$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cddc38a9-b919-4a54-aad6-1107e47d5499.roa File: cddc38a9-b919-4a54-aad6-1107e47d5499.roa (raw, json) Hash identifier: +k/6pZ+s7w2wKri5O6lEefTjsg5fB1RqzPIdSkGnpUM= Subject key identifier: 68:AD:55:BE:CF:28:0A:E7:83:3D:DE:66:68:65:8C:FC:5A:77:3E:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75B012B2E76CD37EACD61BCE31FA8E4AEDEBFED3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cddc38a9-b919-4a54-aad6-1107e47d5499.roa Signing time: Mon 16 Jun 2025 15:21:26 +0000 ROA not before: Mon 16 Jun 2025 15:21:26 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b0:12:b2:e7:6c:d3:7e:ac:d6:1b:ce:31:fa:8e:4a:ed:eb:fe:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:21:26 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=fb9fb2ca5d1d9cca78627044d177b3478f9bba69beed7f0c3eb03ea99f015b40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:0a:ca:bc:57:1b:19:fb:71:94:f3:a1:0a: 93:c3:90:da:52:de:bc:f3:33:dd:28:9e:8f:e1:97: 2d:6b:15:5e:92:7b:81:46:be:b7:db:d6:87:e6:b8: 71:c1:bd:5f:0e:c1:c7:96:00:35:aa:7b:a4:46:b5: 75:40:2d:5e:be:d1:bb:1b:8d:dd:33:7a:fe:c6:e8: e1:6b:bc:9e:77:cb:d6:33:02:ea:19:5c:90:fb:c4: 23:f6:9a:fd:47:0b:8d:58:a7:7d:f4:53:48:5c:33: 90:4c:1c:7c:6f:0c:b0:ae:60:34:1e:ba:af:f4:81: e0:73:4d:da:69:73:5a:95:a7:4b:c0:01:5d:14:cc: 4e:26:27:d9:53:18:77:47:d9:e6:04:e6:f1:b5:02: ee:48:40:f8:f0:f7:3f:ad:42:a8:d4:bb:ed:50:9c: 10:c2:cc:c8:f7:c5:f0:95:36:c3:5c:d6:62:e0:23: fc:7d:e6:84:e0:5b:7c:f8:7c:78:45:db:b8:80:e1: df:16:99:51:6c:ff:04:81:16:0b:67:2d:c7:81:28: a3:4a:3a:dc:39:41:36:dd:6c:0d:f1:81:33:38:79: 68:d1:b6:52:37:60:fa:8f:db:eb:e2:f3:68:b0:a6: 07:7a:db:98:25:74:6a:2a:0f:d9:1f:f9:a5:11:fa: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AD:55:BE:CF:28:0A:E7:83:3D:DE:66:68:65:8C:FC:5A:77:3E:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cddc38a9-b919-4a54-aad6-1107e47d5499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:6c:1f:91:6b:5d:39:e4:85:27:a7:47:d3:2b:f6:a3:72:36: 30:f5:da:66:fc:0f:62:e8:80:a7:a0:1c:bb:dd:7d:81:fc:a7: f6:fc:75:d0:e7:66:36:7a:1d:b3:d9:ce:31:d4:70:1e:ce:21: 40:53:a2:99:e8:39:6e:24:91:5b:77:66:19:17:0c:64:72:e2: 4f:56:33:43:18:3f:f8:fc:07:98:b9:13:e9:39:7a:b4:07:e0: ef:f7:51:1b:1c:7c:63:17:88:36:72:ef:80:49:b8:ed:54:3b: 78:73:35:ad:8a:d7:e5:09:9a:44:2e:e1:48:6f:e9:a7:5c:ab: 3d:f1:ab:b7:7b:48:bc:8a:d9:5c:94:e7:2c:da:65:72:0f:81: 2d:51:63:cb:8a:75:c2:00:c1:90:99:37:60:26:46:60:17:f1: 04:86:83:cb:ec:9c:46:57:2c:a6:f8:1c:02:fa:62:b0:9a:70: 67:a7:59:13:b0:9c:c4:75:23:dd:15:a7:fb:35:1f:27:cb:76: bd:4b:37:db:59:f4:21:62:49:8b:26:ca:5d:76:36:d6:b0:14: 05:a9:21:c2:36:29:30:f0:0f:69:a6:3b:fb:b3:35:28:c1:39: 33:04:ba:ae:6f:89:18:a9:da:ef:83:09:76:6c:6f:6f:64:20: dd:4c:be:37 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdbASsuds036s1hvOMfqOSu3r/tMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUyMTI2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjlmYjJjYTVkMWQ5Y2NhNzg2MjcwNDRkMTc3YjM0Nzhm OWJiYTY5YmVlZDdmMGMzZWIwM2VhOTlmMDE1YjQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFiQrKvFcbGftxlPOhCpPDkNpS3rzzM90ono/hly1rFV6S e4FGvrfb1ofmuHHBvV8OwceWADWqe6RGtXVALV6+0bsbjd0zev7G6OFrvJ53y9Yz AuoZXJD7xCP2mv1HC41Yp330U0hcM5BMHHxvDLCuYDQeuq/0geBzTdppc1qVp0vA AV0UzE4mJ9lTGHdH2eYE5vG1Au5IQPjw9z+tQqjUu+1QnBDCzMj3xfCVNsNc1mLg I/x95oTgW3z4fHhF27iA4d8WmVFs/wSBFgtnLceBKKNKOtw5QTbdbA3xgTM4eWjR tlI3YPqP2+vi82iwpgd625gldGoqD9kf+aUR+uo9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaK1Vvs8oCueDPd5maGWM/Fp3PhwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkZGMzOGE5LWI5MTktNGE1NC1hYWQ2LTExMDdlNDdkNTQ5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4FjANBgkqhkiG9w0BAQsFAAOCAQEAc2wfkWtdOeSFJ6dH0yv2o3I2MPXa ZvwPYuiAp6Acu919gfyn9vx10OdmNnods9nOMdRwHs4hQFOimeg5biSRW3dmGRcM ZHLiT1YzQxg/+PwHmLkT6Tl6tAfg7/dRGxx8YxeINnLvgEm47VQ7eHM1rYrX5Qma RC7hSG/pp1yrPfGrt3tIvIrZXJTnLNplcg+BLVFjy4p1wgDBkJk3YCZGYBfxBIaD y+ycRlcspvgcAvpisJpwZ6dZE7CcxHUj3RWn+zUfJ8t2vUs321n0IWJJiybKXXY2 1rAUBakhwjYpMPAPaaY7+7M1KME5MwS6rm+JGKna74MJdmxvb2Qg3Uy+Nw== -----END CERTIFICATE-----Generated at Sun Jun 29 04:38:06 2025 by rpki-client