$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbe90832-aff1-474a-82ec-d348fdf66fea.roa File: dbe90832-aff1-474a-82ec-d348fdf66fea.roa (raw, json) Hash identifier: Lm2XZ1Uy/mZyANIY2jfxgOL1wbwoxrz7ekw5uftFnZs= Subject key identifier: 0D:07:FD:7D:AA:04:7D:9A:4D:3A:07:55:C9:36:4E:CB:3F:20:A6:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76254DD5F2755F7AF57573B2D33D93D01337514D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbe90832-aff1-474a-82ec-d348fdf66fea.roa Signing time: Mon 16 Jun 2025 15:32:00 +0000 ROA not before: Mon 16 Jun 2025 15:32:00 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:25:4d:d5:f2:75:5f:7a:f5:75:73:b2:d3:3d:93:d0:13:37:51:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:32:00 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=06761ecd6413354abd8c6a7aac3814fc73bd3dad40d75bd6e90617f86205fd53, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:83:84:94:66:a7:45:46:c9:0c:3f:32:89: f3:ae:3e:aa:59:21:e7:62:70:7a:c6:00:1e:23:22: f3:93:e6:e5:82:fc:40:ea:ca:60:4d:00:5a:32:98: 50:b0:b3:5e:09:cd:3e:39:c5:ec:a4:8e:db:80:de: 76:46:dd:b7:03:05:85:32:12:a4:60:81:44:d0:f0: 92:a5:2c:0e:ce:ae:49:78:22:f6:6e:09:8c:a4:2a: e9:e6:6f:f6:8a:a2:3b:0f:44:46:ae:28:ee:e7:54: d5:f8:ce:9d:dc:67:c5:9f:bb:bf:9c:38:36:92:9f: 57:5b:ba:d9:2c:9b:29:b2:0c:71:a0:cb:ad:6a:d7: 8d:c2:64:73:02:8d:f4:8f:96:72:b1:e1:e1:44:45: ce:00:f4:a8:6d:04:5b:8b:3e:3a:88:f9:8f:a6:8a: 97:a9:b3:ad:77:c6:8e:8b:20:11:22:5e:54:8f:60: b4:86:8b:65:2f:7d:2d:97:ef:37:38:b5:6f:b3:40: 35:0e:2c:a3:7b:b6:a3:3d:a0:47:7b:5b:00:4b:51: de:ed:3c:a1:bf:41:b4:b5:28:cb:d2:c9:60:d3:15: 4f:38:ac:9b:1c:af:4a:72:90:3e:04:df:17:76:60: a2:8d:57:6b:27:2e:d7:33:aa:ea:16:f5:c7:e8:c7: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:FD:7D:AA:04:7D:9A:4D:3A:07:55:C9:36:4E:CB:3F:20:A6:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbe90832-aff1-474a-82ec-d348fdf66fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:67:dd:b8:ac:24:f7:ba:2f:21:fb:a6:ed:71:35:64:84:a7: b3:14:db:bf:b9:ce:40:8d:43:6e:a0:2d:ad:e0:0a:63:86:1a: 15:a0:e1:1d:b6:47:6f:bf:4a:06:46:91:55:76:0b:e5:91:f2: 86:d1:23:20:75:54:ef:69:90:d1:db:41:e4:ce:fe:e2:9d:71: cf:7c:af:2a:4a:e9:37:03:3c:b9:55:ac:94:16:45:8f:30:0f: ff:3b:73:41:29:48:0d:69:f4:96:01:ff:6c:39:0d:39:28:29: 2f:8a:6e:92:cd:64:c4:10:0c:fc:e7:eb:86:db:7d:87:7a:be: d0:d4:49:4b:41:f3:c5:5c:d9:13:84:84:a0:33:97:1b:14:3f: 1d:94:7b:8d:1b:90:52:5d:42:6c:9d:57:64:d9:22:44:ca:0c: 52:71:4e:88:6f:22:50:aa:2b:f5:6a:a5:52:16:dc:6d:2f:79: cc:eb:72:4f:9b:da:29:fd:b0:ad:c5:7d:bf:36:c8:84:62:d9: 67:ed:90:b5:d6:92:a3:0a:55:2d:6d:e0:43:eb:10:73:13:30: 0e:d2:b8:41:9f:de:48:93:f6:c3:27:9a:cf:11:74:e2:00:b7: df:4a:43:78:c9:76:39:67:d8:06:12:bd:a6:8d:85:d9:87:ff: 4a:54:3a:6d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdiVN1fJ1X3r1dXOy0z2T0BM3UU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUzMjAwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjc2MWVjZDY0MTMzNTRhYmQ4YzZhN2FhYzM4MTRmYzcz YmQzZGFkNDBkNzViZDZlOTA2MTdmODYyMDVmZDUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvUYOElGanRUbJDD8yifOuPqpZIedicHrGAB4jIvOT5uWC /EDqymBNAFoymFCws14JzT45xeykjtuA3nZG3bcDBYUyEqRggUTQ8JKlLA7Orkl4 IvZuCYykKunmb/aKojsPREauKO7nVNX4zp3cZ8Wfu7+cODaSn1dbutksmymyDHGg y61q143CZHMCjfSPlnKx4eFERc4A9KhtBFuLPjqI+Y+mipeps613xo6LIBEiXlSP YLSGi2UvfS2X7zc4tW+zQDUOLKN7tqM9oEd7WwBLUd7tPKG/QbS1KMvSyWDTFU84 rJscr0pykD4E3xd2YKKNV2snLtczquoW9cfox7bfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDQf9faoEfZpNOgdVyTZOyz8gpjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiZTkwODMyLWFmZjEtNDc0YS04MmVjLWQzNDhmZGY2NmZlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4VTANBgkqhkiG9w0BAQsFAAOCAQEAa2fduKwk97ovIfum7XE1ZISnsxTb v7nOQI1DbqAtreAKY4YaFaDhHbZHb79KBkaRVXYL5ZHyhtEjIHVU72mQ0dtB5M7+ 4p1xz3yvKkrpNwM8uVWslBZFjzAP/ztzQSlIDWn0lgH/bDkNOSgpL4puks1kxBAM /Ofrhtt9h3q+0NRJS0HzxVzZE4SEoDOXGxQ/HZR7jRuQUl1CbJ1XZNkiRMoMUnFO iG8iUKor9WqlUhbcbS95zOtyT5vaKf2wrcV9vzbIhGLZZ+2QtdaSowpVLW3gQ+sQ cxMwDtK4QZ/eSJP2wyeazxF04gC330pDeMl2OWfYBhK9po2F2Yf/SlQ6bQ== -----END CERTIFICATE-----Generated at Mon Jun 30 16:05:41 2025 by rpki-client