$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed86a05-ca41-47f5-83ec-c248a6e789aa.roa File: 2ed86a05-ca41-47f5-83ec-c248a6e789aa.roa (raw, json) Hash identifier: f32HwXRj6Ji2tF9manpsHefIYijweK0GTM1LzH+kndQ= Subject key identifier: B1:A7:CC:77:3F:8A:48:DE:35:93:03:12:26:BC:32:C6:F9:5C:B3:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 534AC99A0659A9B68032BB4D472F5CAFCC00F404 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed86a05-ca41-47f5-83ec-c248a6e789aa.roa Signing time: Tue 17 Jun 2025 00:12:15 +0000 ROA not before: Tue 17 Jun 2025 00:12:15 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.217.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4a:c9:9a:06:59:a9:b6:80:32:bb:4d:47:2f:5c:af:cc:00:f4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:12:15 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=fa3265c7afd2ac75625ae477bc5b1484a8cc450b9a7c8fc9b14cfce60e0139fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:21:53:55:1d:4e:f6:b1:b6:1a:92:8c:a0: db:54:39:1a:80:f3:0a:b8:ec:5d:bb:2c:4b:e9:a1: 9d:ca:27:ef:c4:a6:1f:73:d6:a4:48:6b:82:fb:e6: af:05:9d:50:64:7e:22:74:6e:6d:c4:1c:6f:e1:86: d0:a0:af:9b:fe:27:80:47:0a:9d:3a:ba:3d:2a:10: 94:6e:14:2f:a9:c7:d4:71:bd:6a:f8:d8:fe:be:db: 48:79:98:76:f2:3b:b2:d5:76:f9:6a:66:c1:14:38: d2:d3:79:79:ac:9d:4a:6d:d1:9a:f0:7b:db:1f:23: df:83:85:7a:b3:28:ac:77:39:99:88:09:21:32:c1: 70:67:43:67:c0:bd:8e:59:df:3b:ed:65:54:22:c6: f6:a3:51:89:ee:ca:5a:66:09:31:d8:00:f4:ae:37: 2d:bc:1b:71:4f:45:68:fd:e7:cf:aa:41:ad:cd:2c: 7e:34:42:ce:b5:08:84:aa:12:81:8f:a4:cb:49:73: 25:3d:d2:51:9a:53:b8:b4:73:73:67:bd:75:b3:ed: f5:f5:b4:9b:a6:a1:a2:72:cf:5d:1a:5c:a4:9f:12: 86:0c:b0:f6:ac:80:76:c2:62:1c:46:76:e2:8e:e2: c9:80:e9:ba:66:6a:81:5d:ee:b1:e4:2e:d8:6d:9e: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:CC:77:3F:8A:48:DE:35:93:03:12:26:BC:32:C6:F9:5C:B3:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed86a05-ca41-47f5-83ec-c248a6e789aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:96:d9:07:88:82:77:04:73:b8:6f:23:43:ce:b9:0a:d3:a7: b1:31:09:79:a4:61:30:6a:fa:ee:0c:c2:19:05:c2:d5:9a:d5: c7:27:71:54:42:f0:0d:64:21:26:e2:c2:39:8d:4b:2f:a2:85: 8b:ae:4a:99:90:e0:26:dd:a0:8e:17:33:bc:ac:0c:2a:a8:77: f8:c1:7f:75:fc:71:1c:3b:c4:cf:31:2e:34:cd:c6:9f:df:93: 6a:f8:86:28:bf:d4:48:d9:a6:4a:79:a7:ed:e3:ed:09:6a:77: aa:69:6b:67:ab:4a:5b:9e:e3:c9:79:60:f7:60:97:1d:1b:ad: 6a:bb:91:ff:94:e0:03:78:95:81:b6:4b:4c:c8:88:a3:35:31: 25:50:5e:16:21:1b:a2:15:4e:41:b4:cb:f7:01:a8:83:c3:cb: cc:5a:be:4c:86:93:9e:e3:66:51:52:eb:b7:41:d2:52:fd:3d: c6:c2:bc:04:44:2c:b1:1e:ad:0e:4b:10:dd:eb:d5:80:97:57: 18:27:49:07:0e:e2:9c:e8:76:03:4a:71:54:a5:24:6f:65:eb: 91:c5:b8:09:11:21:49:47:f0:86:b2:86:39:50:b1:1d:03:9c: 4b:bd:02:7d:d6:8c:37:17:13:12:9c:71:b3:c2:15:c8:81:96: 3b:c6:57:8d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUU0rJmgZZqbaAMrtNRy9cr8wA9AQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMjE1WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTMyNjVjN2FmZDJhYzc1NjI1YWU0NzdiYzViMTQ4NGE4 Y2M0NTBiOWE3YzhmYzliMTRjZmNlNjBlMDEzOWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFCSFTVR1O9rG2GpKMoNtUORqA8wq47F27LEvpoZ3KJ+/E ph9z1qRIa4L75q8FnVBkfiJ0bm3EHG/hhtCgr5v+J4BHCp06uj0qEJRuFC+px9Rx vWr42P6+20h5mHbyO7LVdvlqZsEUONLTeXmsnUpt0Zrwe9sfI9+DhXqzKKx3OZmI CSEywXBnQ2fAvY5Z3zvtZVQixvajUYnuylpmCTHYAPSuNy28G3FPRWj958+qQa3N LH40Qs61CISqEoGPpMtJcyU90lGaU7i0c3NnvXWz7fX1tJumoaJyz10aXKSfEoYM sPasgHbCYhxGduKO4smA6bpmaoFd7rHkLthtnneDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsafMdz+KSN41kwMSJrwyxvlcs5cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlZDg2YTA1LWNhNDEtNDdmNS04M2VjLWMyNDhhNmU3ODlhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP2TANBgkqhkiG9w0BAQsFAAOCAQEAQ5bZB4iCdwRzuG8jQ865CtOnsTEJ eaRhMGr67gzCGQXC1ZrVxydxVELwDWQhJuLCOY1LL6KFi65KmZDgJt2gjhczvKwM Kqh3+MF/dfxxHDvEzzEuNM3Gn9+TaviGKL/USNmmSnmn7ePtCWp3qmlrZ6tKW57j yXlg92CXHRutaruR/5TgA3iVgbZLTMiIozUxJVBeFiEbohVOQbTL9wGog8PLzFq+ TIaTnuNmUVLrt0HSUv09xsK8BEQssR6tDksQ3evVgJdXGCdJBw7inOh2A0pxVKUk b2XrkcW4CREhSUfwhrKGOVCxHQOcS70CfdaMNxcTEpxxs8IVyIGWO8ZXjQ== -----END CERTIFICATE-----Generated at Tue Jul 1 20:47:01 2025 by rpki-client