$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60a6c9ac-1221-4a4d-87e6-239a3fe2d1f4.roa File: 60a6c9ac-1221-4a4d-87e6-239a3fe2d1f4.roa (raw, json) Hash identifier: N/5IZAynuvRV222kZhLlWQkwbfPBGjBaCNnI1/AwS1A= Subject key identifier: 08:2F:7B:00:94:EC:F3:07:E0:55:94:BE:FE:CF:22:B1:FB:C0:1F:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DE48C72B9EA09E0FFBCB367588B79777DA25EB4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60a6c9ac-1221-4a4d-87e6-239a3fe2d1f4.roa Signing time: Wed 16 Jul 2025 00:11:59 +0000 ROA not before: Wed 16 Jul 2025 00:11:59 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e4:8c:72:b9:ea:09:e0:ff:bc:b3:67:58:8b:79:77:7d:a2:5e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:11:59 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=7f6dc0d0435c8b52f9a15bb5eea4b8c84a268a630be4927ba6559ca4a6123cf1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7f:84:13:7e:b7:8b:72:8c:b2:81:b9:73:69: d1:a7:bc:2e:70:08:41:6f:29:6b:ce:b7:43:c5:20: 94:1d:d7:3b:bc:ec:59:70:f2:ee:21:bf:b2:76:1f: e5:75:08:be:cb:4b:97:7d:c8:67:c8:3e:1a:7c:89: e8:89:dc:dc:2e:d4:aa:5f:d0:41:bb:2f:bf:4a:e4: 0a:49:67:4e:ad:f4:12:a9:c4:19:d1:e8:2e:04:70: a0:38:06:e8:b5:95:9e:86:3a:30:af:5d:83:17:87: 88:96:f0:d8:c9:b4:9b:a7:90:e0:c8:2d:bc:d2:5d: dd:b0:96:d9:7e:25:d0:b1:ec:b9:ff:c7:8d:cb:d5: 45:c0:ec:3f:a8:80:0d:0e:21:5b:ac:bf:df:84:3a: 2a:dc:8c:06:d0:0f:d8:6a:11:11:31:18:83:a4:9b: ce:fe:dc:42:ff:a7:63:49:92:2a:a9:90:9f:ba:f6: a3:17:c3:99:9e:a2:4b:d1:7c:ca:71:3b:e0:05:39: f3:c2:97:a6:6a:a6:ed:1b:7e:65:75:06:dd:8b:41: 68:0f:3e:54:58:b1:04:bf:6a:ec:6d:f6:6a:db:a8: 92:18:59:3c:74:f3:56:4a:c1:01:58:27:cb:f3:47: a2:82:9e:85:d5:bc:e1:4e:55:3a:4c:2f:1c:72:ec: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:7B:00:94:EC:F3:07:E0:55:94:BE:FE:CF:22:B1:FB:C0:1F:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60a6c9ac-1221-4a4d-87e6-239a3fe2d1f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:61:97:bf:b0:78:56:45:27:45:01:37:fa:0b:da:3e:b1:fb: 51:3e:bd:73:1a:47:16:76:f8:e1:4d:ff:5e:a6:a5:ce:80:10: f7:fe:6c:06:26:d8:08:8b:ae:93:b9:46:38:6f:96:ed:e4:53: cc:c6:cf:de:3e:ce:21:c8:69:50:21:2f:26:79:ae:f4:f4:7d: be:fb:87:7a:b7:7c:28:fc:b5:92:2f:96:1e:ad:f7:8f:6d:2d: fb:d5:90:fd:23:9f:e9:38:f8:94:8f:b5:03:58:2c:24:40:9f: d3:a0:fb:a1:94:10:cd:c8:4b:3a:07:c2:65:2a:b6:dc:f3:e0: 8b:41:d2:81:16:b7:61:d3:98:21:b5:58:91:9f:c2:a4:79:b2: 6c:1e:87:95:a4:71:3b:23:e3:98:b0:e2:9b:60:0b:04:bf:12: 8a:9a:f6:23:40:45:d5:f7:b8:a9:d7:97:8b:c4:82:fa:a6:a2: 0a:93:49:cb:e1:36:e3:2b:68:9a:ca:6d:24:e0:1e:0c:00:cc: 94:c0:7d:a2:49:24:1c:55:d4:d5:a2:cf:ec:85:8c:6d:4b:97: ce:d5:c8:f4:aa:a4:59:67:6c:e6:7d:d4:5e:aa:8f:69:7f:8a: bd:45:29:23:a2:a2:69:a8:20:9c:7a:c7:26:31:ee:db:41:23: 43:fd:79:61 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbeSMcrnqCeD/vLNnWIt5d32iXrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAxMTU5WhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjZkYzBkMDQzNWM4YjUyZjlhMTViYjVlZWE0YjhjODRh MjY4YTYzMGJlNDkyN2JhNjU1OWNhNGE2MTIzY2YxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzf4QTfreLcoyygblzadGnvC5wCEFvKWvOt0PFIJQd1zu8 7Flw8u4hv7J2H+V1CL7LS5d9yGfIPhp8ieiJ3Nwu1Kpf0EG7L79K5ApJZ06t9BKp xBnR6C4EcKA4Bui1lZ6GOjCvXYMXh4iW8NjJtJunkODILbzSXd2wltl+JdCx7Ln/ x43L1UXA7D+ogA0OIVusv9+EOircjAbQD9hqERExGIOkm87+3EL/p2NJkiqpkJ+6 9qMXw5meokvRfMpxO+AFOfPCl6Zqpu0bfmV1Bt2LQWgPPlRYsQS/auxt9mrbqJIY WTx081ZKwQFYJ8vzR6KCnoXVvOFOVTpMLxxy7IBzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCC97AJTs8wfgVZS+/s8isfvAH2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwYTZjOWFjLTEyMjEtNGE0ZC04N2U2LTIzOWEzZmUyZDFmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQ2zANBgkqhkiG9w0BAQsFAAOCAQEArWGXv7B4VkUnRQE3+gvaPrH7UT69 cxpHFnb44U3/XqalzoAQ9/5sBibYCIuuk7lGOG+W7eRTzMbP3j7OIchpUCEvJnmu 9PR9vvuHerd8KPy1ki+WHq33j20t+9WQ/SOf6Tj4lI+1A1gsJECf06D7oZQQzchL OgfCZSq23PPgi0HSgRa3YdOYIbVYkZ/CpHmybB6HlaRxOyPjmLDim2ALBL8Sipr2 I0BF1fe4qdeXi8SC+qaiCpNJy+E24ytomsptJOAeDADMlMB9okkkHFXU1aLP7IWM bUuXztXI9KqkWWds5n3UXqqPaX+KvUUpI6KiaaggnHrHJjHu20EjQ/15YQ== -----END CERTIFICATE-----Generated at Mon Jul 21 13:10:03 2025 by rpki-client