$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa File: 92b45372-6296-4c14-9868-0c159f1b5fed.roa (raw, json) Hash identifier: RFO08Jyw/3ru/oCijlXYDdvHaDOdO6fhhGqtftVFzno= Subject key identifier: E8:F2:5B:15:92:BB:72:4F:8F:8F:72:FE:53:E9:25:B0:A4:22:D6:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 258DEB0119C6E18BDD195E48C79AEDAE85E8AC5B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa Signing time: Wed 02 Jul 2025 00:30:32 +0000 ROA not before: Wed 02 Jul 2025 00:30:32 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.198.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8d:eb:01:19:c6:e1:8b:dd:19:5e:48:c7:9a:ed:ae:85:e8:ac:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:30:32 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=f7a5c871745180fe9e0d3bc2b2659d61102e0803673008dec0fbded93c88820c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:22:ac:d9:77:72:fd:59:dd:cd:5b:31:a8: 23:38:38:77:d9:06:8e:16:48:50:51:47:ec:71:69: 89:d1:96:e5:48:62:b3:2a:10:6a:25:d3:4d:bc:cd: 96:08:51:05:52:7a:72:43:f7:ce:34:c8:4a:ac:bb: ba:3c:b9:6e:8f:c1:ea:11:3c:9e:8f:6c:98:e1:64: b2:40:a3:84:36:2b:a1:ec:ab:22:21:cb:f0:80:44: 94:5e:07:98:5b:df:7d:c2:45:54:21:1c:db:5d:ea: cc:36:51:f5:1f:6d:38:aa:66:59:74:3e:a9:9c:4a: b1:eb:a3:ae:a9:63:b5:71:be:e8:c6:7b:ca:85:8b: 45:20:82:22:46:aa:76:c2:c2:79:fd:a3:7b:b4:33: 88:c3:bd:5c:69:ba:bf:04:47:80:4c:f8:aa:5a:1b: dd:8f:e9:23:61:7d:c3:7f:89:0d:22:f6:69:2a:b2: 81:cd:42:bd:42:cd:4d:16:41:dc:64:e2:81:86:26: 1a:d1:4f:c4:2e:22:95:62:56:2a:4b:7e:07:a3:9e: 00:0d:5d:ae:69:9b:b7:69:83:8a:bc:88:9b:be:fc: 75:be:35:c6:ca:5d:00:d9:a7:ba:eb:41:a1:de:8c: c4:4f:e0:e1:a2:28:a0:07:7f:de:91:4f:54:9b:17: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F2:5B:15:92:BB:72:4F:8F:8F:72:FE:53:E9:25:B0:A4:22:D6:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92b45372-6296-4c14-9868-0c159f1b5fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.198.73.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:d3:b2:49:7b:6d:a7:9a:33:79:ef:4c:71:18:37:f2:2a:af: 32:21:dd:42:34:72:74:11:71:be:76:c9:4e:fb:8c:f3:60:0e: 4b:79:e3:49:a3:be:da:09:05:39:c9:9f:a2:7a:b4:ff:d8:79: df:89:8c:44:b8:3c:90:48:fc:7c:9b:3a:17:ae:cd:65:e4:c9: 88:83:59:43:e8:70:06:72:41:66:76:a2:d3:6e:a2:05:fc:39: 03:9f:09:d4:80:3a:8d:6c:06:f4:79:36:82:2d:8e:00:c5:af: bf:5b:df:10:c7:ca:9c:fd:20:f1:5c:d9:92:aa:12:12:2c:3c: d4:e4:e6:d8:7f:5d:cf:ac:be:b5:80:c7:04:bd:c1:d9:c9:0a: ab:17:0f:64:3d:57:63:b8:a8:6a:6f:b2:aa:82:c1:75:a3:9b: 76:35:2f:d2:c3:4d:52:3b:c2:1a:83:6e:23:41:66:6a:43:82: 7b:e9:e2:b9:6c:d4:e5:a4:bd:dc:c1:05:cd:8f:cb:51:8d:1c: a1:f0:d9:c5:80:d5:2d:01:85:bf:7c:59:02:2d:32:c6:9d:62: fd:9c:5e:b1:98:15:58:69:fc:a7:c0:d2:29:9b:71:bb:6e:f9: 54:52:a5:1b:f4:26:1c:bb:84:84:2f:45:79:e5:b4:f1:75:5d: a0:55:12:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJY3rARnG4YvdGV5Ix5rtroXorFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAzMDMyWhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2E1Yzg3MTc0NTE4MGZlOWUwZDNiYzJiMjY1OWQ2MTEw MmUwODAzNjczMDA4ZGVjMGZiZGVkOTNjODg4MjBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWmiKs2Xdy/VndzVsxqCM4OHfZBo4WSFBRR+xxaYnRluVI YrMqEGol0028zZYIUQVSenJD9840yEqsu7o8uW6PweoRPJ6PbJjhZLJAo4Q2K6Hs qyIhy/CARJReB5hb333CRVQhHNtd6sw2UfUfbTiqZll0PqmcSrHro66pY7VxvujG e8qFi0UggiJGqnbCwnn9o3u0M4jDvVxpur8ER4BM+KpaG92P6SNhfcN/iQ0i9mkq soHNQr1CzU0WQdxk4oGGJhrRT8QuIpViVipLfgejngANXa5pm7dpg4q8iJu+/HW+ NcbKXQDZp7rrQaHejMRP4OGiKKAHf96RT1SbF2UrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6PJbFZK7ck+Pj3L+U+klsKQi1uIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyYjQ1MzcyLTYyOTYtNGMxNC05ODY4LTBjMTU5ZjFiNWZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADYxkkwDQYJKoZIhvcNAQELBQADggEBAEzTskl7baeaM3nvTHEYN/IqrzIh 3UI0cnQRcb52yU77jPNgDkt540mjvtoJBTnJn6J6tP/Yed+JjES4PJBI/HybOheu zWXkyYiDWUPocAZyQWZ2otNuogX8OQOfCdSAOo1sBvR5NoItjgDFr79b3xDHypz9 IPFc2ZKqEhIsPNTk5th/Xc+svrWAxwS9wdnJCqsXD2Q9V2O4qGpvsqqCwXWjm3Y1 L9LDTVI7whqDbiNBZmpDgnvp4rls1OWkvdzBBc2Py1GNHKHw2cWA1S0Bhb98WQIt MsadYv2cXrGYFVhp/KfA0imbcbtu+VRSpRv0Jhy7hIQvRXnltPF1XaBVEqE= -----END CERTIFICATE-----Generated at Wed Jul 2 15:07:35 2025 by rpki-client