$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d04b0e4-837e-48e2-8421-7a3811b9eeeb.roa File: 7d04b0e4-837e-48e2-8421-7a3811b9eeeb.roa (raw, json) Hash identifier: 85SitLzZb3G38qCr8dVcC9NWrnS1zZ+OPS0yM/BytbU= Subject key identifier: 10:0B:85:60:06:FA:56:41:C1:9D:39:25:32:B2:D2:60:2F:FA:0F:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1159F1C1FAF52374374DB17FFCDA0901CE4F951B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d04b0e4-837e-48e2-8421-7a3811b9eeeb.roa Signing time: Sat 21 Jun 2025 00:11:08 +0000 ROA not before: Sat 21 Jun 2025 00:11:08 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.145.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:59:f1:c1:fa:f5:23:74:37:4d:b1:7f:fc:da:09:01:ce:4f:95:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:11:08 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=567af767feae2a41582ab19c4cfc3b8d5781c5c121da58b0692f83b9a3de234d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:65:a9:20:ea:5e:0f:c2:1d:05:e3:33:b7: 37:b5:55:99:bf:91:4d:5a:a3:5d:58:e9:e8:a4:0f: a2:6a:40:2d:1d:ac:ef:7c:13:78:27:2b:49:43:ac: de:f1:20:70:c7:b6:95:bb:31:b2:16:35:12:93:39: 7a:36:4f:cb:2b:ed:82:a1:f9:52:a2:97:71:dc:99: d3:bc:e4:21:49:8f:6f:e7:89:09:87:fb:bc:fa:87: 87:ed:97:c6:ee:f2:07:75:c5:ed:64:55:f0:d0:df: 04:28:a1:c1:58:79:fa:0e:a5:ec:fa:d1:80:81:1d: 9a:f3:47:fe:ba:ed:17:ef:7c:ab:16:e9:8d:14:84: d5:04:8c:7a:87:7e:6d:5c:21:52:84:ce:3a:82:7a: b5:fc:25:da:ac:07:96:26:c7:c8:6f:3d:ee:bb:3f: df:08:8d:f6:48:cf:4a:99:c0:2c:8e:53:8e:55:4d: 97:9b:23:a8:6f:8d:29:6a:8f:bc:5e:b1:72:6d:c0: f8:2a:0b:dd:36:00:ad:a9:69:d7:41:7c:5c:27:7d: 50:3e:4f:ee:fb:71:0e:4c:65:03:26:b7:4b:0e:35: 03:c3:48:f8:1e:b7:fa:5f:35:f5:f4:8c:7a:d5:26: 36:6d:6f:1b:65:bd:02:2e:74:06:1a:74:b7:21:a6: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:85:60:06:FA:56:41:C1:9D:39:25:32:B2:D2:60:2F:FA:0F:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d04b0e4-837e-48e2-8421-7a3811b9eeeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.145.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:66:82:0b:e2:7c:0f:60:a3:53:02:b7:22:13:58:7a:3c:fa: be:77:9a:5f:ca:f2:10:23:11:6a:e5:e3:46:f3:8a:e7:fa:99: bc:84:d6:40:90:b8:9a:9b:84:16:6b:45:65:43:dc:3d:47:8e: fc:56:dd:46:3f:19:c7:07:73:d7:4f:14:2f:f5:00:65:3e:0f: 3f:86:1f:81:71:a5:73:93:b0:40:53:15:6c:5a:68:84:f1:17: 31:03:44:b0:64:f2:5b:5b:29:3b:1a:5e:54:d2:85:d6:d9:f5: a1:51:0c:a6:95:a7:7c:d8:e7:4e:f7:f0:70:76:db:99:3b:7e: ee:bb:b4:65:8e:33:b4:41:94:0a:e1:a2:29:b8:2d:98:46:48: 16:12:db:40:98:ca:ef:62:a5:f0:a0:90:b6:71:4c:ed:4c:8e: 7f:29:ef:3f:5d:e4:a0:cb:cb:59:ba:e7:ec:53:b5:08:28:ae: 4d:e8:b8:f6:ad:05:96:23:d4:3d:c4:b7:44:49:75:1f:f3:bb: 71:0b:20:32:51:da:7f:96:2e:e3:bf:21:4b:c4:a2:35:c9:ba: 02:6f:ee:4f:a4:3a:91:94:4a:d0:98:b0:92:63:c8:f2:6c:5f: 68:a7:9f:4b:72:50:50:dc:52:c9:76:d5:8a:d3:97:fc:62:0a: b8:aa:c5:47 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEVnxwfr1I3Q3TbF//NoJAc5PlRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAxMTA4WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjdhZjc2N2ZlYWUyYTQxNTgyYWIxOWM0Y2ZjM2I4ZDU3 ODFjNWMxMjFkYTU4YjA2OTJmODNiOWEzZGUyMzRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj7WWpIOpeD8IdBeMztze1VZm/kU1ao11Y6eikD6JqQC0d rO98E3gnK0lDrN7xIHDHtpW7MbIWNRKTOXo2T8sr7YKh+VKil3HcmdO85CFJj2/n iQmH+7z6h4ftl8bu8gd1xe1kVfDQ3wQoocFYefoOpez60YCBHZrzR/667RfvfKsW 6Y0UhNUEjHqHfm1cIVKEzjqCerX8JdqsB5Ymx8hvPe67P98IjfZIz0qZwCyOU45V TZebI6hvjSlqj7xesXJtwPgqC902AK2paddBfFwnfVA+T+77cQ5MZQMmt0sONQPD SPget/pfNfX0jHrVJjZtbxtlvQIudAYadLchpuCtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEAuFYAb6VkHBnTklMrLSYC/6D7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMDRiMGU0LTgzN2UtNDhlMi04NDIxLTdhMzgxMWI5ZWVlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQkTANBgkqhkiG9w0BAQsFAAOCAQEAGWaCC+J8D2CjUwK3IhNYejz6vnea X8ryECMRauXjRvOK5/qZvITWQJC4mpuEFmtFZUPcPUeO/FbdRj8Zxwdz108UL/UA ZT4PP4YfgXGlc5OwQFMVbFpohPEXMQNEsGTyW1spOxpeVNKF1tn1oVEMppWnfNjn TvfwcHbbmTt+7ru0ZY4ztEGUCuGiKbgtmEZIFhLbQJjK72Kl8KCQtnFM7UyOfynv P13koMvLWbrn7FO1CCiuTei49q0FliPUPcS3REl1H/O7cQsgMlHaf5Yu478hS8Si Ncm6Am/uT6Q6kZRK0JiwkmPI8mxfaKefS3JQUNxSyXbVitOX/GIKuKrFRw== -----END CERTIFICATE-----Generated at Sun Jun 29 06:41:07 2025 by rpki-client