$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa File: 671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa (raw, json) Hash identifier: ytStCL8H6tsBMr0pB533v85VJqkMl1cRC1fH32nkkrY= Subject key identifier: 1F:7B:72:45:D3:C4:54:5E:9C:10:65:8D:AE:3E:52:38:43:83:F4:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1174297B5DA6C5F95356E7D4F414125B640AEE31 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa Signing time: Mon 16 Jun 2025 15:51:31 +0000 ROA not before: Mon 16 Jun 2025 15:51:31 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:74:29:7b:5d:a6:c5:f9:53:56:e7:d4:f4:14:12:5b:64:0a:ee:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:51:31 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=cda695cf828577a9625f4411fa2d8df37566d95328e929ff67a4513edf8b4801, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:7a:54:58:fd:92:ab:2b:3d:64:38:e0:da: f3:04:a1:f7:54:41:80:3c:cd:a7:53:18:cd:8a:59: 77:67:91:84:af:71:c4:68:e6:07:9b:2b:29:dc:1c: 00:d9:e7:ae:bc:12:e3:71:c9:e0:52:91:17:07:5e: 4f:66:aa:3f:86:e3:1f:92:11:ed:1d:a4:6b:96:f8: 4b:65:b5:d1:f9:5d:8b:15:b6:e9:5b:c5:06:b1:f9: 6a:44:4c:19:82:43:78:76:c9:e9:0d:11:17:5d:33: d6:5f:71:4f:df:e9:7b:7c:97:36:cb:3f:2a:d6:fd: 0e:b3:5b:21:5e:ff:21:d1:f4:10:00:1e:26:4a:7a: 13:69:a3:4e:a5:2b:5e:d6:ac:cf:11:24:aa:fb:fa: 67:94:d3:0a:db:59:38:3a:a1:3f:dd:e3:11:f0:6e: f1:4f:88:23:5e:df:23:cf:6b:ad:d3:b7:c7:7e:4c: dd:c4:20:33:32:bd:21:bb:be:db:27:24:ac:a7:0e: 1b:36:1c:1e:8d:69:55:20:88:44:8d:2f:cb:18:b4: 83:77:c0:71:cf:c7:64:81:41:90:8b:ed:ec:86:4d: d3:85:63:cf:a7:a0:e7:92:a7:bb:54:37:52:67:ea: 9c:d0:d8:a2:be:b1:28:d6:af:2b:22:58:b7:54:04: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7B:72:45:D3:C4:54:5E:9C:10:65:8D:AE:3E:52:38:43:83:F4:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.154.0/23 Signature Algorithm: sha256WithRSAEncryption 34:42:b6:c4:a3:8d:fe:bf:e5:06:5c:34:12:c8:a6:70:43:58: 4f:d4:33:81:b4:ea:d6:76:b5:1b:6d:bc:e8:5c:fe:c1:71:0d: 63:17:11:10:04:0b:9a:50:b7:05:cc:7b:0b:46:fd:8c:fd:ab: 36:b3:f5:4e:3e:fb:fd:8a:d8:89:41:cb:e1:98:14:51:48:9a: ed:4e:67:45:ff:a2:a9:ab:bd:9c:ef:a0:42:e2:ad:5c:86:e9: 55:38:64:21:44:1e:57:98:e8:f4:3f:bb:b4:0a:ce:ca:e3:92: 6a:d0:df:6f:02:31:e0:e0:1a:5d:ca:d4:8b:e1:05:e1:a8:e9: 42:00:da:0e:c3:15:05:f9:c7:33:ba:b4:7e:f2:5e:78:f0:2e: 83:25:d1:ef:34:4b:37:b0:fe:26:aa:b8:c3:6f:a2:81:ad:5f: b6:50:82:7b:28:93:f7:1d:a3:f3:88:e5:86:9e:7e:36:64:95: 70:48:b5:21:82:40:10:9c:6b:2d:ac:d1:0e:74:b9:ee:14:41: ef:aa:b6:0b:37:e6:e7:b2:7d:1d:67:ea:6a:58:fa:62:cc:63: 4a:f7:e3:da:7b:03:f1:9c:0b:4f:8a:25:49:ab:18:00:96:d6: 57:4f:40:55:81:03:0c:ea:a9:ff:7c:ad:9d:bf:ba:4f:8c:9e: c9:d0:c5:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEXQpe12mxflTVufU9BQSW2QK7jEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTU1MTMxWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGE2OTVjZjgyODU3N2E5NjI1ZjQ0MTFmYTJkOGRmMzc1 NjZkOTUzMjhlOTI5ZmY2N2E0NTEzZWRmOGI0ODAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC87HpUWP2Sqys9ZDjg2vMEofdUQYA8zadTGM2KWXdnkYSv ccRo5gebKyncHADZ5668EuNxyeBSkRcHXk9mqj+G4x+SEe0dpGuW+EtltdH5XYsV tulbxQax+WpETBmCQ3h2yekNERddM9ZfcU/f6Xt8lzbLPyrW/Q6zWyFe/yHR9BAA HiZKehNpo06lK17WrM8RJKr7+meU0wrbWTg6oT/d4xHwbvFPiCNe3yPPa63Tt8d+ TN3EIDMyvSG7vtsnJKynDhs2HB6NaVUgiESNL8sYtIN3wHHPx2SBQZCL7eyGTdOF Y8+noOeSp7tUN1Jn6pzQ2KK+sSjWrysiWLdUBNozAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH3tyRdPEVF6cEGWNrj5SOEOD9I0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTgxMmI3LTBhZWItNGE3YS04NjJmLTFmZDFhMzdhNjhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpowDQYJKoZIhvcNAQELBQADggEBADRCtsSjjf6/5QZcNBLIpnBDWE/U M4G06tZ2tRttvOhc/sFxDWMXERAEC5pQtwXMewtG/Yz9qzaz9U4++/2K2IlBy+GY FFFImu1OZ0X/oqmrvZzvoELirVyG6VU4ZCFEHleY6PQ/u7QKzsrjkmrQ328CMeDg Gl3K1IvhBeGo6UIA2g7DFQX5xzO6tH7yXnjwLoMl0e80Szew/iaquMNvooGtX7ZQ gnsok/cdo/OI5YaefjZklXBItSGCQBCcay2s0Q50ue4UQe+qtgs35ueyfR1n6mpY +mLMY0r349p7A/GcC0+KJUmrGACW1ldPQFWBAwzqqf98rZ2/uk+MnsnQxWw= -----END CERTIFICATE-----Generated at Sun Jun 29 08:13:07 2025 by rpki-client