$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa File: 5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa (raw, json) Hash identifier: rIq7pnfVoOy94uhpf5xI9aWZ/ud4J9KSmrygM9vi4nY= Subject key identifier: D3:6E:4B:F5:AA:71:D7:E4:68:E1:59:FD:24:EE:64:FD:BB:89:DE:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7642AD69EE74139C1AF8286EDE2C8E1ACEB99CCF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa Signing time: Wed 02 Jul 2025 00:30:24 +0000 ROA not before: Wed 02 Jul 2025 00:30:24 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.135.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:42:ad:69:ee:74:13:9c:1a:f8:28:6e:de:2c:8e:1a:ce:b9:9c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:30:24 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=49d38771d55a3374bbfd4a712cf895e4c2b74c0fbe9824f9056b206419eca60e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cd:d6:44:27:be:ab:5e:f6:e9:6d:20:cb:0d: 9f:94:f8:68:a6:27:c3:b6:39:2e:6c:c6:5d:cf:bb: af:1f:a4:08:de:21:6f:94:4b:58:80:52:43:92:f4: b6:25:10:0a:48:be:51:6c:c0:27:f6:2f:eb:00:db: aa:86:cd:1c:55:8b:01:1c:c1:22:6c:0d:bd:a3:1a: c8:25:40:a5:65:f1:e2:47:79:53:54:c3:2c:15:a4: 6e:7f:d3:16:50:19:62:2e:88:1b:54:96:c8:f2:5e: c3:6f:d0:83:43:36:91:9b:b3:10:ee:58:ae:23:a0: 66:7b:24:54:0a:44:be:a3:a5:3e:05:d2:8c:89:fe: 25:ad:fd:27:85:ed:fb:6d:91:e6:ad:59:e7:11:38: 31:5b:76:20:bb:05:e4:50:ca:d9:41:bd:4c:5b:6b: 81:96:04:d1:30:d2:9e:54:1e:9e:d0:45:4c:d7:b3: 57:28:eb:df:cc:f3:d9:b7:9d:35:98:d2:aa:a4:61: 55:10:c6:6e:df:b5:7a:08:c9:26:0c:c5:a0:f7:df: de:28:45:43:a3:78:54:c5:f6:8c:93:8b:11:2c:18: bf:8c:a6:09:b6:47:fe:75:42:ea:7c:2b:c5:f5:77: 12:5c:fb:91:e6:94:e6:13:46:1e:dc:b3:33:b2:67: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:4B:F5:AA:71:D7:E4:68:E1:59:FD:24:EE:64:FD:BB:89:DE:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca0e5c9-3e44-405a-a5b0-f596fcb84b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.135.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6c:8a:4b:6f:bc:9d:f0:20:5c:74:cf:7d:09:46:6a:d0:fa:2e: 07:c0:85:b8:bb:cd:9c:98:c5:e5:20:5b:f1:91:7b:ce:4b:bc: c7:89:e4:54:3e:a5:92:16:7e:56:6b:2d:82:3a:e6:54:b4:e2: 4a:e3:34:78:d7:47:9d:ac:7c:dc:95:25:22:fe:8b:14:49:fc: 0e:10:52:9a:ef:99:0e:1a:87:55:e1:d6:46:23:f6:a0:a1:ad: 34:90:73:0e:9f:44:07:23:88:c1:ec:25:a5:8a:54:ee:05:e8: 54:5a:c5:0f:0e:88:c8:6b:d8:f3:51:20:33:a1:9d:c4:10:45: 38:45:75:85:cf:76:28:2e:2c:d4:92:3e:4a:ef:74:12:73:d6: d6:80:ea:22:32:36:b3:8e:8d:7c:fb:80:e8:bd:7c:96:9d:83: c5:45:d7:7f:f5:31:3b:ef:29:ed:65:ea:60:16:58:7e:80:75: 04:a0:4a:b6:25:b1:5f:44:3c:85:0f:7a:3b:df:d5:d6:5f:b5: 6f:3f:55:bc:eb:4f:61:8a:a0:39:e7:f2:15:fc:d6:18:b1:b0: 6b:2b:49:7f:58:99:37:e4:ec:6c:06:30:2f:6f:59:41:be:0f: c3:f7:82:e5:46:ab:40:45:82:44:ee:a6:24:47:95:de:af:67: a8:7d:5a:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdkKtae50E5wa+Chu3iyOGs65nM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAzMDI0WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWQzODc3MWQ1NWEzMzc0YmJmZDRhNzEyY2Y4OTVlNGMy Yjc0YzBmYmU5ODI0ZjkwNTZiMjA2NDE5ZWNhNjBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnzdZEJ76rXvbpbSDLDZ+U+GimJ8O2OS5sxl3Pu68fpAje IW+US1iAUkOS9LYlEApIvlFswCf2L+sA26qGzRxViwEcwSJsDb2jGsglQKVl8eJH eVNUwywVpG5/0xZQGWIuiBtUlsjyXsNv0INDNpGbsxDuWK4joGZ7JFQKRL6jpT4F 0oyJ/iWt/SeF7fttkeatWecRODFbdiC7BeRQytlBvUxba4GWBNEw0p5UHp7QRUzX s1co69/M89m3nTWY0qqkYVUQxm7ftXoIySYMxaD3394oRUOjeFTF9oyTixEsGL+M pgm2R/51Qup8K8X1dxJc+5HmlOYTRh7cszOyZ//bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU025L9apx1+Ro4Vn9JO5k/buJ3jcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjYTBlNWM5LTNlNDQtNDA1YS1hNWIwLWY1OTZmY2I4NGI5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfYh4AwDQYJKoZIhvcNAQELBQADggEBAGyKS2+8nfAgXHTPfQlGatD6LgfA hbi7zZyYxeUgW/GRe85LvMeJ5FQ+pZIWflZrLYI65lS04krjNHjXR52sfNyVJSL+ ixRJ/A4QUprvmQ4ah1Xh1kYj9qChrTSQcw6fRAcjiMHsJaWKVO4F6FRaxQ8OiMhr 2PNRIDOhncQQRThFdYXPdiguLNSSPkrvdBJz1taA6iIyNrOOjXz7gOi9fJadg8VF 13/1MTvvKe1l6mAWWH6AdQSgSrYlsV9EPIUPejvf1dZftW8/VbzrT2GKoDnn8hX8 1hixsGsrSX9YmTfk7GwGMC9vWUG+D8P3guVGq0BFgkTupiRHld6vZ6h9WpI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:54 2025 by rpki-client