$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/530a77ca-5428-42b4-9c03-adb88573ea2a.roa File: 530a77ca-5428-42b4-9c03-adb88573ea2a.roa (raw, json) Hash identifier: JnL0EeqJHAt/qmFd0LzjDzsHUIi2uztKdLXDqckufKs= Subject key identifier: 49:A5:B5:97:34:B6:C5:1F:01:96:AA:90:74:EE:2A:29:01:95:CC:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F1635E5F8EBB3937F3E58FEACB56E4D61A4B73F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/530a77ca-5428-42b4-9c03-adb88573ea2a.roa Signing time: Mon 30 Jun 2025 15:20:25 +0000 ROA not before: Mon 30 Jun 2025 15:20:25 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 66.7.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:16:35:e5:f8:eb:b3:93:7f:3e:58:fe:ac:b5:6e:4d:61:a4:b7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:20:25 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=5d51c1795082b3178392f90b6d52a4bb612146aeb90fa2e47befa2303324a63a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:c4:25:eb:72:5c:ed:11:c4:c7:9e:e0:ad: 98:52:8e:39:d7:62:1d:e8:c4:8a:fe:be:50:f1:15: 64:d0:82:ff:f2:e9:80:cd:cb:ba:68:cb:d8:9d:55: e4:d5:21:c0:7c:1d:42:66:68:98:f4:63:bb:f7:48: a2:27:d8:34:c7:a1:04:fa:80:c5:86:d8:1c:b9:af: ca:06:16:fe:b7:24:0a:69:04:0a:f6:34:78:b4:34: 13:ca:aa:49:aa:db:7f:6e:a8:45:e6:cc:99:5e:29: 11:33:71:4a:28:bb:dc:c4:48:a2:dd:03:89:13:40: d0:e4:4d:57:80:5b:7d:7c:dd:85:43:f3:5c:1a:c8: 8d:77:54:d9:2b:e4:90:2d:d9:4f:9b:6c:ab:5b:7c: 4e:9f:4f:6e:e4:ce:51:8d:f8:53:b4:1f:e5:6c:ec: 5e:1e:a9:cf:69:e5:c0:7f:9d:f1:42:8c:36:2a:d3: 1c:1d:90:77:e5:5d:17:24:58:78:a2:83:4c:9b:78: 68:0a:7d:d8:d3:84:f2:d3:02:ee:95:c4:6b:d1:ba: d1:08:2c:34:53:4e:f7:e4:2b:8d:a1:69:03:d7:24: 94:e0:f1:55:2b:ca:7e:26:14:69:0f:e2:e4:7a:ef: 7e:23:7f:20:34:83:a6:cb:43:46:b1:3f:0f:db:a5: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A5:B5:97:34:B6:C5:1F:01:96:AA:90:74:EE:2A:29:01:95:CC:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/530a77ca-5428-42b4-9c03-adb88573ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.7.0.0/18 Signature Algorithm: sha256WithRSAEncryption bb:53:0a:a2:5b:80:dc:bd:c6:3d:7f:bf:82:25:b2:98:a0:39: b1:6e:5e:15:ad:42:72:46:e0:e1:8c:8f:ed:fb:54:a7:25:d6: 2a:86:d3:e7:c7:6d:da:24:f8:4a:90:0f:f3:bd:12:24:24:a4: ad:ac:bc:4b:fd:56:5c:2b:6c:7c:13:65:c6:b2:28:a9:6c:ff: e7:4f:44:2d:67:e0:9f:b9:1a:96:8d:5d:1f:4a:61:88:bc:a6: bf:b2:79:db:85:b5:14:ce:71:3c:8a:17:60:c7:9f:da:c5:dd: 69:a6:e0:26:2a:86:8e:66:19:f7:c2:70:4f:21:0b:63:89:91: 82:64:95:aa:c3:40:8b:29:d1:5e:72:73:44:0d:1d:5d:73:64: 4e:01:69:68:a3:9a:66:38:5f:be:90:f8:6e:90:22:77:6e:03: 2b:3c:d9:d2:8a:a5:1c:c2:f0:df:e9:06:7d:8f:de:cd:3e:dc: 18:f3:8e:45:76:79:00:b9:15:05:38:b9:74:3a:ab:42:da:71: 86:54:ae:b6:fc:cc:95:1c:5b:5a:c2:79:ce:e1:45:9f:bc:74: 5f:75:1e:43:67:63:29:b7:4b:4e:26:e6:37:17:48:fa:87:dd: 51:bc:e9:67:a1:55:b1:ed:8f:0a:e1:0d:24:f5:fd:4b:bf:11: ec:6c:7b:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXxY15fjrs5N/Plj+rLVuTWGktz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUyMDI1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDUxYzE3OTUwODJiMzE3ODM5MmY5MGI2ZDUyYTRiYjYx MjE0NmFlYjkwZmEyZTQ3YmVmYTIzMDMzMjRhNjNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA5cQl63Jc7RHEx57grZhSjjnXYh3oxIr+vlDxFWTQgv/y 6YDNy7poy9idVeTVIcB8HUJmaJj0Y7v3SKIn2DTHoQT6gMWG2By5r8oGFv63JApp BAr2NHi0NBPKqkmq239uqEXmzJleKREzcUoou9zESKLdA4kTQNDkTVeAW3183YVD 81wayI13VNkr5JAt2U+bbKtbfE6fT27kzlGN+FO0H+Vs7F4eqc9p5cB/nfFCjDYq 0xwdkHflXRckWHiig0ybeGgKfdjThPLTAu6VxGvRutEILDRTTvfkK42haQPXJJTg 8VUryn4mFGkP4uR6734jfyA0g6bLQ0axPw/bpf4vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSaW1lzS2xR8BlqqQdO4qKQGVzAYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzMGE3N2NhLTU0MjgtNDJiNC05YzAzLWFkYjg4NTczZWEyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZCBwAwDQYJKoZIhvcNAQELBQADggEBALtTCqJbgNy9xj1/v4IlspigObFu XhWtQnJG4OGMj+37VKcl1iqG0+fHbdok+EqQD/O9EiQkpK2svEv9VlwrbHwTZcay KKls/+dPRC1n4J+5GpaNXR9KYYi8pr+yeduFtRTOcTyKF2DHn9rF3Wmm4CYqho5m GffCcE8hC2OJkYJklarDQIsp0V5yc0QNHV1zZE4BaWijmmY4X76Q+G6QInduAys8 2dKKpRzC8N/pBn2P3s0+3BjzjkV2eQC5FQU4uXQ6q0LacYZUrrb8zJUcW1rCec7h RZ+8dF91HkNnYym3S04m5jcXSPqH3VG86WehVbHtjwrhDST1/Uu/Eexse1I= -----END CERTIFICATE-----Generated at Tue Jul 1 13:10:28 2025 by rpki-client