$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa File: 9636aa82-d0d4-4b45-918e-5973b533cb33.roa (raw, json) Hash identifier: QiON8a/HDYEnchnURriQ338U8/0r43YoLSVYtPyTxfI= Subject key identifier: FC:7B:79:45:C1:28:91:17:43:1D:92:6A:31:54:DB:33:A1:2C:5A:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4350A271C15024167126AFF44BE19A319C4306B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa Signing time: Tue 24 Jun 2025 00:21:43 +0000 ROA not before: Tue 24 Jun 2025 00:21:43 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 32.192.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:50:a2:71:c1:50:24:16:71:26:af:f4:4b:e1:9a:31:9c:43:06:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:21:43 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=88292f052b997b549d03bda096f2f012f23b3f24ec3faad3f0f82a58dfe7b177, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:78:4e:dd:dd:0f:48:7b:43:00:67:41:ef:83: b4:eb:e1:7f:80:07:f1:88:4d:af:04:34:ee:ef:0e: d4:9c:32:2d:1f:ab:e8:92:46:eb:42:60:d4:4d:14: 0f:c1:e5:07:bc:d7:4c:b2:55:de:bf:b4:4a:af:cd: bc:0d:68:fb:8a:65:34:36:98:56:1c:16:a4:9a:43: ce:bc:ac:ef:f3:08:16:56:d6:fc:1e:f0:47:6f:41: 16:4c:20:8b:76:61:17:6e:e9:67:cc:34:61:c1:6b: b2:db:4a:bd:9e:3d:11:c9:b1:d6:b0:c8:9a:e2:d1: 26:36:c1:84:a4:d8:5b:e8:54:b2:2e:c7:15:76:a8: 7a:5d:f0:ec:70:c7:12:77:8f:50:09:bb:76:c9:c3: 28:45:1f:34:93:bb:17:fc:0c:03:93:a3:46:67:ed: 43:b5:cc:9c:12:08:01:98:0a:e6:12:ab:a3:d5:4b: c3:2a:0b:64:10:f7:94:81:46:56:92:38:ef:f0:9c: cb:84:70:c6:b3:b6:7c:5b:08:4e:e0:a2:2e:0b:16: 95:ca:93:b1:eb:19:c4:8d:bd:52:55:b9:3e:92:4b: 3b:ea:b8:ba:a1:70:a9:00:f2:b7:9b:9a:31:0f:6b: 9a:1b:10:66:20:97:04:1c:86:f5:e9:68:3a:0e:97: 29:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:79:45:C1:28:91:17:43:1D:92:6A:31:54:DB:33:A1:2C:5A:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.192.0.0/12 Signature Algorithm: sha256WithRSAEncryption d4:0a:13:4e:eb:99:9a:7c:f9:37:96:82:f7:1f:5c:c4:08:b5: c1:79:9b:e4:6b:74:1b:44:2f:b3:72:b7:cb:a1:5d:6a:92:76: 41:c5:0c:98:38:33:bb:32:60:5e:e4:7c:8b:99:f6:0b:e3:b0: 91:2c:e0:1b:4e:87:39:d6:79:f3:af:44:a4:b4:ea:5f:47:3b: a9:08:f9:b3:b0:85:46:4f:7f:70:21:67:65:6c:59:d1:45:93: 78:7f:51:43:af:4e:25:08:62:93:f4:41:5f:fc:4f:68:a8:21: e0:a4:75:2b:47:f1:a9:f4:e3:8c:9c:9f:0c:e2:cc:12:46:1a: 30:74:c7:85:73:bc:fe:4a:15:de:b5:fb:9a:58:31:51:03:cf: 79:bf:b6:4b:54:90:bc:64:8f:5d:2e:f0:d1:78:17:34:48:2a: ea:c4:1d:b8:7b:e3:68:cb:cc:0c:16:be:1c:2e:bb:c0:26:82: 2b:d3:f4:bb:aa:74:77:54:06:9a:33:60:6e:73:0f:c9:d5:4a: 22:3d:b9:ee:d6:f2:eb:91:37:60:b2:ea:5c:8c:b2:60:a5:60: 48:3d:c1:65:83:31:c6:3b:09:7f:9a:d3:12:2d:df:db:b6:32: aa:b3:76:90:8d:88:a5:fa:c0:f9:81:ae:51:a8:1a:20:2e:b0: 5f:6b:9f:f2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ1CiccFQJBZxJq/0S+GaMZxDBrUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAyMTQzWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODI5MmYwNTJiOTk3YjU0OWQwM2JkYTA5NmYyZjAxMmYy M2IzZjI0ZWMzZmFhZDNmMGY4MmE1OGRmZTdiMTc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJeE7d3Q9Ie0MAZ0Hvg7Tr4X+AB/GITa8ENO7vDtScMi0f q+iSRutCYNRNFA/B5Qe810yyVd6/tEqvzbwNaPuKZTQ2mFYcFqSaQ868rO/zCBZW 1vwe8EdvQRZMIIt2YRdu6WfMNGHBa7LbSr2ePRHJsdawyJri0SY2wYSk2FvoVLIu xxV2qHpd8OxwxxJ3j1AJu3bJwyhFHzSTuxf8DAOTo0Zn7UO1zJwSCAGYCuYSq6PV S8MqC2QQ95SBRlaSOO/wnMuEcMaztnxbCE7goi4LFpXKk7HrGcSNvVJVuT6SSzvq uLqhcKkA8rebmjEPa5obEGYglwQchvXpaDoOlymbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/Ht5RcEokRdDHZJqMVTbM6EsWrUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2MzZhYTgyLWQwZDQtNGI0NS05MThlLTU5NzNiNTMzY2IzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQgwDANBgkqhkiG9w0BAQsFAAOCAQEA1AoTTuuZmnz5N5aC9x9cxAi1wXmb 5Gt0G0Qvs3K3y6FdapJ2QcUMmDgzuzJgXuR8i5n2C+OwkSzgG06HOdZ5869EpLTq X0c7qQj5s7CFRk9/cCFnZWxZ0UWTeH9RQ69OJQhik/RBX/xPaKgh4KR1K0fxqfTj jJyfDOLMEkYaMHTHhXO8/koV3rX7mlgxUQPPeb+2S1SQvGSPXS7w0XgXNEgq6sQd uHvjaMvMDBa+HC67wCaCK9P0u6p0d1QGmjNgbnMPydVKIj257tby65E3YLLqXIyy YKVgSD3BZYMxxjsJf5rTEi3f27YyqrN2kI2IpfrA+YGuUagaIC6wX2uf8g== -----END CERTIFICATE-----Generated at Sun Jun 29 08:37:12 2025 by rpki-client