$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa File: a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json) Hash identifier: l+Dj1X1YzFvlxl3bqyvQVw3yYG9L0d6VAOKjgSt0+pY= Subject key identifier: EB:5C:5F:8B:33:44:EB:EC:3E:21:87:EA:64:D6:9A:3B:6C:F0:22:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2404E50260AC62E2F5D4BD680A543BC7DD67AC9B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa Signing time: Sat 28 Jun 2025 00:30:53 +0000 ROA not before: Sat 28 Jun 2025 00:30:53 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:04:e5:02:60:ac:62:e2:f5:d4:bd:68:0a:54:3b:c7:dd:67:ac:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:30:53 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=dd50edec5705eb192c18f0f5c98fe7d171362212b4c1a13f247b18f2a04e23a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:26:3e:bb:3f:13:e0:2e:9b:cb:2e:4d:43: 4c:87:cb:5f:c3:b6:f8:e7:c6:e2:c8:79:82:8a:22: 39:58:49:55:a8:49:26:4b:ce:65:e8:8a:35:b6:7a: ca:e1:38:47:3e:52:f2:dc:94:b7:72:ec:be:e6:bd: e5:95:dd:1c:ac:ec:9d:c8:22:19:c4:5b:8e:54:4e: 87:fc:0a:04:1d:cd:f3:38:2e:a1:2f:4b:b0:ad:02: 7a:00:0f:08:21:b6:9b:6d:41:fe:f7:28:0c:39:fa: e8:7f:5d:43:53:4b:25:d1:66:0a:a7:3c:36:a2:34: 02:94:2f:02:88:34:d8:e5:0f:fd:0c:9d:4a:69:9b: 8c:b6:12:57:7c:73:6c:25:ce:81:82:11:d8:91:08: 4a:64:5e:6a:b4:0f:7c:81:c9:8a:84:84:52:b9:6a: cd:3a:c5:36:d7:c2:b3:d8:8a:46:67:3b:2b:7b:90: 55:28:83:1b:3a:3b:74:f7:7c:31:54:f8:0b:7e:36: d0:0b:f7:28:0e:37:5e:d4:03:71:64:2e:67:e7:cb: b3:a4:04:05:53:cd:73:02:ae:c3:59:3d:6e:ca:75: 8a:4e:1b:c9:cc:65:f2:84:db:40:3a:53:51:8a:a2: d8:be:66:1a:84:72:95:e8:99:7d:f4:8e:f5:2e:bb: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5C:5F:8B:33:44:EB:EC:3E:21:87:EA:64:D6:9A:3B:6C:F0:22:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.96.0/19 Signature Algorithm: sha256WithRSAEncryption 29:67:aa:f8:4d:4c:52:85:79:a9:2e:97:32:d0:18:48:b3:6b: 7e:38:bc:07:43:5c:2b:b2:e3:91:02:15:46:a5:46:60:75:5a: 29:c3:03:6b:d7:37:d6:bb:ce:84:e4:46:b2:f4:48:5e:05:83: f0:85:d8:47:1c:58:51:f2:91:37:30:03:a2:35:88:f5:8f:ae: d3:2e:f8:c1:52:18:f1:cf:a7:47:7c:15:71:ff:8e:d1:c3:da: ca:37:70:f9:84:54:1d:f2:74:17:24:06:56:a8:92:e1:4b:d2: 3e:bb:31:3d:e5:df:f9:73:9a:f7:06:a7:83:0b:46:7b:26:df: 5b:98:94:87:d1:59:cc:4a:51:a8:b7:35:6f:b2:a5:ea:56:2c: e0:cf:d8:59:95:b1:08:6d:8a:79:e5:54:e7:13:4a:06:ea:3a: 20:68:ea:b7:e3:d3:98:82:a4:15:0b:4e:18:fc:da:6d:43:1f: 21:e3:0f:a7:a1:49:67:7b:54:a6:fd:57:a8:35:f8:f3:34:28: 79:39:48:2b:d5:8a:98:9e:8e:39:ac:5c:52:6f:a6:d4:6f:81: d8:6c:9a:30:67:b2:9d:dd:3c:6f:6a:f3:56:76:a4:a6:6f:00: b6:2b:cf:56:f9:3a:8a:91:37:98:dd:e5:7e:70:1b:c8:1b:19: f7:2f:77:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJATlAmCsYuL11L1oClQ7x91nrJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAzMDUzWhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDUwZWRlYzU3MDVlYjE5MmMxOGYwZjVjOThmZTdkMTcx MzYyMjEyYjRjMWExM2YyNDdiMThmMmEwNGUyM2EzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXSSY+uz8T4C6byy5NQ0yHy1/DtvjnxuLIeYKKIjlYSVWo SSZLzmXoijW2esrhOEc+UvLclLdy7L7mveWV3Rys7J3IIhnEW45UTof8CgQdzfM4 LqEvS7CtAnoADwghtpttQf73KAw5+uh/XUNTSyXRZgqnPDaiNAKULwKINNjlD/0M nUppm4y2Eld8c2wlzoGCEdiRCEpkXmq0D3yByYqEhFK5as06xTbXwrPYikZnOyt7 kFUogxs6O3T3fDFU+At+NtAL9ygON17UA3FkLmfny7OkBAVTzXMCrsNZPW7KdYpO G8nMZfKE20A6U1GKoti+ZhqEcpXomX30jvUuu3iPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU61xfizNE6+w+IYfqZNaaO2zwIkwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNTUxNTc1LWZkYTgtNDBjZC1hMDEyLTJkZDk4ZjU0YTM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGDWAwDQYJKoZIhvcNAQELBQADggEBAClnqvhNTFKFeakulzLQGEiza344 vAdDXCuy45ECFUalRmB1WinDA2vXN9a7zoTkRrL0SF4Fg/CF2EccWFHykTcwA6I1 iPWPrtMu+MFSGPHPp0d8FXH/jtHD2so3cPmEVB3ydBckBlaokuFL0j67MT3l3/lz mvcGp4MLRnsm31uYlIfRWcxKUai3NW+ypepWLODP2FmVsQhtinnlVOcTSgbqOiBo 6rfj05iCpBULThj82m1DHyHjD6ehSWd7VKb9V6g1+PM0KHk5SCvVipiejjmsXFJv ptRvgdhsmjBnsp3dPG9q81Z2pKZvALYrz1b5OoqRN5jd5X5wG8gbGfcvdyU= -----END CERTIFICATE-----Generated at Sun Jun 29 04:46:49 2025 by rpki-client