$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b42dd30-b755-45d7-980d-c68f7336d75d.roa File: 4b42dd30-b755-45d7-980d-c68f7336d75d.roa (raw, json) Hash identifier: PXhhM8enB6MQZpe+TYlcJpi8l6Hc41OiVp8YdCQg/7s= Subject key identifier: F8:D8:7E:C1:BC:72:6E:DE:B0:19:6F:A6:F6:EC:20:FD:B2:FD:12:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C41E5659EDEF2C99EC44D88A8D37416F0D0B109 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b42dd30-b755-45d7-980d-c68f7336d75d.roa Signing time: Fri 11 Jul 2025 00:20:32 +0000 ROA not before: Fri 11 Jul 2025 00:20:32 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.168.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:41:e5:65:9e:de:f2:c9:9e:c4:4d:88:a8:d3:74:16:f0:d0:b1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:20:32 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=600ce3d23e64b4c024c472de77e2a7392b18d92790bd2a5420e13a933ac689b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:6b:5e:03:cc:59:1e:94:c4:38:95:fc:fa: c7:c0:b4:b6:9d:2b:25:f4:81:11:99:e5:f3:32:21: 7a:aa:5d:86:1c:1d:22:4a:07:01:41:5b:35:0d:e6: c8:bd:31:98:00:6c:1a:4c:f4:84:cd:4e:9c:28:28: 4b:53:dd:9c:03:86:db:c2:c7:d6:8a:b5:c6:0e:58: b9:e4:b9:8c:35:1f:47:b2:5c:be:93:a7:0b:8f:17: d2:d6:84:f7:d3:cb:e2:36:82:3a:9d:9b:80:5d:59: d3:ad:9c:be:f5:ea:a9:f4:13:a6:81:b5:11:40:53: 72:03:a2:3e:0e:4e:60:91:4f:75:a3:ea:01:c5:d3: 80:43:26:88:ae:f3:07:84:56:6d:d7:ed:62:f6:bb: 87:b2:d6:3f:e1:80:d3:a9:f2:85:15:09:b7:a3:3e: a4:d9:6e:2a:aa:0e:35:cc:75:4e:65:3f:9a:3d:1e: 5b:7a:11:e7:92:3a:3f:50:65:b2:b2:65:d7:00:60: ed:a9:18:18:f7:19:3a:a0:aa:d8:63:45:4e:00:fa: 33:a4:58:3a:88:e7:a6:72:d9:7b:f0:90:c9:f5:78: 78:07:32:b1:b0:c1:1c:51:0e:5e:71:e4:90:31:9d: b7:1b:1f:08:87:0d:94:d3:a3:9a:ea:0d:1a:c5:70: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:7E:C1:BC:72:6E:DE:B0:19:6F:A6:F6:EC:20:FD:B2:FD:12:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b42dd30-b755-45d7-980d-c68f7336d75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.168.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:7d:98:0d:7d:bd:97:f7:81:ea:d8:6e:77:ac:17:44:d1:7a: 72:9d:d5:8c:21:f1:4e:67:1a:67:d1:6e:65:88:88:87:a8:20: 80:03:21:3b:ac:e9:e0:dd:db:f4:92:93:7a:54:e0:34:a1:3f: 09:8d:59:95:9e:7d:74:b7:1e:6d:3f:af:95:22:e2:c4:c4:d8: 21:9b:18:f5:84:68:cb:56:74:98:6a:dc:93:e9:47:fc:fa:d9: 6b:ff:a1:18:9a:41:1c:27:98:2b:d7:fc:14:c5:5b:ce:34:a8: 79:ca:f2:5e:13:b0:92:c7:e4:80:39:1c:6d:82:e9:0d:6a:4a: 1a:81:49:93:1f:a9:a0:6d:06:be:ab:9d:26:48:b4:ef:07:be: 38:19:49:1c:e0:04:be:5f:e2:7e:b5:34:16:4d:90:ed:51:0f: 81:d9:cc:4b:a9:0b:3f:52:60:b7:df:61:24:62:b9:5d:8e:8b: 9c:99:26:e5:e4:11:cd:6e:ee:20:49:eb:c6:24:f3:7f:a5:15: d2:c8:30:7f:9f:bb:bd:61:33:8c:37:99:c1:eb:6b:05:d4:86: d5:aa:35:12:ae:8b:4f:d6:41:11:07:ca:b9:6b:84:54:76:5e: d3:e7:75:3b:80:e3:e9:5a:a8:98:56:91:17:de:ef:8c:74:64: 3a:44:ac:a8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULEHlZZ7e8smexE2IqNN0FvDQsQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAyMDMyWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDBjZTNkMjNlNjRiNGMwMjRjNDcyZGU3N2UyYTczOTJi MThkOTI3OTBiZDJhNTQyMGUxM2E5MzNhYzY4OWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc5GteA8xZHpTEOJX8+sfAtLadKyX0gRGZ5fMyIXqqXYYc HSJKBwFBWzUN5si9MZgAbBpM9ITNTpwoKEtT3ZwDhtvCx9aKtcYOWLnkuYw1H0ey XL6TpwuPF9LWhPfTy+I2gjqdm4BdWdOtnL716qn0E6aBtRFAU3IDoj4OTmCRT3Wj 6gHF04BDJoiu8weEVm3X7WL2u4ey1j/hgNOp8oUVCbejPqTZbiqqDjXMdU5lP5o9 Hlt6EeeSOj9QZbKyZdcAYO2pGBj3GTqgqthjRU4A+jOkWDqI56Zy2XvwkMn1eHgH MrGwwRxRDl5x5JAxnbcbHwiHDZTTo5rqDRrFcBPhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+Nh+wbxybt6wGW+m9uwg/bL9EjIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiNDJkZDMwLWI3NTUtNDVkNy05ODBkLWM2OGY3MzM2ZDc1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4qDANBgkqhkiG9w0BAQsFAAOCAQEAnX2YDX29l/eB6thud6wXRNF6cp3V jCHxTmcaZ9FuZYiIh6gggAMhO6zp4N3b9JKTelTgNKE/CY1ZlZ59dLcebT+vlSLi xMTYIZsY9YRoy1Z0mGrck+lH/PrZa/+hGJpBHCeYK9f8FMVbzjSoecryXhOwksfk gDkcbYLpDWpKGoFJkx+poG0GvqudJki07we+OBlJHOAEvl/ifrU0Fk2Q7VEPgdnM S6kLP1Jgt99hJGK5XY6LnJkm5eQRzW7uIEnrxiTzf6UV0sgwf5+7vWEzjDeZwetr BdSG1ao1Eq6LT9ZBEQfKuWuEVHZe0+d1O4Dj6VqomFaRF97vjHRkOkSsqA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:24 2025 by rpki-client