$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa File: 56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa (raw, json) Hash identifier: chgebqusSNhl592usi7EsW+jvcNAEkBaIIMw2AjJYKY= Subject key identifier: 5A:33:05:2D:F7:79:6E:12:E5:38:BE:FC:11:40:39:98:50:A3:53:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A4FC0B6A4F1E5CCBD506C1A87E255791AE4A5CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa Signing time: Mon 23 Jun 2025 15:10:33 +0000 ROA not before: Mon 23 Jun 2025 15:10:33 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.40.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4f:c0:b6:a4:f1:e5:cc:bd:50:6c:1a:87:e2:55:79:1a:e4:a5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:10:33 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=908215fe9e59c379872a1aa5be61dc139fef7890028293c2c16f7c3943147f49, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:62:e4:74:04:36:10:56:93:00:5c:63:81: 58:2f:b9:e9:51:47:be:14:14:19:64:1b:09:a1:e9: 1c:4a:d7:f1:66:ef:4f:e0:4c:f8:67:1f:4b:59:bc: ef:a6:cb:c8:14:7b:98:56:b1:e1:21:0c:47:86:d8: 5b:17:b7:f4:05:73:fa:24:7d:f4:e5:1e:05:b9:d7: 37:35:69:aa:6e:03:75:f7:c2:3a:02:f3:cd:8c:3e: 85:29:9d:2a:b1:4f:0e:07:36:21:53:94:6b:06:cf: 6d:3f:d1:25:b0:2a:4e:06:cb:64:d9:f2:26:88:52: ce:c8:b4:8b:40:4d:d1:f7:a8:8e:05:d6:91:7b:2f: ce:e0:0a:b8:bf:6f:6d:ea:82:f9:ce:ea:93:48:fd: d5:d7:df:78:2d:bd:94:c4:8e:2e:47:4b:8d:d3:08: 5f:7d:fa:e1:03:d0:c3:74:80:65:ae:e8:bf:fc:f5: 1b:81:0c:f1:55:ac:b8:81:14:42:5d:3f:bc:16:e9: 77:3c:05:ac:69:ff:80:ef:6f:50:d8:84:f0:5f:7d: f5:b8:d0:3a:fd:77:53:81:1b:54:3d:4e:02:7e:fb: 96:20:09:d5:a6:3a:25:d8:4d:d6:b7:86:a6:44:50: f5:ac:0a:c5:f9:c0:e7:3e:60:74:7a:39:e6:5a:e8: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:05:2D:F7:79:6E:12:E5:38:BE:FC:11:40:39:98:50:A3:53:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.40.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3b:e0:4f:95:bc:83:7f:d4:ac:b0:35:e3:0a:eb:3d:ae:b0:9b: 8c:05:5b:cb:e1:75:a8:d1:60:a4:e8:e9:29:77:a1:bf:e7:82: b8:97:6e:41:f3:90:aa:d2:65:02:31:bb:aa:67:90:c3:29:ae: 00:1c:7c:ef:05:d1:79:35:95:d7:51:ac:4d:99:64:ff:63:42: e3:58:8b:51:de:0c:f1:28:d5:f1:c4:db:53:af:6d:f3:de:6d: 51:2a:af:a1:35:8a:b4:20:38:7a:5f:b7:1c:61:e9:41:18:63: e2:1f:35:cb:9a:06:5b:55:d4:fb:0e:cf:47:b7:43:4b:1c:86: 95:20:88:e9:8c:07:01:ed:c1:3c:5f:9e:b2:40:b8:55:8c:d3: bf:e2:f8:ab:40:23:77:78:3a:1f:f8:fd:d4:3c:e5:0c:66:d0: f2:eb:5b:11:44:b0:1a:f1:bd:8d:ca:4e:90:7c:d1:fd:d3:40: 25:d0:e1:34:ed:b0:18:a7:09:04:fb:2b:e8:15:11:a4:8b:73: 2e:77:60:71:38:ac:53:da:7f:f2:c1:61:68:05:37:12:ad:06: fd:6d:6a:40:4c:97:2f:ec:46:cf:c9:54:f6:42:d5:fa:72:72: 9e:2b:23:8a:6e:c7:61:14:96:eb:a3:ec:a3:af:d5:2c:8d:37: 7b:b8:87:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUak/AtqTx5cy9UGwah+JVeRrkpcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUxMDMzWhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDgyMTVmZTllNTljMzc5ODcyYTFhYTViZTYxZGMxMzlm ZWY3ODkwMDI4MjkzYzJjMTZmN2MzOTQzMTQ3ZjQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOKmLkdAQ2EFaTAFxjgVgvuelRR74UFBlkGwmh6RxK1/Fm 70/gTPhnH0tZvO+my8gUe5hWseEhDEeG2FsXt/QFc/okffTlHgW51zc1aapuA3X3 wjoC882MPoUpnSqxTw4HNiFTlGsGz20/0SWwKk4Gy2TZ8iaIUs7ItItATdH3qI4F 1pF7L87gCri/b23qgvnO6pNI/dXX33gtvZTEji5HS43TCF99+uED0MN0gGWu6L/8 9RuBDPFVrLiBFEJdP7wW6Xc8Baxp/4Dvb1DYhPBfffW40Dr9d1OBG1Q9TgJ++5Yg CdWmOiXYTda3hqZEUPWsCsX5wOc+YHR6OeZa6J45AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWjMFLfd5bhLlOL78EUA5mFCjU4AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2YTRjOTBlLWQ1YzItNDc1ZC1hNGU5LTdhZTZmNDcwZGM3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYKIAwDQYJKoZIhvcNAQELBQADggEBADvgT5W8g3/UrLA14wrrPa6wm4wF W8vhdajRYKTo6Sl3ob/ngriXbkHzkKrSZQIxu6pnkMMprgAcfO8F0Xk1lddRrE2Z ZP9jQuNYi1HeDPEo1fHE21OvbfPebVEqr6E1irQgOHpftxxh6UEYY+IfNcuaBltV 1PsOz0e3Q0schpUgiOmMBwHtwTxfnrJAuFWM07/i+KtAI3d4Oh/4/dQ85Qxm0PLr WxFEsBrxvY3KTpB80f3TQCXQ4TTtsBinCQT7K+gVEaSLcy53YHE4rFPaf/LBYWgF NxKtBv1takBMly/sRs/JVPZC1fpycp4rI4pux2EUluuj7KOv1SyNN3u4hyg= -----END CERTIFICATE-----Generated at Tue Jul 1 04:26:42 2025 by rpki-client