$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa File: 59b45e95-5c92-40c2-8378-600986966c75.roa (raw, json) Hash identifier: JQOlQ/yYqKjk859wWtSS+WlBOGsus9ZT5vSiY+LduNQ= Subject key identifier: D8:10:2C:70:A3:D1:40:66:74:61:F4:CF:0B:7C:84:18:34:B5:9D:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29E8C1327DE0A6FFFB431C89A374DCF2F01AA537 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa Signing time: Mon 23 Jun 2025 15:51:13 +0000 ROA not before: Mon 23 Jun 2025 15:51:13 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.0.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e8:c1:32:7d:e0:a6:ff:fb:43:1c:89:a3:74:dc:f2:f0:1a:a5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:51:13 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=314613bd56cdadc723d1671ddd8ce12563d1c29da532fd5aa6fca2c9119198d9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:53:09:57:b9:3b:36:80:bf:2e:d9:8c:92: ec:b2:c2:17:7c:fe:81:fc:b0:02:79:39:81:0f:8d: aa:44:1c:5d:36:9a:d0:83:5f:c5:ad:cf:2b:4f:10: 95:82:5c:ee:d6:a8:08:45:83:90:a5:a1:e5:d6:84: d8:08:97:d3:ae:22:8b:0c:6c:f0:21:bb:52:01:05: 2a:6b:d7:5c:ef:c9:3f:d5:bf:63:ec:67:b7:57:ca: 0b:ad:3d:0a:4b:92:15:c4:09:05:98:34:e2:6c:56: 6d:25:da:9d:41:f0:3b:5e:64:d0:4b:d2:08:71:d5: c0:0e:a7:3e:6c:f3:6a:10:35:af:2d:95:c4:97:21: 40:01:78:22:03:81:fd:ac:3e:92:32:dc:94:19:01: ca:c6:d9:5b:c0:c0:bc:80:28:20:65:26:61:48:2b: 60:8a:d6:ca:1d:01:75:65:b0:17:c7:b3:d2:c7:4f: eb:51:aa:e9:04:47:92:c6:7c:4d:08:91:ec:87:ca: ba:76:5b:a1:e3:c5:ca:97:1d:dc:3d:9d:25:3c:e9: c5:e9:cf:2a:59:24:9f:72:05:f0:04:55:bc:fd:ed: 10:72:53:b7:6d:11:20:c8:c3:86:9f:a1:5a:b9:9c: b1:af:de:31:de:21:a2:6b:bb:b8:b5:8f:b2:f4:3b: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:10:2C:70:A3:D1:40:66:74:61:F4:CF:0B:7C:84:18:34:B5:9D:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59b45e95-5c92-40c2-8378-600986966c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.102.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:42:b2:8d:08:79:0e:92:b1:c8:97:38:4b:3d:72:da:ab:35: b0:8f:32:9d:d1:35:7f:17:12:a3:c2:d7:df:f3:c6:7c:28:80: fb:e8:c6:df:62:cf:bb:ea:ff:4b:46:04:48:51:1b:0f:4f:fb: 3e:b1:3d:55:2d:37:4d:cd:e0:88:b2:d5:ab:69:5e:64:c2:e5: f2:9e:d8:7b:f6:2f:b2:71:72:64:d3:14:fe:5f:89:4b:7f:e7: a6:84:49:e6:5c:19:dc:36:db:25:9e:ff:12:a2:c8:e2:a8:11: b5:20:f8:bf:19:e2:7d:3b:9a:43:b0:50:c2:21:e6:f8:f1:ff: 14:63:c2:d8:a0:1a:09:0a:56:a8:91:3e:07:5d:c3:52:6d:a1: 2e:00:90:73:16:9a:85:c1:64:9f:31:ee:3a:86:58:70:fb:83: d9:15:7a:e2:e0:6d:fc:4f:03:a3:23:0a:87:01:35:54:a4:42: c8:fc:fd:9c:86:02:b9:3a:8e:40:f0:9b:76:86:9e:ae:17:3e: 03:7a:0f:ea:36:19:0b:a6:8d:02:1e:cb:c5:a5:a9:55:ef:26: 6a:46:f7:7f:77:95:9a:5e:fb:0c:43:14:fe:7b:75:0e:72:61: c1:5d:4d:33:29:03:c8:13:e5:74:f4:b4:c2:a5:12:19:6e:4e: 02:77:82:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKejBMn3gpv/7QxyJo3Tc8vAapTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTU1MTEzWhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTQ2MTNiZDU2Y2RhZGM3MjNkMTY3MWRkZDhjZTEyNTYz ZDFjMjlkYTUzMmZkNWFhNmZjYTJjOTExOTE5OGQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoslMJV7k7NoC/LtmMkuyywhd8/oH8sAJ5OYEPjapEHF02 mtCDX8WtzytPEJWCXO7WqAhFg5CloeXWhNgIl9OuIosMbPAhu1IBBSpr11zvyT/V v2PsZ7dXygutPQpLkhXECQWYNOJsVm0l2p1B8DteZNBL0ghx1cAOpz5s82oQNa8t lcSXIUABeCIDgf2sPpIy3JQZAcrG2VvAwLyAKCBlJmFIK2CK1sodAXVlsBfHs9LH T+tRqukER5LGfE0IkeyHyrp2W6HjxcqXHdw9nSU86cXpzypZJJ9yBfAEVbz97RBy U7dtESDIw4afoVq5nLGv3jHeIaJru7i1j7L0O3pRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2BAscKPRQGZ0YfTPC3yEGDS1nekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5YjQ1ZTk1LTVjOTItNDBjMi04Mzc4LTYwMDk4Njk2NmM3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgAGYwDQYJKoZIhvcNAQELBQADggEBAE9Cso0IeQ6SsciXOEs9ctqrNbCP Mp3RNX8XEqPC19/zxnwogPvoxt9iz7vq/0tGBEhRGw9P+z6xPVUtN03N4Iiy1atp XmTC5fKe2Hv2L7JxcmTTFP5fiUt/56aESeZcGdw22yWe/xKiyOKoEbUg+L8Z4n07 mkOwUMIh5vjx/xRjwtigGgkKVqiRPgddw1JtoS4AkHMWmoXBZJ8x7jqGWHD7g9kV euLgbfxPA6MjCocBNVSkQsj8/ZyGArk6jkDwm3aGnq4XPgN6D+o2GQumjQIey8Wl qVXvJmpG9393lZpe+wxDFP57dQ5yYcFdTTMpA8gT5XT0tMKlEhluTgJ3gok= -----END CERTIFICATE-----Generated at Wed Jul 2 22:46:38 2025 by rpki-client