$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa File: cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa (raw, json) Hash identifier: P+CrGTM9pGPHQL83WRNRegB0RFo1DS5ZltIiXInjlOQ= Subject key identifier: B5:08:5D:B9:F2:2D:C3:1A:C2:93:F8:C0:67:B5:2A:60:B5:FC:93:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A104F16BBB8D9DA040FAA9319EE27C49842A46B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa Signing time: Sat 21 Jun 2025 00:21:02 +0000 ROA not before: Sat 21 Jun 2025 00:21:02 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 192.157.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:10:4f:16:bb:b8:d9:da:04:0f:aa:93:19:ee:27:c4:98:42:a4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:21:02 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=017730d6d03de2e647dfe367435db1f8432323747ec6f6619d5c6efa218ec9e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:b1:46:8e:21:8e:0a:dd:e7:e3:cb:2f:cd: 00:8e:d9:3f:42:32:8b:02:c0:07:4c:99:a8:2b:92: da:0d:bd:f4:03:a7:fc:01:5f:f3:5c:17:fd:d6:44: 0b:3c:90:af:19:74:de:32:02:a5:01:a8:8b:68:58: 4b:7d:de:4f:8c:54:00:25:e2:fd:65:69:35:a7:0d: 25:a2:31:23:87:05:55:e6:e6:3a:26:20:26:f8:a9: 16:68:46:09:dd:68:b7:66:f3:80:ab:fe:f7:71:75: 8f:39:e2:e1:c2:b0:df:4a:83:be:d9:7e:41:8d:9b: 07:86:dc:71:ee:e0:85:b5:7a:0a:cc:cd:80:18:c3: ee:58:33:c2:7b:e4:b8:f6:97:44:ec:fb:a9:18:b2: 4e:02:f4:3c:54:7a:7f:41:e8:cf:83:a0:3e:e2:25: bc:d7:f9:19:92:10:03:12:3c:b8:60:2e:c5:ac:b8: 89:4a:17:71:39:53:a3:b4:5a:da:e9:59:6b:42:9a: d7:a7:2c:87:12:13:46:10:c8:28:ed:db:96:41:63: 02:07:cd:16:63:33:20:7b:99:44:6e:2c:ed:8c:9a: 9a:e8:d1:de:0f:21:7c:42:88:cd:9b:35:c8:d7:3a: 16:76:95:e7:dc:2b:5b:38:7a:82:9d:2b:b7:f2:b8: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:08:5D:B9:F2:2D:C3:1A:C2:93:F8:C0:67:B5:2A:60:B5:FC:93:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc289c8-bd6a-4f63-9a72-42779011f8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.157.72.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:70:a7:52:eb:17:e6:1e:5b:12:34:f4:bb:8e:4e:d4:7f:cb: 83:b1:fb:09:3b:40:4d:d4:70:72:69:04:49:79:1a:74:5b:58: 48:3a:39:41:3f:a9:6a:80:fe:25:b2:48:71:12:65:17:51:c8: a3:5d:d2:bd:86:90:63:65:a3:0d:43:38:c4:b6:15:1f:06:ab: 5c:1d:16:2a:7c:4f:26:97:a2:5b:f1:9b:4c:f0:4f:66:c6:44: 92:06:e8:60:d7:c8:aa:6b:8f:76:ff:e1:be:12:ec:f4:c1:b1: c7:5a:93:80:5d:5e:6b:b0:f9:7a:14:98:34:f4:a3:d4:bb:27: bd:d5:84:6a:f4:73:05:22:79:42:56:3a:cb:ca:6b:8a:51:f6: 51:90:a2:ab:84:80:6e:00:e4:f8:b1:0e:8b:62:cd:77:35:72: 21:65:90:51:17:1e:c3:c6:68:e0:90:80:af:bf:a1:d9:b6:1f: 76:6f:6d:96:c6:2a:42:87:f7:6f:a0:da:ba:5a:df:78:3b:5d: 94:97:d3:65:ad:b0:5c:3b:c1:c7:f3:a6:e1:db:9f:76:1c:68: 40:9c:70:0b:a6:c5:ec:0a:62:af:17:0d:1e:2c:5d:26:22:0f: e8:dc:f7:64:6c:bf:1d:e1:0d:f0:72:35:a1:77:39:84:72:4b: a7:f7:1d:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGhBPFru42doED6qTGe4nxJhCpGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAyMTAyWhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTc3MzBkNmQwM2RlMmU2NDdkZmUzNjc0MzVkYjFmODQz MjMyMzc0N2VjNmY2NjE5ZDVjNmVmYTIxOGVjOWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWwrFGjiGOCt3n48svzQCO2T9CMosCwAdMmagrktoNvfQD p/wBX/NcF/3WRAs8kK8ZdN4yAqUBqItoWEt93k+MVAAl4v1laTWnDSWiMSOHBVXm 5jomICb4qRZoRgndaLdm84Cr/vdxdY854uHCsN9Kg77ZfkGNmweG3HHu4IW1egrM zYAYw+5YM8J75Lj2l0Ts+6kYsk4C9DxUen9B6M+DoD7iJbzX+RmSEAMSPLhgLsWs uIlKF3E5U6O0WtrpWWtCmtenLIcSE0YQyCjt25ZBYwIHzRZjMyB7mURuLO2Mmpro 0d4PIXxCiM2bNcjXOhZ2lefcK1s4eoKdK7fyuCXnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtQhdufItwxrCk/jAZ7UqYLX8k1IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYzI4OWM4LWJkNmEtNGY2My05YTcyLTQyNzc5MDExZjhiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHAnUgwDQYJKoZIhvcNAQELBQADggEBAD5wp1LrF+YeWxI09LuOTtR/y4Ox +wk7QE3UcHJpBEl5GnRbWEg6OUE/qWqA/iWySHESZRdRyKNd0r2GkGNlow1DOMS2 FR8Gq1wdFip8TyaXolvxm0zwT2bGRJIG6GDXyKprj3b/4b4S7PTBscdak4BdXmuw +XoUmDT0o9S7J73VhGr0cwUieUJWOsvKa4pR9lGQoquEgG4A5PixDotizXc1ciFl kFEXHsPGaOCQgK+/odm2H3ZvbZbGKkKH92+g2rpa33g7XZSX02WtsFw7wcfzpuHb n3YcaECccAumxewKYq8XDR4sXSYiD+jc92Rsvx3hDfByNaF3OYRyS6f3HTo= -----END CERTIFICATE-----Generated at Wed Jul 2 02:04:58 2025 by rpki-client