$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa File: cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa (raw, json) Hash identifier: MIOLzI1JEKMRchT2HKZEOwbf6PysSpwsHMY0PlUgM68= Subject key identifier: F4:75:BD:F7:C0:65:21:CC:E1:55:A2:71:56:21:7C:BD:D6:84:AC:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 125A29394D6D77B5F5374AF64B4EEF9994151E22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa Signing time: Mon 16 Jun 2025 15:30:19 +0000 ROA not before: Mon 16 Jun 2025 15:30:19 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.246.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:29:39:4d:6d:77:b5:f5:37:4a:f6:4b:4e:ef:99:94:15:1e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:30:19 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=9c61440730d27f4d76f03ce92c2089e0cf2672f881d9a8050c6f3d68f76b6f57, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:85:9d:ca:e0:3c:af:14:60:0a:cd:c8:f2:32: c6:c4:78:26:3c:e3:ba:20:dd:ce:6e:ce:66:ac:21: 11:14:b4:83:c3:a9:76:8c:0f:1a:91:f3:f9:32:c1: 5f:fb:1e:d2:45:28:27:5d:de:52:1c:8d:ce:72:99: f9:b2:41:40:89:e5:57:fd:5d:f0:08:62:85:31:8c: e9:26:80:9c:33:d9:e9:85:fe:97:25:e4:75:bf:ab: 84:91:9c:b4:c4:1d:56:c6:44:3d:e7:89:96:72:f6: 0a:a0:0e:e2:bd:3b:d3:da:21:1c:69:96:1d:12:30: 5c:ad:2d:56:b8:62:ba:bb:39:f3:4c:5c:30:83:91: a2:67:f4:c4:ba:e6:e2:8e:a9:29:44:4c:ff:07:32: 82:96:22:06:bc:61:dc:50:91:49:6f:4a:dc:d5:6f: a6:1a:c6:25:9d:f5:d3:50:e4:c1:20:86:85:3d:85: 6c:03:9a:60:9f:b1:8b:54:27:f5:82:67:6a:5a:85: b2:7e:dc:7a:40:f6:2a:ae:72:05:98:9e:e2:1f:41: 83:82:b9:33:10:0e:63:89:d3:c7:79:3f:52:ff:f1: c3:2e:3d:2d:00:7c:09:e2:b6:b0:c9:4c:33:f0:e8: 36:f7:b7:c1:e1:9c:7c:a2:f8:70:c7:d2:8a:c2:69: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:75:BD:F7:C0:65:21:CC:E1:55:A2:71:56:21:7C:BD:D6:84:AC:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdbca8c9-c527-4875-b58e-fc50d0104ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:6f:66:8f:ab:1a:61:60:a7:2b:d4:0d:2b:5b:f0:b2:54:9b: 47:e4:4d:c0:15:82:a0:3b:01:e5:a1:aa:f0:cf:3b:06:c1:ad: 84:ab:20:0c:02:97:38:2c:41:6e:a0:9b:29:ca:2e:6f:f9:cf: 03:d0:5f:53:98:ca:ad:ea:71:b2:28:d6:06:1e:48:ff:a4:03: 08:30:ad:90:08:62:1a:f4:8d:c3:c6:85:f4:03:4e:f1:5f:2d: 59:66:45:01:d7:50:01:a2:6b:36:c4:39:7c:4e:62:2a:f7:4a: f9:5e:92:4a:59:15:4d:c3:d2:aa:7d:1f:3c:7b:93:e0:ff:77: 44:61:a5:81:63:5f:41:ad:87:18:87:9e:1a:80:a4:56:f3:78: 4f:34:fb:42:1a:0f:03:40:f5:4c:58:67:0e:33:09:04:38:31: da:75:4f:bc:0e:3d:61:7c:7d:7f:be:05:27:a3:cd:2f:f1:4d: 51:49:90:5a:cc:4f:06:47:5c:6a:0a:a9:f5:33:e8:a2:e9:22: b5:d3:84:c0:ed:03:12:52:75:ae:c2:39:f0:fe:e8:38:2e:84: f4:5b:92:41:ab:cf:8a:0f:aa:5d:49:7d:36:80:fe:6e:ac:2d: 5b:44:95:84:48:ca:56:44:6b:91:10:eb:65:ed:58:a0:3a:2f: 15:b6:71:bf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUElopOU1td7X1N0r2S07vmZQVHiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUzMDE5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzYxNDQwNzMwZDI3ZjRkNzZmMDNjZTkyYzIwODllMGNm MjY3MmY4ODFkOWE4MDUwYzZmM2Q2OGY3NmI2ZjU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDshZ3K4DyvFGAKzcjyMsbEeCY847og3c5uzmasIREUtIPD qXaMDxqR8/kywV/7HtJFKCdd3lIcjc5ymfmyQUCJ5Vf9XfAIYoUxjOkmgJwz2emF /pcl5HW/q4SRnLTEHVbGRD3niZZy9gqgDuK9O9PaIRxplh0SMFytLVa4Yrq7OfNM XDCDkaJn9MS65uKOqSlETP8HMoKWIga8YdxQkUlvStzVb6YaxiWd9dNQ5MEghoU9 hWwDmmCfsYtUJ/WCZ2pahbJ+3HpA9iqucgWYnuIfQYOCuTMQDmOJ08d5P1L/8cMu PS0AfAnitrDJTDPw6Db3t8HhnHyi+HDH0orCafJHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9HW998BlIczhVaJxViF8vdaErGIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkYmNhOGM5LWM1MjctNDg3NS1iNThlLWZjNTBkMDEwNGVjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA49jANBgkqhkiG9w0BAQsFAAOCAQEAIW9mj6saYWCnK9QNK1vwslSbR+RN wBWCoDsB5aGq8M87BsGthKsgDAKXOCxBbqCbKcoub/nPA9BfU5jKrepxsijWBh5I /6QDCDCtkAhiGvSNw8aF9ANO8V8tWWZFAddQAaJrNsQ5fE5iKvdK+V6SSlkVTcPS qn0fPHuT4P93RGGlgWNfQa2HGIeeGoCkVvN4TzT7QhoPA0D1TFhnDjMJBDgx2nVP vA49YXx9f74FJ6PNL/FNUUmQWsxPBkdcagqp9TPooukitdOEwO0DElJ1rsI58P7o OC6E9FuSQavPig+qXUl9NoD+bqwtW0SVhEjKVkRrkRDrZe1YoDovFbZxvw== -----END CERTIFICATE-----Generated at Sun Jun 29 08:13:26 2025 by rpki-client