$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa File: 7671e404-27d3-4739-9da3-e9ffff3d4e14.roa (raw, json) Hash identifier: obOpLG63LkE8g/jiprwD/HSz1dnjXZDwY49AKhkkcRk= Subject key identifier: A4:E1:E7:93:42:1A:44:0C:00:45:B5:48:69:40:6E:66:D1:C6:52:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50EEEEF0A68F600C74064D17993F39817CD91BD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa Signing time: Mon 23 Jun 2025 15:51:27 +0000 ROA not before: Mon 23 Jun 2025 15:51:27 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.76.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ee:ee:f0:a6:8f:60:0c:74:06:4d:17:99:3f:39:81:7c:d9:1b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:51:27 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=195443c399ae75c0fd522ba93f67ea5ca73a09f121f5e116a9832c2a346c98cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:64:e1:6b:a8:22:6d:f8:79:2d:3a:34:c8: 16:e9:67:fc:22:ab:a3:83:ee:bb:46:5f:09:37:0a: 2f:1c:0d:04:48:2c:98:ba:6b:ed:f9:ee:ad:a3:e0: 3b:7f:22:22:05:13:a7:13:23:1f:31:ae:3e:a9:e9: 01:92:7c:72:52:74:27:dd:b1:2f:14:9c:10:88:82: d2:4e:ac:4e:c9:c2:b1:19:67:3e:a9:2d:77:9d:39: bd:c9:31:64:6e:97:65:f9:dd:c1:09:7b:3d:54:76: a1:51:68:43:b6:7b:7c:97:1b:56:42:5e:eb:80:2d: e0:68:b5:7a:c1:96:23:a5:40:da:c4:f3:01:c7:97: 4c:65:4c:f4:2c:0b:84:66:66:9f:45:a9:36:ec:83: b1:e6:ca:9b:30:39:80:7b:e8:18:98:e7:5a:b1:ab: 4a:e7:88:a8:93:dd:02:9b:8d:a7:74:e0:9e:39:ec: 16:dc:98:ff:9b:15:03:78:de:b5:9d:dc:31:81:60: e0:c4:75:85:e1:4c:5d:c4:c0:70:8e:73:f1:67:52: 25:20:7f:0e:ff:67:b7:2f:ac:d6:c8:71:4b:32:af: b3:e1:79:11:2c:93:41:58:c3:54:2b:ff:4e:ff:8b: f4:e8:11:c8:e5:84:97:e7:d8:13:b9:1a:2e:80:45: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E1:E7:93:42:1A:44:0C:00:45:B5:48:69:40:6E:66:D1:C6:52:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.76.64.0/18 Signature Algorithm: sha256WithRSAEncryption 32:77:34:c5:2d:9e:e5:d3:a6:f6:6a:c8:8b:6c:e1:5a:f3:b4: 7f:03:a6:ec:c0:95:95:4a:61:95:15:78:12:5f:35:43:43:bc: b3:e3:42:29:1f:9c:ed:38:45:15:89:06:03:b8:08:3e:fe:fd: 5f:70:b7:a0:4b:b5:77:68:40:69:95:52:5f:a5:ed:09:23:34: bf:d8:5d:fa:0a:9a:30:81:fd:d6:ce:6f:1f:d6:7a:cf:4e:c6: 68:bf:7a:d4:fe:74:b5:b7:77:3d:fb:67:6d:ef:e8:31:a2:e0: ef:df:72:96:56:2f:60:ea:f4:0b:ef:cf:c0:f4:04:34:33:f4: bd:ed:d8:dd:e3:cf:48:32:cd:98:3e:b7:a8:72:42:a6:fe:af: 88:e4:57:82:c5:d6:44:5b:37:73:1e:69:0a:82:03:43:fc:8c: 00:4d:53:cd:d7:fa:3a:b2:a8:77:8d:e1:74:ff:3c:2c:ea:bf: b4:5c:c1:b4:46:1d:6e:f4:62:0f:a2:b2:b7:c4:1c:d0:cf:0b: ab:64:83:41:b5:42:26:44:3d:df:cc:65:d5:27:7b:5d:80:6a: b7:69:dd:d5:e2:2f:e9:b4:c6:2e:c5:45:2f:4b:b5:de:06:8e: c8:89:e7:96:68:74:80:9b:ec:55:48:5a:8b:75:f4:7b:30:05: d1:56:7f:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUO7u8KaPYAx0Bk0XmT85gXzZG9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTU1MTI3WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTU0NDNjMzk5YWU3NWMwZmQ1MjJiYTkzZjY3ZWE1Y2E3 M2EwOWYxMjFmNWUxMTZhOTgzMmMyYTM0NmM5OGNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkImTha6gibfh5LTo0yBbpZ/wiq6OD7rtGXwk3Ci8cDQRI LJi6a+357q2j4Dt/IiIFE6cTIx8xrj6p6QGSfHJSdCfdsS8UnBCIgtJOrE7JwrEZ Zz6pLXedOb3JMWRul2X53cEJez1UdqFRaEO2e3yXG1ZCXuuALeBotXrBliOlQNrE 8wHHl0xlTPQsC4RmZp9FqTbsg7HmypswOYB76BiY51qxq0rniKiT3QKbjad04J45 7BbcmP+bFQN43rWd3DGBYODEdYXhTF3EwHCOc/FnUiUgfw7/Z7cvrNbIcUsyr7Ph eREsk0FYw1Qr/07/i/ToEcjlhJfn2BO5Gi6ARc7lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpOHnk0IaRAwARbVIaUBuZtHGUmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2NzFlNDA0LTI3ZDMtNDczOS05ZGEzLWU5ZmZmZjNkNGUxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTEAwDQYJKoZIhvcNAQELBQADggEBADJ3NMUtnuXTpvZqyIts4VrztH8D puzAlZVKYZUVeBJfNUNDvLPjQikfnO04RRWJBgO4CD7+/V9wt6BLtXdoQGmVUl+l 7QkjNL/YXfoKmjCB/dbObx/Wes9Oxmi/etT+dLW3dz37Z23v6DGi4O/fcpZWL2Dq 9Avvz8D0BDQz9L3t2N3jz0gyzZg+t6hyQqb+r4jkV4LF1kRbN3MeaQqCA0P8jABN U83X+jqyqHeN4XT/PCzqv7RcwbRGHW70Yg+isrfEHNDPC6tkg0G1QiZEPd/MZdUn e12Aardp3dXiL+m0xi7FRS9Ltd4GjsiJ55ZodICb7FVIWot19HswBdFWf0E= -----END CERTIFICATE-----Generated at Sun Jun 29 21:10:32 2025 by rpki-client