$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa File: 56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa (raw, json) Hash identifier: 9QAEjUTAQSKihMIIlI946c9/s9qv1QmypAueLxqcDis= Subject key identifier: EC:EF:EC:D3:04:B8:05:9B:21:28:09:20:0B:9D:02:FD:67:20:CB:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B9B60D6CEEE331541A1555D57F05C44F933F5CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa Signing time: Fri 18 Jul 2025 00:12:13 +0000 ROA not before: Fri 18 Jul 2025 00:12:13 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.40.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9b:60:d6:ce:ee:33:15:41:a1:55:5d:57:f0:5c:44:f9:33:f5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:12:13 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=b0c4076aa65191d1337e5fdd2463992e34bba2230bf1790be481739a4ad2b8c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:51:45:30:7f:f0:83:5b:fb:82:04:22:a9: a3:4c:78:00:45:5c:77:29:3f:80:6e:f9:23:e9:11: d2:f7:66:22:c3:91:b0:ea:6d:64:12:62:02:0a:71: dc:60:c6:d4:2a:df:dd:ef:39:e2:a8:6d:99:41:69: c3:f1:43:3a:6c:db:1c:0b:26:58:d5:60:d7:2a:9b: 74:82:a8:f5:b9:5c:8a:f5:3c:94:a9:51:94:fe:cd: 07:46:93:36:2c:b6:fb:ec:d9:a2:21:32:bd:49:31: 72:70:6b:74:d7:41:96:d7:c5:65:fd:07:f5:5c:63: 4d:50:40:96:0a:5b:35:e6:97:7a:0a:01:4e:5f:21: 31:de:c8:0b:a1:40:62:06:d3:4a:42:b6:b1:19:04: b8:12:08:41:05:0a:4b:23:e5:8a:5a:1c:d2:42:24: bc:1a:e4:a6:a8:b5:b3:0e:63:49:d3:a5:08:71:82: fc:5b:7e:7f:b2:75:9b:3b:f4:65:ff:9e:ef:11:d8: e1:2f:4a:74:d9:07:f8:8d:4f:23:ee:6f:d7:d5:8a: 46:a9:6d:61:9a:37:28:3c:e5:34:97:1a:52:e4:c2: 67:c5:79:8e:77:ed:83:0f:f9:ba:9a:49:38:26:43: 9a:24:20:33:45:86:53:ed:01:e0:2b:52:0b:dd:c9: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EF:EC:D3:04:B8:05:9B:21:28:09:20:0B:9D:02:FD:67:20:CB:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56a4c90e-d5c2-475d-a4e9-7ae6f470dc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.40.128.0/18 Signature Algorithm: sha256WithRSAEncryption 81:6e:79:c4:b2:be:ed:3f:02:e0:62:a7:63:36:ba:e7:2f:4e: d7:1b:0b:d7:9c:98:36:c9:31:c9:61:e0:ef:be:83:00:c5:76: 6b:aa:6e:9b:e7:ba:5e:56:ad:8b:27:47:5d:bf:f5:80:31:16: d8:be:04:e6:2e:87:19:a1:9f:98:6a:06:26:44:46:5d:8e:36: 63:40:0e:16:4d:74:4a:e1:3c:e6:4a:b7:74:44:9e:bb:01:ef: c6:5a:2f:82:44:82:f8:00:bf:54:fc:b2:21:a2:d3:af:be:4d: 2c:fc:96:c2:29:62:a5:d8:c3:59:e6:d9:46:7e:bf:ca:74:89: 89:93:4e:12:63:ea:33:67:52:94:ec:35:75:cf:3e:f4:c8:29: 8d:96:c0:37:d1:ff:3d:3b:6e:13:e7:ca:f0:3e:bd:f9:02:ed: 3a:59:b2:af:aa:5f:c6:ee:0c:fc:d9:7e:ef:d5:3b:6d:8c:1e: 83:f1:2c:d4:94:83:46:2e:0f:5c:c3:d6:5a:81:4f:dc:5c:d8: c9:e9:8c:72:0f:8b:73:c2:d1:39:b7:76:84:5e:f9:59:0a:25: c8:82:86:dd:fe:f8:c3:d7:ac:f8:cc:aa:83:4f:cd:96:15:9c: c6:3d:0f:b2:e8:ee:cc:3f:99:95:ca:37:90:45:a2:7a:bc:c8: c2:33:d5:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG5tg1s7uMxVBoVVdV/BcRPkz9cswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAxMjEzWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGM0MDc2YWE2NTE5MWQxMzM3ZTVmZGQyNDYzOTkyZTM0 YmJhMjIzMGJmMTc5MGJlNDgxNzM5YTRhZDJiOGMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvkVFFMH/wg1v7ggQiqaNMeABFXHcpP4Bu+SPpEdL3ZiLD kbDqbWQSYgIKcdxgxtQq393vOeKobZlBacPxQzps2xwLJljVYNcqm3SCqPW5XIr1 PJSpUZT+zQdGkzYstvvs2aIhMr1JMXJwa3TXQZbXxWX9B/VcY01QQJYKWzXml3oK AU5fITHeyAuhQGIG00pCtrEZBLgSCEEFCksj5YpaHNJCJLwa5KaotbMOY0nTpQhx gvxbfn+ydZs79GX/nu8R2OEvSnTZB/iNTyPub9fVikapbWGaNyg85TSXGlLkwmfF eY537YMP+bqaSTgmQ5okIDNFhlPtAeArUgvdybR1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7O/s0wS4BZshKAkgC50C/Wcgy+wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2YTRjOTBlLWQ1YzItNDc1ZC1hNGU5LTdhZTZmNDcwZGM3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYKIAwDQYJKoZIhvcNAQELBQADggEBAIFuecSyvu0/AuBip2M2uucvTtcb C9ecmDbJMclh4O++gwDFdmuqbpvnul5WrYsnR12/9YAxFti+BOYuhxmhn5hqBiZE Rl2ONmNADhZNdErhPOZKt3REnrsB78ZaL4JEgvgAv1T8siGi06++TSz8lsIpYqXY w1nm2UZ+v8p0iYmTThJj6jNnUpTsNXXPPvTIKY2WwDfR/z07bhPnyvA+vfkC7TpZ sq+qX8buDPzZfu/VO22MHoPxLNSUg0YuD1zD1lqBT9xc2MnpjHIPi3PC0Tm3doRe +VkKJciCht3++MPXrPjMqoNPzZYVnMY9D7Lo7sw/mZXKN5BFonq8yMIz1S8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:24 2025 by rpki-client