$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa File: f542397a-2664-4186-9a24-a87ab5343f33.roa (raw, json) Hash identifier: KG34M1fd5nvY3ovUAf86lWlxE3cfbNOz2fLokj3HmY4= Subject key identifier: F7:2F:11:63:9F:13:F2:64:1B:13:06:89:A1:DC:33:7A:3A:C9:D5:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3350C370AAF1646FAF298F3E088784F91114D893 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa Signing time: Sat 21 Jun 2025 00:01:08 +0000 ROA not before: Sat 21 Jun 2025 00:01:08 +0000 ROA not after: Sat 26 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.80.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:50:c3:70:aa:f1:64:6f:af:29:8f:3e:08:87:84:f9:11:14:d8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 21 00:01:08 2025 GMT Not After : Jul 26 23:59:59 2025 GMT Subject: serialNumber=bc423410accf1c29475561b0fb7261f61a0a9e94cab6459fa83c1ca4fd6eea08, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:c6:64:54:8c:26:c7:46:02:4a:0f:c4:8b: b7:00:0e:97:cf:0b:6c:df:1e:09:85:d9:c7:d6:58: ff:66:43:5c:35:cc:d1:81:51:b9:e9:25:42:e3:b0: 59:d9:bd:50:95:d3:ee:09:f1:46:0e:d2:0b:06:59: 29:82:e1:73:78:1b:25:2d:08:d6:1f:8a:20:5c:66: 09:dc:b0:84:04:dd:84:5e:35:e7:bb:f0:6d:c3:43: 64:90:c1:3f:5d:36:15:10:55:9d:52:35:7e:87:ac: 67:89:06:e2:18:f2:73:36:4a:15:e9:e5:30:f1:da: cc:cb:6b:fd:94:15:77:c4:24:a4:0f:ff:35:1d:44: 15:8f:14:71:96:a3:3e:1a:0a:aa:f1:5e:1d:fe:16: 8b:17:eb:1e:75:1d:e6:91:ad:c8:22:8f:8a:0c:2b: 88:50:4c:3d:5e:a8:b0:e3:98:e1:c0:15:95:91:b1: 1e:c1:95:53:e9:41:20:8e:cd:33:25:7d:3a:df:ff: 0d:16:84:3c:12:5a:69:17:94:6b:d6:8c:4c:a8:f8: e3:9b:de:2b:c7:e7:74:e9:10:e1:83:f5:4a:20:d0: 0d:e9:2c:b2:0f:65:b5:3f:3a:d5:54:63:ef:5e:18: f7:bd:7c:3e:82:91:37:64:c6:29:61:57:fd:97:9d: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2F:11:63:9F:13:F2:64:1B:13:06:89:A1:DC:33:7A:3A:C9:D5:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:82:6e:92:3e:4f:e3:3f:c7:7d:a5:45:6e:95:48:0c:54:ca: 2e:63:e0:23:bf:63:a8:db:1e:86:ef:fc:65:f7:f0:53:d5:ed: 7a:18:10:f2:92:be:f6:a0:05:d4:45:26:81:4e:a9:1d:3c:98: 5b:cc:6e:96:27:7b:df:c2:93:e5:c3:9a:b8:c0:3e:df:90:89: 83:de:2d:4e:95:fa:02:9e:cf:77:0c:69:08:5c:b3:ea:e6:9d: 54:23:77:13:ae:4c:c3:e8:84:b5:9a:f6:71:a6:b5:35:7f:ee: de:45:d2:f1:9d:82:fc:cb:9a:2b:0e:c7:31:ff:8f:fc:8f:7a: cf:c6:33:e6:2f:42:e1:88:2f:23:15:b6:08:f3:b9:6b:94:9c: 9d:6f:c8:49:1b:ee:df:ef:1d:4f:58:92:14:a5:42:bc:61:28: c8:ba:a1:97:70:37:a5:1a:ed:af:53:20:82:0e:4b:1e:df:75: 45:67:1c:48:1d:0e:7a:cc:c3:b2:2b:58:80:9f:cd:8c:38:ec: dc:42:26:27:a0:75:30:bc:75:f7:ae:cb:8c:25:a7:41:60:e3: 26:7d:c5:9f:ba:28:b3:12:12:a5:07:1b:04:c1:52:ef:f8:0c: 93:2b:bf:30:0f:bb:3b:aa:4a:e7:80:b1:0b:b3:d8:b4:98:1d: 37:a1:82:9f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM1DDcKrxZG+vKY8+CIeE+REU2JMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIxMDAwMTA4WhcNMjUwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzQyMzQxMGFjY2YxYzI5NDc1NTYxYjBmYjcyNjFmNjFh MGE5ZTk0Y2FiNjQ1OWZhODNjMWNhNGZkNmVlYTA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpa8ZkVIwmx0YCSg/Ei7cADpfPC2zfHgmF2cfWWP9mQ1w1 zNGBUbnpJULjsFnZvVCV0+4J8UYO0gsGWSmC4XN4GyUtCNYfiiBcZgncsIQE3YRe Nee78G3DQ2SQwT9dNhUQVZ1SNX6HrGeJBuIY8nM2ShXp5TDx2szLa/2UFXfEJKQP /zUdRBWPFHGWoz4aCqrxXh3+FosX6x51HeaRrcgij4oMK4hQTD1eqLDjmOHAFZWR sR7BlVPpQSCOzTMlfTrf/w0WhDwSWmkXlGvWjEyo+OOb3ivH53TpEOGD9Uog0A3p LLIPZbU/OtVUY+9eGPe9fD6CkTdkxilhV/2XnTcLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9y8RY58T8mQbEwaJodwzejrJ1TowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NDIzOTdhLTI2NjQtNDE4Ni05YTI0LWE4N2FiNTM0M2YzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCCUDANBgkqhkiG9w0BAQsFAAOCAQEAD4Jukj5P4z/HfaVFbpVIDFTKLmPg I79jqNsehu/8ZffwU9XtehgQ8pK+9qAF1EUmgU6pHTyYW8xulid738KT5cOauMA+ 35CJg94tTpX6Ap7PdwxpCFyz6uadVCN3E65Mw+iEtZr2caa1NX/u3kXS8Z2C/Mua Kw7HMf+P/I96z8Yz5i9C4YgvIxW2CPO5a5ScnW/ISRvu3+8dT1iSFKVCvGEoyLqh l3A3pRrtr1Mggg5LHt91RWccSB0OeszDsitYgJ/NjDjs3EImJ6B1MLx1967LjCWn QWDjJn3Fn7oosxISpQcbBMFS7/gMkyu/MA+7O6pK54CxC7PYtJgdN6GCnw== -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:04 2025 by rpki-client