$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa File: eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa (raw, json) Hash identifier: SubYvXSGSUMmVTuRm/D0zV26NXHsegIK2E09RXLPxYQ= Subject key identifier: EC:1C:CE:73:6B:72:3F:C7:9A:FB:90:DB:A0:ED:CA:DD:61:97:98:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28203AECDCE4CD292E1AA67F01239788FBA0C9F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa Signing time: Mon 16 Jun 2025 15:41:37 +0000 ROA not before: Mon 16 Jun 2025 15:41:37 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:20:3a:ec:dc:e4:cd:29:2e:1a:a6:7f:01:23:97:88:fb:a0:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:41:37 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=7b2ef0ae6e1e24651718fa2044162664495681212964d733d71932330a5fcaf5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:1a:ea:8b:44:b4:d4:ee:98:3d:4a:58:07: 5e:c6:a9:6e:fb:c0:b2:6b:c3:58:2e:74:f9:1c:3a: 8c:2c:40:d9:33:98:69:0f:3a:cb:64:1d:28:c4:a6: e4:13:6e:ba:f5:5e:e5:04:3b:49:4b:f1:83:f9:06: 5c:04:fc:6f:bc:b0:a1:6e:21:5b:0c:0a:b3:1f:a4: f5:91:25:9e:0a:66:b3:46:d1:1b:56:6c:76:b5:91: 79:de:b9:30:c2:6d:87:16:f9:dd:12:7d:ac:a3:a0: 79:7a:a4:fe:1e:ed:eb:e1:96:54:c3:fe:1f:33:8d: c8:a5:4d:f2:76:e4:88:8f:5a:d1:4a:ab:0a:f8:d4: 16:d5:a7:09:40:ee:3b:51:2b:3a:36:f9:47:e0:be: 57:db:ad:10:23:d1:46:d7:ea:91:14:72:fe:75:b2: ac:b6:2e:5f:64:23:b4:cc:3c:71:2f:a0:67:a8:9a: 63:b8:a7:21:36:76:88:09:a3:57:d2:06:67:5a:37: c7:d0:94:7b:5d:ab:fe:38:0c:33:c3:b8:b2:1d:bc: 32:71:7a:69:d0:40:f9:26:6c:fe:ba:e2:27:56:bb: 7a:9f:70:7f:28:32:7c:6b:64:66:6a:80:fb:e2:75: b3:1f:73:e6:b2:e9:9d:09:7d:ed:2f:9b:2e:fa:9e: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1C:CE:73:6B:72:3F:C7:9A:FB:90:DB:A0:ED:CA:DD:61:97:98:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb482cf3-095b-43e4-8edb-3b8b57bedec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.200.0/21 Signature Algorithm: sha256WithRSAEncryption ab:83:33:db:6f:93:c1:cf:bc:f1:00:6d:bb:f3:92:90:b0:56: 80:fb:03:69:06:81:7b:9e:c8:33:bc:67:2c:63:ae:77:98:4f: 02:b7:af:c1:ae:01:2c:53:c7:8e:8b:cc:e2:3c:c7:cd:bb:b7: 14:5d:a1:02:59:cc:29:b9:2a:d8:c2:1c:cf:e4:fe:d3:ab:61: 25:fe:32:0f:da:83:92:a2:87:73:32:8b:38:f9:15:3e:66:59: f1:3e:49:3b:64:bf:c9:3f:7b:d8:3c:a4:33:7c:c2:4c:53:66: 83:8e:8a:f7:e8:d6:d0:0e:ac:2e:3c:81:29:ec:fa:a6:91:bc: 5a:cb:ad:f8:10:80:4e:60:c7:44:bc:a2:fb:76:0f:12:ac:e7: dc:90:14:cb:ee:b2:97:91:be:f2:d6:83:18:75:89:ef:5b:41: 8f:07:90:1d:e6:8c:33:62:7d:1b:e1:91:1a:5d:92:0b:74:a2: 05:44:78:f7:32:e6:99:1c:cc:b6:76:d4:29:db:2b:ac:e1:a3: 84:a0:80:15:a7:74:9f:f1:90:de:99:65:78:38:84:56:fc:57: 4a:6d:b1:ed:98:99:ad:a4:3d:f5:12:44:9a:55:96:6f:50:8c: 43:1f:76:97:20:69:a9:05:01:62:9a:d8:20:dc:1e:d7:8a:da: be:16:61:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKCA67NzkzSkuGqZ/ASOXiPugyfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTU0MTM3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjJlZjBhZTZlMWUyNDY1MTcxOGZhMjA0NDE2MjY2NDQ5 NTY4MTIxMjk2NGQ3MzNkNzE5MzIzMzBhNWZjYWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTxRrqi0S01O6YPUpYB17GqW77wLJrw1gudPkcOowsQNkz mGkPOstkHSjEpuQTbrr1XuUEO0lL8YP5BlwE/G+8sKFuIVsMCrMfpPWRJZ4KZrNG 0RtWbHa1kXneuTDCbYcW+d0SfayjoHl6pP4e7evhllTD/h8zjcilTfJ25IiPWtFK qwr41BbVpwlA7jtRKzo2+UfgvlfbrRAj0UbX6pEUcv51sqy2Ll9kI7TMPHEvoGeo mmO4pyE2dogJo1fSBmdaN8fQlHtdq/44DDPDuLIdvDJxemnQQPkmbP664idWu3qf cH8oMnxrZGZqgPvidbMfc+ay6Z0Jfe0vmy76noOrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7BzOc2tyP8ea+5DboO3K3WGXmH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViNDgyY2YzLTA5NWItNDNlNC04ZWRiLTNiOGI1N2JlZGVjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANG4MgwDQYJKoZIhvcNAQELBQADggEBAKuDM9tvk8HPvPEAbbvzkpCwVoD7 A2kGgXueyDO8ZyxjrneYTwK3r8GuASxTx46LzOI8x827txRdoQJZzCm5KtjCHM/k /tOrYSX+Mg/ag5Kih3Myizj5FT5mWfE+STtkv8k/e9g8pDN8wkxTZoOOivfo1tAO rC48gSns+qaRvFrLrfgQgE5gx0S8ovt2DxKs59yQFMvuspeRvvLWgxh1ie9bQY8H kB3mjDNifRvhkRpdkgt0ogVEePcy5pkczLZ21CnbK6zho4SggBWndJ/xkN6ZZXg4 hFb8V0ptse2Yma2kPfUSRJpVlm9QjEMfdpcgaakFAWKa2CDcHteK2r4WYVY= -----END CERTIFICATE-----Generated at Sun Jun 29 04:31:52 2025 by rpki-client