$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a05216c-4bbb-4799-872c-81ed765d6e23.roa File: 9a05216c-4bbb-4799-872c-81ed765d6e23.roa (raw, json) Hash identifier: EQr2HzTWRuzak0ZyY+BtaOvozgj0niPx7FvVOtZYUBo= Subject key identifier: 58:7F:84:EA:BF:ED:0D:EE:20:E6:D2:C2:E6:22:76:EF:F6:F7:88:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FB8AD710D7F15DC87C0AB3649ED6FD05DB958DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a05216c-4bbb-4799-872c-81ed765d6e23.roa Signing time: Tue 17 Jun 2025 00:30:17 +0000 ROA not before: Tue 17 Jun 2025 00:30:17 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b8:ad:71:0d:7f:15:dc:87:c0:ab:36:49:ed:6f:d0:5d:b9:58:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:30:17 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=2d9e2268c39ae500962334fec192da1f00ee3ca0c5c1f31fbd576db0e1b5b4ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2b:92:46:c7:72:09:93:f9:39:f5:37:96:69: 3e:c7:00:f8:1d:c5:00:ad:6b:55:0f:6b:57:6b:7a: c3:b9:12:ba:c5:fa:dd:b8:26:83:c2:c7:21:82:9b: 74:fd:97:ef:f6:0e:d9:7f:92:09:23:e0:f3:2d:6e: 65:a2:c4:a0:cf:a3:18:d5:f2:21:3f:58:05:5e:f3: b2:de:9b:f6:89:90:25:39:da:6a:f6:94:cd:0a:24: 97:84:9e:7e:f7:d7:c0:13:c2:a9:af:64:58:41:47: 9f:4b:ff:25:3c:57:6f:6a:2d:8d:c0:fc:0f:6a:fa: 20:29:e2:da:d9:7d:67:c9:c6:1d:84:f6:fa:15:08: ed:df:6d:c4:6d:ec:1c:58:83:58:71:96:d7:89:a1: e6:f6:d9:e9:ba:45:b8:49:fc:22:ae:1b:dd:29:bb: 89:89:92:db:be:e6:d2:3d:e1:40:74:a9:18:49:8c: ee:12:10:dd:c5:d7:74:f1:5f:e8:08:c4:89:4c:bd: 66:f0:f4:f8:2c:b9:ef:e9:ae:99:d7:50:a9:eb:82: 38:5e:49:94:0e:ce:cc:13:1e:9a:ab:dc:c9:e8:1f: fb:6e:27:45:57:2e:7a:91:a5:8e:30:d1:21:05:c3: 77:79:8e:e5:9a:20:64:a1:bb:f1:14:3c:58:78:cd: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:84:EA:BF:ED:0D:EE:20:E6:D2:C2:E6:22:76:EF:F6:F7:88:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a05216c-4bbb-4799-872c-81ed765d6e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:28:0b:8c:32:28:ba:6c:fc:a6:de:b0:9e:0f:58:cc:46:6e: 11:eb:cd:7f:e7:39:57:0b:9a:89:b8:26:f7:15:04:09:09:58: 50:37:c6:58:51:a1:60:28:64:47:a8:83:11:e2:eb:64:00:70: f6:5f:39:ea:bc:6e:94:d0:f6:98:e4:b7:d4:e8:58:de:58:2e: 09:7c:fe:e9:2f:b6:8a:b7:60:2c:37:19:0a:b7:4c:2f:17:21: 8f:03:b1:4f:f0:98:2a:50:2a:4c:5f:96:57:0a:39:9b:10:00: f8:dd:6a:eb:c4:65:b3:ce:6d:73:7b:0d:31:09:9e:4a:0e:c9: 44:92:7a:65:dc:47:9b:cd:37:a8:25:3a:64:e3:ec:a3:b7:43: 66:73:c4:dc:73:79:fe:82:33:8f:55:f9:aa:6b:a1:85:2d:37: 7c:bb:fb:72:53:ad:ef:91:9c:8b:53:98:1a:1e:54:f6:a5:11: b9:d4:88:c6:b8:3f:5c:3e:b0:a0:87:9f:13:ec:97:af:1a:36: a2:89:bd:29:df:5a:98:32:36:26:97:29:47:17:a7:fd:f2:d9: 44:2a:82:06:f0:73:85:b3:99:3c:12:2b:16:dd:41:9d:00:b3: 01:b3:90:8d:e9:b2:68:3c:81:1f:15:4c:f6:51:7b:1d:37:d9: 13:e1:e2:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb7itcQ1/FdyHwKs2Se1v0F25WNswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAzMDE3WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDllMjI2OGMzOWFlNTAwOTYyMzM0ZmVjMTkyZGExZjAw ZWUzY2EwYzVjMWYzMWZiZDU3NmRiMGUxYjViNGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0K5JGx3IJk/k59TeWaT7HAPgdxQCta1UPa1dresO5ErrF +t24JoPCxyGCm3T9l+/2Dtl/kgkj4PMtbmWixKDPoxjV8iE/WAVe87Lem/aJkCU5 2mr2lM0KJJeEnn7318ATwqmvZFhBR59L/yU8V29qLY3A/A9q+iAp4trZfWfJxh2E 9voVCO3fbcRt7BxYg1hxlteJoeb22em6RbhJ/CKuG90pu4mJktu+5tI94UB0qRhJ jO4SEN3F13TxX+gIxIlMvWbw9Pgsue/prpnXUKnrgjheSZQOzswTHpqr3MnoH/tu J0VXLnqRpY4w0SEFw3d5juWaIGShu/EUPFh4zd55AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUWH+E6r/tDe4g5tLC5iJ27/b3iMgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhMDUyMTZjLTRiYmItNDc5OS04NzJjLTgxZWQ3NjVkNmUyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4RzANBgkqhkiG9w0BAQsFAAOCAQEAhigLjDIoumz8pt6wng9YzEZuEevN f+c5Vwuaibgm9xUECQlYUDfGWFGhYChkR6iDEeLrZABw9l856rxulND2mOS31OhY 3lguCXz+6S+2irdgLDcZCrdMLxchjwOxT/CYKlAqTF+WVwo5mxAA+N1q68Rls85t c3sNMQmeSg7JRJJ6ZdxHm803qCU6ZOPso7dDZnPE3HN5/oIzj1X5qmuhhS03fLv7 clOt75Gci1OYGh5U9qURudSIxrg/XD6woIefE+yXrxo2oom9Kd9amDI2JpcpRxen /fLZRCqCBvBzhbOZPBIrFt1BnQCzAbOQjemyaDyBHxVM9lF7HTfZE+Hi0g== -----END CERTIFICATE-----Generated at Sun Jun 29 16:57:39 2025 by rpki-client