$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa File: 9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa (raw, json) Hash identifier: lrKCohs2g1H0AtghCwfStsE0WQeEZtcvBjJ0Udf/4lo= Subject key identifier: 07:20:0D:02:92:31:B1:9C:2B:AC:ED:41:0E:DC:72:12:50:6F:A3:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69829774E12FC161B38577DC0044BFC55B2F1667 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa Signing time: Sat 12 Jul 2025 00:31:14 +0000 ROA not before: Sat 12 Jul 2025 00:31:14 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:82:97:74:e1:2f:c1:61:b3:85:77:dc:00:44:bf:c5:5b:2f:16:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:31:14 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=6352214808053400be8140aa106882a4224c7e43043145c767b6f7ad4f15b3d4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:97:ae:15:00:1e:5c:87:92:35:0a:0c:12: 57:65:0b:b1:bc:43:4a:6c:37:af:f1:98:1c:2b:d7: ce:88:56:74:bb:3a:67:18:bf:d2:4f:c2:f5:09:8b: 69:e8:df:ac:4f:1b:7e:59:ed:79:ad:02:5f:8b:ec: ad:0a:b2:82:2a:a0:6d:af:66:64:56:29:9c:6d:1c: 12:5a:8e:01:ce:97:dd:96:81:7f:50:b9:a0:f3:41: 18:a1:2d:e4:ed:bc:74:48:93:0f:2a:14:e8:ef:3c: 49:41:3f:95:9a:3d:31:17:11:2e:8b:fb:52:c0:9c: 17:1b:58:61:5a:de:4c:d6:98:8c:38:e7:e1:00:b3: d7:d3:79:55:a3:39:d9:a5:7d:21:19:81:41:9b:c7: ff:99:62:e6:e0:a9:ac:66:87:c1:c8:5d:4a:65:8a: d1:60:cd:d8:34:74:0d:9b:33:7c:de:3a:5d:9c:6f: d0:41:a6:b9:e8:8c:6f:a7:18:72:10:9e:ce:5d:ef: ef:29:2d:b9:c9:5a:20:7f:e7:98:24:03:ec:e1:0b: 4c:16:ff:d6:44:ee:1f:7d:59:dc:b0:d5:81:53:32: fc:cd:98:52:b1:32:9f:87:1f:37:d6:8c:fc:ea:97: b0:42:9a:9a:7b:66:da:55:02:87:12:f1:92:d0:3e: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:0D:02:92:31:B1:9C:2B:AC:ED:41:0E:DC:72:12:50:6F:A3:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption d5:af:f5:8a:aa:67:e1:5d:3e:aa:50:65:0b:66:76:af:ae:ca: 0e:bf:5c:a0:19:76:e9:8f:61:59:ce:8a:44:f4:10:33:c1:b4: f7:c5:dc:d6:37:c4:a7:8b:4f:6b:a2:ce:32:43:3f:69:c9:37: a9:0c:e5:5d:3d:b6:d7:17:c2:28:a5:5e:23:ee:05:d7:10:db: 2a:90:07:a7:1f:62:80:3b:bc:2f:3b:c1:6f:98:b5:06:8d:27: 9a:44:5e:a5:70:5f:de:f8:cd:a8:b3:7c:20:99:a0:66:0e:8b: e1:e1:b2:e7:49:80:74:24:82:22:95:f8:a8:92:5e:6d:a8:13: 5e:43:cc:39:93:27:40:df:be:9d:b7:84:59:1e:85:47:6a:89: 6a:8a:7e:be:5a:b6:63:0b:02:95:1d:e1:d3:88:b8:e5:9f:77: b7:d1:6d:ea:76:50:50:25:a9:b1:e5:d7:31:3d:df:86:67:34: 66:44:28:9f:7c:21:87:d4:12:07:15:6e:01:d0:48:4d:3d:5d: 05:4e:78:e5:c3:f5:7f:a9:5a:b1:b5:af:f4:2d:8e:ad:55:3f: 72:3d:29:2e:71:59:0f:db:9c:69:f8:35:01:23:b9:c4:e4:07: db:d3:81:2a:a6:ba:9e:49:98:29:44:76:02:24:17:ff:cf:ab: 40:15:f8:ad -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaYKXdOEvwWGzhXfcAES/xVsvFmcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAzMTE0WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzUyMjE0ODA4MDUzNDAwYmU4MTQwYWExMDY4ODJhNDIy NGM3ZTQzMDQzMTQ1Yzc2N2I2ZjdhZDRmMTViM2Q0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnVJeuFQAeXIeSNQoMEldlC7G8Q0psN6/xmBwr186IVnS7 OmcYv9JPwvUJi2no36xPG35Z7XmtAl+L7K0KsoIqoG2vZmRWKZxtHBJajgHOl92W gX9QuaDzQRihLeTtvHRIkw8qFOjvPElBP5WaPTEXES6L+1LAnBcbWGFa3kzWmIw4 5+EAs9fTeVWjOdmlfSEZgUGbx/+ZYubgqaxmh8HIXUplitFgzdg0dA2bM3zeOl2c b9BBprnojG+nGHIQns5d7+8pLbnJWiB/55gkA+zhC0wW/9ZE7h99Wdyw1YFTMvzN mFKxMp+HHzfWjPzql7BCmpp7ZtpVAocS8ZLQPg3nAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUByANApIxsZwrrO1BDtxyElBvoyUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliOTYyNGY2LWY0YzQtNDZkNS05N2M5LTA5NTBiNWFlMTI0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4kzANBgkqhkiG9w0BAQsFAAOCAQEA1a/1iqpn4V0+qlBlC2Z2r67KDr9c oBl26Y9hWc6KRPQQM8G098Xc1jfEp4tPa6LOMkM/ack3qQzlXT221xfCKKVeI+4F 1xDbKpAHpx9igDu8LzvBb5i1Bo0nmkRepXBf3vjNqLN8IJmgZg6L4eGy50mAdCSC IpX4qJJebagTXkPMOZMnQN++nbeEWR6FR2qJaop+vlq2YwsClR3h04i45Z93t9Ft 6nZQUCWpseXXMT3fhmc0ZkQon3whh9QSBxVuAdBITT1dBU545cP1f6lasbWv9C2O rVU/cj0pLnFZD9ucafg1ASO5xOQH29OBKqa6nkmYKUR2AiQX/8+rQBX4rQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:15 2025 by rpki-client