$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa File: cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json) Hash identifier: 9LVZwTYlAdTACYstQZnJ9CV3U3YZRqokNMowBD1TQ8o= Subject key identifier: 4F:25:C9:23:8C:A6:09:FA:01:28:E9:1E:14:AA:B6:B6:5F:17:76:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A0CAA7EC314FCE6B0854DB2A58CF9FCAA297026 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa Signing time: Mon 30 Jun 2025 15:10:29 +0000 ROA not before: Mon 30 Jun 2025 15:10:29 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0c:aa:7e:c3:14:fc:e6:b0:85:4d:b2:a5:8c:f9:fc:aa:29:70:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:10:29 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=0a130f308ea7ff8cc8a5ef8f5ed0e52cf44af9c88bb18e5727986a8fb63a4187, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:a7:bc:69:40:8e:27:bb:78:43:fe:ff:82: 0e:60:da:73:bb:83:58:85:21:ed:4c:be:54:fd:b7: 03:8f:39:9d:ea:2b:36:78:44:5d:1f:3b:83:d2:4c: 12:da:50:e8:b1:51:4f:ad:31:de:75:4b:1e:17:7a: 37:3e:31:c1:f8:0c:0d:91:9a:06:97:a7:5e:06:3a: 98:cf:cf:7c:92:e7:1f:c2:d7:b5:cc:73:3d:c1:27: 2b:90:72:1f:3e:03:62:4c:13:23:e4:9d:db:65:b6: db:66:a7:b1:58:cd:70:4f:07:ca:53:9f:87:0a:2d: bc:3c:0c:59:29:a5:44:1c:b6:e5:d7:5c:0d:88:7e: cf:61:10:f2:10:1c:37:d9:31:c5:82:72:1a:1a:98: 4e:43:70:fe:eb:e2:46:3e:03:e4:13:32:a4:e5:95: 09:66:4e:ad:22:0c:65:87:06:1b:7a:c7:ec:ad:6a: 98:73:1a:ed:23:47:a1:fd:c2:29:f1:8b:9c:23:77: b2:d3:96:34:e4:d2:ff:73:fc:50:ce:9d:30:65:1c: c7:43:7f:cb:a4:8b:09:3f:0c:c5:fd:97:59:62:12: e9:bc:a6:9e:bb:e8:58:3b:31:36:cc:7c:5c:67:a4: 3c:6f:9e:90:cd:d1:05:de:10:d2:ea:1c:86:d0:a0: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:25:C9:23:8C:A6:09:FA:01:28:E9:1E:14:AA:B6:B6:5F:17:76:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:55:ef:e1:7f:5a:cc:e6:b4:30:3e:af:74:cf:0a:9f:36:e4: 4a:81:ad:4d:31:6f:dd:13:47:f4:41:b6:7e:93:57:6c:c9:1d: 62:70:76:d7:8a:9d:76:8d:81:63:99:a8:73:24:06:e7:83:ba: ed:6a:b4:6b:48:11:cb:ed:f9:b9:65:85:aa:98:3b:6d:04:5e: df:07:9f:f7:9d:96:59:5b:0f:7d:b3:bc:34:78:b6:32:49:24: f5:df:4a:64:ec:05:7f:c2:98:29:d7:12:95:cd:c8:a3:05:a0: 9e:3c:0a:93:d1:50:26:ce:63:33:79:e6:f7:03:bf:40:8e:10: e2:f9:13:80:6b:cd:ba:15:1e:2e:66:3b:45:12:9b:75:c9:30: d3:6e:30:6e:c8:5b:2b:62:54:8f:9b:6b:06:ba:8b:a4:c1:6a: 5e:d0:97:41:d0:51:0e:98:4f:b4:64:e2:33:7c:88:60:b8:65: 07:ea:5b:72:26:f5:1c:84:02:6d:89:95:34:87:79:06:aa:48: d6:2e:8a:ff:4e:a9:36:05:89:af:3b:69:ca:9a:86:54:10:a4: b2:b1:42:6a:da:c3:5a:b6:2c:2e:3e:65:ef:6c:1e:68:fa:00: a5:57:9a:33:1a:65:fd:cb:75:d6:35:a4:5c:d0:f8:dc:13:8b: ba:f5:d6:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWgyqfsMU/OawhU2ypYz5/KopcCYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUxMDI5WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTEzMGYzMDhlYTdmZjhjYzhhNWVmOGY1ZWQwZTUyY2Y0 NGFmOWM4OGJiMThlNTcyNzk4NmE4ZmI2M2E0MTg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNL6e8aUCOJ7t4Q/7/gg5g2nO7g1iFIe1MvlT9twOPOZ3q KzZ4RF0fO4PSTBLaUOixUU+tMd51Sx4Xejc+McH4DA2RmgaXp14GOpjPz3yS5x/C 17XMcz3BJyuQch8+A2JMEyPkndtltttmp7FYzXBPB8pTn4cKLbw8DFkppUQctuXX XA2Ifs9hEPIQHDfZMcWCchoamE5DcP7r4kY+A+QTMqTllQlmTq0iDGWHBht6x+yt aphzGu0jR6H9winxi5wjd7LTljTk0v9z/FDOnTBlHMdDf8ukiwk/DMX9l1liEum8 pp676Fg7MTbMfFxnpDxvnpDN0QXeENLqHIbQoFQ7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTyXJI4ymCfoBKOkeFKq2tl8XdkMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjMjA0MTkyLWY1NGEtNGEyNC1iNjkzLTkwNWZiZjQzM2I3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4UTANBgkqhkiG9w0BAQsFAAOCAQEAB1Xv4X9azOa0MD6vdM8KnzbkSoGt TTFv3RNH9EG2fpNXbMkdYnB214qddo2BY5mocyQG54O67Wq0a0gRy+35uWWFqpg7 bQRe3wef952WWVsPfbO8NHi2Mkkk9d9KZOwFf8KYKdcSlc3IowWgnjwKk9FQJs5j M3nm9wO/QI4Q4vkTgGvNuhUeLmY7RRKbdckw024wbshbK2JUj5trBrqLpMFqXtCX QdBRDphPtGTiM3yIYLhlB+pbcib1HIQCbYmVNId5BqpI1i6K/06pNgWJrztpypqG VBCksrFCatrDWrYsLj5l72weaPoApVeaMxpl/ct11jWkXND43BOLuvXWDQ== -----END CERTIFICATE-----Generated at Wed Jul 2 20:46:39 2025 by rpki-client