$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa File: c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa (raw, json) Hash identifier: VGjtVjze2qRCx6kOIu5GbFTmtVtXWuwUgBPuzpM5fjU= Subject key identifier: 31:4C:FC:CA:95:2D:42:00:8C:7A:18:7F:61:53:C0:5C:FB:A0:DE:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4343244A114DF6BEB30E3E7CAD527B821C12E90A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa Signing time: Tue 08 Jul 2025 15:12:18 +0000 ROA not before: Tue 08 Jul 2025 15:12:18 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.194.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:24:4a:11:4d:f6:be:b3:0e:3e:7c:ad:52:7b:82:1c:12:e9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:12:18 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=0d1c2ce2ec8f89c2b9ff9f5324c1b8998aee192ca85e34beb05a9b428b49ab8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:d0:bc:e3:9c:aa:61:c1:d3:56:82:ec:13: 37:b6:c2:18:ec:f8:d4:17:89:1b:fc:64:7c:05:55: e9:06:c8:39:f8:6f:d0:d5:40:8c:6a:b7:30:b0:36: 94:c8:7c:00:9b:ea:f0:0a:80:a7:28:a4:b1:bb:7c: 65:1a:14:d2:b9:ee:e1:76:93:7e:b1:ea:af:38:7b: 12:da:f2:0e:11:62:24:43:9d:35:43:68:71:bb:42: 8b:ac:14:fa:2d:db:ce:17:0a:44:9a:2e:0e:ce:86: 54:db:0a:e4:d1:d9:ff:60:ef:4b:e8:db:50:1f:a5: 81:4b:b6:93:f1:51:6d:c4:72:27:a3:47:17:79:fc: 2c:e3:9b:3b:7d:09:c4:b7:61:47:a8:f1:4f:d9:94: 8f:85:29:f0:fe:6a:17:ad:b6:d4:2a:4c:ad:8b:77: 7f:cf:63:0c:b7:70:84:1d:57:9c:7e:c5:5b:43:1b: a2:8f:36:22:7b:f2:b0:39:06:52:de:42:b9:ec:b2: 42:27:08:4d:46:dc:67:19:6e:2d:fb:fa:84:d5:13: 13:b3:22:32:83:bc:87:fd:68:0d:27:07:03:7f:7b: 0f:9d:c1:85:c3:57:ee:cd:c0:6e:f5:42:7b:12:59: 34:b1:2c:39:26:c2:c8:24:1c:ae:77:eb:bc:82:7b: 9a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4C:FC:CA:95:2D:42:00:8C:7A:18:7F:61:53:C0:5C:FB:A0:DE:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:48:00:c7:e3:57:40:63:d6:cc:97:88:fa:c2:e9:d8:9b:aa: 24:8b:e8:11:bd:89:b9:d6:69:f0:2a:99:59:e1:d0:d6:ad:93: 12:52:de:1d:44:95:4d:8d:d2:f2:69:b2:12:97:35:2a:93:b6: 41:18:49:29:b6:ec:1b:42:65:6c:2c:12:64:b4:1b:30:45:64: 75:c9:15:f9:4e:cc:67:1a:77:3b:eb:a6:ad:9c:c3:a0:aa:96: 97:34:ff:a5:17:0d:9d:cb:0d:01:93:9e:80:21:64:d8:74:b8: 11:20:01:ef:ac:b9:7e:a2:2c:4f:2e:21:53:b1:be:d6:82:58: ab:56:41:38:17:7c:c5:7b:3d:84:36:b8:6c:7b:1f:e4:b7:6a: 95:19:4e:85:e2:72:70:14:95:3d:7f:68:8f:9b:46:32:10:e6: 2d:73:0c:fc:25:41:da:b6:c7:bd:d6:7f:0c:f0:8a:a5:26:9c: 64:e8:27:62:9d:09:86:4e:fb:c3:04:2d:6d:2d:c9:76:39:e5: 46:5e:2a:ac:77:c8:01:00:9a:b6:48:cf:13:95:5f:9b:cd:94: 97:76:f0:15:b0:0a:f9:6c:b7:8b:50:01:7f:06:37:3a:cc:56: 6b:bf:7e:9c:d4:d5:17:af:f8:4f:0d:df:44:3d:c1:c0:8f:3a: d7:aa:c5:8f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ0MkShFN9r6zDj58rVJ7ghwS6QowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUxMjE4WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDFjMmNlMmVjOGY4OWMyYjlmZjlmNTMyNGMxYjg5OThh ZWUxOTJjYTg1ZTM0YmViMDVhOWI0MjhiNDlhYjhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbxNC845yqYcHTVoLsEze2whjs+NQXiRv8ZHwFVekGyDn4 b9DVQIxqtzCwNpTIfACb6vAKgKcopLG7fGUaFNK57uF2k36x6q84exLa8g4RYiRD nTVDaHG7QousFPot284XCkSaLg7OhlTbCuTR2f9g70vo21AfpYFLtpPxUW3Eciej Rxd5/Czjmzt9CcS3YUeo8U/ZlI+FKfD+ahetttQqTK2Ld3/PYwy3cIQdV5x+xVtD G6KPNiJ78rA5BlLeQrnsskInCE1G3GcZbi37+oTVExOzIjKDvIf9aA0nBwN/ew+d wYXDV+7NwG71QnsSWTSxLDkmwsgkHK5367yCe5pbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMUz8ypUtQgCMehh/YVPAXPug3p8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0N2VkNGM4LWFhNjctNDk2Yy05YjViLTBiZDkyYzBlMzAwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQwjANBgkqhkiG9w0BAQsFAAOCAQEAJ0gAx+NXQGPWzJeI+sLp2JuqJIvo Eb2JudZp8CqZWeHQ1q2TElLeHUSVTY3S8mmyEpc1KpO2QRhJKbbsG0JlbCwSZLQb MEVkdckV+U7MZxp3O+umrZzDoKqWlzT/pRcNncsNAZOegCFk2HS4ESAB76y5fqIs Ty4hU7G+1oJYq1ZBOBd8xXs9hDa4bHsf5LdqlRlOheJycBSVPX9oj5tGMhDmLXMM /CVB2rbHvdZ/DPCKpSacZOgnYp0Jhk77wwQtbS3JdjnlRl4qrHfIAQCatkjPE5Vf m82Ul3bwFbAK+Wy3i1ABfwY3OsxWa79+nNTVF6/4Tw3fRD3BwI8616rFjw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:50 2025 by rpki-client