$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e5b9eda-6cec-440b-8755-0a826f9cf187.roa File: 2e5b9eda-6cec-440b-8755-0a826f9cf187.roa (raw, json) Hash identifier: cT6g5Hz8tnRk7lhSxWwoZok5hyM8EER/RyYJaKCq9Qo= Subject key identifier: 75:56:E2:27:E4:D2:AA:5B:CF:B5:5A:E5:AD:D1:01:8F:89:49:3C:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B2C1EAB5FF9CD1D741FFE3F34429C5A7C1499E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e5b9eda-6cec-440b-8755-0a826f9cf187.roa Signing time: Wed 16 Jul 2025 00:10:30 +0000 ROA not before: Wed 16 Jul 2025 00:10:30 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.175.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2c:1e:ab:5f:f9:cd:1d:74:1f:fe:3f:34:42:9c:5a:7c:14:99:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:10:30 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=f1fd38f0a99247c9bee1f1b7f75a8c8f59e36c334570201e873a9fe2df4928f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:9f:f3:39:27:c5:d9:cb:d7:2f:57:70:00: 4c:8e:bc:55:f6:a6:0f:ed:df:f7:b4:8e:0b:39:41: 90:be:1f:98:60:20:9d:3e:77:1c:bd:ae:67:b2:62: 06:22:f1:0c:9f:8a:31:86:2e:de:e1:24:14:46:49: e7:16:be:a3:ab:45:79:ec:ae:7d:8c:fe:71:00:e3: 50:e9:92:7c:8d:5f:22:d1:5b:0f:ca:4d:ce:35:26: 42:3b:68:ee:03:4d:b0:5a:56:9a:e0:97:70:96:14: 1d:7a:1d:d0:8c:8c:e2:fe:b6:a1:0b:34:09:0b:79: fc:31:fc:78:eb:25:8a:c2:e2:3a:55:0d:87:69:1b: f7:3d:c9:97:7d:c6:28:a9:ca:86:03:3e:ba:dc:5c: f5:69:7a:15:02:d2:76:2c:c2:09:7c:61:15:86:f9: 98:65:34:90:ae:ba:3a:f8:da:fc:88:d4:55:9d:74: 05:36:05:f4:fc:69:57:9e:37:57:dc:b0:56:f9:99: f3:c9:13:c3:19:ae:3b:2e:ab:9f:4a:6f:70:50:87: ad:65:98:bc:8c:b1:da:18:a6:13:e2:d3:d9:d4:b8: 29:3f:2a:53:3e:4c:81:7a:a4:1f:25:e8:81:70:6c: d5:33:99:1d:cd:11:4a:bc:b5:27:8d:17:b1:32:a8: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:56:E2:27:E4:D2:AA:5B:CF:B5:5A:E5:AD:D1:01:8F:89:49:3C:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e5b9eda-6cec-440b-8755-0a826f9cf187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption ce:af:22:e3:e0:bf:c6:e7:56:93:10:1f:9a:1b:f9:b7:57:8f: 93:cf:fe:2f:7e:ee:37:9e:47:d4:e4:69:05:71:a7:ad:4b:16: 83:e5:49:9e:4d:58:a6:d3:eb:70:5e:34:4d:3f:2a:13:9c:eb: 65:58:a2:ad:c2:61:7d:e2:42:a5:d8:5d:78:0e:3e:ae:17:b8: 37:45:c3:a4:61:be:b9:4b:b7:5e:cf:09:13:31:bf:53:fc:92: af:4c:37:f3:66:02:87:27:42:07:f8:17:28:58:5b:8d:69:b1: 6b:cf:f9:a4:cd:45:d6:4a:13:ed:fa:1d:22:5c:df:23:6c:65: 13:38:d1:1c:0e:4f:84:7a:54:83:35:33:df:5c:ea:9c:00:32: 60:1a:03:31:fd:97:31:43:e5:2c:9c:5a:45:25:9b:34:df:34: 88:67:33:80:bd:15:9f:c6:70:74:81:3a:ed:39:47:b7:c0:12: ad:98:a8:b9:ea:72:21:c4:fe:9c:0a:9b:fe:76:7c:30:40:22: ac:30:c5:c9:69:b8:7c:e8:45:6e:40:a3:e6:ec:73:4c:24:1d: 1a:18:bd:51:43:b1:38:20:c8:71:72:b3:50:2d:24:7f:1c:2a: 5b:36:7c:35:1b:74:63:a2:23:36:37:8f:b2:db:c2:30:1c:77: 34:ae:53:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCyweq1/5zR10H/4/NEKcWnwUmekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAxMDMwWhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWZkMzhmMGE5OTI0N2M5YmVlMWYxYjdmNzVhOGM4ZjU5 ZTM2YzMzNDU3MDIwMWU4NzNhOWZlMmRmNDkyOGYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQVZ/zOSfF2cvXL1dwAEyOvFX2pg/t3/e0jgs5QZC+H5hg IJ0+dxy9rmeyYgYi8QyfijGGLt7hJBRGSecWvqOrRXnsrn2M/nEA41DpknyNXyLR Ww/KTc41JkI7aO4DTbBaVprgl3CWFB16HdCMjOL+tqELNAkLefwx/HjrJYrC4jpV DYdpG/c9yZd9xiipyoYDPrrcXPVpehUC0nYswgl8YRWG+ZhlNJCuujr42vyI1FWd dAU2BfT8aVeeN1fcsFb5mfPJE8MZrjsuq59Kb3BQh61lmLyMsdoYphPi09nUuCk/ KlM+TIF6pB8l6IFwbNUzmR3NEUq8tSeNF7EyqO8LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdVbiJ+TSqlvPtVrlrdEBj4lJPOswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlNWI5ZWRhLTZjZWMtNDQwYi04NzU1LTBhODI2ZjljZjE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQrzANBgkqhkiG9w0BAQsFAAOCAQEAzq8i4+C/xudWkxAfmhv5t1ePk8/+ L37uN55H1ORpBXGnrUsWg+VJnk1YptPrcF40TT8qE5zrZViircJhfeJCpdhdeA4+ rhe4N0XDpGG+uUu3Xs8JEzG/U/ySr0w382YChydCB/gXKFhbjWmxa8/5pM1F1koT 7fodIlzfI2xlEzjRHA5PhHpUgzUz31zqnAAyYBoDMf2XMUPlLJxaRSWbNN80iGcz gL0Vn8ZwdIE67TlHt8ASrZiouepyIcT+nAqb/nZ8MEAirDDFyWm4fOhFbkCj5uxz TCQdGhi9UUOxOCDIcXKzUC0kfxwqWzZ8NRt0Y6IjNjePstvCMBx3NK5TZw== -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:37 2025 by rpki-client