$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa File: f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa (raw, json) Hash identifier: 6uNk5/axOAzrBvSph7/ZFk/TGq1Hj2jAT+0vd3kRfhQ= Subject key identifier: E6:05:A6:24:C4:21:FB:32:97:5A:EA:28:F8:1C:39:41:06:0E:AE:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33B8272C64D1B4BC3243452205132C40606AEC4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa Signing time: Wed 18 Jun 2025 00:02:10 +0000 ROA not before: Wed 18 Jun 2025 00:02:10 +0000 ROA not after: Wed 23 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.15.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:27:2c:64:d1:b4:bc:32:43:45:22:05:13:2c:40:60:6a:ec:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 18 00:02:10 2025 GMT Not After : Jul 23 23:59:59 2025 GMT Subject: serialNumber=5b209ae9e9a820fcb33c123ab9f78c8f4851d4d4589132e7b84f0d5acd3b1e6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:af:6b:e8:0f:d6:d3:1c:ef:27:7b:bc:cc: 76:23:1d:73:a1:04:e5:d5:89:89:2f:b3:ed:85:98: e8:b2:b5:64:49:7f:f9:e5:7d:ce:59:49:ff:5b:ed: 92:84:fb:07:9b:57:22:42:c0:34:1a:a8:45:a4:59: a8:1c:84:d6:19:e9:7d:ea:79:17:9e:fc:29:73:7e: eb:32:df:ea:56:45:82:ca:20:d7:fd:24:c8:e8:ce: b1:18:3b:57:95:b3:12:18:22:b5:c0:2c:39:b8:02: b9:56:63:39:e1:99:35:aa:c3:62:d8:e0:ce:b5:c6: 03:df:7f:ba:71:0e:f8:69:2c:29:ef:7c:7c:41:ed: a2:af:47:66:62:dd:b7:4a:97:e6:17:3f:d5:20:30: 21:af:f9:71:cf:d7:e9:42:2e:ef:83:cd:04:cb:9c: 73:6d:c7:3b:2e:b9:f3:8c:84:97:d2:00:8f:63:44: 96:28:80:96:1f:be:47:cd:4a:c3:ca:51:b3:ad:43: 03:59:a5:b5:4a:4f:30:4e:f1:7c:f5:50:98:cb:95: 31:ae:dc:72:20:22:a3:db:21:8b:a4:9e:c0:d6:51: c8:45:71:7b:c1:bb:f7:70:a6:eb:25:12:2b:84:d1: 6b:87:ba:2b:18:8f:e5:be:97:8e:31:5f:14:48:c2: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:05:A6:24:C4:21:FB:32:97:5A:EA:28:F8:1C:39:41:06:0E:AE:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8587f66-a9c6-4256-b171-7bf2bdb7915f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.15.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6c:1a:dc:75:4b:c7:0a:dc:d1:d3:c5:2e:76:64:be:0e:94:29: c1:c3:d1:57:88:f5:87:4f:e3:52:e1:0f:5a:d3:1c:bb:f7:84: 46:a2:4d:17:82:8c:24:83:df:2a:3d:2d:8c:f4:9c:d5:c5:fe: 68:69:8f:7e:ce:ac:cf:12:1b:0c:c8:ca:a1:e6:1f:64:c0:ea: 9c:46:24:93:04:1a:c9:86:9a:3d:29:55:df:49:b5:5e:73:b4: 17:ee:91:4c:5e:b7:23:94:8b:d3:3e:40:46:f8:aa:fc:cb:48: a0:88:60:b3:d5:da:80:21:ba:f8:2e:7f:fa:40:a5:57:db:05: d3:a5:d2:1d:1b:b5:c6:dd:c5:ef:38:96:37:17:39:db:28:02: 44:7d:b1:d7:e5:cc:b8:5a:e8:42:0f:00:fa:d0:e8:8e:a1:53: 6f:1d:a6:17:e2:74:39:80:a3:78:d2:0a:04:ad:0c:28:76:9e: 17:82:38:a7:29:f7:5f:fc:6b:6c:bc:49:55:1e:d6:de:63:3d: 77:bf:7f:a5:d2:0f:e6:f1:58:7b:d4:9b:59:c5:68:b2:11:f3: a3:b7:a9:df:15:70:47:9f:2d:73:49:0e:e8:3b:b5:0e:a9:89: 5c:7e:2c:40:5f:c0:b2:07:1d:d7:b3:c1:0b:92:82:22:1b:28: b3:78:cb:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM7gnLGTRtLwyQ0UiBRMsQGBq7EwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE4MDAwMjEwWhcNMjUwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjIwOWFlOWU5YTgyMGZjYjMzYzEyM2FiOWY3OGM4ZjQ4 NTFkNGQ0NTg5MTMyZTdiODRmMGQ1YWNkM2IxZTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZwK9r6A/W0xzvJ3u8zHYjHXOhBOXViYkvs+2FmOiytWRJ f/nlfc5ZSf9b7ZKE+webVyJCwDQaqEWkWagchNYZ6X3qeRee/Clzfusy3+pWRYLK INf9JMjozrEYO1eVsxIYIrXALDm4ArlWYznhmTWqw2LY4M61xgPff7pxDvhpLCnv fHxB7aKvR2Zi3bdKl+YXP9UgMCGv+XHP1+lCLu+DzQTLnHNtxzsuufOMhJfSAI9j RJYogJYfvkfNSsPKUbOtQwNZpbVKTzBO8Xz1UJjLlTGu3HIgIqPbIYuknsDWUchF cXvBu/dwpuslEiuE0WuHuisYj+W+l44xXxRIwgIhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5gWmJMQh+zKXWuoo+Bw5QQYOrqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4NTg3ZjY2LWE5YzYtNDI1Ni1iMTcxLTdiZjJiZGI3OTE1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfYD4AwDQYJKoZIhvcNAQELBQADggEBAGwa3HVLxwrc0dPFLnZkvg6UKcHD 0VeI9YdP41LhD1rTHLv3hEaiTReCjCSD3yo9LYz0nNXF/mhpj37OrM8SGwzIyqHm H2TA6pxGJJMEGsmGmj0pVd9JtV5ztBfukUxetyOUi9M+QEb4qvzLSKCIYLPV2oAh uvguf/pApVfbBdOl0h0btcbdxe84ljcXOdsoAkR9sdflzLha6EIPAPrQ6I6hU28d phfidDmAo3jSCgStDCh2nheCOKcp91/8a2y8SVUe1t5jPXe/f6XSD+bxWHvUm1nF aLIR86O3qd8VcEefLXNJDug7tQ6piVx+LEBfwLIHHdezwQuSgiIbKLN4y10= -----END CERTIFICATE-----Generated at Tue Jul 1 14:31:43 2025 by rpki-client