$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4963540b-ec7a-49a7-9f72-11cb956c55de.roa File: 4963540b-ec7a-49a7-9f72-11cb956c55de.roa (raw, json) Hash identifier: dZPENCcJB081sAdfJM32cjwrspnieIBBJ7gIKbVLdT8= Subject key identifier: 1A:FD:01:C8:FD:46:F6:5F:93:10:E5:A6:E6:44:CD:67:00:AF:4E:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AE08CBC8243F918B6F5263CA84FFDE8DC74FE96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4963540b-ec7a-49a7-9f72-11cb956c55de.roa Signing time: Tue 17 Jun 2025 00:12:21 +0000 ROA not before: Tue 17 Jun 2025 00:12:21 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.120.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e0:8c:bc:82:43:f9:18:b6:f5:26:3c:a8:4f:fd:e8:dc:74:fe:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:12:21 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=3312c2e2c13689ce33bdb7ebe0d7733afdb9522d5d40c4a105e9cd5c5244f758, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:f8:29:92:0c:65:fc:de:a9:65:6a:b9:20: 34:35:3a:4f:34:51:6f:c7:18:2a:34:48:7e:36:cd: ea:ce:c2:9f:85:57:89:ac:b1:e1:14:49:bd:a3:74: 48:f1:44:be:f8:89:3d:a7:4e:6f:94:00:29:84:e1: 9c:36:07:c9:af:a2:ef:16:59:e8:0d:ed:92:74:1d: c7:39:2c:b2:5b:77:c6:99:58:5b:e8:2d:b4:f3:12: 5b:1e:f5:9e:4c:7c:af:2e:27:22:1b:c0:1e:cc:85: 69:e1:22:16:7c:c3:1f:25:5e:00:28:64:7e:33:7d: ba:b9:a9:2a:aa:59:84:cc:79:20:cf:8e:81:22:0c: 44:ad:e2:fb:6f:c6:33:d0:ac:de:45:1d:9f:ac:59: 8a:ac:92:05:ed:c6:7e:ce:fd:8f:a2:e6:74:72:19: 45:5a:24:ca:3d:31:9f:89:92:57:3d:4f:8a:6e:06: d9:ed:67:a7:69:a5:53:86:a8:35:e9:ea:db:93:92: 07:ac:dd:83:1e:8e:b2:01:bc:f6:c5:fd:20:4e:2e: 1d:88:4d:a3:a4:ce:6e:bf:2c:df:ac:06:5c:7a:ab: 29:0b:0b:97:94:d5:72:df:18:4d:6c:bf:ce:ee:d6: 8e:34:3b:9a:92:c3:5e:78:de:37:c6:ef:15:b1:76: c1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FD:01:C8:FD:46:F6:5F:93:10:E5:A6:E6:44:CD:67:00:AF:4E:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4963540b-ec7a-49a7-9f72-11cb956c55de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.120.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:af:89:3e:bf:af:81:15:75:e2:b4:30:b3:a4:22:8f:c7:6f: 11:00:a7:01:f1:06:cf:70:ce:27:13:be:e3:54:f8:ee:d0:15: 0f:91:48:fa:db:74:f8:5f:b2:c4:56:10:7b:1e:7c:c4:c6:26: 59:c6:25:fe:f5:90:15:6f:ea:7d:f7:73:48:53:83:28:d2:36: 7a:19:1b:44:6b:58:59:87:09:b9:71:5f:c9:3b:e8:46:f9:93: 4c:52:09:af:9c:a0:07:be:c3:b4:13:3d:9e:fa:ef:94:c8:cf: 76:f7:49:7d:bf:a4:95:ff:ac:c0:ec:ba:8d:04:14:05:18:5a: 6d:c2:bf:e9:7c:d1:31:c0:ca:b4:a1:f5:ea:0b:ec:4e:1f:36: 57:28:a1:bd:0e:41:16:57:7f:92:f4:90:e9:25:54:97:8b:8c: b3:0d:20:36:ff:f5:71:c8:f0:18:84:de:ee:2a:c7:f4:9a:32: e2:21:c5:46:ce:d0:c6:e0:e9:8b:93:e9:d6:c6:41:8c:c1:67: cb:f3:93:34:7f:9f:4d:64:4a:11:7f:54:cc:dc:52:e6:24:98: b9:0b:af:72:79:d4:b3:6a:30:fa:5e:d8:59:15:93:ae:c7:5d: 86:44:56:99:c5:a2:af:ab:5f:15:50:3f:a4:9a:5a:43:aa:12: aa:81:fe:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWuCMvIJD+Ri29SY8qE/96Nx0/pYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMjIxWhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzEyYzJlMmMxMzY4OWNlMzNiZGI3ZWJlMGQ3NzMzYWZk Yjk1MjJkNWQ0MGM0YTEwNWU5Y2Q1YzUyNDRmNzU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMMPgpkgxl/N6pZWq5IDQ1Ok80UW/HGCo0SH42zerOwp+F V4msseEUSb2jdEjxRL74iT2nTm+UACmE4Zw2B8mvou8WWegN7ZJ0Hcc5LLJbd8aZ WFvoLbTzElse9Z5MfK8uJyIbwB7MhWnhIhZ8wx8lXgAoZH4zfbq5qSqqWYTMeSDP joEiDESt4vtvxjPQrN5FHZ+sWYqskgXtxn7O/Y+i5nRyGUVaJMo9MZ+Jklc9T4pu BtntZ6dppVOGqDXp6tuTkges3YMejrIBvPbF/SBOLh2ITaOkzm6/LN+sBlx6qykL C5eU1XLfGE1sv87u1o40O5qSw1543jfG7xWxdsGDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGv0ByP1G9l+TEOWm5kTNZwCvTk0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5NjM1NDBiLWVjN2EtNDlhNy05ZjcyLTExY2I5NTZjNTVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQeDANBgkqhkiG9w0BAQsFAAOCAQEApq+JPr+vgRV14rQws6Qij8dvEQCn AfEGz3DOJxO+41T47tAVD5FI+tt0+F+yxFYQex58xMYmWcYl/vWQFW/qffdzSFOD KNI2ehkbRGtYWYcJuXFfyTvoRvmTTFIJr5ygB77DtBM9nvrvlMjPdvdJfb+klf+s wOy6jQQUBRhabcK/6XzRMcDKtKH16gvsTh82VyihvQ5BFld/kvSQ6SVUl4uMsw0g Nv/1ccjwGITe7irH9Joy4iHFRs7QxuDpi5Pp1sZBjMFny/OTNH+fTWRKEX9UzNxS 5iSYuQuvcnnUs2ow+l7YWRWTrsddhkRWmcWir6tfFVA/pJpaQ6oSqoH+Wg== -----END CERTIFICATE-----Generated at Tue Jul 1 17:51:48 2025 by rpki-client