$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f95d8c1-abb8-442b-a932-26d01bc2ea0d.roa File: 9f95d8c1-abb8-442b-a932-26d01bc2ea0d.roa (raw, json) Hash identifier: GfhXkO6qM7/aRnfbQdR2ObCMzhF7hu5wWdY3ZSwgAvc= Subject key identifier: B3:39:7A:F2:07:75:D6:64:26:D3:B6:B6:C0:C9:56:96:8E:28:6C:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B946825F51ABD61935901F0FAE8857C723DF5AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f95d8c1-abb8-442b-a932-26d01bc2ea0d.roa Signing time: Tue 24 Jun 2025 00:00:25 +0000 ROA not before: Tue 24 Jun 2025 00:00:25 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.152.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:94:68:25:f5:1a:bd:61:93:59:01:f0:fa:e8:85:7c:72:3d:f5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:00:25 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=3a62e29127e5416df16daa94feac571d66e271e47d8cef571f66e6da286f818d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:ff:03:df:90:a0:d0:8a:62:01:5f:f5:0d: 4e:42:58:9e:a5:a5:85:2f:63:a6:2e:bc:72:69:16: af:d5:4d:4b:9a:b6:c8:53:f5:ef:ff:27:0b:1c:d2: d3:3a:f9:ab:9c:dd:66:a4:90:d5:2f:9b:8d:5d:a2: b3:df:be:9d:9a:e5:b4:b4:98:4b:e4:9d:bb:e4:ad: 27:46:8d:fa:ed:dd:40:d7:97:5e:6e:dc:4e:b4:fa: 5f:5e:92:16:5f:e0:d7:99:82:b7:76:e2:0a:d0:fe: 77:90:14:5c:64:c5:19:85:36:78:db:a5:5d:a9:f4: 21:cb:4b:55:94:06:b5:b0:e0:eb:37:2a:a2:e2:c9: cc:e9:24:33:be:1e:58:b9:5d:c0:32:69:73:a9:1a: 61:86:2d:6c:77:ae:2c:26:15:dc:00:a2:0b:c0:bf: 8b:06:11:db:2f:29:15:10:24:a3:b2:8e:7f:40:48: 28:cf:ac:01:c2:27:c7:92:36:57:5d:eb:21:ed:72: d9:08:75:d1:6c:1d:78:28:16:46:05:3a:f9:91:e4: 58:80:c2:bc:ad:90:43:2d:b5:a5:ff:67:a4:fb:ce: 1b:ec:28:c1:97:71:b7:f8:e9:11:ee:90:97:aa:3b: 78:07:48:42:9d:85:90:f8:5c:0e:ff:c8:86:75:97: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:39:7A:F2:07:75:D6:64:26:D3:B6:B6:C0:C9:56:96:8E:28:6C:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f95d8c1-abb8-442b-a932-26d01bc2ea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.152.192.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:9f:d1:ff:7c:e8:db:f4:5f:b7:ea:9c:9f:7f:0a:bd:ad:ca: d0:7a:9e:e2:98:c2:66:35:3b:ad:dd:b1:61:e3:08:2b:f2:1e: 82:f2:d4:fe:2d:0f:8c:0a:50:e3:88:aa:db:05:fb:bd:b4:a4: b0:75:80:e5:4b:63:9f:09:2d:53:03:3a:8b:5a:1e:d2:49:6c: dd:d4:ac:7c:39:ff:69:a0:41:cc:ca:57:0f:b2:ee:41:8e:6d: 4d:fe:4f:d5:52:63:4d:85:87:50:9f:1d:6a:c0:88:63:27:c6: 83:1c:84:9f:33:fa:1d:81:b2:12:b5:99:0f:e5:c6:39:91:a2: fe:8c:72:d0:f3:06:18:62:6e:19:7a:33:3c:ce:96:fc:ab:47: 57:6c:0d:0d:a1:b4:2b:7a:d0:da:56:b8:40:ca:2c:e4:d9:fd: e0:3c:af:83:87:d5:55:53:97:82:18:0b:d3:6e:69:22:1b:71: 0c:d1:ba:bc:42:bd:24:0a:f9:45:b0:a0:b7:fd:6a:ba:95:2c: 23:ce:8f:3a:f2:c0:1b:6b:f8:2e:50:97:95:87:c0:da:37:e6: c7:8a:0e:a8:36:d7:60:95:b7:c9:09:28:f2:6d:28:74:be:d0: 73:7f:94:17:9d:e4:8b:b1:da:05:b6:f6:ef:03:c0:e8:0d:14: 3a:cf:09:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW5RoJfUavWGTWQHw+uiFfHI99awwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAwMDI1WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTYyZTI5MTI3ZTU0MTZkZjE2ZGFhOTRmZWFjNTcxZDY2 ZTI3MWU0N2Q4Y2VmNTcxZjY2ZTZkYTI4NmY4MThkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSg/8D35Cg0IpiAV/1DU5CWJ6lpYUvY6YuvHJpFq/VTUua tshT9e//Jwsc0tM6+auc3WakkNUvm41dorPfvp2a5bS0mEvknbvkrSdGjfrt3UDX l15u3E60+l9ekhZf4NeZgrd24grQ/neQFFxkxRmFNnjbpV2p9CHLS1WUBrWw4Os3 KqLiyczpJDO+Hli5XcAyaXOpGmGGLWx3riwmFdwAogvAv4sGEdsvKRUQJKOyjn9A SCjPrAHCJ8eSNldd6yHtctkIddFsHXgoFkYFOvmR5FiAwrytkEMttaX/Z6T7zhvs KMGXcbf46RHukJeqO3gHSEKdhZD4XA7/yIZ1l1XtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUszl68gd11mQm07a2wMlWlo4obJYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmOTVkOGMxLWFiYjgtNDQyYi1hOTMyLTI2ZDAxYmMyZWEwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRmMAwDQYJKoZIhvcNAQELBQADggEBAJuf0f986Nv0X7fqnJ9/Cr2tytB6 nuKYwmY1O63dsWHjCCvyHoLy1P4tD4wKUOOIqtsF+720pLB1gOVLY58JLVMDOota HtJJbN3UrHw5/2mgQczKVw+y7kGObU3+T9VSY02Fh1CfHWrAiGMnxoMchJ8z+h2B shK1mQ/lxjmRov6MctDzBhhibhl6MzzOlvyrR1dsDQ2htCt60NpWuEDKLOTZ/eA8 r4OH1VVTl4IYC9NuaSIbcQzRurxCvSQK+UWwoLf9arqVLCPOjzrywBtr+C5Ql5WH wNo35seKDqg212CVt8kJKPJtKHS+0HN/lBed5Iux2gW29u8DwOgNFDrPCb8= -----END CERTIFICATE-----Generated at Sun Jun 29 03:54:27 2025 by rpki-client