$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa File: 2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa (raw, json) Hash identifier: MsfrCvlClvQJoEQ2bSvk37So1f2c0SKWWKLfYxSV5mM= Subject key identifier: 8E:7D:1F:A0:3D:A0:06:26:A2:E8:3B:B3:A7:D0:66:F2:AB:FE:34:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12341A85F1BDFFF5D2015F5BBC29306E14D2A3C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa Signing time: Tue 17 Jun 2025 00:20:32 +0000 ROA not before: Tue 17 Jun 2025 00:20:32 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.134.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:34:1a:85:f1:bd:ff:f5:d2:01:5f:5b:bc:29:30:6e:14:d2:a3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:20:32 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=0535bc3a3d1c49c1d9de401589df950ca9c516ae28f5331fa0f69bda851765ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:a6:1e:42:04:2e:af:f3:17:88:23:03:ac: 2f:c1:1c:59:f2:91:68:86:ed:29:c7:20:e2:07:17: 18:47:a9:37:a2:63:03:94:a1:b8:95:8c:b2:29:b3: 40:44:d9:13:31:b2:22:36:ba:05:5f:57:aa:da:9e: 14:e4:bb:99:71:f0:ed:76:04:e4:c8:11:f6:1f:c1: a4:13:9c:7c:d1:bf:75:8f:e0:86:f3:73:98:5b:cc: d8:26:80:6a:08:65:a9:7b:dd:be:f2:0c:62:f1:5d: 2c:70:09:d9:81:70:95:dd:ee:a8:d6:05:40:63:77: 36:71:00:1c:34:d8:b9:b9:4b:e2:b4:dd:c9:f7:d2: 47:75:3d:a3:da:1b:5b:3e:ec:62:24:25:88:6f:87: e9:ff:37:77:f6:01:95:3c:3f:f5:79:4e:d7:6d:cf: c9:53:c3:9b:fa:ec:5d:cf:17:55:90:06:8d:d3:cd: fd:4c:96:9d:f4:4d:43:0f:7c:80:4b:22:d4:7c:91: b3:dc:9d:bd:d5:71:8d:ff:43:be:eb:33:89:ac:d1: a4:1f:08:14:27:ed:20:4c:b9:e0:0e:fa:0f:e0:ad: fd:8a:17:47:e6:dd:49:4a:7b:96:2f:df:92:fd:2b: 52:72:63:0f:af:79:ae:fc:8b:8a:64:b2:9e:4e:cf: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:1F:A0:3D:A0:06:26:A2:E8:3B:B3:A7:D0:66:F2:AB:FE:34:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b950f87-6026-49e6-b1c3-6d5bb199e5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.134.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:c9:b3:14:d5:22:ff:9f:8c:9c:07:17:2f:23:1d:1d:dd:77: d2:4a:27:ed:b4:43:0a:c3:de:7f:b9:f7:d9:5b:8c:81:e9:5f: 5c:83:2a:16:5e:26:25:36:60:78:f2:0a:a7:20:71:f9:87:4f: 5c:3d:79:a8:a0:f3:27:7a:b1:96:18:11:b7:0d:da:75:9c:d8: c5:82:47:00:2a:dd:9a:49:a2:30:ef:1b:ae:b9:39:66:0a:0a: 3e:6e:62:01:7a:74:14:d2:84:89:a1:d0:c4:3c:30:11:4f:79: 3b:1d:36:c1:5e:9d:46:60:2b:f4:4b:c6:f9:54:bb:b1:f3:f2: de:e2:5b:d2:a8:79:c4:bb:24:f6:f9:ef:8d:a3:cf:5d:5d:c8: 92:60:fb:2d:0b:29:0c:e9:a5:0b:b6:f6:26:1f:77:12:4a:b8: dc:ee:ee:c2:95:2d:2e:1a:a0:91:15:e7:fc:21:a8:63:63:92: c7:fb:64:b6:ef:aa:c5:90:47:45:a9:b4:76:67:29:97:d8:40: 98:8e:a0:dd:9e:52:b7:d8:5a:c2:65:41:3d:34:1e:59:e5:e2: b3:7b:5a:d7:91:14:27:53:45:1e:74:e5:bf:a9:2b:62:74:1f: 9b:86:dc:54:a3:cd:89:ba:53:ff:49:3c:6d:e5:a9:65:f4:f3: b7:00:d8:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEjQahfG9//XSAV9bvCkwbhTSo8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAyMDMyWhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTM1YmMzYTNkMWM0OWMxZDlkZTQwMTU4OWRmOTUwY2E5 YzUxNmFlMjhmNTMzMWZhMGY2OWJkYTg1MTc2NWVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzOaYeQgQur/MXiCMDrC/BHFnykWiG7SnHIOIHFxhHqTei YwOUobiVjLIps0BE2RMxsiI2ugVfV6ranhTku5lx8O12BOTIEfYfwaQTnHzRv3WP 4Ibzc5hbzNgmgGoIZal73b7yDGLxXSxwCdmBcJXd7qjWBUBjdzZxABw02Lm5S+K0 3cn30kd1PaPaG1s+7GIkJYhvh+n/N3f2AZU8P/V5Ttdtz8lTw5v67F3PF1WQBo3T zf1Mlp30TUMPfIBLItR8kbPcnb3VcY3/Q77rM4ms0aQfCBQn7SBMueAO+g/grf2K F0fm3UlKe5Yv35L9K1JyYw+vea78i4pksp5Oz2sDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjn0foD2gBiai6Duzp9Bm8qv+NLUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiOTUwZjg3LTYwMjYtNDllNi1iMWMzLTZkNWJiMTk5ZTVjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4hjANBgkqhkiG9w0BAQsFAAOCAQEAl8mzFNUi/5+MnAcXLyMdHd130kon 7bRDCsPef7n32VuMgelfXIMqFl4mJTZgePIKpyBx+YdPXD15qKDzJ3qxlhgRtw3a dZzYxYJHACrdmkmiMO8brrk5ZgoKPm5iAXp0FNKEiaHQxDwwEU95Ox02wV6dRmAr 9EvG+VS7sfPy3uJb0qh5xLsk9vnvjaPPXV3IkmD7LQspDOmlC7b2Jh93Ekq43O7u wpUtLhqgkRXn/CGoY2OSx/tktu+qxZBHRam0dmcpl9hAmI6g3Z5St9hawmVBPTQe WeXis3ta15EUJ1NFHnTlv6krYnQfm4bcVKPNibpT/0k8beWpZfTztwDYTQ== -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:15 2025 by rpki-client