$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677fcf5a-1ec1-4cd4-8096-ae6b040a7d5a.roa File: 677fcf5a-1ec1-4cd4-8096-ae6b040a7d5a.roa (raw, json) Hash identifier: iEZYTJui1DkytZ0i9sM/lFdOXez1Wrj0bDj+1aHatrE= Subject key identifier: F0:4D:32:82:8D:7A:5E:61:69:49:38:73:B5:B2:E2:77:1D:0C:7C:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A2A84EF2DCCDF2C62600D37D086F68EBDF56E11 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677fcf5a-1ec1-4cd4-8096-ae6b040a7d5a.roa Signing time: Fri 27 Jun 2025 00:11:29 +0000 ROA not before: Fri 27 Jun 2025 00:11:29 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2a:84:ef:2d:cc:df:2c:62:60:0d:37:d0:86:f6:8e:bd:f5:6e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:11:29 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=0ae5da7dfbde0b0296c71eb803c1503efa8d9663d704461a7c1b8cb9d618cd12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:4c:93:25:91:30:a1:e6:3a:89:c6:27:88: 9e:57:fe:c0:57:86:a6:45:b4:1e:f3:27:6c:b9:65: ba:43:53:f7:7d:50:52:57:1b:05:ef:91:da:6d:9a: fb:9c:95:94:9a:71:70:5d:82:63:64:a9:40:8b:00: ba:14:48:5e:21:0e:4d:79:05:e8:91:ac:f5:a2:ab: d5:84:a1:09:90:27:c0:f6:a9:f1:1f:12:38:67:18: ab:15:54:3a:72:10:ba:4f:ee:fb:72:94:e6:04:68: db:e5:ae:23:37:25:5d:7d:6c:00:b0:ab:33:24:48: aa:8f:3c:e1:44:29:6e:a0:bb:02:80:f7:c5:5b:1d: 84:04:74:67:48:08:a8:ec:52:10:d7:da:95:01:4d: b4:8f:de:69:9f:4a:e9:72:5c:0e:be:93:7a:47:10: ad:ed:43:57:77:a6:36:02:85:94:c6:b2:0f:dd:f8: f0:e5:e2:ae:99:2c:69:a7:2c:1c:36:80:bb:4f:c9: 97:ee:86:71:99:d0:05:cc:c0:62:f2:1f:b6:35:2a: 3c:7e:af:74:0c:a0:99:bd:30:e0:c0:89:74:7d:16: ed:b7:57:2e:df:65:4c:7f:fb:52:da:9f:08:a3:00: 35:b7:02:7b:e1:1b:bb:39:a5:0c:14:01:32:ca:49: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:32:82:8D:7A:5E:61:69:49:38:73:B5:B2:E2:77:1D:0C:7C:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677fcf5a-1ec1-4cd4-8096-ae6b040a7d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption b1:1f:b0:e8:23:57:9b:bd:94:37:1a:c7:a9:a5:89:08:c0:0a: d1:09:fa:3b:a3:2a:ba:73:af:f9:32:a8:77:72:d6:a4:48:26: c4:37:a0:32:be:22:cb:6f:b0:b8:a5:2d:cf:ca:46:e6:a1:1e: cf:c4:3e:e0:7c:7a:81:23:7e:69:6d:63:54:0e:37:c0:ba:0e: 67:24:88:dd:bb:38:4f:ba:b3:b2:eb:4f:8d:eb:c7:b7:1e:e5: 61:9c:f6:54:bb:13:79:17:7e:0a:99:82:e4:21:db:7d:37:d2: c4:c7:f6:71:84:66:50:8a:c9:80:3a:29:38:ef:fa:d6:59:e0: 3b:b2:74:4b:ec:69:17:b8:25:29:27:7c:3e:d4:0e:8e:8b:76: 5c:7d:1e:cf:93:7f:f6:97:d7:fa:ea:85:35:1c:c9:15:0e:51: 38:03:39:9b:b2:5c:b8:25:f5:ac:0d:b9:5e:33:44:66:01:e1: 08:5f:4d:9f:a0:34:1f:52:c9:31:1c:43:8c:c1:0b:d1:35:20: 3b:a6:74:5a:0d:99:f7:28:57:9c:9b:85:dc:04:34:59:d2:ea: 53:d7:d2:5e:49:05:62:0a:8a:d6:1e:43:28:f4:f4:ad:e0:f5: 91:53:3c:bb:2e:cf:24:ad:e5:39:bf:6a:8e:9f:87:8c:98:ee: 40:86:9b:f0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKiqE7y3M3yxiYA030Ib2jr31bhEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAxMTI5WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWU1ZGE3ZGZiZGUwYjAyOTZjNzFlYjgwM2MxNTAzZWZh OGQ5NjYzZDcwNDQ2MWE3YzFiOGNiOWQ2MThjZDEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNWUyTJZEwoeY6icYniJ5X/sBXhqZFtB7zJ2y5ZbpDU/d9 UFJXGwXvkdptmvuclZSacXBdgmNkqUCLALoUSF4hDk15BeiRrPWiq9WEoQmQJ8D2 qfEfEjhnGKsVVDpyELpP7vtylOYEaNvlriM3JV19bACwqzMkSKqPPOFEKW6guwKA 98VbHYQEdGdICKjsUhDX2pUBTbSP3mmfSulyXA6+k3pHEK3tQ1d3pjYChZTGsg/d +PDl4q6ZLGmnLBw2gLtPyZfuhnGZ0AXMwGLyH7Y1Kjx+r3QMoJm9MODAiXR9Fu23 Vy7fZUx/+1LanwijADW3AnvhG7s5pQwUATLKSY4PAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8E0ygo16XmFpSThztbLidx0MfAEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3N2ZjZjVhLTFlYzEtNGNkNC04MDk2LWFlNmIwNDBhN2Q1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCP3TANBgkqhkiG9w0BAQsFAAOCAQEAsR+w6CNXm72UNxrHqaWJCMAK0Qn6 O6MqunOv+TKod3LWpEgmxDegMr4iy2+wuKUtz8pG5qEez8Q+4Hx6gSN+aW1jVA43 wLoOZySI3bs4T7qzsutPjevHtx7lYZz2VLsTeRd+CpmC5CHbfTfSxMf2cYRmUIrJ gDopOO/61lngO7J0S+xpF7glKSd8PtQOjot2XH0ez5N/9pfX+uqFNRzJFQ5ROAM5 m7JcuCX1rA25XjNEZgHhCF9Nn6A0H1LJMRxDjMEL0TUgO6Z0Wg2Z9yhXnJuF3AQ0 WdLqU9fSXkkFYgqK1h5DKPT0reD1kVM8uy7PJK3lOb9qjp+HjJjuQIab8A== -----END CERTIFICATE-----Generated at Mon Jun 30 14:55:08 2025 by rpki-client