$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa8b1ffd-b8aa-4623-9366-f676e418a440.roa File: aa8b1ffd-b8aa-4623-9366-f676e418a440.roa (raw, json) Hash identifier: Ob/WFy84Gsa3sX5duRMgYjk72TwsbpaR0rM1554xJ9E= Subject key identifier: FB:F9:00:E6:E9:CD:F5:0C:AD:62:B2:F4:BB:C7:F4:13:80:10:47:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AC77AFED29B7B7257D1DF83E99B5ECBEEC6EFF6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa8b1ffd-b8aa-4623-9366-f676e418a440.roa Signing time: Tue 24 Jun 2025 00:10:58 +0000 ROA not before: Tue 24 Jun 2025 00:10:58 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:7a:fe:d2:9b:7b:72:57:d1:df:83:e9:9b:5e:cb:ee:c6:ef:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:10:58 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=e59a30229560b4490c1b23f8559deebbf4de67591b9d0b3ccac463e37a46be7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:d4:93:b8:0a:1b:df:2c:04:62:ee:5c:e7: 11:ca:a4:a0:bd:f2:bd:21:2a:53:d0:b7:39:e8:0d: 18:63:77:e2:0a:5a:15:1d:40:e5:46:ba:71:62:7c: 50:ca:ba:28:c1:65:cf:8b:c1:17:9a:bb:5f:7d:24: c2:38:5d:0f:f0:fb:f5:d2:7a:39:59:73:a3:5b:ad: 3b:1b:ac:b2:95:5e:27:02:a1:a6:1e:a1:e7:e7:7e: 65:2a:e1:8a:0c:1a:02:06:37:ef:cd:e7:fa:6c:58: 24:0a:73:80:03:60:2f:c4:af:39:b3:b0:f4:18:82: 83:5e:05:db:ca:fc:bc:96:62:ad:06:f3:5f:99:f8: c1:ab:6d:7d:99:f9:1d:1a:f9:d0:4a:72:b8:6e:01: 8c:36:5d:90:bc:a3:1a:6f:48:72:f6:1c:a3:aa:ef: 77:82:09:78:1c:c0:00:dd:2a:7d:ec:d2:7d:8c:7b: e1:30:06:79:01:90:ba:47:9f:68:10:b8:d5:a8:64: eb:9a:63:33:92:6f:36:67:a2:f0:36:7b:8d:9a:90: 76:3c:25:a8:c2:4f:80:b6:ed:f4:e2:ea:1c:27:bd: 23:f2:ac:85:c0:ed:20:13:6f:bf:af:ea:64:2f:04: 99:4f:21:8b:fe:e0:18:a0:dc:58:f8:70:c0:2f:6e: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F9:00:E6:E9:CD:F5:0C:AD:62:B2:F4:BB:C7:F4:13:80:10:47:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa8b1ffd-b8aa-4623-9366-f676e418a440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.16.0/21 Signature Algorithm: sha256WithRSAEncryption d5:c7:c2:78:06:1a:95:37:1b:8c:f9:17:57:d9:fd:3e:5e:e9: 5b:68:41:78:8e:39:b7:d9:c4:5b:a3:40:fc:ca:bf:37:36:42: d6:af:4c:42:e6:a3:65:9f:88:d5:30:c2:56:6d:dc:8a:3f:ac: 52:18:a9:f6:66:b5:35:33:a7:ae:7b:4f:9f:3f:d2:cd:26:6f: 49:d0:e8:9e:8d:0b:09:78:58:67:35:23:be:55:0f:41:b3:c1: e1:7f:f9:a9:f3:e5:85:1c:ae:4d:d9:d0:4b:d9:c4:c0:e4:a3: 79:e3:03:02:0f:f7:da:e5:8c:fb:c2:b8:7f:37:20:ca:09:99: ce:f8:36:dd:dd:57:e9:ef:63:90:95:b2:df:72:f8:50:70:39: d6:4f:e6:55:ad:93:21:db:3d:24:70:90:4c:9a:e9:1a:fc:7d: 72:81:2e:86:3f:9c:91:93:9d:01:12:41:d1:08:8c:79:36:6d: c3:46:e8:b5:20:0b:b9:1b:72:e0:45:de:de:8d:48:bc:76:4b: 4e:d1:0f:a2:51:2e:15:05:c1:eb:cf:de:6d:0f:9b:27:99:3e: 42:ab:3b:64:a3:bf:57:c8:e6:b7:45:0b:d2:f3:05:e2:a6:ac: b4:a5:82:82:4e:30:33:33:bb:03:ec:b9:b3:de:9c:d2:81:1b: dd:06:22:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSsd6/tKbe3JX0d+D6Ztey+7G7/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAxMDU4WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTlhMzAyMjk1NjBiNDQ5MGMxYjIzZjg1NTlkZWViYmY0 ZGU2NzU5MWI5ZDBiM2NjYWM0NjNlMzdhNDZiZTdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh7dSTuAob3ywEYu5c5xHKpKC98r0hKlPQtznoDRhjd+IK WhUdQOVGunFifFDKuijBZc+LwReau199JMI4XQ/w+/XSejlZc6NbrTsbrLKVXicC oaYeoefnfmUq4YoMGgIGN+/N5/psWCQKc4ADYC/ErzmzsPQYgoNeBdvK/LyWYq0G 81+Z+MGrbX2Z+R0a+dBKcrhuAYw2XZC8oxpvSHL2HKOq73eCCXgcwADdKn3s0n2M e+EwBnkBkLpHn2gQuNWoZOuaYzOSbzZnovA2e42akHY8JajCT4C27fTi6hwnvSPy rIXA7SATb7+v6mQvBJlPIYv+4Big3Fj4cMAvbjXhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+/kA5unN9QytYrL0u8f0E4AQRz4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhOGIxZmZkLWI4YWEtNDYyMy05MzY2LWY2NzZlNDE4YTQ0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMX/hAwDQYJKoZIhvcNAQELBQADggEBANXHwngGGpU3G4z5F1fZ/T5e6Vto QXiOObfZxFujQPzKvzc2QtavTELmo2WfiNUwwlZt3Io/rFIYqfZmtTUzp657T58/ 0s0mb0nQ6J6NCwl4WGc1I75VD0GzweF/+anz5YUcrk3Z0EvZxMDko3njAwIP99rl jPvCuH83IMoJmc74Nt3dV+nvY5CVst9y+FBwOdZP5lWtkyHbPSRwkEya6Rr8fXKB LoY/nJGTnQESQdEIjHk2bcNG6LUgC7kbcuBF3t6NSLx2S07RD6JRLhUFwevP3m0P myeZPkKrO2Sjv1fI5rdFC9LzBeKmrLSlgoJOMDMzuwPsubPenNKBG90GIik= -----END CERTIFICATE-----Generated at Wed Jul 2 22:56:35 2025 by rpki-client