$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c764-927e-41a1-b94e-b8bb9091f9c3.roa File: 1044c764-927e-41a1-b94e-b8bb9091f9c3.roa (raw, json) Hash identifier: +PlkYRBDcjM61R0V8x1kTolRrhPnt142kHYAXr7Eb7M= Subject key identifier: 70:5D:C6:C6:45:40:8A:81:A7:4D:1E:1D:B4:CE:22:0E:C4:C9:FE:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A0EB051B2ACD8B9DF77BA7A570B4B6747C91529 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c764-927e-41a1-b94e-b8bb9091f9c3.roa Signing time: Sat 21 Jun 2025 00:20:13 +0000 ROA not before: Sat 21 Jun 2025 00:20:13 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.134.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0e:b0:51:b2:ac:d8:b9:df:77:ba:7a:57:0b:4b:67:47:c9:15:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:20:13 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=ff5ad092153a65a8475ede6d75a3527390f258631de627422bf7ab08c4dc0d06, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:64:08:95:16:4a:db:aa:3d:79:4c:ee:2b: 0b:6b:c7:d7:ca:58:2b:0f:0d:86:18:1c:67:28:1d: 61:1e:6f:de:5c:00:cb:f3:88:9a:79:c4:3f:f6:30: 65:51:6e:a2:d8:0b:00:a9:8a:13:82:6f:8d:46:0c: b9:54:83:24:23:8c:0a:60:92:2a:6a:c6:95:7a:8a: 22:65:d6:2c:16:8a:fc:3e:87:53:89:45:56:d7:85: 77:db:3a:05:9b:a9:2c:73:1f:2d:48:51:27:b1:09: 4f:9f:4e:2d:6b:ab:ce:15:fe:57:e0:ac:4e:45:a1: 08:9e:e9:8b:8a:31:1e:9e:59:79:6d:38:41:6f:d9: 5b:7f:18:d1:ce:fa:a9:62:69:03:58:ff:6f:72:b3: 3b:1b:0e:00:d7:2e:8c:09:08:f9:31:ef:33:78:6c: fc:1c:54:a9:18:63:a6:9d:71:5b:9e:77:8e:80:81: 89:1e:49:e5:15:4d:98:34:97:2c:af:28:d5:4e:cc: fb:f8:d8:ea:1b:00:95:5a:9e:22:63:82:02:c2:f2: 43:ea:20:89:f7:e0:dd:6e:05:56:f3:78:8c:30:6c: fe:41:b7:27:2b:23:e3:13:a5:92:9f:67:f7:18:3e: ea:66:22:63:fd:c2:af:33:d3:a0:b3:17:4c:d6:fd: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5D:C6:C6:45:40:8A:81:A7:4D:1E:1D:B4:CE:22:0E:C4:C9:FE:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1044c764-927e-41a1-b94e-b8bb9091f9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.134.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:ce:25:b6:da:d5:20:3a:62:02:1b:86:e1:0c:0a:d4:82:dd: d6:6a:1a:cc:b5:3a:86:f7:4d:2f:99:29:38:80:0e:8a:40:1e: 64:4d:ea:9c:8e:19:d3:2c:f9:dd:95:b9:a4:26:27:84:ed:d9: 3a:a2:4e:44:98:53:5e:b0:9d:5d:f9:d3:b3:d7:d1:37:d2:78: 73:27:12:70:36:23:3b:91:10:c2:35:45:1e:9f:5b:e7:bf:fd: 59:08:34:24:96:fd:72:87:93:f8:d0:0d:1b:55:0c:03:10:66: d8:61:13:1e:f3:b1:6b:2c:eb:64:da:5c:e2:fd:8a:3c:5d:88: 50:ab:cb:bb:f9:5d:2d:04:72:12:46:6c:e4:a4:5e:6e:42:69: 14:b6:29:02:15:f1:91:10:d8:74:6b:88:39:46:e0:ac:99:b8: bb:64:15:ce:59:f5:0e:25:12:86:bd:d5:8a:ca:38:ba:8f:c7: 7a:88:04:39:08:d7:39:c2:7e:de:7f:43:05:62:5e:5e:8e:05: 5b:7d:22:48:80:26:53:50:e8:4d:17:5c:f9:ac:0e:64:79:3a: 9d:d9:14:88:47:a1:13:5a:3b:5c:9a:d3:82:4d:7a:d1:08:93: c9:52:ce:21:f9:10:52:ba:55:72:9a:8c:86:04:d1:31:cd:30: da:80:bf:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKg6wUbKs2Lnfd7p6VwtLZ0fJFSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAyMDEzWhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjVhZDA5MjE1M2E2NWE4NDc1ZWRlNmQ3NWEzNTI3Mzkw ZjI1ODYzMWRlNjI3NDIyYmY3YWIwOGM0ZGMwZDA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw9GQIlRZK26o9eUzuKwtrx9fKWCsPDYYYHGcoHWEeb95c AMvziJp5xD/2MGVRbqLYCwCpihOCb41GDLlUgyQjjApgkipqxpV6iiJl1iwWivw+ h1OJRVbXhXfbOgWbqSxzHy1IUSexCU+fTi1rq84V/lfgrE5FoQie6YuKMR6eWXlt OEFv2Vt/GNHO+qliaQNY/29yszsbDgDXLowJCPkx7zN4bPwcVKkYY6adcVued46A gYkeSeUVTZg0lyyvKNVOzPv42OobAJVaniJjggLC8kPqIIn34N1uBVbzeIwwbP5B tycrI+MTpZKfZ/cYPupmImP9wq8z06CzF0zW/StTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcF3GxkVAioGnTR4dtM4iDsTJ/skwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwNDRjNzY0LTkyN2UtNDFhMS1iOTRlLWI4YmI5MDkxZjljMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDChjANBgkqhkiG9w0BAQsFAAOCAQEAKM4lttrVIDpiAhuG4QwK1ILd1moa zLU6hvdNL5kpOIAOikAeZE3qnI4Z0yz53ZW5pCYnhO3ZOqJORJhTXrCdXfnTs9fR N9J4cycScDYjO5EQwjVFHp9b57/9WQg0JJb9coeT+NANG1UMAxBm2GETHvOxayzr ZNpc4v2KPF2IUKvLu/ldLQRyEkZs5KRebkJpFLYpAhXxkRDYdGuIOUbgrJm4u2QV zln1DiUShr3Viso4uo/HeogEOQjXOcJ+3n9DBWJeXo4FW30iSIAmU1DoTRdc+awO ZHk6ndkUiEehE1o7XJrTgk160QiTyVLOIfkQUrpVcpqMhgTRMc0w2oC/Tg== -----END CERTIFICATE-----Generated at Sun Jun 29 04:32:58 2025 by rpki-client