$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e24b8f8-e348-4c27-ba65-4b1b3db11f7c.roa File: 5e24b8f8-e348-4c27-ba65-4b1b3db11f7c.roa (raw, json) Hash identifier: +blQbxr8cmuhBNDJ8f+aVLCXwNqnzjpJOKEJAkMxA1Y= Subject key identifier: AC:FF:DD:D7:B2:D6:44:A3:75:2E:BA:A6:D6:52:1F:74:57:26:F2:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A5E958305EBC8B6DC24F71D76B5F19B24CB52F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e24b8f8-e348-4c27-ba65-4b1b3db11f7c.roa Signing time: Fri 11 Jul 2025 00:30:27 +0000 ROA not before: Fri 11 Jul 2025 00:30:27 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.47.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5e:95:83:05:eb:c8:b6:dc:24:f7:1d:76:b5:f1:9b:24:cb:52:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:30:27 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=5343a8e988b103b17863a4f0e832be7c6c3f0d522d585aafb40a1aff7d955565, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:f2:b8:6d:89:6b:5a:03:e8:9b:6f:71:8f: 63:e0:35:a5:cc:5c:4e:f8:84:d2:26:f1:39:64:f9: f2:14:da:3c:fd:60:af:2c:1c:41:e4:6a:05:13:b5: eb:ca:81:77:26:19:d1:b6:11:a1:18:e0:9c:59:6a: 09:bd:af:c2:5c:84:f2:e1:82:a8:de:9d:73:d9:f1: 0d:3d:f1:33:9c:59:5f:e8:02:d2:eb:da:13:8e:ab: f2:5a:af:8b:3a:4b:c9:49:bd:79:b4:23:0b:19:45: e3:27:2c:46:4a:1f:54:b7:05:ea:d1:a9:dc:cc:e1: 58:d0:4b:25:58:91:0a:54:df:92:74:28:3f:02:5f: 75:b5:8f:f2:7a:f4:0d:1a:92:c6:52:1a:24:c7:df: de:4b:58:eb:b8:24:e2:c1:34:48:c2:32:9d:9a:43: 6b:1e:7f:0e:d0:a5:83:a1:c5:21:33:df:02:1e:1c: ef:d9:7b:ba:f9:b9:91:66:0d:c4:82:47:8b:72:c2: f0:8a:a9:b4:d3:f5:24:85:ec:13:2c:0a:15:6e:15: fc:61:73:0f:46:33:d3:c9:65:b6:1e:f9:f7:ff:da: 78:59:73:ea:73:0c:fc:ca:27:82:c3:34:b7:16:46: a6:7e:d8:62:d6:5f:c8:aa:6d:33:af:b9:aa:45:fc: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FF:DD:D7:B2:D6:44:A3:75:2E:BA:A6:D6:52:1F:74:57:26:F2:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e24b8f8-e348-4c27-ba65-4b1b3db11f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:f7:c6:6e:00:82:2f:34:d9:1d:11:3b:4d:53:85:d8:41:a5: b1:fe:05:24:8e:ce:b7:0b:fc:22:2b:26:f9:00:6f:5f:b8:2a: 36:51:17:6a:6d:9e:bf:12:87:14:e1:3b:40:c2:71:c1:5d:a4: 83:ac:3f:92:ea:35:2f:91:ae:3f:d3:b5:36:bc:d3:1a:b7:2b: 88:bf:ab:3b:52:d8:f1:9e:c2:f2:87:25:89:bb:ab:2b:9e:6f: bd:7d:d1:fc:0b:43:4d:b0:ea:16:03:04:f8:82:bb:e2:ee:57: bc:86:c4:a2:eb:13:37:91:ed:1b:6f:96:d9:a5:f1:0e:fa:fc: e3:0c:5a:90:c7:5e:51:5e:f4:07:ad:3e:ae:4a:c3:b2:b9:cd: cc:5c:fe:25:ef:6e:57:33:f6:b9:4c:8a:b4:bc:8d:ea:a5:40: 0b:77:68:ed:11:0c:c8:4f:c0:a3:de:02:5b:ad:12:69:05:ba: d9:8a:c7:3d:48:07:88:2a:58:04:84:8d:c9:7f:69:0f:c5:1c: f2:03:ba:72:ae:d8:42:64:dc:7e:fb:e8:87:43:3f:34:79:98: 58:84:d0:6d:0f:3a:0f:a5:ba:f0:28:65:28:dd:ec:fc:54:55: 18:ac:b5:0b:b8:e1:f0:53:c0:46:00:a2:a0:ae:4a:53:02:6d: 19:b0:66:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKl6VgwXryLbcJPcddrXxmyTLUvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAzMDI3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzQzYThlOTg4YjEwM2IxNzg2M2E0ZjBlODMyYmU3YzZj M2YwZDUyMmQ1ODVhYWZiNDBhMWFmZjdkOTU1NTY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC75PK4bYlrWgPom29xj2PgNaXMXE74hNIm8Tlk+fIU2jz9 YK8sHEHkagUTtevKgXcmGdG2EaEY4JxZagm9r8JchPLhgqjenXPZ8Q098TOcWV/o AtLr2hOOq/Jar4s6S8lJvXm0IwsZReMnLEZKH1S3BerRqdzM4VjQSyVYkQpU35J0 KD8CX3W1j/J69A0aksZSGiTH395LWOu4JOLBNEjCMp2aQ2sefw7QpYOhxSEz3wIe HO/Ze7r5uZFmDcSCR4tywvCKqbTT9SSF7BMsChVuFfxhcw9GM9PJZbYe+ff/2nhZ c+pzDPzKJ4LDNLcWRqZ+2GLWX8iqbTOvuapF/Lc7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrP/d17LWRKN1Lrqm1lIfdFcm8h8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlMjRiOGY4LWUzNDgtNGMyNy1iYTY1LTRiMWIzZGIxMWY3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4LzANBgkqhkiG9w0BAQsFAAOCAQEAGffGbgCCLzTZHRE7TVOF2EGlsf4F JI7Otwv8Iism+QBvX7gqNlEXam2evxKHFOE7QMJxwV2kg6w/kuo1L5GuP9O1NrzT GrcriL+rO1LY8Z7C8ocliburK55vvX3R/AtDTbDqFgME+IK74u5XvIbEousTN5Ht G2+W2aXxDvr84wxakMdeUV70B60+rkrDsrnNzFz+Je9uVzP2uUyKtLyN6qVAC3do 7REMyE/Ao94CW60SaQW62YrHPUgHiCpYBISNyX9pD8Uc8gO6cq7YQmTcfvvoh0M/ NHmYWITQbQ86D6W68ChlKN3s/FRVGKy1C7jh8FPARgCioK5KUwJtGbBm0g== -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:18 2025 by rpki-client