$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb3244a-1366-4b6d-918a-28bdc0d62b6e.roa File: cdb3244a-1366-4b6d-918a-28bdc0d62b6e.roa (raw, json) Hash identifier: oheQlzFx/I1yQEvxohupA9Z7y0FXA/o493iFeAAghuE= Subject key identifier: 3C:EB:9A:68:7F:92:83:38:45:8D:FE:4F:C6:8D:80:C2:0E:71:23:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63B65F834A6031C464A2B79A4268C6C9B7E9D49D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb3244a-1366-4b6d-918a-28bdc0d62b6e.roa Signing time: Wed 25 Jun 2025 00:10:46 +0000 ROA not before: Wed 25 Jun 2025 00:10:46 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b6:5f:83:4a:60:31:c4:64:a2:b7:9a:42:68:c6:c9:b7:e9:d4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 25 00:10:46 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=788e3570008c5cf56af56dfbdcaf71038e7fcd8228d1053a53e7ae4e51ad7103, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:e9:d4:5f:d0:75:cb:8c:86:9e:11:6d:b0: 80:d0:30:d7:52:69:3d:1d:b6:fd:bd:91:2b:95:f0: 58:2b:46:e6:da:6d:b8:c5:8c:5d:2b:08:63:24:c2: a6:21:8c:87:72:b4:2c:32:e4:26:17:c1:26:f4:5e: 00:0c:e1:f8:31:fd:88:5a:f9:0d:6d:26:54:52:f3: 9f:d3:79:e3:87:55:3a:5c:b9:9a:d6:f4:e4:03:d2: d8:9c:6e:fd:da:e4:0d:a6:b0:f0:b2:d2:11:a8:d1: c0:3d:8d:91:2b:6c:eb:c2:8f:65:92:12:99:5a:f4: ea:32:5e:23:79:11:fd:24:e7:3f:9e:5f:df:78:48: 76:86:3a:76:70:90:5d:09:b9:4b:c7:9c:54:2b:b7: 4d:b0:8e:b3:0e:14:1c:fa:ec:02:a5:1c:9b:83:7b: 12:dd:fd:b1:6e:1e:15:e9:5c:31:20:86:6c:1f:2e: 32:60:e8:8c:8e:59:1e:4e:6d:e2:7d:cc:79:49:20: c2:3e:f8:d5:2f:1c:28:0e:99:35:d1:80:44:d6:62: c1:c3:3d:45:43:23:0d:9b:b8:b1:32:d4:ac:62:3f: aa:51:70:d2:9f:05:c2:c3:1f:64:3f:49:5b:77:42: 6d:23:4a:3c:2e:4c:33:ff:c8:83:d4:5a:57:2c:b2: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:9A:68:7F:92:83:38:45:8D:FE:4F:C6:8D:80:C2:0E:71:23:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb3244a-1366-4b6d-918a-28bdc0d62b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.64.0/18 Signature Algorithm: sha256WithRSAEncryption 21:af:f8:10:88:01:b4:55:26:b3:2d:24:38:07:65:a2:cc:fe: 89:49:a6:6e:b6:89:cc:d6:5c:e5:39:4c:4f:32:3a:58:7a:7d: cd:fc:c0:15:27:b6:13:0d:12:8c:29:57:d4:a4:ca:b4:b0:c0: fd:1c:b9:b1:73:87:4d:c0:c7:65:43:3b:f6:72:8f:1d:5b:ff: 4c:2b:d9:3d:a3:88:90:a2:a9:9e:13:88:c5:ea:35:59:20:69: 2a:5b:6c:7d:bb:3e:2b:20:64:1d:d4:ac:ab:eb:7c:dd:0b:99: a3:44:be:05:55:f6:40:8d:97:e8:34:e7:f5:83:8f:c1:4c:23: 5a:e9:4c:f8:ea:e3:b4:4a:be:89:97:5e:5d:cb:14:74:b5:2f: a2:e7:2f:cd:cb:de:2e:0d:dc:ef:37:22:dd:ab:38:56:ea:59: dc:49:b5:ba:c4:53:a2:ec:df:f5:bb:c1:96:72:6c:c2:34:3f: 80:ab:3e:f7:f7:5e:30:d6:74:29:0b:a2:89:f1:3f:76:24:8a: b1:ed:28:f2:98:3c:8c:8b:be:2d:78:9c:38:aa:e1:f3:24:b2: 09:a9:21:ae:28:03:7f:6b:9f:a8:0e:9d:8a:1e:68:f7:d4:d5: 54:dc:a4:23:f8:8e:f3:bf:d6:e6:54:fe:48:47:37:4a:0f:da: d1:d5:90:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY7Zfg0pgMcRkoreaQmjGybfp1J0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI1MDAxMDQ2WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODhlMzU3MDAwOGM1Y2Y1NmFmNTZkZmJkY2FmNzEwMzhl N2ZjZDgyMjhkMTA1M2E1M2U3YWU0ZTUxYWQ3MTAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoGunUX9B1y4yGnhFtsIDQMNdSaT0dtv29kSuV8FgrRuba bbjFjF0rCGMkwqYhjIdytCwy5CYXwSb0XgAM4fgx/Yha+Q1tJlRS85/TeeOHVTpc uZrW9OQD0ticbv3a5A2msPCy0hGo0cA9jZErbOvCj2WSEpla9OoyXiN5Ef0k5z+e X994SHaGOnZwkF0JuUvHnFQrt02wjrMOFBz67AKlHJuDexLd/bFuHhXpXDEghmwf LjJg6IyOWR5ObeJ9zHlJIMI++NUvHCgOmTXRgETWYsHDPUVDIw2buLEy1KxiP6pR cNKfBcLDH2Q/SVt3Qm0jSjwuTDP/yIPUWlcssrDZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPOuaaH+SgzhFjf5Pxo2Awg5xIzAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkYjMyNDRhLTEzNjYtNGI2ZC05MThhLTI4YmRjMGQ2MmI2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZA/EAwDQYJKoZIhvcNAQELBQADggEBACGv+BCIAbRVJrMtJDgHZaLM/olJ pm62iczWXOU5TE8yOlh6fc38wBUnthMNEowpV9SkyrSwwP0cubFzh03Ax2VDO/Zy jx1b/0wr2T2jiJCiqZ4TiMXqNVkgaSpbbH27PisgZB3UrKvrfN0LmaNEvgVV9kCN l+g05/WDj8FMI1rpTPjq47RKvomXXl3LFHS1L6LnL83L3i4N3O83It2rOFbqWdxJ tbrEU6Ls3/W7wZZybMI0P4CrPvf3XjDWdCkLoonxP3YkirHtKPKYPIyLvi14nDiq 4fMksgmpIa4oA39rn6gOnYoeaPfU1VTcpCP4jvO/1uZU/khHN0oP2tHVkKg= -----END CERTIFICATE-----Generated at Tue Jul 1 09:32:34 2025 by rpki-client