$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa File: 6c512c1b-f3e3-4cc4-adf7-022feda26799.roa (raw, json) Hash identifier: FVdhQUQs9EYBRM8YEKAFLXx8r99E56QDM+wt5JBbJ/Q= Subject key identifier: 4A:7C:6A:7F:81:5E:3D:86:B8:72:16:63:D1:F9:6E:13:E2:AD:E6:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02008C925FEE1429C13BF9A08B9EE158BCC666DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa Signing time: Mon 14 Jul 2025 15:21:23 +0000 ROA not before: Mon 14 Jul 2025 15:21:23 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 79.73.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:00:8c:92:5f:ee:14:29:c1:3b:f9:a0:8b:9e:e1:58:bc:c6:66:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:21:23 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=a11b4cb89838a1150dc28883b87d3d5d34421d16fba892605fd707a5b068dab7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:41:02:50:b2:2a:71:55:d3:be:71:a8:6e: 50:f5:9c:f5:ed:51:58:b1:80:b6:41:8a:f4:2e:44: eb:97:72:4f:16:8c:6f:54:29:8a:ba:27:77:e3:eb: 95:a4:c3:04:ca:49:0a:61:9a:ea:e9:61:96:1f:28: d0:b0:9d:79:72:7f:13:a7:99:df:00:2f:59:c2:71: e8:08:32:f3:2c:80:51:9c:34:23:c9:68:8f:99:3a: 19:14:3c:31:a2:bf:25:04:0e:72:7a:cc:ed:48:4a: 49:18:30:a8:02:dc:09:4f:72:a8:bf:9d:fb:bb:d5: e4:dd:91:8b:4d:83:70:88:b0:d1:bf:66:c9:e5:81: 51:fe:ed:54:cd:50:75:92:46:eb:de:9f:60:a1:22: a3:7f:5f:b4:a1:a1:b2:bb:5a:b0:c1:7e:ee:6e:1e: f7:af:19:52:8e:a7:83:84:a6:21:00:41:93:1c:53: 01:15:ac:8a:29:df:a7:85:68:97:40:04:15:90:d5: 24:22:8a:4a:df:cf:2c:53:50:9f:e7:e5:d7:b2:65: 45:8a:eb:da:31:1a:1f:00:13:8a:03:d1:9f:6f:59: 70:9d:7f:65:4f:bb:23:de:b3:e0:5f:d9:27:0a:1a: a1:d8:d0:84:9e:be:fe:22:b6:ec:01:fd:da:d4:eb: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:6A:7F:81:5E:3D:86:B8:72:16:63:D1:F9:6E:13:E2:AD:E6:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c512c1b-f3e3-4cc4-adf7-022feda26799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.73.0.0/18 Signature Algorithm: sha256WithRSAEncryption 27:4a:5f:a8:71:97:11:a0:6d:7d:66:f3:5c:8e:af:59:0e:31: dd:b6:20:08:f9:f8:86:4c:d7:e3:a3:c5:81:c9:d7:21:25:03: 91:13:ab:0a:63:7a:7e:e7:cb:2d:79:b3:10:3b:30:7d:a3:4b: 86:b1:9c:ba:f1:d3:7d:78:2d:ba:f0:ee:55:2c:e9:d8:88:d6: a5:4b:0b:0b:eb:46:01:9a:27:f8:4d:4d:2d:31:68:88:b3:4e: 8d:79:30:32:15:1c:4a:67:35:db:b0:28:6c:ad:48:5d:23:62: 42:a7:31:8f:e6:ad:da:25:d1:01:e3:02:03:ec:7c:c3:c6:ba: 39:27:ac:8e:5b:4a:b6:91:f8:15:42:d8:f2:76:1c:08:d4:e2: c4:ae:aa:82:13:11:86:4c:9c:2e:16:d7:53:4b:f4:2f:71:16: 83:f7:99:36:6d:57:22:62:ad:85:f8:f2:0a:da:72:00:76:1a: b5:a0:4d:9e:32:86:07:4e:9a:ec:2e:90:02:80:c1:aa:51:d3: 87:65:5f:39:41:60:cf:9c:08:75:68:0e:dc:21:87:a2:19:d6: 84:c9:55:17:11:4a:c2:b1:14:e5:48:92:35:c7:c8:e8:25:05: 9c:6e:dd:0f:7b:2a:b6:5e:9b:58:de:1f:5e:c2:94:7f:68:f4: 96:f8:7e:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAgCMkl/uFCnBO/mgi57hWLzGZt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUyMTIzWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTFiNGNiODk4MzhhMTE1MGRjMjg4ODNiODdkM2Q1ZDM0 NDIxZDE2ZmJhODkyNjA1ZmQ3MDdhNWIwNjhkYWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLxkECULIqcVXTvnGoblD1nPXtUVixgLZBivQuROuXck8W jG9UKYq6J3fj65WkwwTKSQphmurpYZYfKNCwnXlyfxOnmd8AL1nCcegIMvMsgFGc NCPJaI+ZOhkUPDGivyUEDnJ6zO1ISkkYMKgC3AlPcqi/nfu71eTdkYtNg3CIsNG/ ZsnlgVH+7VTNUHWSRuven2ChIqN/X7ShobK7WrDBfu5uHvevGVKOp4OEpiEAQZMc UwEVrIop36eFaJdABBWQ1SQiikrfzyxTUJ/n5deyZUWK69oxGh8AE4oD0Z9vWXCd f2VPuyPes+Bf2ScKGqHY0ISevv4ituwB/drU64nZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSnxqf4FePYa4chZj0fluE+Kt5mEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjNTEyYzFiLWYzZTMtNGNjNC1hZGY3LTAyMmZlZGEyNjc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZPSQAwDQYJKoZIhvcNAQELBQADggEBACdKX6hxlxGgbX1m81yOr1kOMd22 IAj5+IZM1+OjxYHJ1yElA5ETqwpjen7nyy15sxA7MH2jS4axnLrx0314Lbrw7lUs 6diI1qVLCwvrRgGaJ/hNTS0xaIizTo15MDIVHEpnNduwKGytSF0jYkKnMY/mrdol 0QHjAgPsfMPGujknrI5bSraR+BVC2PJ2HAjU4sSuqoITEYZMnC4W11NL9C9xFoP3 mTZtVyJirYX48gracgB2GrWgTZ4yhgdOmuwukAKAwapR04dlXzlBYM+cCHVoDtwh h6IZ1oTJVRcRSsKxFOVIkjXHyOglBZxu3Q97KrZem1jeH17ClH9o9Jb4fsA= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:35 2025 by rpki-client