$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa File: 75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa (raw, json) Hash identifier: p74xFojXbM4syzhCIRVLf7jNzde2AKHaxr2ic6NRyDY= Subject key identifier: D0:34:6B:47:F4:30:5C:6D:F8:4F:95:5A:31:D3:AF:32:9D:05:E8:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47BA7BCD3954F5262793B14F8C4BC9B5385329C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa Signing time: Wed 25 Jun 2025 00:11:32 +0000 ROA not before: Wed 25 Jun 2025 00:11:32 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.238.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ba:7b:cd:39:54:f5:26:27:93:b1:4f:8c:4b:c9:b5:38:53:29:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 25 00:11:32 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=c695ae29b63f3b6aee38de8e2670c2c95189f8922dc7c11a02897907bbd88bfc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:78:ac:d4:70:52:63:80:91:c1:ee:14:ab: ea:84:1c:63:ba:1e:0a:85:6f:29:ce:45:43:98:82: a4:47:65:61:7a:c8:12:07:59:5d:9c:7d:33:e2:a2: e5:4c:a1:14:c6:78:56:ae:5b:41:eb:dc:7f:b1:f1: 8b:30:93:e4:16:20:ae:2c:c5:b5:40:05:68:e3:ce: 2a:92:ed:83:24:a3:a7:33:d6:28:79:95:3a:15:de: f5:30:a1:37:11:7e:3a:0e:72:8f:1d:09:e8:24:65: 84:83:42:1a:cb:99:76:0c:2b:8b:c6:92:cc:7d:32: 59:7b:3a:73:ae:c1:09:a7:cc:b8:7d:93:fb:05:38: 36:ce:e8:3a:5a:81:2f:da:dd:a7:6a:1c:9c:d9:73: f9:94:cd:11:52:8f:e5:b8:be:a5:16:d5:9a:8e:a0: 07:fa:92:40:c2:1f:da:9c:7e:8d:7d:bb:64:4c:fc: 12:05:9c:8f:fc:94:91:6e:6f:46:7a:e1:7d:48:16: 55:c6:8f:33:d0:b4:e2:bb:8b:f1:ef:e4:1c:1e:88: 7b:3c:76:7e:6c:f0:93:8e:a1:b2:7d:30:5b:6f:12: 4b:90:c9:58:d2:ea:30:ed:52:96:39:93:8e:0b:5d: 06:62:57:d6:0e:e4:f4:3c:3f:8e:18:f1:91:94:3a: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:6B:47:F4:30:5C:6D:F8:4F:95:5A:31:D3:AF:32:9D:05:E8:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.238.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:f5:4e:c2:f0:3a:40:2f:83:98:aa:96:68:10:b3:69:be:cd: ea:f7:3e:0e:17:4b:6f:3e:b2:8a:2d:d1:c7:d9:82:de:a4:c9: eb:da:ef:94:e5:6d:2c:24:c1:fa:b0:db:31:6d:77:0d:9c:42: 5f:ca:bc:4c:0a:c6:a1:23:dd:5f:23:3f:09:c4:28:97:46:9b: 7d:fb:95:d6:09:f1:7e:93:93:d2:f2:a0:97:82:32:22:39:39: e4:68:ea:37:63:b0:6c:f1:c2:8e:de:f3:d6:91:31:f8:fd:57: be:bc:e4:52:d6:d4:6d:cd:3f:2c:7f:20:b9:c0:d7:38:79:22: 3a:f1:68:db:ed:43:7f:bd:f3:a9:e7:f5:67:0e:c7:7e:7a:7a: eb:2c:08:ea:91:41:6a:67:e0:21:3e:ac:93:32:a8:bb:4b:75: 7d:1f:ba:f0:a9:6b:66:20:5b:bc:65:4b:3e:76:dc:4a:be:de: 1a:e3:51:4f:a1:05:19:eb:23:0f:89:54:ba:68:28:20:d0:2d: f4:c8:ed:74:23:5f:b1:54:1a:9a:37:41:bd:86:df:04:6a:59: 48:bd:12:1d:e5:98:b2:d1:76:70:f4:0d:0f:a4:97:93:c9:23: 47:f3:14:92:77:26:cb:d3:ed:cf:b8:c0:54:05:b7:40:8f:3d: c3:fe:9b:d7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR7p7zTlU9SYnk7FPjEvJtThTKcIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI1MDAxMTMyWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjk1YWUyOWI2M2YzYjZhZWUzOGRlOGUyNjcwYzJjOTUx ODlmODkyMmRjN2MxMWEwMjg5NzkwN2JiZDg4YmZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2vXis1HBSY4CRwe4Uq+qEHGO6HgqFbynORUOYgqRHZWF6 yBIHWV2cfTPiouVMoRTGeFauW0Hr3H+x8Yswk+QWIK4sxbVABWjjziqS7YMko6cz 1ih5lToV3vUwoTcRfjoOco8dCegkZYSDQhrLmXYMK4vGksx9Mll7OnOuwQmnzLh9 k/sFODbO6DpagS/a3adqHJzZc/mUzRFSj+W4vqUW1ZqOoAf6kkDCH9qcfo19u2RM /BIFnI/8lJFub0Z64X1IFlXGjzPQtOK7i/Hv5BweiHs8dn5s8JOOobJ9MFtvEkuQ yVjS6jDtUpY5k44LXQZiV9YO5PQ8P44Y8ZGUOn/5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0DRrR/QwXG34T5VaMdOvMp0F6NowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1ZDAxYWZlLTE1NDItNGFiNy1hYWI5LTljMjhlMDc4ZWEwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo7jANBgkqhkiG9w0BAQsFAAOCAQEABvVOwvA6QC+DmKqWaBCzab7N6vc+ DhdLbz6yii3Rx9mC3qTJ69rvlOVtLCTB+rDbMW13DZxCX8q8TArGoSPdXyM/CcQo l0abffuV1gnxfpOT0vKgl4IyIjk55GjqN2OwbPHCjt7z1pEx+P1XvrzkUtbUbc0/ LH8gucDXOHkiOvFo2+1Df73zqef1Zw7Hfnp66ywI6pFBamfgIT6skzKou0t1fR+6 8KlrZiBbvGVLPnbcSr7eGuNRT6EFGesjD4lUumgoINAt9MjtdCNfsVQamjdBvYbf BGpZSL0SHeWYstF2cPQND6SXk8kjR/MUkncmy9Ptz7jAVAW3QI89w/6b1w== -----END CERTIFICATE-----Generated at Tue Jul 1 07:52:18 2025 by rpki-client