$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852fe0c-feed-4333-b2fa-93e1948b5904.roa File: f852fe0c-feed-4333-b2fa-93e1948b5904.roa (raw, json) Hash identifier: +0N2I5MAqF8XnL5bW9DXGFkHEMumPkyJxzKBKsw5CbA= Subject key identifier: 8C:BF:FE:7E:52:4C:16:FB:3C:5C:B6:4D:20:BB:75:9B:B0:3A:00:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1064B84F85EA2110E8C80774FF8FBDCE2119625F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852fe0c-feed-4333-b2fa-93e1948b5904.roa Signing time: Wed 11 Jun 2025 00:01:40 +0000 ROA not before: Wed 11 Jun 2025 00:01:40 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.196.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:64:b8:4f:85:ea:21:10:e8:c8:07:74:ff:8f:bd:ce:21:19:62:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:01:40 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=f77d4fa28afeef2cfe0fc5d64eb7cee4fc0763ecbe29eef3005cc2af8cbb8439, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:76:95:fc:a9:c3:9c:64:65:d3:71:0d:98: 57:d3:de:6a:00:c7:8d:da:83:60:a0:42:3a:51:ea: c1:26:00:7a:29:24:1d:8b:b9:80:f9:70:e2:5e:d5: b6:14:ca:cf:a8:dd:dc:b1:c3:8d:fc:9d:f5:04:d2: 90:81:cd:c1:40:81:57:e8:55:49:4d:3f:6a:4b:1f: c2:04:90:c4:5d:f3:fe:2a:d1:c1:71:f0:35:6e:4a: 95:2d:a0:5c:65:a0:9d:2d:47:0f:a5:9b:77:48:f1: 07:38:15:8b:c5:3f:2e:29:b0:eb:ed:f7:38:c6:6b: b9:63:06:fb:b5:6b:cc:f4:28:28:c2:81:e0:04:f3: b3:42:93:e8:57:57:88:01:60:29:6c:8f:a2:17:3f: d3:6d:15:ba:d5:dd:05:ea:41:22:53:d7:03:99:7d: 75:98:83:a3:cd:a2:28:0b:0e:d8:10:05:1c:af:f6: 11:4c:39:b6:6f:fd:64:a9:14:3a:cc:ab:1a:db:c9: d8:f6:d3:8a:d9:9f:69:2f:9c:cd:c2:b6:5d:03:fb: 9d:40:b4:c3:79:31:80:29:4c:f7:90:98:02:f8:42: ee:34:e3:8c:81:99:28:04:f9:d4:d5:60:94:82:6a: 49:d0:39:18:3c:63:67:04:33:2f:6e:31:2a:20:fe: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BF:FE:7E:52:4C:16:FB:3C:5C:B6:4D:20:BB:75:9B:B0:3A:00:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f852fe0c-feed-4333-b2fa-93e1948b5904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.196.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:0d:33:a7:78:16:e8:82:20:01:90:50:17:a9:63:d3:9e:9c: 01:41:21:46:5c:05:49:ad:36:11:5f:81:9d:d7:ee:b6:11:6b: 06:04:e2:d8:76:8e:74:5e:61:61:67:69:aa:10:c3:f5:db:27: 36:0d:2f:80:b1:05:e9:51:43:08:8c:a1:e3:71:18:c6:bc:c8: ce:ff:aa:13:19:30:a5:6b:54:b2:b1:a8:ef:7c:92:9f:a4:6d: 54:02:69:3f:a9:c2:a9:b8:f2:f3:77:1b:88:f5:e5:9b:ce:28: c3:b7:31:8f:ee:81:70:06:d8:06:da:ba:e1:2c:25:41:ea:f4: 5f:c2:91:70:69:2a:ef:c5:73:b6:70:3a:05:53:ce:e6:fd:83: 8d:56:9c:5d:5d:30:f5:94:39:f5:45:14:bf:37:2d:69:06:98: b6:b9:79:dd:18:68:a7:2a:29:33:ba:e3:9b:e3:99:50:27:7b: 48:a0:b0:b3:74:b3:42:0c:6c:d7:9e:2b:11:58:fd:8b:26:f6: aa:88:c7:72:8d:06:64:f8:b4:82:f0:cd:c3:43:c1:52:0e:45: a9:fb:4e:d0:c4:55:80:7a:00:b4:0f:56:71:02:76:a5:69:92: 62:99:4c:a8:2a:d0:9e:41:39:3e:d3:5b:5a:52:3b:dc:92:eb: 61:91:51:b4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEGS4T4XqIRDoyAd0/4+9ziEZYl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAwMTQwWhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzdkNGZhMjhhZmVlZjJjZmUwZmM1ZDY0ZWI3Y2VlNGZj MDc2M2VjYmUyOWVlZjMwMDVjYzJhZjhjYmI4NDM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv7XaV/KnDnGRl03ENmFfT3moAx43ag2CgQjpR6sEmAHop JB2LuYD5cOJe1bYUys+o3dyxw438nfUE0pCBzcFAgVfoVUlNP2pLH8IEkMRd8/4q 0cFx8DVuSpUtoFxloJ0tRw+lm3dI8Qc4FYvFPy4psOvt9zjGa7ljBvu1a8z0KCjC geAE87NCk+hXV4gBYClsj6IXP9NtFbrV3QXqQSJT1wOZfXWYg6PNoigLDtgQBRyv 9hFMObZv/WSpFDrMqxrbydj204rZn2kvnM3Ctl0D+51AtMN5MYApTPeQmAL4Qu40 44yBmSgE+dTVYJSCaknQORg8Y2cEMy9uMSog/mGnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjL/+flJMFvs8XLZNILt1m7A6AHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4NTJmZTBjLWZlZWQtNDMzMy1iMmZhLTkzZTE5NDhiNTkwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQxDANBgkqhkiG9w0BAQsFAAOCAQEApA0zp3gW6IIgAZBQF6lj056cAUEh RlwFSa02EV+BndfuthFrBgTi2HaOdF5hYWdpqhDD9dsnNg0vgLEF6VFDCIyh43EY xrzIzv+qExkwpWtUsrGo73ySn6RtVAJpP6nCqbjy83cbiPXlm84ow7cxj+6BcAbY Btq64SwlQer0X8KRcGkq78VztnA6BVPO5v2DjVacXV0w9ZQ59UUUvzctaQaYtrl5 3RhopyopM7rjm+OZUCd7SKCws3SzQgxs154rEVj9iyb2qojHco0GZPi0gvDNw0PB Ug5FqftO0MRVgHoAtA9WcQJ2pWmSYplMqCrQnkE5PtNbWlI73JLrYZFRtA== -----END CERTIFICATE-----Generated at Sun Jun 29 04:26:33 2025 by rpki-client