$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8cbf73-6ed7-4808-a785-b63456c50879.roa File: 9f8cbf73-6ed7-4808-a785-b63456c50879.roa (raw, json) Hash identifier: 7nAO33qTmsalAGDrDREfBAg4uf5yxiui89IVHXnm0yw= Subject key identifier: 68:E9:60:CC:10:8C:D9:13:AE:E9:E1:7C:3F:C4:87:76:20:4F:24:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EEC46FB242EC4DC950DE149A889E5BC89B4B20C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8cbf73-6ed7-4808-a785-b63456c50879.roa Signing time: Fri 20 Jun 2025 00:00:34 +0000 ROA not before: Fri 20 Jun 2025 00:00:34 +0000 ROA not after: Fri 25 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 67.34.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ec:46:fb:24:2e:c4:dc:95:0d:e1:49:a8:89:e5:bc:89:b4:b2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 20 00:00:34 2025 GMT Not After : Jul 25 23:59:59 2025 GMT Subject: serialNumber=bf684acadc26b4e5eff0ffea15663e4e119c8f9f3be67ddb7767f34272f4f35d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b2:cc:65:77:ff:fe:27:10:64:50:a1:9d:17: c3:ef:d7:3f:92:69:49:a5:de:09:0c:1e:41:bb:80: d7:cc:93:ce:7c:51:46:18:6a:dd:9a:20:a5:c0:2a: 41:e2:f8:95:1e:24:49:26:fe:84:0d:15:33:d7:45: c9:56:b6:03:9d:2d:02:01:0c:4d:a9:84:62:99:a7: 08:87:4d:d5:93:31:1e:e7:4a:5a:3a:60:a6:5a:9b: 4b:d9:90:a1:b2:34:06:80:50:1d:0f:35:4e:3c:eb: 6a:f9:bf:d4:20:4d:47:48:09:4a:4f:37:4b:82:e4: 92:f3:bc:fb:ff:f6:e3:c3:f3:4a:93:86:16:16:fa: 6d:1f:34:60:03:db:cb:12:9f:e3:8b:f0:ad:5b:99: c4:51:ff:14:cc:b8:38:8e:72:5b:ca:3e:36:d6:62: 62:94:b1:74:24:de:61:e5:f3:2b:a5:2b:b0:83:03: b6:43:d3:56:f4:7d:a2:7e:d6:68:28:6f:7b:12:47: 3d:b3:dd:f9:42:49:25:59:9f:30:35:1b:75:27:f9: 86:6d:aa:43:d0:bf:33:f8:55:3d:ba:55:e1:27:a5: 4c:b0:a8:c1:d7:20:95:69:ce:dc:c7:5d:39:2c:b8: de:f9:d5:05:06:fd:24:e0:59:e1:1a:50:c4:7a:9f: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:60:CC:10:8C:D9:13:AE:E9:E1:7C:3F:C4:87:76:20:4F:24:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8cbf73-6ed7-4808-a785-b63456c50879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:d0:0f:37:10:57:3a:31:5d:62:37:f6:61:b6:a6:fb:86:5f: 46:9d:0b:31:25:bb:41:36:a1:e4:0a:34:38:3f:6c:ba:84:9a: 29:70:82:d2:84:d6:da:6a:d6:06:54:0d:81:4a:f3:22:48:a9: e4:3b:c6:b4:55:28:27:8c:dd:8f:d1:2d:79:6b:9c:2c:bc:fe: 09:96:38:a8:3b:8f:d4:04:80:f3:ad:a2:89:bc:55:19:8f:92: b0:86:f1:24:7b:ac:6f:db:b3:cc:79:a2:72:db:df:09:60:47: bd:6b:f3:f2:fe:4d:6c:9d:c1:14:df:b4:fb:38:a3:d7:a7:94: 0a:4e:1c:02:18:68:67:75:50:d7:40:87:81:c3:9e:7a:4e:36: ef:0c:ca:b5:a2:ae:a2:aa:3d:0b:56:41:dd:29:65:98:2e:d7: 7c:05:0e:36:e3:59:4e:e4:b2:4f:45:99:79:b2:dc:9e:02:58: 64:00:60:0a:60:45:a0:d0:29:ce:55:80:83:54:64:5b:f1:7c: 59:2a:15:44:ee:4d:28:d0:7a:8d:0e:56:27:ad:ab:fa:30:5f: fd:81:01:3e:77:66:51:58:4f:e0:fe:c4:0e:23:aa:4d:f4:7a: c5:2d:da:21:d8:cd:09:1a:e8:10:5e:af:2b:56:fc:ab:ac:43: 0d:ac:f3:11 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXuxG+yQuxNyVDeFJqInlvIm0sgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIwMDAwMDM0WhcNMjUwNzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjY4NGFjYWRjMjZiNGU1ZWZmMGZmZWExNTY2M2U0ZTEx OWM4ZjlmM2JlNjdkZGI3NzY3ZjM0MjcyZjRmMzVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHssxld//+JxBkUKGdF8Pv1z+SaUml3gkMHkG7gNfMk858 UUYYat2aIKXAKkHi+JUeJEkm/oQNFTPXRclWtgOdLQIBDE2phGKZpwiHTdWTMR7n Slo6YKZam0vZkKGyNAaAUB0PNU4862r5v9QgTUdICUpPN0uC5JLzvPv/9uPD80qT hhYW+m0fNGAD28sSn+OL8K1bmcRR/xTMuDiOclvKPjbWYmKUsXQk3mHl8yulK7CD A7ZD01b0faJ+1mgob3sSRz2z3flCSSVZnzA1G3Un+YZtqkPQvzP4VT26VeEnpUyw qMHXIJVpztzHXTksuN751QUG/STgWeEaUMR6n0XhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaOlgzBCM2ROu6eF8P8SHdiBPJAAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmOGNiZjczLTZlZDctNDgwOC1hNzg1LWI2MzQ1NmM1MDg3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBDIjANBgkqhkiG9w0BAQsFAAOCAQEAidAPNxBXOjFdYjf2Ybam+4ZfRp0L MSW7QTah5Ao0OD9suoSaKXCC0oTW2mrWBlQNgUrzIkip5DvGtFUoJ4zdj9EteWuc LLz+CZY4qDuP1ASA862iibxVGY+SsIbxJHusb9uzzHmictvfCWBHvWvz8v5NbJ3B FN+0+zij16eUCk4cAhhoZ3VQ10CHgcOeek427wzKtaKuoqo9C1ZB3SllmC7XfAUO NuNZTuSyT0WZebLcngJYZABgCmBFoNApzlWAg1RkW/F8WSoVRO5NKNB6jQ5WJ62r +jBf/YEBPndmUVhP4P7EDiOqTfR6xS3aIdjNCRroEF6vK1b8q6xDDazzEQ== -----END CERTIFICATE-----Generated at Wed Jul 2 19:52:34 2025 by rpki-client