$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa File: a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa (raw, json) Hash identifier: iHJCf3STnSKl/m8+he8H/Jvp/t4UVzaOFKb4DaNu2Y4= Subject key identifier: 28:2C:7F:E6:04:09:85:20:12:BB:57:B7:0C:0E:2B:25:76:85:A4:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33C068758DC70E138FDA1FCB4EA7170B11EDBF0C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa Signing time: Tue 24 Jun 2025 00:32:02 +0000 ROA not before: Tue 24 Jun 2025 00:32:02 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.172.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c0:68:75:8d:c7:0e:13:8f:da:1f:cb:4e:a7:17:0b:11:ed:bf:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:32:02 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=07a0b46ff375af5fbc01fd30123852365a0f09dfd60012b032e3e4fe86972c5c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:c8:08:b2:8e:c3:ee:ca:a6:8c:e6:a5:c8: 3e:da:75:41:c8:bb:77:ca:61:1e:fb:a3:2f:e1:47: ef:3e:61:33:51:b3:b7:c5:59:46:a6:db:d1:8e:fc: 93:a5:35:4e:91:6b:11:cb:24:c3:64:29:5f:6f:c2: 12:cb:35:2e:9a:2a:65:aa:e7:84:30:6a:22:62:f2: d5:19:d8:28:cc:af:4c:f8:49:27:50:97:52:16:c3: a8:42:a8:cb:5d:cf:f2:d4:21:6d:69:86:0c:ef:0d: 42:ee:5b:c2:d2:39:c5:69:f2:56:2c:b5:ff:61:1c: 06:c0:dd:6e:f7:6f:1a:da:41:44:a8:89:f9:ca:5f: 91:82:9e:88:94:cf:76:0c:8c:4a:9c:07:2c:89:bf: 2f:dd:b5:42:b7:11:c3:35:a2:96:67:c5:e5:8d:ff: a1:15:52:9d:2d:3b:55:58:09:bb:5f:f7:8e:bd:cd: bb:b9:10:13:c6:32:e6:e6:78:50:e3:b3:79:39:10: 2d:b0:c8:7f:4e:71:e6:81:22:ae:28:5a:03:cd:27: 18:41:0f:15:c0:5e:22:75:dd:5a:0e:05:a5:d3:45: 45:ac:6b:97:c8:5b:50:18:6a:ab:29:35:e0:33:f3: 47:b6:fd:b4:86:74:64:a4:6b:30:82:ff:43:7f:da: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:7F:E6:04:09:85:20:12:BB:57:B7:0C:0E:2B:25:76:85:A4:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.172.0.0/18 Signature Algorithm: sha256WithRSAEncryption 76:1f:fe:33:ee:a7:58:7c:4b:41:29:07:06:ee:62:6e:86:d1: 42:45:f2:35:af:c7:40:4f:17:ae:89:3b:04:16:d9:61:ca:97: 37:bc:3f:b4:bd:38:7a:25:bf:62:1b:b5:c9:9a:59:83:ca:36: ca:1b:24:3e:b9:3d:9e:db:c5:c7:43:8a:5d:eb:2d:92:05:82: d8:1c:69:ab:d4:9f:06:18:35:13:97:d3:c3:f7:c3:16:18:e2: 55:e3:41:40:76:c0:dc:e5:7f:c0:86:cf:f7:cf:66:06:03:36: cf:ee:52:7d:fc:83:e5:ba:c0:b7:7a:fe:ac:69:e2:87:16:3f: fb:a0:fa:04:ea:61:1d:7a:94:e2:eb:be:4c:d2:11:bd:fd:21: ce:d6:c0:95:67:2f:38:71:f2:9b:b2:2b:6f:e3:18:c7:7d:f7: 37:d9:aa:9c:51:58:e3:83:7e:28:6b:7e:8f:7b:a6:0e:c6:20: 23:6b:c9:14:9c:ed:fb:7e:a3:f9:09:57:03:75:bb:bf:86:f7: 76:54:10:66:46:5a:40:bd:6e:dd:41:f6:33:c8:be:cd:fa:e1: 8e:c2:80:1d:c3:ec:76:3b:09:d1:dd:64:68:cc:13:11:66:60: e1:79:64:ce:a9:bf:58:43:69:ac:07:a6:25:a6:cc:6a:97:40: 32:15:ca:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM8BodY3HDhOP2h/LTqcXCxHtvwwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAzMjAyWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2EwYjQ2ZmYzNzVhZjVmYmMwMWZkMzAxMjM4NTIzNjVh MGYwOWRmZDYwMDEyYjAzMmUzZTRmZTg2OTcyYzVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWQMgIso7D7sqmjOalyD7adUHIu3fKYR77oy/hR+8+YTNR s7fFWUam29GO/JOlNU6RaxHLJMNkKV9vwhLLNS6aKmWq54QwaiJi8tUZ2CjMr0z4 SSdQl1IWw6hCqMtdz/LUIW1phgzvDULuW8LSOcVp8lYstf9hHAbA3W73bxraQUSo ifnKX5GCnoiUz3YMjEqcByyJvy/dtUK3EcM1opZnxeWN/6EVUp0tO1VYCbtf9469 zbu5EBPGMubmeFDjs3k5EC2wyH9OceaBIq4oWgPNJxhBDxXAXiJ13VoOBaXTRUWs a5fIW1AYaqspNeAz80e2/bSGdGSkazCC/0N/2owXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKCx/5gQJhSASu1e3DA4rJXaFpDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NTZjN2I3LTgwZDQtNGU1YS05YmVhLTQyMjFjODQ1YzFhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZFrAAwDQYJKoZIhvcNAQELBQADggEBAHYf/jPup1h8S0EpBwbuYm6G0UJF 8jWvx0BPF66JOwQW2WHKlze8P7S9OHolv2IbtcmaWYPKNsobJD65PZ7bxcdDil3r LZIFgtgcaavUnwYYNROX08P3wxYY4lXjQUB2wNzlf8CGz/fPZgYDNs/uUn38g+W6 wLd6/qxp4ocWP/ug+gTqYR16lOLrvkzSEb39Ic7WwJVnLzhx8puyK2/jGMd99zfZ qpxRWOODfihrfo97pg7GICNryRSc7ft+o/kJVwN1u7+G93ZUEGZGWkC9bt1B9jPI vs364Y7CgB3D7HY7CdHdZGjMExFmYOF5ZM6pv1hDaawHpiWmzGqXQDIVyiE= -----END CERTIFICATE-----Generated at Sun Jun 29 04:47:59 2025 by rpki-client