$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa File: b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa (raw, json) Hash identifier: RBYtf6oH9mpDuiJIeLo4F0/NUUFyaKQ4CIY8QvzmwdA= Subject key identifier: DE:44:78:73:C5:27:FB:C0:8C:7B:0B:07:84:81:5A:AE:4F:4C:E5:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35C134D2069FF468F18582814D8E1B56287C9C68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa Signing time: Mon 16 Jun 2025 15:50:27 +0000 ROA not before: Mon 16 Jun 2025 15:50:27 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c1:34:d2:06:9f:f4:68:f1:85:82:81:4d:8e:1b:56:28:7c:9c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:50:27 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=6aa14ce3b749686f77818c94b0551772afb24a4b5c1c8bf221c0bd86b720d989, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:e7:ef:26:1a:1f:4b:ef:40:97:e4:ae:0b: a8:66:ba:d2:b8:54:96:3c:f6:05:62:df:5a:65:21: 48:13:5f:c9:2b:eb:bf:1d:1e:31:bb:c8:dc:40:de: 9d:f0:a2:9a:1e:e7:27:52:4f:a8:2a:5a:0a:bf:66: 39:b7:2c:2a:cf:5e:3b:3e:b0:89:99:d4:e4:c5:56: 78:90:31:80:20:9c:31:3c:f3:f4:0b:19:9b:93:f7: 7f:08:19:e6:21:76:91:e7:07:45:4b:01:25:c4:c0: be:a2:4f:47:3f:38:71:c5:65:42:33:89:fb:c9:47: 3e:bf:2a:69:ac:8f:87:f0:5a:e3:9f:94:94:3c:e9: d4:b3:ed:db:64:54:2c:e9:b6:1d:7f:47:0c:2e:64: 78:d6:b9:f2:52:6d:1f:71:be:30:8a:57:cd:ff:d3: 54:9d:50:88:c0:b3:f8:13:29:ef:d6:d5:9e:22:c0: a6:6e:c9:fa:56:ab:f7:5a:bf:06:e1:a4:5c:72:c6: 8b:e2:41:2a:f1:de:58:3d:00:81:b3:5c:b1:d2:13: 58:10:04:5a:29:7b:84:ce:ad:f5:93:e5:a0:8b:de: 9d:03:88:a9:24:1c:5b:a1:61:89:a9:18:9e:cc:78: ab:c8:ad:d6:67:f0:02:07:9a:d5:76:be:c9:89:56: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:78:73:C5:27:FB:C0:8C:7B:0B:07:84:81:5A:AE:4F:4C:E5:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3d27018-08cb-4a1c-9991-b1aa4cfd3a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.158.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:34:81:86:c5:81:80:b3:ef:02:31:0f:a3:b1:a5:a6:ae:df: 6a:a6:a9:0d:32:98:55:2f:c7:5c:ee:fd:2f:da:d3:cc:1d:fb: 53:26:78:d5:ed:20:a1:b0:ed:03:40:b6:84:2b:1e:27:4d:6b: 03:d1:a5:62:7e:6a:cf:24:38:5b:61:4f:61:19:a8:12:9b:39: 6f:b2:57:8c:13:39:16:26:5a:d4:f0:06:8c:c4:43:31:44:8e: 03:72:c3:99:4e:6f:6d:a4:7b:94:8c:f9:aa:60:43:c2:83:74: ba:7e:66:35:e5:74:b7:15:19:59:be:ee:52:75:5b:04:fe:d1: 1c:f4:12:f7:42:b5:e5:06:09:c3:e7:35:d3:03:14:3d:31:2e: 13:52:6d:bf:c2:e5:13:c0:f4:7d:52:ef:c1:6a:fa:7a:1e:0a: f1:0a:fc:e4:7e:77:ff:e5:20:a7:e7:c3:eb:f2:d5:73:c4:f2: d4:e2:3d:f2:e2:e3:69:94:bd:a3:6a:35:00:bb:1f:ab:b9:d0: b4:6c:44:a2:f0:73:b2:ca:fb:d9:8c:f8:95:58:13:dd:fb:fd: 45:56:dc:12:58:bd:e0:c3:b9:56:49:61:67:0c:ae:87:d0:9c: f7:73:0f:38:c5:62:5f:2f:27:bc:67:c0:e4:96:20:29:4f:2d: 9d:1f:12:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNcE00gaf9GjxhYKBTY4bVih8nGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTU1MDI3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWExNGNlM2I3NDk2ODZmNzc4MThjOTRiMDU1MTc3MmFm YjI0YTRiNWMxYzhiZjIyMWMwYmQ4NmI3MjBkOTg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8FufvJhofS+9Al+SuC6hmutK4VJY89gVi31plIUgTX8kr 678dHjG7yNxA3p3wopoe5ydST6gqWgq/Zjm3LCrPXjs+sImZ1OTFVniQMYAgnDE8 8/QLGZuT938IGeYhdpHnB0VLASXEwL6iT0c/OHHFZUIzifvJRz6/Kmmsj4fwWuOf lJQ86dSz7dtkVCzpth1/RwwuZHjWufJSbR9xvjCKV83/01SdUIjAs/gTKe/W1Z4i wKZuyfpWq/davwbhpFxyxoviQSrx3lg9AIGzXLHSE1gQBFope4TOrfWT5aCL3p0D iKkkHFuhYYmpGJ7MeKvIrdZn8AIHmtV2vsmJVlaLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3kR4c8Un+8CMewsHhIFark9M5SwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzZDI3MDE4LTA4Y2ItNGExYy05OTkxLWIxYWE0Y2ZkM2E3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUp4wDQYJKoZIhvcNAQELBQADggEBAA80gYbFgYCz7wIxD6Oxpaau32qm qQ0ymFUvx1zu/S/a08wd+1MmeNXtIKGw7QNAtoQrHidNawPRpWJ+as8kOFthT2EZ qBKbOW+yV4wTORYmWtTwBozEQzFEjgNyw5lOb22ke5SM+apgQ8KDdLp+ZjXldLcV GVm+7lJ1WwT+0Rz0EvdCteUGCcPnNdMDFD0xLhNSbb/C5RPA9H1S78Fq+noeCvEK /OR+d//lIKfnw+vy1XPE8tTiPfLi42mUvaNqNQC7H6u50LRsRKLwc7LK+9mM+JVY E937/UVW3BJYveDDuVZJYWcMrofQnPdzDzjFYl8vJ7xnwOSWIClPLZ0fElY= -----END CERTIFICATE-----Generated at Sun Jun 29 07:09:35 2025 by rpki-client