2A:89:A7:9C:32:AF:E3:8C:A1:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.153.116.0/24 Signature Algorithm: sha256WithRSAEncryption 87:31:be:b4:d9:18:5b:f7:3c:fe:2a:61:e6:cb:f4:d5:00:e3: 34:ba:de:42:a0:4e:6f:74:2a:3f:f7:fe:69:e7:05:c3:4f:98: 85:35:b7:5e:02:07:b9:df:83:b8:96:a8:f7:1a:c5:02:0f:6d: 41:e0:2c:fc:7e:bd:5c:df:ad:b1:7a:fe:78:ac:a7:3e:c2:c3: 30:93:36:84:7b:ef:15:eb:96:5d:7a:97:dc:35:9a:45:f8:f9: af:5d:c7:9a:3a:c2:7d:c6:ef:fb:70:af:51:6a:68:50:8d:30: 88:10:af:04:3d:60:33:dc:60:9b:94:e2:b2:ac:90:7e:b1:07: 4b:e3:3f:f9:cd:de:87:09:53:6b:4b:7e:7c:a4:35:20:2c:8b: 16:b4:ba:02:af:e6:db:b3:98:3d:b0:0c:b6:28:31:7e:93:6c: ad:9f:8d:20:28:ac:7f:85:f3:9c:33:1d:10:63:04:ed:f4:da: dc:b0:95:9b:f8:77:b1:a0:c7:f1:47:89:f0:ba:7a:1d:1c:13: f6:00:42:97:8c:83:e8:68:ea:ce:31:b0:0b:5a:09:da:dd:a7: 37:95:35:49:20:94:a9:0c:cc:83:fd:d4:e4:74:d1:4a:4d:b2: 49:6e:60:74:0f:ef:11:a1:03:2d:01:aa:00:ba:c7:b4:fe:07: 02:4a:a9:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa8x4xB1dXm7PT/qUJ4WY5L+a68wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUwMDE3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjZlYWQ4ZjEyZmZhOWMxOWNjMGFmZWE3ZGRlNzc0MWYy MmVjYmM4MzI4YTBhMzkwMDU0MzBkZjVmYTdlYmIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCguNBjQmFEqvNkr/GWckmgpXsiK3LFYWygwaz7300AF/au IefOhHCzb5q82cRjG5TBVR+aVixf4w3PBGp52/nPboCpjYEIdDn77WEOXxHc1bNH uJWtvRsVLVS/J+xqlSPdfyo6mMjIeQmROaN751SMLBElMuo9RESDeu5K1aePi2gR FXk48IPfcFBmpDphzVy6pMqq4zANo3S0Hf3gf+82jxJhx/06BBSE/e9Rtle0t9WC k9fgPD852EKf/7byJHD8GF4pSDFQvQmMZO08MkL1lEKX633XxztufXzMkC3Per4B s3ZwPzINfBbaeMHFIQvecyrCMhQiyqJrMeYSwUPrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYCnz47d+p9NXvSqJp5wyr+OMoTIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4ZjY5MjFjLThiMzMtNDZlOC04Y2JkLWFlMGQ1MDE2YmI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABomXQwDQYJKoZIhvcNAQELBQADggEBAIcxvrTZGFv3PP4qYebL9NUA4zS6 3kKgTm90Kj/3/mnnBcNPmIU1t14CB7nfg7iWqPcaxQIPbUHgLPx+vVzfrbF6/nis pz7CwzCTNoR77xXrll16l9w1mkX4+a9dx5o6wn3G7/twr1FqaFCNMIgQrwQ9YDPc YJuU4rKskH6xB0vjP/nN3ocJU2tLfnykNSAsixa0ugKv5tuzmD2wDLYoMX6TbK2f jSAorH+F85wzHRBjBO302tywlZv4d7Ggx/FHifC6eh0cE/YAQpeMg+ho6s4xsAta CdrdpzeVNUkglKkMzIP91OR00UpNskluYHQP7xGhAy0BqgC6x7T+BwJKqXU= -----END CERTIFICATE-----Generated at Tue Jul 1 15:04:10 2025 by rpki-client