$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa File: 881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa (raw, json) Hash identifier: 6TmMj3jLlH9JSXTv2uo4h9R3Z/f0uTasJmrMMrsITzU= Subject key identifier: 15:CE:61:3B:FB:72:62:2F:72:3A:80:1C:4A:A8:4C:D9:75:E5:92:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65D2AB10DB6052D1EE33A5452EE0905A77C00481 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa Signing time: Mon 16 Jun 2025 15:42:28 +0000 ROA not before: Mon 16 Jun 2025 15:42:28 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 72.44.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d2:ab:10:db:60:52:d1:ee:33:a5:45:2e:e0:90:5a:77:c0:04:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:42:28 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=31c4df8ab8988b1ca777a074f867132bcebe3919a01dc334a83803a0dbd42d12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:ba:d0:8f:b7:35:04:48:b8:60:c2:33:b2: 01:14:c5:07:d4:d7:4e:bb:ed:8d:46:bd:1a:e2:d1: e4:9a:af:bc:40:44:a2:6e:c5:03:ce:a1:3d:5b:ca: ae:28:7e:08:5f:37:7e:5d:27:e5:3e:9c:f4:1f:74: d8:37:2f:c4:0e:1b:e3:5b:be:70:74:a1:38:c3:e2: e4:cf:68:9c:2a:73:3c:d8:cd:07:27:b3:a2:9a:c1: 7f:e8:7c:43:86:45:39:9e:15:40:ed:83:9c:8b:61: 71:70:de:fb:af:78:e6:6e:3d:4b:67:fe:40:b0:49: 33:30:ea:89:ba:42:be:fb:c2:e3:60:ec:7f:f8:68: f4:76:db:b3:81:b4:66:90:ba:d8:04:10:84:67:23: 28:8a:81:9f:2c:65:e6:6f:ce:26:01:e3:1e:9b:f8: 5c:44:55:12:04:29:95:5b:a2:92:a0:ff:a1:17:1f: cd:15:f5:ce:eb:98:bc:6b:fd:af:15:6f:30:d7:bc: 5c:ee:5f:89:f6:e2:18:1a:b3:62:40:e7:f5:62:6f: c4:3c:3d:5e:2e:0a:08:a5:c0:3f:6f:39:3a:e6:26: 0d:e7:ed:62:a8:4f:76:e0:18:89:1e:18:3e:d5:be: 23:2c:2c:20:0a:dd:96:f2:77:7f:8b:f0:82:bc:77: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CE:61:3B:FB:72:62:2F:72:3A:80:1C:4A:A8:4C:D9:75:E5:92:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/881c6b9b-594d-4ee7-a6d1-b1e9e6ae935b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.44.40.0/21 Signature Algorithm: sha256WithRSAEncryption 19:12:1f:a1:8d:ae:e5:6e:bb:ed:e0:3f:30:54:4d:93:46:44: 18:26:db:1f:49:32:61:ba:e9:4d:f9:f3:a9:64:cd:57:a7:a5: 45:a1:f4:6a:c0:dd:e6:91:08:d0:cb:58:87:f6:ee:86:92:75: 5a:8e:49:ea:c7:14:15:15:a2:4d:ba:d9:19:a2:0f:e4:a6:1a: 59:70:19:e0:44:b0:99:1e:5d:91:d1:23:59:cc:1f:4a:26:47: 5d:b3:18:3c:a0:b7:9a:b1:51:c8:c3:50:d1:b4:06:9c:fe:47: 42:b1:a2:9a:c4:29:bd:35:10:f7:06:61:d2:86:e8:fc:d2:f4: 93:d4:72:6a:2d:0e:59:a1:ec:a5:83:ac:62:9e:f0:1b:29:32: 04:8d:fb:7d:20:b0:64:05:16:a1:0d:9a:2d:77:db:f2:93:0c: d2:df:c3:50:08:77:9a:c1:ff:9a:85:ce:31:01:ed:21:d6:1c: af:79:00:05:f7:a0:10:11:56:b8:ad:42:1c:e7:dc:37:05:31: b7:41:52:7a:b5:80:65:0d:c2:b1:d0:23:71:e4:8a:b0:47:a0: ef:92:07:db:ef:33:a3:2b:18:a9:f9:e2:17:59:87:88:df:a0: 34:c0:b3:39:37:26:c0:3e:86:da:08:8f:ea:eb:e9:ff:2d:07: ab:dc:9c:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZdKrENtgUtHuM6VFLuCQWnfABIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTU0MjI4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWM0ZGY4YWI4OTg4YjFjYTc3N2EwNzRmODY3MTMyYmNl YmUzOTE5YTAxZGMzMzRhODM4MDNhMGRiZDQyZDEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvc7rQj7c1BEi4YMIzsgEUxQfU10677Y1GvRri0eSar7xA RKJuxQPOoT1byq4ofghfN35dJ+U+nPQfdNg3L8QOG+NbvnB0oTjD4uTPaJwqczzY zQcns6KawX/ofEOGRTmeFUDtg5yLYXFw3vuveOZuPUtn/kCwSTMw6om6Qr77wuNg 7H/4aPR227OBtGaQutgEEIRnIyiKgZ8sZeZvziYB4x6b+FxEVRIEKZVbopKg/6EX H80V9c7rmLxr/a8VbzDXvFzuX4n24hgas2JA5/Vib8Q8PV4uCgilwD9vOTrmJg3n 7WKoT3bgGIkeGD7VviMsLCAK3Zbyd3+L8IK8d/Q1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFc5hO/tyYi9yOoAcSqhM2XXlklswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4MWM2YjliLTU5NGQtNGVlNy1hNmQxLWIxZTllNmFlOTM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANILCgwDQYJKoZIhvcNAQELBQADggEBABkSH6GNruVuu+3gPzBUTZNGRBgm 2x9JMmG66U3586lkzVenpUWh9GrA3eaRCNDLWIf27oaSdVqOSerHFBUVok262Rmi D+SmGllwGeBEsJkeXZHRI1nMH0omR12zGDygt5qxUcjDUNG0Bpz+R0KxoprEKb01 EPcGYdKG6PzS9JPUcmotDlmh7KWDrGKe8BspMgSN+30gsGQFFqENmi132/KTDNLf w1AId5rB/5qFzjEB7SHWHK95AAX3oBARVritQhzn3DcFMbdBUnq1gGUNwrHQI3Hk irBHoO+SB9vvM6MrGKn54hdZh4jfoDTAszk3JsA+htoIj+rr6f8tB6vcnBQ= -----END CERTIFICATE-----Generated at Sun Jun 29 06:38:49 2025 by rpki-client