$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de63a064-738e-48b3-950e-18e9f0ea4724.roa File: de63a064-738e-48b3-950e-18e9f0ea4724.roa (raw, json) Hash identifier: mBg8IBNpn4f8+nCrp1HbiUHZ3JhUgjGMBqGfnpnXWqc= Subject key identifier: 72:AE:89:6E:6D:E3:B1:D3:AE:5E:46:80:E5:8A:A1:B4:2C:EB:1D:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7850F110119B60F08689A7952C9D97E4534822A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de63a064-738e-48b3-950e-18e9f0ea4724.roa Signing time: Fri 27 Jun 2025 00:11:25 +0000 ROA not before: Fri 27 Jun 2025 00:11:25 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.162.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:50:f1:10:11:9b:60:f0:86:89:a7:95:2c:9d:97:e4:53:48:22:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:11:25 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=68f3b7cf7ba23675467586712fba88244711f07c89a8ff079db7d871c3d5bab5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:02:dd:86:29:06:8d:65:1f:ef:d9:51:f6: b8:89:61:89:ab:a2:5c:36:64:f3:c4:6e:41:a6:c9: ab:61:f7:3b:54:1c:09:10:49:ab:35:24:c1:10:48: 6e:19:75:1a:34:71:a0:8e:99:43:8c:75:34:33:08: 9e:f8:50:05:21:5e:20:2e:63:a4:6a:8d:ba:e2:9c: 89:d6:aa:6a:27:18:76:4c:e1:a8:4d:16:22:6a:35: 8b:2c:4d:23:93:1f:16:fc:64:86:14:e9:b1:a9:bf: e7:45:96:a4:dc:04:32:a4:fc:ac:38:ed:c0:4e:f7: 83:ef:0b:4c:f3:67:e3:d9:00:4f:75:a2:fc:fd:c3: 82:d2:e1:6a:a2:0a:bb:70:ef:75:41:a1:f6:5a:60: 98:a5:22:f4:77:7c:54:a7:f0:cb:72:9e:80:17:c2: 5b:ac:f6:47:cb:3c:3f:47:e1:f0:c1:2d:f3:c6:b6: 0a:0c:c4:49:3e:a6:11:af:7d:0a:2b:08:58:3b:31: 2e:a4:cf:e9:56:db:4c:d0:0b:b8:f1:6b:57:40:89: d6:96:6c:47:56:cd:1a:14:f2:1c:65:79:3b:0d:ce: b2:1a:d0:ee:31:52:c0:f8:b7:be:44:cc:20:7d:a6: 3d:8e:dc:c7:00:18:f6:8b:2d:dc:b9:b2:ee:6b:c5: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:89:6E:6D:E3:B1:D3:AE:5E:46:80:E5:8A:A1:B4:2C:EB:1D:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de63a064-738e-48b3-950e-18e9f0ea4724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:33:6c:f2:d4:4f:d2:6e:ab:96:21:c7:0b:72:ea:fe:59:7a: 6d:a6:4b:a1:d4:8f:45:d3:3d:32:f5:b8:b9:83:f4:e4:2a:72: 9c:ac:d9:c4:cd:95:7c:e8:bd:3e:c9:76:f1:55:ec:99:d7:74: d5:e9:49:3e:8e:76:23:90:e8:2e:8e:1d:ec:ca:fa:b2:c3:bd: 51:ea:4f:eb:c9:fc:d3:81:82:d7:cb:21:c0:a0:fe:d3:63:7f: b6:e4:09:82:1c:a8:ae:8b:b5:4b:27:b4:c4:49:3c:c7:03:c3: 32:2c:c8:a2:42:42:a1:b0:bc:47:2e:86:8c:ac:27:1d:c2:eb: 7c:f6:b2:1d:2e:f5:ff:b3:44:80:9e:ab:b2:d2:0a:50:ea:54: 5c:34:e3:7c:b0:25:e6:20:61:22:d2:3f:53:ac:2b:3d:c1:20: d1:7d:4d:a8:e7:fc:65:77:50:a4:a5:a3:b1:71:a2:bd:af:7c: c6:ac:86:05:13:d6:e6:60:71:94:45:94:d9:77:08:73:19:62: 80:99:41:a2:89:b2:55:10:64:ea:89:e6:4b:89:f3:48:c9:1c: 7a:95:4e:a8:a5:85:50:c5:4d:c0:0b:e0:a9:27:6e:d9:6c:b7: ce:5d:ce:13:e8:35:09:78:63:56:d1:2c:e9:7b:f5:91:de:6e: 83:44:41:dc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeFDxEBGbYPCGiaeVLJ2X5FNIIqkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAxMTI1WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGYzYjdjZjdiYTIzNjc1NDY3NTg2NzEyZmJhODgyNDQ3 MTFmMDdjODlhOGZmMDc5ZGI3ZDg3MWMzZDViYWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCikQLdhikGjWUf79lR9riJYYmrolw2ZPPEbkGmyath9ztU HAkQSas1JMEQSG4ZdRo0caCOmUOMdTQzCJ74UAUhXiAuY6RqjbrinInWqmonGHZM 4ahNFiJqNYssTSOTHxb8ZIYU6bGpv+dFlqTcBDKk/Kw47cBO94PvC0zzZ+PZAE91 ovz9w4LS4WqiCrtw73VBofZaYJilIvR3fFSn8MtynoAXwlus9kfLPD9H4fDBLfPG tgoMxEk+phGvfQorCFg7MS6kz+lW20zQC7jxa1dAidaWbEdWzRoU8hxleTsNzrIa 0O4xUsD4t75EzCB9pj2O3McAGPaLLdy5su5rxeBZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUcq6Jbm3jsdOuXkaA5YqhtCzrHTkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlNjNhMDY0LTczOGUtNDhiMy05NTBlLTE4ZTlmMGVhNDcyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANojANBgkqhkiG9w0BAQsFAAOCAQEASzNs8tRP0m6rliHHC3Lq/ll6baZL odSPRdM9MvW4uYP05CpynKzZxM2VfOi9Psl28VXsmdd01elJPo52I5DoLo4d7Mr6 ssO9UepP68n804GC18shwKD+02N/tuQJghyorou1Sye0xEk8xwPDMizIokJCobC8 Ry6GjKwnHcLrfPayHS71/7NEgJ6rstIKUOpUXDTjfLAl5iBhItI/U6wrPcEg0X1N qOf8ZXdQpKWjsXGiva98xqyGBRPW5mBxlEWU2XcIcxligJlBoomyVRBk6onmS4nz SMkcepVOqKWFUMVNwAvgqSdu2Wy3zl3OE+g1CXhjVtEs6Xv1kd5ug0RB3A== -----END CERTIFICATE-----Generated at Tue Jul 1 09:14:16 2025 by rpki-client