$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa File: 95fb205d-987d-4fa2-b75a-8819afe4b558.roa (raw, json) Hash identifier: AgKXFH80wU3/FIzqFzpojcXvHxxz/yT7hFK3qfJrZII= Subject key identifier: 8F:D8:D4:22:F5:44:64:61:5F:B0:E4:FD:73:B1:53:67:36:10:8C:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EC8D71D0A6D814BE9459ED0259C3D0D6ABEA1D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa Signing time: Tue 01 Jul 2025 00:12:08 +0000 ROA not before: Tue 01 Jul 2025 00:12:08 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.22.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c8:d7:1d:0a:6d:81:4b:e9:45:9e:d0:25:9c:3d:0d:6a:be:a1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 1 00:12:08 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=39cdd3c63b0db2443bae3f7e7079b6824988da1f47687389157201dbe6d25bd1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:62:f5:50:92:08:7d:2f:ce:1c:11:e9:46: 27:b5:54:f5:27:69:96:0b:54:97:64:45:3b:fe:3b: 85:85:e1:7c:6b:97:3e:b9:a9:79:36:a6:b2:c2:59: 58:ff:cc:3b:5b:0f:14:bf:9c:b5:de:f5:73:ff:e6: e4:40:c7:91:45:c3:df:80:a0:07:c1:23:82:57:53: b6:9e:99:a2:86:fc:35:e6:b7:d9:07:a1:5e:38:1d: e3:34:a4:44:ab:c7:b2:3c:3b:03:72:85:2c:49:41: 2a:67:e9:da:27:e9:f2:86:87:c2:d0:4f:6e:10:7f: a4:41:81:a9:3a:bd:0f:cd:30:58:de:75:6f:b7:ce: 7b:49:b1:7b:84:3b:d7:c2:2d:e4:0f:b7:ec:ae:1c: 0c:eb:74:cd:34:03:9d:dd:ac:45:bc:9d:2f:3d:fe: 62:0b:c9:25:77:3c:56:72:da:2a:cc:fe:86:35:58: f3:31:44:1c:05:30:46:29:73:36:55:4e:e9:33:46: 45:6a:6a:6f:25:67:a9:b6:5f:ce:4d:2e:f9:40:b9: e3:5b:59:53:89:0d:2e:ef:b1:76:46:78:66:d8:b1: e7:6d:f5:80:54:38:4a:9f:f7:c0:d9:06:09:ff:86: 7f:f2:bd:1b:d1:5c:9f:22:55:c6:78:ac:74:43:78: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:D4:22:F5:44:64:61:5F:B0:E4:FD:73:B1:53:67:36:10:8C:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95fb205d-987d-4fa2-b75a-8819afe4b558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.22.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4c:5d:c5:dc:78:97:09:9a:a2:2b:db:44:e5:80:2d:db:18:e2: 9e:b6:14:aa:a4:ff:df:c3:fc:e5:d1:c0:ca:fd:69:3f:08:03: 32:e0:86:55:fd:46:aa:56:d5:f3:72:88:62:4d:c2:28:c3:e9: c2:26:af:19:9c:ea:28:e2:4c:32:d1:de:cd:39:41:2f:35:7a: 95:fd:08:a9:57:b5:1e:ff:36:f6:9b:53:6f:cd:5a:cc:63:c1: 39:ed:2c:0c:6c:5b:a9:c4:ee:27:f7:4c:1e:90:e9:cd:9f:c1: eb:fa:fa:76:44:7f:0b:d5:de:97:a6:02:80:44:1a:26:8a:e0: c6:3c:0a:21:65:c0:43:da:5b:50:c9:9f:e4:73:00:95:1c:c7: 59:79:5e:78:3f:b3:b8:f8:01:38:8e:9b:08:4a:90:f4:ee:35: f5:6b:2a:b2:1d:ed:70:bd:da:2f:b9:97:83:37:53:d7:10:60: dc:09:f0:28:5e:e9:89:52:18:b9:2d:c1:39:2a:85:35:c0:3c: e8:46:f0:41:c8:c1:4c:81:b4:ec:9a:f4:37:70:2f:62:a3:be: ad:12:e4:a2:10:60:6f:c8:e4:e9:1a:19:b6:c2:52:9b:1c:f2: 64:23:40:7c:19:15:72:c8:97:66:b0:8b:56:b4:00:8f:e2:28: 35:d5:a8:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPsjXHQptgUvpRZ7QJZw9DWq+odgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAxMDAxMjA4WhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWNkZDNjNjNiMGRiMjQ0M2JhZTNmN2U3MDc5YjY4MjQ5 ODhkYTFmNDc2ODczODkxNTcyMDFkYmU2ZDI1YmQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwwmL1UJIIfS/OHBHpRie1VPUnaZYLVJdkRTv+O4WF4Xxr lz65qXk2prLCWVj/zDtbDxS/nLXe9XP/5uRAx5FFw9+AoAfBI4JXU7aemaKG/DXm t9kHoV44HeM0pESrx7I8OwNyhSxJQSpn6don6fKGh8LQT24Qf6RBgak6vQ/NMFje dW+3zntJsXuEO9fCLeQPt+yuHAzrdM00A53drEW8nS89/mILySV3PFZy2irM/oY1 WPMxRBwFMEYpczZVTukzRkVqam8lZ6m2X85NLvlAueNbWVOJDS7vsXZGeGbYsedt 9YBUOEqf98DZBgn/hn/yvRvRXJ8iVcZ4rHRDeABrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj9jUIvVEZGFfsOT9c7FTZzYQjPYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1ZmIyMDVkLTk4N2QtNGZhMi1iNzVhLTg4MTlhZmU0YjU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZFFsAwDQYJKoZIhvcNAQELBQADggEBAExdxdx4lwmaoivbROWALdsY4p62 FKqk/9/D/OXRwMr9aT8IAzLghlX9RqpW1fNyiGJNwijD6cImrxmc6ijiTDLR3s05 QS81epX9CKlXtR7/NvabU2/NWsxjwTntLAxsW6nE7if3TB6Q6c2fwev6+nZEfwvV 3pemAoBEGiaK4MY8CiFlwEPaW1DJn+RzAJUcx1l5Xng/s7j4ATiOmwhKkPTuNfVr KrId7XC92i+5l4M3U9cQYNwJ8Che6YlSGLktwTkqhTXAPOhG8EHIwUyBtOya9Ddw L2Kjvq0S5KIQYG/I5OkaGbbCUpsc8mQjQHwZFXLIl2awi1a0AI/iKDXVqEY= -----END CERTIFICATE-----Generated at Wed Jul 2 22:45:15 2025 by rpki-client