$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3565cb8-87d6-496b-9138-f9ffe1f061c4.roa File: c3565cb8-87d6-496b-9138-f9ffe1f061c4.roa (raw, json) Hash identifier: hpt7i9iWr75Nknj+EZPTyqmF2Rwud4ZLDz/6xQe+VdQ= Subject key identifier: D9:E6:5C:8A:B0:5D:8D:C0:09:8D:85:38:94:A7:44:8F:A3:42:38:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5837992625DEAAF112FBE373775DA78402630E06 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3565cb8-87d6-496b-9138-f9ffe1f061c4.roa Signing time: Fri 27 Jun 2025 00:10:18 +0000 ROA not before: Fri 27 Jun 2025 00:10:18 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:37:99:26:25:de:aa:f1:12:fb:e3:73:77:5d:a7:84:02:63:0e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:10:18 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=2132e6719190c1d917576dc5d1c4f3236bcba0bb0b51b77369606fd07c62b0f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:09:ca:7c:04:13:f0:28:fe:e0:44:8a:14: ee:f4:1e:38:b7:ae:5c:31:0c:f6:06:1d:5d:5a:eb: d4:5e:e6:3e:53:8b:44:1a:0f:f5:f0:e5:73:e3:f7: 5e:2b:00:ab:e0:25:65:33:0f:d5:3a:9b:ed:07:81: b9:2a:48:cc:e3:d7:01:a7:20:3b:d9:dc:5a:26:e5: 9b:65:cd:4c:ee:a3:01:8e:56:40:13:e6:c3:e8:bc: f7:b7:7a:12:76:fb:a4:2a:86:ba:65:47:86:12:56: 4e:e6:24:aa:7b:f7:e3:68:f4:7e:eb:89:cf:cb:84: e5:41:1d:88:c5:27:4f:01:a7:75:ee:17:b1:9d:aa: 46:39:5f:c0:b1:69:68:6d:6d:6f:46:90:88:ac:58: 3a:df:35:e0:65:42:d9:5b:e2:2c:84:be:25:25:ed: 9d:08:64:0a:1c:71:88:1f:ba:5d:54:0e:b6:93:50: 69:91:56:dd:c0:1d:2c:bc:ca:8c:c6:71:79:0b:84: 3e:83:42:69:f0:62:72:9b:1a:f3:2f:d3:a8:53:be: a6:53:21:20:49:c6:18:f8:89:73:63:49:69:fb:78: 11:e4:ae:c0:5a:35:a6:1f:86:bc:6f:09:81:62:46: 9f:17:36:18:7f:fc:a1:24:bc:80:5c:a4:d5:39:06: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E6:5C:8A:B0:5D:8D:C0:09:8D:85:38:94:A7:44:8F:A3:42:38:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3565cb8-87d6-496b-9138-f9ffe1f061c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.80.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:74:ff:47:23:40:4a:44:5b:ce:f6:33:58:b8:b0:19:2d:78: 94:45:eb:c0:5f:1e:2f:17:a7:85:c9:2a:89:d3:f9:d9:d3:27: 92:e3:71:e5:5e:0b:33:bc:f7:78:a9:25:2e:a6:d8:b4:b7:d3: 80:00:d3:27:20:25:00:44:6c:5c:74:85:77:99:90:c9:05:73: db:fa:18:65:9c:e1:97:25:65:a5:1e:5b:55:f2:f7:be:de:24: d5:b7:92:6d:c0:f4:91:a9:3c:f3:ad:f3:6f:d3:ed:9a:df:5c: 02:6c:d4:86:73:f0:18:fa:5f:0d:fc:42:2a:1d:e9:db:77:c9: b5:eb:86:17:07:23:49:72:f9:7f:7e:02:83:76:03:02:72:48: af:7b:c1:0a:0c:56:5d:a7:a8:8a:fc:f8:11:eb:ea:69:c9:34: 06:93:2a:06:d4:49:2a:35:30:28:c6:ea:6b:21:a6:40:5a:a5: 62:55:ab:f3:88:62:ed:59:e2:96:95:d7:40:86:a2:74:b6:2f: 7e:52:4f:3c:44:4b:1f:42:0a:4c:64:cb:7d:a9:f5:1a:59:31: 63:a4:7a:71:86:5d:ee:e4:2c:e5:d7:8d:a3:2a:04:17:4b:ca: e6:7e:25:5e:d3:6c:16:e3:1a:a7:4c:05:1b:db:bb:c7:e9:04: 2b:04:65:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWDeZJiXeqvES++Nzd12nhAJjDgYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAxMDE4WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTMyZTY3MTkxOTBjMWQ5MTc1NzZkYzVkMWM0ZjMyMzZi Y2JhMGJiMGI1MWI3NzM2OTYwNmZkMDdjNjJiMGY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfGgnKfAQT8Cj+4ESKFO70Hji3rlwxDPYGHV1a69Re5j5T i0QaD/Xw5XPj914rAKvgJWUzD9U6m+0HgbkqSMzj1wGnIDvZ3Fom5ZtlzUzuowGO VkAT5sPovPe3ehJ2+6QqhrplR4YSVk7mJKp79+No9H7ric/LhOVBHYjFJ08Bp3Xu F7GdqkY5X8CxaWhtbW9GkIisWDrfNeBlQtlb4iyEviUl7Z0IZAoccYgful1UDraT UGmRVt3AHSy8yozGcXkLhD6DQmnwYnKbGvMv06hTvqZTISBJxhj4iXNjSWn7eBHk rsBaNaYfhrxvCYFiRp8XNhh//KEkvIBcpNU5BtuhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2eZcirBdjcAJjYU4lKdEj6NCOKwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzNTY1Y2I4LTg3ZDYtNDk2Yi05MTM4LWY5ZmZlMWYwNjFjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNkFAwDQYJKoZIhvcNAQELBQADggEBAC90/0cjQEpEW872M1i4sBkteJRF 68BfHi8Xp4XJKonT+dnTJ5LjceVeCzO893ipJS6m2LS304AA0ycgJQBEbFx0hXeZ kMkFc9v6GGWc4ZclZaUeW1Xy977eJNW3km3A9JGpPPOt82/T7ZrfXAJs1IZz8Bj6 Xw38Qiod6dt3ybXrhhcHI0ly+X9+AoN2AwJySK97wQoMVl2nqIr8+BHr6mnJNAaT KgbUSSo1MCjG6mshpkBapWJVq/OIYu1Z4paV10CGonS2L35STzxESx9CCkxky32p 9RpZMWOkenGGXe7kLOXXjaMqBBdLyuZ+JV7TbBbjGqdMBRvbu8fpBCsEZZ0= -----END CERTIFICATE-----Generated at Tue Jul 1 09:32:48 2025 by rpki-client