$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa File: eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa (raw, json) Hash identifier: RZiJoYe3GG/EDvuOhVPs+tsE+ZDlt6j9FY9kErM3CkQ= Subject key identifier: DF:19:73:64:D7:25:2C:44:01:6A:7A:B3:A3:ED:21:E2:72:B5:1A:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 624679A8ECE0F241DA91B0443EE8718F58CEFA31 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa Signing time: Sat 21 Jun 2025 00:20:59 +0000 ROA not before: Sat 21 Jun 2025 00:20:59 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 62785 IP address blocks: 173.83.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:46:79:a8:ec:e0:f2:41:da:91:b0:44:3e:e8:71:8f:58:ce:fa:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:20:59 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=48602126daa3a43e4f38752622f86c03c2f44f1303c449ccd7498eddbdf65932, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1a:35:0d:2b:f8:d8:a7:7b:53:6d:80:3e:05: cd:87:e6:f2:91:d3:8f:c0:93:a7:87:13:c2:97:54: b2:ee:c9:d8:21:d2:2d:ca:f4:8a:56:0e:4b:4b:3b: 75:9e:74:e9:93:22:29:fd:31:37:b4:12:27:f4:b1: 04:30:d4:71:b4:5f:03:0b:b4:e6:12:eb:f8:6e:d5: c7:e5:17:9f:5b:db:86:a9:a7:e4:f8:46:92:67:fa: 8f:f9:1b:c0:49:c5:bb:74:9b:14:90:fa:45:bd:56: 6a:c7:65:fb:dd:c6:ac:57:71:a9:6c:14:c8:46:30: 84:fb:c3:66:3a:2d:52:a0:7c:aa:c3:90:0a:6c:68: f1:74:14:0f:f3:de:a8:09:b4:8c:9f:40:70:5e:d9: 15:d8:5a:49:29:40:1b:f9:7c:13:dd:db:51:5d:03: 6d:e3:a3:6c:91:39:99:30:2f:b1:b6:c6:d4:51:fb: 3a:de:8b:3e:42:25:57:52:44:54:63:99:e5:2b:1f: a3:65:41:45:84:f2:af:6c:2a:c5:fd:29:c2:d3:89: ca:77:8a:bd:a1:37:50:23:03:76:55:d3:70:91:78: 35:ce:bd:55:a9:08:3c:04:11:26:07:00:1d:5c:5d: df:e3:11:3a:c7:22:44:43:ab:bc:36:f0:3e:26:51: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:73:64:D7:25:2C:44:01:6A:7A:B3:A3:ED:21:E2:72:B5:1A:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb0f4228-6d0b-4e4f-8c10-a388510d7ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.83.0.0/17 Signature Algorithm: sha256WithRSAEncryption a8:27:82:2d:59:cb:8a:80:84:ca:b6:67:00:86:6c:f4:d1:6d: 85:36:4f:29:87:a3:16:b6:fc:c1:c3:47:ce:f5:a2:e3:be:4a: 2a:4d:98:5c:96:50:6f:84:a0:82:ba:47:ae:ee:a9:21:58:e2: fc:eb:f0:d4:11:77:68:dc:fa:ae:ee:74:05:a9:29:71:84:b5: c8:e0:ba:cc:61:70:c4:99:9b:c6:75:1d:2d:1d:8d:93:2b:33: 01:e5:b6:9b:a2:7e:6d:ff:7e:f2:0b:e5:d6:48:73:07:2f:9e: 3f:96:ec:a2:4b:3b:52:21:80:ab:6e:2f:07:61:35:94:8e:ec: 6f:04:d9:73:25:2d:e6:1c:ae:33:6f:15:94:e6:1f:8c:7f:e9: da:ac:fc:a2:89:1c:b4:3f:e5:d1:e2:bf:93:68:c4:49:76:c1: 6b:91:fa:84:26:fb:d5:23:c5:c6:71:d1:5f:54:69:04:ac:3c: 39:c0:04:93:e4:38:22:b3:9e:07:bb:90:93:b7:bb:6d:e4:f8: b6:fb:d2:9c:74:5b:23:1d:bd:c7:58:92:76:6b:b8:10:5e:62: f0:8a:65:ed:c7:c5:9f:e7:ea:7c:8c:51:9b:8a:3e:d5:9c:3c: f2:0f:e3:20:b8:11:81:26:b7:2c:a2:f3:d6:15:b1:37:3d:d8: 33:ee:1a:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYkZ5qOzg8kHakbBEPuhxj1jO+jEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAyMDU5WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODYwMjEyNmRhYTNhNDNlNGYzODc1MjYyMmY4NmMwM2My ZjQ0ZjEzMDNjNDQ5Y2NkNzQ5OGVkZGJkZjY1OTMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1GjUNK/jYp3tTbYA+Bc2H5vKR04/Ak6eHE8KXVLLuydgh 0i3K9IpWDktLO3WedOmTIin9MTe0Eif0sQQw1HG0XwMLtOYS6/hu1cflF59b24ap p+T4RpJn+o/5G8BJxbt0mxSQ+kW9VmrHZfvdxqxXcalsFMhGMIT7w2Y6LVKgfKrD kApsaPF0FA/z3qgJtIyfQHBe2RXYWkkpQBv5fBPd21FdA23jo2yROZkwL7G2xtRR +zreiz5CJVdSRFRjmeUrH6NlQUWE8q9sKsX9KcLTicp3ir2hN1AjA3ZV03CReDXO vVWpCDwEESYHAB1cXd/jETrHIkRDq7w28D4mUc9/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3xlzZNclLEQBanqzo+0h4nK1GkUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViMGY0MjI4LTZkMGItNGU0Zi04YzEwLWEzODg1MTBkN2NhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAetUwAwDQYJKoZIhvcNAQELBQADggEBAKgngi1Zy4qAhMq2ZwCGbPTRbYU2 TymHoxa2/MHDR871ouO+SipNmFyWUG+EoIK6R67uqSFY4vzr8NQRd2jc+q7udAWp KXGEtcjgusxhcMSZm8Z1HS0djZMrMwHltpuifm3/fvIL5dZIcwcvnj+W7KJLO1Ih gKtuLwdhNZSO7G8E2XMlLeYcrjNvFZTmH4x/6dqs/KKJHLQ/5dHiv5NoxEl2wWuR +oQm+9UjxcZx0V9UaQSsPDnABJPkOCKznge7kJO3u23k+Lb70px0WyMdvcdYknZr uBBeYvCKZe3HxZ/n6nyMUZuKPtWcPPIP4yC4EYEmtyyi89YVsTc92DPuGi4= -----END CERTIFICATE-----Generated at Tue Jul 1 11:42:03 2025 by rpki-client