$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa File: 263a53be-93fd-449b-afc4-20df6f689c9a.roa (raw, json) Hash identifier: Kda4j4i+eQrK1Z97W0BuU2/kiAdaiOY/JqR259j4gWo= Subject key identifier: B9:CC:01:67:C2:21:C1:F1:33:27:BA:E9:52:4F:D9:07:D1:F4:C0:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51932C4EEA7DB4E26402FD84FF79AB7BCA214524 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa Signing time: Wed 09 Jul 2025 00:51:15 +0000 ROA not before: Wed 09 Jul 2025 00:51:15 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.121.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:93:2c:4e:ea:7d:b4:e2:64:02:fd:84:ff:79:ab:7b:ca:21:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:51:15 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=afed851fb143bd20ef55d1c8329e3a9b012592f4767f331c56c62a289288a6d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:5d:78:11:bb:7e:09:04:f1:87:d2:5c:27: b9:d6:b5:e6:c5:c1:c0:a3:f6:e3:18:35:80:de:3e: e7:2b:c1:c0:0e:56:38:bf:ad:75:d3:00:7f:82:67: 2c:8b:76:c4:bb:84:0c:54:69:7f:08:7b:4e:f0:b2: d5:51:3f:a7:a4:8e:25:59:96:e0:87:1c:b1:73:30: c2:d3:f3:29:c1:b1:6f:81:36:8b:43:43:9e:cf:6b: 30:11:b3:f0:f3:6b:cd:81:01:b8:fa:5a:da:0f:e7: 29:10:9a:a7:f1:69:53:5f:9a:60:b2:da:33:f6:54: 81:59:ac:59:99:e0:47:1e:1c:f8:7f:8d:45:ab:95: 73:56:cc:56:03:2e:25:18:dc:39:c0:30:5c:dd:84: 12:61:86:6a:91:9e:81:59:9a:60:9a:34:9b:2c:ca: 0b:c4:0f:c7:36:ed:48:5f:d1:7e:31:29:a9:f6:fd: e1:aa:26:c3:cd:9b:17:33:41:91:51:09:b4:d0:84: 6a:d8:78:52:b7:bb:eb:d1:0a:ac:2e:b4:f9:2e:5f: 85:58:12:86:96:1b:55:b0:32:1d:7c:a7:8a:bb:a4: 44:b5:cc:a1:76:8b:26:37:c2:52:c4:02:a6:8f:cb: e3:ee:b6:30:1e:1e:32:10:c2:ec:ee:09:10:90:95: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CC:01:67:C2:21:C1:F1:33:27:BA:E9:52:4F:D9:07:D1:F4:C0:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263a53be-93fd-449b-afc4-20df6f689c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.121.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:47:e3:3a:eb:1e:5d:86:5e:8e:43:c7:3c:09:87:7a:34:34: d1:0c:ea:a8:64:43:27:22:d8:f0:ff:ff:87:5a:bb:7b:21:2c: ce:81:1a:29:88:fb:ad:c4:fc:9c:ea:62:d8:f0:18:64:08:7c: 45:e2:42:05:03:ab:55:a9:8d:b2:37:9e:1c:f1:cc:bd:de:59: 60:fc:f6:18:e5:d0:7b:8c:d8:f7:02:8f:a1:a5:a1:eb:7c:83: e7:dc:98:5c:a0:65:f1:4d:99:97:51:39:a5:fe:d6:33:35:f9: 3c:b2:ef:f7:78:49:ee:2e:49:d8:26:f5:54:65:cf:73:13:6f: 67:dd:8b:2c:f9:b5:87:e4:61:be:83:98:e6:9a:48:c7:26:69: 0a:23:8e:c9:76:db:f1:9a:c7:12:a0:39:c6:6d:29:92:31:f2: 58:1c:58:ba:63:59:6b:fc:85:76:17:8e:c1:43:77:99:0c:4b: 17:1e:78:af:90:dc:15:13:c1:fc:bc:56:5f:f4:82:04:16:fb: 8a:d3:7e:24:1d:c8:6c:d3:40:7f:b9:a3:74:4d:fc:a4:7f:2d: 58:cf:10:fc:16:31:a2:54:43:c6:91:ae:8e:6b:28:43:35:9b: 82:0e:c0:c5:90:dc:f1:58:b3:71:42:b4:aa:e2:60:71:f0:22: d2:f8:da:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUZMsTup9tOJkAv2E/3mre8ohRSQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MTE1WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmVkODUxZmIxNDNiZDIwZWY1NWQxYzgzMjllM2E5YjAx MjU5MmY0NzY3ZjMzMWM1NmM2MmEyODkyODhhNmQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZK114Ebt+CQTxh9JcJ7nWtebFwcCj9uMYNYDePucrwcAO Vji/rXXTAH+CZyyLdsS7hAxUaX8Ie07wstVRP6ekjiVZluCHHLFzMMLT8ynBsW+B NotDQ57PazARs/Dza82BAbj6WtoP5ykQmqfxaVNfmmCy2jP2VIFZrFmZ4EceHPh/ jUWrlXNWzFYDLiUY3DnAMFzdhBJhhmqRnoFZmmCaNJssygvED8c27Uhf0X4xKan2 /eGqJsPNmxczQZFRCbTQhGrYeFK3u+vRCqwutPkuX4VYEoaWG1WwMh18p4q7pES1 zKF2iyY3wlLEAqaPy+PutjAeHjIQwuzuCRCQlT6bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUucwBZ8IhwfEzJ7rpUk/ZB9H0wFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2M2E1M2JlLTkzZmQtNDQ5Yi1hZmM0LTIwZGY2ZjY4OWM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4eTANBgkqhkiG9w0BAQsFAAOCAQEAS0fjOuseXYZejkPHPAmHejQ00Qzq qGRDJyLY8P//h1q7eyEszoEaKYj7rcT8nOpi2PAYZAh8ReJCBQOrVamNsjeeHPHM vd5ZYPz2GOXQe4zY9wKPoaWh63yD59yYXKBl8U2Zl1E5pf7WMzX5PLLv93hJ7i5J 2Cb1VGXPcxNvZ92LLPm1h+RhvoOY5ppIxyZpCiOOyXbb8ZrHEqA5xm0pkjHyWBxY umNZa/yFdheOwUN3mQxLFx54r5DcFRPB/LxWX/SCBBb7itN+JB3IbNNAf7mjdE38 pH8tWM8Q/BYxolRDxpGujmsoQzWbgg7AxZDc8VizcUK0quJgcfAi0vja+w== -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:31 2025 by rpki-client