$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa File: 91d5664a-8248-46da-9cb9-0b09e0fab78e.roa (raw, json) Hash identifier: rLecosYl4yKUfT7aLOmP+FqVuoHBQuBNbetv13ZOtwE= Subject key identifier: 0A:84:EE:FF:2B:DA:79:2E:64:83:B5:6D:B8:0C:FC:16:7D:E5:FE:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0ADF81D2702273DB2F3A7EDA0C8A39DCB2AF8B15 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa Signing time: Fri 27 Jun 2025 00:31:01 +0000 ROA not before: Fri 27 Jun 2025 00:31:01 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 44.216.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:df:81:d2:70:22:73:db:2f:3a:7e:da:0c:8a:39:dc:b2:af:8b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:31:01 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=4e610d78e71d7fb73456e3d602428f947aa477d768e59003aa2d849e6c26bde7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:6a:6c:85:c2:b5:aa:e1:12:6c:f3:60:6e: dd:5e:81:4a:6e:2a:0e:0b:d9:c6:86:60:d1:00:05: e7:c5:18:3e:1a:bf:b4:45:3c:7d:66:78:1c:80:87: 67:4a:f2:c4:d9:9d:5a:99:7f:d8:ee:05:7c:75:aa: f1:27:4c:12:d6:1e:c8:2b:70:9d:e5:47:5b:66:24: 71:40:c7:3b:b5:0a:c7:14:4b:07:6e:6e:e3:54:1d: c9:34:b4:63:cd:a3:c0:fd:a0:9b:e5:44:cf:73:0c: 4f:e2:66:bc:8b:1f:13:65:09:12:6f:c1:99:36:e3: bc:ef:7a:b2:ba:0b:fe:67:fb:79:97:9e:3b:14:3c: 51:36:26:29:4f:03:7f:be:58:db:87:e1:ba:d7:2f: 32:e6:1b:1a:f4:28:5c:22:c5:83:a8:27:d0:46:94: 18:92:55:f3:73:cd:f2:fe:7b:ae:88:0d:c2:c7:b6: ea:4c:bf:13:a3:37:d3:81:5f:63:e7:04:c2:9d:f4: c1:0d:00:f8:cc:25:f2:66:5f:18:43:40:3f:75:3e: 9f:88:ac:ab:e8:c1:09:70:ec:40:60:12:f5:6c:22: 0d:af:61:4d:1a:d5:e6:bc:fb:17:c9:10:d0:ab:a6: 79:ca:91:6d:36:31:d3:41:62:c7:13:bd:0f:27:0f: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:84:EE:FF:2B:DA:79:2E:64:83:B5:6D:B8:0C:FC:16:7D:E5:FE:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d5664a-8248-46da-9cb9-0b09e0fab78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.216.200.0/22 Signature Algorithm: sha256WithRSAEncryption 87:97:a3:dc:31:45:be:42:6f:70:86:1c:0c:fb:bc:b6:31:09: fd:af:0c:03:be:1d:08:5f:29:25:16:0b:c6:26:f0:0c:63:74: 29:3a:23:a8:91:4b:1d:dd:00:fe:ee:44:a3:3c:bd:2b:fd:3a: 62:34:cd:06:84:53:14:29:b2:05:c6:9f:cb:53:bb:be:ff:f2: a3:29:7a:c8:76:c4:b5:7f:7b:c2:05:ea:32:a8:3c:ed:b7:85: dc:3a:ad:96:d6:7a:2c:0a:0f:ac:4e:a4:7c:1f:91:81:68:3d: f3:e9:1b:65:62:27:7b:15:76:94:ef:f4:8f:d9:65:70:5c:e7: a1:e5:88:71:82:82:a6:a9:21:93:10:4d:01:ff:e5:80:53:53: 35:ed:6d:39:28:11:60:1e:20:4f:6a:e3:6b:77:b6:bf:bb:cc: eb:16:88:cb:1b:1e:a9:30:1a:ba:55:8f:e1:81:3f:94:3d:58: 1b:9e:1e:4d:84:bc:65:6a:80:43:28:c0:6e:7d:0a:66:b3:a6: c6:c4:ba:99:f3:0d:73:73:88:50:92:82:0e:79:9f:c7:83:65: ca:e6:c1:d2:61:dc:9a:f2:60:6d:7a:00:54:fc:1a:96:97:fc: 04:9c:29:74:6f:7f:55:b1:be:4f:76:38:3c:ce:90:19:25:bd: 59:a4:27:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCt+B0nAic9svOn7aDIo53LKvixUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAzMTAxWhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTYxMGQ3OGU3MWQ3ZmI3MzQ1NmUzZDYwMjQyOGY5NDdh YTQ3N2Q3NjhlNTkwMDNhYTJkODQ5ZTZjMjZiZGU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVYWpshcK1quESbPNgbt1egUpuKg4L2caGYNEABefFGD4a v7RFPH1meByAh2dK8sTZnVqZf9juBXx1qvEnTBLWHsgrcJ3lR1tmJHFAxzu1CscU SwdubuNUHck0tGPNo8D9oJvlRM9zDE/iZryLHxNlCRJvwZk247zverK6C/5n+3mX njsUPFE2JilPA3++WNuH4brXLzLmGxr0KFwixYOoJ9BGlBiSVfNzzfL+e66IDcLH tupMvxOjN9OBX2PnBMKd9MENAPjMJfJmXxhDQD91Pp+IrKvowQlw7EBgEvVsIg2v YU0a1ea8+xfJENCrpnnKkW02MdNBYscTvQ8nDxYlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCoTu/yvaeS5kg7VtuAz8Fn3l/i0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxZDU2NjRhLTgyNDgtNDZkYS05Y2I5LTBiMDllMGZhYjc4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs2MgwDQYJKoZIhvcNAQELBQADggEBAIeXo9wxRb5Cb3CGHAz7vLYxCf2v DAO+HQhfKSUWC8Ym8AxjdCk6I6iRSx3dAP7uRKM8vSv9OmI0zQaEUxQpsgXGn8tT u77/8qMpesh2xLV/e8IF6jKoPO23hdw6rZbWeiwKD6xOpHwfkYFoPfPpG2ViJ3sV dpTv9I/ZZXBc56HliHGCgqapIZMQTQH/5YBTUzXtbTkoEWAeIE9q42t3tr+7zOsW iMsbHqkwGrpVj+GBP5Q9WBueHk2EvGVqgEMowG59CmazpsbEupnzDXNziFCSgg55 n8eDZcrmwdJh3JryYG16AFT8GpaX/AScKXRvf1Wxvk92ODzOkBklvVmkJ+I= -----END CERTIFICATE-----Generated at Thu Jul 3 00:58:08 2025 by rpki-client