$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa File: cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa (raw, json) Hash identifier: vJ2b9xwpAbGLtuus9qe4XHEYMAqH6KP+zlMay+qJGPI= Subject key identifier: 72:90:F9:97:86:71:AA:35:BD:DD:5A:C0:43:7C:73:73:A4:4A:2E:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40789F31EB33601E63A29F96CCD3B3DC3187D9FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa Signing time: Tue 24 Jun 2025 00:41:36 +0000 ROA not before: Tue 24 Jun 2025 00:41:36 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:78:9f:31:eb:33:60:1e:63:a2:9f:96:cc:d3:b3:dc:31:87:d9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:41:36 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=e2faf84ddbe3c3a676bd0885f2d44078cc63f2cd04595961de8933bc95d4dcb1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:3a:73:10:41:52:19:84:04:61:b4:b8:4e: f5:e3:dc:af:f5:95:19:5a:cd:6b:7f:c3:86:78:75: d6:98:61:57:c3:72:c5:1d:1a:47:44:02:92:f2:a2: 54:6a:77:62:a8:4f:aa:d5:6d:ba:f8:9b:41:46:ba: 50:80:ab:5c:fe:8c:a2:fa:9e:79:f1:a2:b8:2e:45: ed:a7:69:90:9d:4f:98:27:f5:47:39:f1:03:cd:52: ca:87:d2:53:bb:e1:83:0a:17:9b:2a:67:ee:e8:aa: 63:c4:cd:03:6a:57:5a:01:05:9d:d3:31:bc:b2:d5: 99:6b:d3:4f:e6:43:25:e8:23:b8:25:98:66:f6:85: b5:cb:29:6f:12:08:61:8d:c5:f3:30:09:90:6b:d2: b5:a3:19:90:e0:c1:0e:da:23:b2:77:95:f7:aa:a3: af:bf:df:c4:c9:9a:02:33:b9:5d:01:6d:97:04:02: 42:3e:8f:7a:95:d8:c5:d9:c9:db:61:f7:67:c0:13: 3c:cc:98:ed:10:b9:f9:29:ca:48:b0:e3:6a:4a:6a: ea:09:d9:fb:14:ae:fe:21:f0:0f:80:e5:ad:2f:78: 1a:ef:72:b0:cf:36:aa:bc:ab:09:bf:f1:1f:1c:c5: f2:fa:d9:3b:18:a0:c7:c6:8e:33:de:20:98:2f:d9: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:F9:97:86:71:AA:35:BD:DD:5A:C0:43:7C:73:73:A4:4A:2E:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.131.0/24 Signature Algorithm: sha256WithRSAEncryption 97:61:ca:ce:de:de:53:e3:22:e0:97:5d:e2:98:08:0a:c4:f6: 56:0a:cd:7d:14:ed:94:fd:58:6c:e9:78:8b:61:01:e0:c5:5b: 21:45:9e:3a:bb:11:c0:6f:16:07:08:57:7a:44:91:a0:cc:4e: 3f:a3:cd:b3:b5:c8:c6:99:db:c8:73:2a:71:31:5e:2b:ca:ba: fa:55:52:de:3f:50:12:17:27:7c:ef:52:80:9d:cd:76:74:27: 10:b8:ae:6b:44:28:72:85:c6:01:ef:1a:62:66:23:de:0f:c4: 91:29:d5:9a:48:51:6c:f5:91:c0:fd:2a:80:8e:d6:d4:1a:da: 9a:9c:ac:3a:bb:69:28:30:97:ad:57:17:17:00:f0:42:da:2e: ff:d0:9e:62:e2:7c:a5:5a:e6:da:b8:2d:3e:76:44:8d:70:23: 8f:b5:fc:16:4f:24:7f:fb:5c:4a:bb:87:06:68:6e:8b:85:25: 75:1c:1c:22:35:07:44:e7:0a:57:6b:47:b7:ab:0d:51:cd:e9: 58:54:df:6a:43:a3:50:7f:db:7f:4b:28:9d:f2:55:f2:5c:02: 58:f4:0a:72:10:72:08:eb:fc:8a:9a:a0:6f:13:9b:d2:b6:14: 9a:f9:57:4f:02:88:79:34:86:ca:83:7d:6d:ad:3c:08:0e:51: b3:46:04:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQHifMeszYB5jop+WzNOz3DGH2f8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDA0MTM2WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmZhZjg0ZGRiZTNjM2E2NzZiZDA4ODVmMmQ0NDA3OGNj NjNmMmNkMDQ1OTU5NjFkZTg5MzNiYzk1ZDRkY2IxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqajpzEEFSGYQEYbS4TvXj3K/1lRlazWt/w4Z4ddaYYVfD csUdGkdEApLyolRqd2KoT6rVbbr4m0FGulCAq1z+jKL6nnnxorguRe2naZCdT5gn 9Uc58QPNUsqH0lO74YMKF5sqZ+7oqmPEzQNqV1oBBZ3TMbyy1Zlr00/mQyXoI7gl mGb2hbXLKW8SCGGNxfMwCZBr0rWjGZDgwQ7aI7J3lfeqo6+/38TJmgIzuV0BbZcE AkI+j3qV2MXZydth92fAEzzMmO0Qufkpykiw42pKauoJ2fsUrv4h8A+A5a0veBrv crDPNqq8qwm/8R8cxfL62TsYoMfGjjPeIJgv2VRtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcpD5l4ZxqjW93VrAQ3xzc6RKLngwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjNWNkNWNmLTM5NDktNGIyZC05YjhlLWYyZTc0MDM0NjEyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgAIMwDQYJKoZIhvcNAQELBQADggEBAJdhys7e3lPjIuCXXeKYCArE9lYK zX0U7ZT9WGzpeIthAeDFWyFFnjq7EcBvFgcIV3pEkaDMTj+jzbO1yMaZ28hzKnEx XivKuvpVUt4/UBIXJ3zvUoCdzXZ0JxC4rmtEKHKFxgHvGmJmI94PxJEp1ZpIUWz1 kcD9KoCO1tQa2pqcrDq7aSgwl61XFxcA8ELaLv/QnmLifKVa5tq4LT52RI1wI4+1 /BZPJH/7XEq7hwZobouFJXUcHCI1B0TnCldrR7erDVHN6VhU32pDo1B/239LKJ3y VfJcAlj0CnIQcgjr/IqaoG8Tm9K2FJr5V08CiHk0hsqDfW2tPAgOUbNGBHk= -----END CERTIFICATE-----Generated at Wed Jul 2 06:12:51 2025 by rpki-client