$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a25bcb3-ce57-48d7-9a9f-e68a5b2943a6.roa File: 2a25bcb3-ce57-48d7-9a9f-e68a5b2943a6.roa (raw, json) Hash identifier: vFQpsz9N1ii+FsIv7lCa8KHx/EVrdOcc6AC08ERI4pw= Subject key identifier: 1A:A9:90:57:82:0D:83:2F:45:7B:FC:AD:38:20:7B:81:43:4A:37:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 791F2B782C95A4216766FFDF49095040D357459B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a25bcb3-ce57-48d7-9a9f-e68a5b2943a6.roa Signing time: Mon 16 Jun 2025 15:31:52 +0000 ROA not before: Mon 16 Jun 2025 15:31:52 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.63.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1f:2b:78:2c:95:a4:21:67:66:ff:df:49:09:50:40:d3:57:45:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:31:52 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ae52838760b38991c2ffb2cf64ae1774e5f6b33629c2a3a8fb2f195eb0bf1a38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:49:d5:67:30:da:ff:53:66:d3:db:5b:b1: c4:b7:5b:25:ec:4e:b8:d3:7e:bd:e8:a4:3a:92:c2: cb:de:07:3e:62:41:65:ad:ad:b5:5f:e1:6b:b4:34: 1f:bb:de:91:13:e9:04:05:00:d0:4f:3c:28:75:21: c4:8a:10:17:f3:da:92:66:20:c1:54:84:e4:f5:0d: 7f:cd:4b:c6:6a:1e:72:2c:48:d0:1e:16:43:fb:c2: 66:d8:af:72:b2:55:bd:7c:77:fa:02:02:47:b6:b9: fd:34:a4:8d:cf:f3:da:02:e9:a3:b8:c8:1a:7f:24: 49:54:0a:dc:5c:3c:7b:7f:cf:41:0c:61:96:54:b0: 9b:4f:b7:e0:8e:69:3a:1f:ba:70:74:4a:05:42:5c: fc:08:e6:27:96:e2:f8:0c:a4:a0:22:4c:c0:0f:7c: b0:37:45:37:aa:a9:50:17:cf:0a:9b:73:10:f5:df: 8e:d1:4e:b9:bb:64:cb:d9:d0:4c:2b:4f:77:13:5f: 3e:6e:6d:94:0f:32:e5:9d:13:9f:e2:e2:7b:29:27: 7c:78:4f:73:d2:c7:ab:6a:c3:43:3e:6d:93:e7:c7: 69:62:50:58:10:b9:e0:7a:42:5c:d8:f3:f9:7a:9d: 3b:26:c7:f7:fb:36:31:d9:e6:87:0b:08:a2:1f:fe: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:90:57:82:0D:83:2F:45:7B:FC:AD:38:20:7B:81:43:4A:37:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a25bcb3-ce57-48d7-9a9f-e68a5b2943a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.63.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:17:5c:fa:64:54:89:f8:00:1f:96:29:a8:48:1e:dd:d5:6c: 54:a5:2f:d1:76:ab:ef:e2:b8:68:2d:3f:31:43:f3:8e:d1:41: 94:47:46:2f:13:d6:39:39:90:9b:45:a6:83:5b:b4:70:87:43: c3:7f:2e:12:d8:ef:90:65:f5:ca:9b:50:c0:df:21:c3:d2:af: ce:96:6a:ea:fb:79:01:4c:3f:45:65:49:0e:ed:15:9d:5a:c8: 6a:c1:fb:1f:f2:72:25:d4:de:ca:36:e0:af:6a:ed:db:1d:17: 22:c8:39:d6:94:7b:e7:1d:c7:fb:5c:86:ce:20:e3:80:03:c5: 08:93:d8:68:36:e0:91:6c:26:84:53:28:eb:dd:4e:c0:29:55: ad:2a:65:db:02:06:dc:ab:b3:cc:14:55:6c:ff:1d:b9:c4:ff: 87:4e:d3:44:36:26:62:15:cb:d1:06:3c:27:e7:b0:48:2e:44: b5:9b:de:b6:4e:5c:48:5c:06:48:8f:57:1f:7b:79:aa:47:6b: bb:33:87:1b:ad:e5:ac:f7:81:22:9f:86:8a:cd:26:f2:d5:34: 88:37:3b:cf:a5:8c:19:10:37:e2:d1:c4:a3:b6:ae:8a:db:4f: f0:0d:d1:37:f8:3b:50:13:c2:a7:dc:76:38:20:6d:d2:96:ce: 03:b5:4e:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeR8reCyVpCFnZv/fSQlQQNNXRZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUzMTUyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTUyODM4NzYwYjM4OTkxYzJmZmIyY2Y2NGFlMTc3NGU1 ZjZiMzM2MjljMmEzYThmYjJmMTk1ZWIwYmYxYTM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6G0nVZzDa/1Nm09tbscS3WyXsTrjTfr3opDqSwsveBz5i QWWtrbVf4Wu0NB+73pET6QQFANBPPCh1IcSKEBfz2pJmIMFUhOT1DX/NS8ZqHnIs SNAeFkP7wmbYr3KyVb18d/oCAke2uf00pI3P89oC6aO4yBp/JElUCtxcPHt/z0EM YZZUsJtPt+COaTofunB0SgVCXPwI5ieW4vgMpKAiTMAPfLA3RTeqqVAXzwqbcxD1 347RTrm7ZMvZ0EwrT3cTXz5ubZQPMuWdE5/i4nspJ3x4T3PSx6tqw0M+bZPnx2li UFgQueB6QlzY8/l6nTsmx/f7NjHZ5ocLCKIf/hSRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGqmQV4INgy9Fe/ytOCB7gUNKNxkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMjViY2IzLWNlNTctNDhkNy05YTlmLWU2OGE1YjI5NDNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4PzANBgkqhkiG9w0BAQsFAAOCAQEAyBdc+mRUifgAH5YpqEge3dVsVKUv 0Xar7+K4aC0/MUPzjtFBlEdGLxPWOTmQm0Wmg1u0cIdDw38uEtjvkGX1yptQwN8h w9KvzpZq6vt5AUw/RWVJDu0VnVrIasH7H/JyJdTeyjbgr2rt2x0XIsg51pR75x3H +1yGziDjgAPFCJPYaDbgkWwmhFMo691OwClVrSpl2wIG3KuzzBRVbP8ducT/h07T RDYmYhXL0QY8J+ewSC5EtZvetk5cSFwGSI9XH3t5qkdruzOHG63lrPeBIp+Gis0m 8tU0iDc7z6WMGRA34tHEo7auittP8A3RN/g7UBPCp9x2OCBt0pbOA7VOTg== -----END CERTIFICATE-----Generated at Sun Jun 29 09:08:33 2025 by rpki-client