$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e7d6c7b-006a-4279-b6d7-f484f968d285.roa File: 9e7d6c7b-006a-4279-b6d7-f484f968d285.roa (raw, json) Hash identifier: +7HyuutqEl0WKg5CaZBUIuA9CNIMgtugFGoh29Zv4wU= Subject key identifier: C2:70:A2:71:3A:BD:00:D6:CC:CD:6B:DD:64:F8:D6:0F:CD:0C:81:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E72716A7D568F6C4446AAAC34FC23EE35D6028D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e7d6c7b-006a-4279-b6d7-f484f968d285.roa Signing time: Tue 17 Jun 2025 00:11:31 +0000 ROA not before: Tue 17 Jun 2025 00:11:31 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.228.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:72:71:6a:7d:56:8f:6c:44:46:aa:ac:34:fc:23:ee:35:d6:02:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:11:31 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=a484d4a4c8981b071030a9b90bbf63904ebed001750eacd49e9392379f518c0d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:98:0e:d8:c5:b7:ae:b6:05:ac:55:d9:d7: 09:93:cd:d7:1c:4c:1d:a8:e5:c6:0d:6e:b3:2c:fb: fc:64:7e:ba:5e:78:fc:6c:40:04:a7:9b:26:9b:d8: 55:26:87:13:26:f5:fe:cb:22:2e:a7:b3:6f:ac:70: 2e:0d:af:ce:4b:a3:54:54:c7:57:9e:93:de:67:48: bf:44:78:47:2e:79:ae:d7:89:a7:8f:f5:7d:fc:ed: ad:13:61:c4:42:87:5b:1c:8a:95:e1:2b:a4:fc:33: 2f:23:b7:c1:7f:3f:ef:9a:d8:e7:85:a6:0e:f5:89: d6:96:ac:17:38:e5:b9:c2:ce:9e:04:cc:15:10:77: 2c:47:d7:2a:3a:b9:77:6c:27:5b:1e:57:a0:fe:83: ae:2a:4d:2e:49:e1:0c:d7:dc:7f:cd:35:3e:ad:36: b8:12:bd:2e:f8:66:f8:a2:aa:86:ac:21:51:82:ca: 03:b5:a9:76:5b:b3:df:ec:97:3b:70:84:5d:c8:23: fd:f0:42:56:27:65:f0:7a:12:ec:c7:b6:39:5b:dc: c7:4e:b9:28:54:43:53:8f:29:e7:12:10:9a:22:26: 24:c9:02:ae:55:86:c7:96:1c:cc:0f:c5:7a:87:3a: cc:51:e8:e2:c4:39:82:40:85:04:d1:88:2f:a9:be: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:70:A2:71:3A:BD:00:D6:CC:CD:6B:DD:64:F8:D6:0F:CD:0C:81:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e7d6c7b-006a-4279-b6d7-f484f968d285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.228.192.0/24 Signature Algorithm: sha256WithRSAEncryption 96:af:0c:92:bd:16:28:16:2f:5f:cc:31:fe:e7:1d:f1:6f:c5: 6b:ca:fb:ed:a2:73:5c:1f:5c:a4:63:57:c2:9a:28:f0:29:c2: c4:f7:d0:39:61:f8:41:e3:19:65:73:ed:2f:2a:0c:b4:2b:0c: eb:09:88:7e:49:b0:1e:d2:cb:ce:54:c0:02:7e:cf:6c:59:1b: bf:38:79:bb:93:3e:47:72:c8:a8:09:2e:10:63:83:fe:04:3e: 2b:6c:4f:5f:56:1b:e4:76:ab:e1:bd:a7:88:0f:55:fd:b2:c5: b3:a2:30:f0:75:2c:a4:4b:51:1c:da:19:62:fe:e6:53:9b:ad: 3a:67:23:5c:b3:d0:8d:3c:9e:94:78:d8:6b:8b:de:99:5a:8e: 76:6e:df:fa:5f:b1:55:61:08:7c:8e:e3:b8:c6:88:43:65:6e: fb:30:a2:81:8c:a5:b5:67:61:65:2f:8a:28:f4:ed:f5:66:ee: c7:4e:95:0b:0e:15:3b:43:46:ab:3c:f8:9d:22:56:6c:79:3b: a4:d8:9e:9c:44:a8:43:b2:cc:4d:82:ba:00:a8:15:c2:6b:5b: cd:15:2c:eb:9b:79:1b:9d:10:5e:03:71:76:38:85:65:d2:1b: 1a:b4:c7:6b:f7:a5:d2:2f:3f:57:d5:a9:a0:f8:44:fd:1b:db: 87:2f:18:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULnJxan1Wj2xERqqsNPwj7jXWAo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMTMxWhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDg0ZDRhNGM4OTgxYjA3MTAzMGE5YjkwYmJmNjM5MDRl YmVkMDAxNzUwZWFjZDQ5ZTkzOTIzNzlmNTE4YzBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcpJgO2MW3rrYFrFXZ1wmTzdccTB2o5cYNbrMs+/xkfrpe ePxsQASnmyab2FUmhxMm9f7LIi6ns2+scC4Nr85Lo1RUx1eek95nSL9EeEcuea7X iaeP9X387a0TYcRCh1scipXhK6T8My8jt8F/P++a2OeFpg71idaWrBc45bnCzp4E zBUQdyxH1yo6uXdsJ1seV6D+g64qTS5J4QzX3H/NNT6tNrgSvS74ZviiqoasIVGC ygO1qXZbs9/slztwhF3II/3wQlYnZfB6EuzHtjlb3MdOuShUQ1OPKecSEJoiJiTJ Aq5VhseWHMwPxXqHOsxR6OLEOYJAhQTRiC+pvqI/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwnCicTq9ANbMzWvdZPjWD80MgWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllN2Q2YzdiLTAwNmEtNDI3OS1iNmQ3LWY0ODRmOTY4ZDI4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX5MAwDQYJKoZIhvcNAQELBQADggEBAJavDJK9FigWL1/MMf7nHfFvxWvK ++2ic1wfXKRjV8KaKPApwsT30Dlh+EHjGWVz7S8qDLQrDOsJiH5JsB7Sy85UwAJ+ z2xZG784ebuTPkdyyKgJLhBjg/4EPitsT19WG+R2q+G9p4gPVf2yxbOiMPB1LKRL URzaGWL+5lObrTpnI1yz0I08npR42GuL3plajnZu3/pfsVVhCHyO47jGiENlbvsw ooGMpbVnYWUviij07fVm7sdOlQsOFTtDRqs8+J0iVmx5O6TYnpxEqEOyzE2CugCo FcJrW80VLOubeRudEF4DcXY4hWXSGxq0x2v3pdIvP1fVqaD4RP0b24cvGG4= -----END CERTIFICATE-----Generated at Tue Jul 1 10:30:23 2025 by rpki-client