$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa File: eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa (raw, json) Hash identifier: CTf8v+BO4h5D4T80voG1fairYscoJvpkSIXO1uvl2P4= Subject key identifier: 66:7D:1D:44:71:C7:C6:5C:46:1C:98:73:65:24:6D:6C:4A:2A:1B:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54D6C39965FCD43DD3971EEC97662AE64E5D42CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa Signing time: Mon 16 Jun 2025 15:30:33 +0000 ROA not before: Mon 16 Jun 2025 15:30:33 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.41.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d6:c3:99:65:fc:d4:3d:d3:97:1e:ec:97:66:2a:e6:4e:5d:42:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:30:33 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=abc3511b6a396989cbdd7971276a43c03387309d51eaa49fe11b6a303edc3de4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:e5:fb:64:e0:1c:1e:d0:23:46:46:28:f4: bc:5e:c8:7f:2a:6f:d4:92:74:02:33:7f:0a:0f:62: 8c:59:22:05:45:12:6e:ba:f1:c6:84:b8:2e:13:aa: 04:0e:80:5a:2f:89:c8:e9:06:86:42:d2:29:ef:97: 9d:f8:3c:79:81:f5:a4:93:6b:2c:65:d7:23:01:5c: a4:02:80:7b:01:1a:f0:e6:16:e7:86:ac:b7:5b:46: 98:6b:a9:11:26:74:ba:62:71:8a:f9:c5:82:96:b8: e8:00:8e:79:6d:e1:46:7a:33:d7:8e:72:b8:6e:e6: 50:f4:db:81:ba:b8:13:cb:cb:9e:94:d3:7f:82:da: 57:73:43:f5:d0:95:3b:ec:8b:82:84:e5:30:ca:da: 6f:c8:75:fa:14:cd:60:4e:63:22:78:95:05:62:14: cc:b4:2a:cb:23:bd:2f:ba:a1:38:9c:89:6c:72:21: d3:b8:b6:18:40:c4:ce:5a:18:4d:dc:dd:b2:de:ad: a3:8a:ee:86:ee:79:e8:d4:bb:97:e1:ad:19:e3:97: 02:2b:28:b3:6f:c4:16:09:ca:17:4e:43:5d:d2:54: b6:d8:1c:f9:b8:ad:30:40:80:f0:7c:e2:1c:ab:12: 49:f9:a1:da:f2:81:b1:1d:ac:ac:93:49:71:fa:be: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:1D:44:71:C7:C6:5C:46:1C:98:73:65:24:6D:6C:4A:2A:1B:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb93c8ab-78dc-4074-b0a7-130e364e7c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.41.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:e3:22:1e:ae:cf:a4:ac:ef:6b:bd:1d:10:f8:d2:66:a0:db: d9:d4:c7:43:06:49:b7:5a:80:f9:7e:a5:27:f9:fc:5a:1a:42: 55:3e:c4:89:2b:7c:5e:42:6d:f6:09:7c:34:2a:a2:e5:60:44: 4a:1b:cb:3c:fc:48:fa:3d:85:7d:24:ad:8c:75:d3:36:10:8f: 99:d4:1d:fe:e3:0a:97:a7:50:d5:2b:e8:47:f8:7b:e1:28:0d: 4a:cb:a1:75:29:ab:09:10:d1:4a:51:e8:11:b4:02:66:15:2d: a7:f0:04:e0:7c:ab:ba:be:6b:25:77:e4:4a:1b:b5:e5:fc:57: 97:b2:18:9d:89:9d:de:a1:2a:38:64:8e:f3:2d:04:d3:b0:b3: e7:f1:f5:83:63:f5:84:80:be:a9:01:9d:5c:e0:64:b9:9f:d0: 9d:bf:26:f2:72:67:6a:92:b1:5d:cf:59:d4:54:ff:62:56:0c: f9:36:5d:14:7f:ef:06:5d:61:77:26:f8:6d:d5:d6:d2:2c:0c: 61:a5:cb:e1:35:62:bc:62:97:46:56:8c:a6:b3:8a:b4:68:bd: eb:ef:3f:b3:e1:af:67:52:07:3d:6b:63:e8:10:52:b8:e8:c3: 67:1c:30:a6:e4:6f:64:66:b9:34:bb:a5:ee:3d:28:25:bb:98: be:73:e2:bd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVNbDmWX81D3Tlx7sl2Yq5k5dQs8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUzMDMzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmMzNTExYjZhMzk2OTg5Y2JkZDc5NzEyNzZhNDNjMDMz ODczMDlkNTFlYWE0OWZlMTFiNmEzMDNlZGMzZGU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6QuX7ZOAcHtAjRkYo9LxeyH8qb9SSdAIzfwoPYoxZIgVF Em668caEuC4TqgQOgFovicjpBoZC0invl534PHmB9aSTayxl1yMBXKQCgHsBGvDm FueGrLdbRphrqREmdLpicYr5xYKWuOgAjnlt4UZ6M9eOcrhu5lD024G6uBPLy56U 03+C2ldzQ/XQlTvsi4KE5TDK2m/IdfoUzWBOYyJ4lQViFMy0KssjvS+6oTiciWxy IdO4thhAxM5aGE3c3bLeraOK7obueejUu5fhrRnjlwIrKLNvxBYJyhdOQ13SVLbY HPm4rTBAgPB84hyrEkn5odrygbEdrKyTSXH6vjaVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZn0dRHHHxlxGHJhzZSRtbEoqG+owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViOTNjOGFiLTc4ZGMtNDA3NC1iMGE3LTEzMGUzNjRlN2M0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4KTANBgkqhkiG9w0BAQsFAAOCAQEAjuMiHq7PpKzva70dEPjSZqDb2dTH QwZJt1qA+X6lJ/n8WhpCVT7EiSt8XkJt9gl8NCqi5WBEShvLPPxI+j2FfSStjHXT NhCPmdQd/uMKl6dQ1SvoR/h74SgNSsuhdSmrCRDRSlHoEbQCZhUtp/AE4Hyrur5r JXfkShu15fxXl7IYnYmd3qEqOGSO8y0E07Cz5/H1g2P1hIC+qQGdXOBkuZ/Qnb8m 8nJnapKxXc9Z1FT/YlYM+TZdFH/vBl1hdyb4bdXW0iwMYaXL4TVivGKXRlaMprOK tGi96+8/s+GvZ1IHPWtj6BBSuOjDZxwwpuRvZGa5NLul7j0oJbuYvnPivQ== -----END CERTIFICATE-----Generated at Mon Jun 30 21:04:11 2025 by rpki-client