$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63f18f7-d413-4afe-9c07-2b751a4ea3e7.roa File: c63f18f7-d413-4afe-9c07-2b751a4ea3e7.roa (raw, json) Hash identifier: OwH/S3UwlE3vhZgRd1kBkz+xMTwZQsvQCvaRHyIdTzs= Subject key identifier: 6C:FB:C9:55:7B:D9:B1:24:F3:91:8B:BA:0D:7A:94:C9:CC:F2:EC:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DB60D60416951CC1AAF99442F4C93AC371AB2D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63f18f7-d413-4afe-9c07-2b751a4ea3e7.roa Signing time: Wed 02 Jul 2025 00:21:07 +0000 ROA not before: Wed 02 Jul 2025 00:21:07 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 194.162.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b6:0d:60:41:69:51:cc:1a:af:99:44:2f:4c:93:ac:37:1a:b2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:21:07 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=db72587a098958ae4591b2d969dd6456e00935503085e4f8aa0ef53cb370f35d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:3a:3e:62:ba:70:c9:64:48:43:68:f3:ab: 84:86:4c:cb:76:80:1a:f8:9a:0b:a0:72:73:29:21: 8d:9c:f0:62:f6:25:ed:3c:ed:19:a7:af:ca:62:00: a5:d9:c7:08:2b:23:2f:ba:9b:1f:a8:49:41:b4:94: c4:2c:42:55:74:a7:40:db:38:39:b0:fa:3e:08:0d: 91:79:59:e6:5c:95:a8:da:bf:e8:d4:34:91:33:08: 98:eb:86:c8:4a:cc:aa:c6:75:ca:0e:d1:b1:44:78: 31:50:57:e1:b0:27:56:58:e3:49:e8:d2:54:bc:44: 07:83:23:6c:d4:50:42:b0:a1:c8:02:16:79:59:be: 41:77:d2:99:e6:32:6a:b7:09:18:27:2b:e5:c1:63: 5a:89:31:7b:8a:82:6e:a1:df:cd:1a:fb:81:fc:68: 76:57:74:6a:00:f7:01:73:e9:1e:20:a1:f5:20:2e: 82:bf:e9:1a:cf:4f:37:ce:3f:81:5e:00:04:be:0c: 38:5d:da:6f:8f:43:20:bf:68:62:fb:95:bc:a6:83: a9:ef:3f:20:19:ca:8b:94:4d:b2:08:70:ce:cd:ae: ea:17:c6:e0:de:e9:a6:b5:93:d3:48:e2:ad:98:9b: 93:5e:48:53:e3:0a:8f:95:54:6f:23:0a:35:94:35: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FB:C9:55:7B:D9:B1:24:F3:91:8B:BA:0D:7A:94:C9:CC:F2:EC:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c63f18f7-d413-4afe-9c07-2b751a4ea3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:66:4a:21:f6:9b:4a:b1:32:e9:5d:72:93:8b:56:f3:93:f3: a6:96:d4:8d:09:ec:85:0f:8a:b8:21:28:70:67:fe:66:1a:92: 10:85:12:49:d2:f2:e8:bd:a3:7b:d0:19:ec:3e:5a:b0:5c:d7: 92:b7:75:b9:49:da:f3:0a:74:28:b7:9d:54:b4:32:81:19:61: 50:1a:fe:a4:ea:8e:7d:37:52:a3:13:92:c3:93:03:64:c5:de: 0c:3d:05:6e:a1:8d:2a:91:2e:8d:f4:24:56:56:0f:63:73:b1: d1:4d:ef:5d:35:67:3a:c4:e7:80:e4:b3:be:d8:56:8a:f0:71: 3c:42:7c:39:03:f4:cf:bf:93:62:bb:2d:8d:a3:2a:8a:3e:a7: 11:15:bd:f3:0f:21:9a:5a:5e:99:67:97:42:ac:ca:59:fb:ad: ec:e0:f5:67:3d:0e:00:22:a2:3b:62:66:52:4f:86:65:5e:09: 03:a9:09:d1:6a:16:1d:85:a6:12:de:8e:3d:77:af:c6:a5:0d: af:e8:94:ea:8c:e2:74:45:5e:19:9e:d9:f9:5f:92:24:60:2d: fa:5d:80:87:60:3f:42:01:0f:11:d8:6f:a2:99:31:51:af:c6: 56:a7:fa:95:80:0f:14:cf:f3:21:d4:05:4c:10:d9:35:e7:a6: 76:21:41:e5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfbYNYEFpUcwar5lEL0yTrDcastMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAyMTA3WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjcyNTg3YTA5ODk1OGFlNDU5MWIyZDk2OWRkNjQ1NmUw MDkzNTUwMzA4NWU0ZjhhYTBlZjUzY2IzNzBmMzVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRpTo+YrpwyWRIQ2jzq4SGTMt2gBr4mgugcnMpIY2c8GL2 Je087Rmnr8piAKXZxwgrIy+6mx+oSUG0lMQsQlV0p0DbODmw+j4IDZF5WeZclaja v+jUNJEzCJjrhshKzKrGdcoO0bFEeDFQV+GwJ1ZY40no0lS8RAeDI2zUUEKwocgC FnlZvkF30pnmMmq3CRgnK+XBY1qJMXuKgm6h380a+4H8aHZXdGoA9wFz6R4gofUg LoK/6RrPTzfOP4FeAAS+DDhd2m+PQyC/aGL7lbymg6nvPyAZyouUTbIIcM7NruoX xuDe6aa1k9NI4q2Ym5NeSFPjCo+VVG8jCjWUNaC/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbPvJVXvZsSTzkYu6DXqUyczy7H8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2M2YxOGY3LWQ0MTMtNGFmZS05YzA3LTJiNzUxYTRlYTNlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDCojANBgkqhkiG9w0BAQsFAAOCAQEAM2ZKIfabSrEy6V1yk4tW85PzppbU jQnshQ+KuCEocGf+ZhqSEIUSSdLy6L2je9AZ7D5asFzXkrd1uUna8wp0KLedVLQy gRlhUBr+pOqOfTdSoxOSw5MDZMXeDD0FbqGNKpEujfQkVlYPY3Ox0U3vXTVnOsTn gOSzvthWivBxPEJ8OQP0z7+TYrstjaMqij6nERW98w8hmlpemWeXQqzKWfut7OD1 Zz0OACKiO2JmUk+GZV4JA6kJ0WoWHYWmEt6OPXevxqUNr+iU6ozidEVeGZ7Z+V+S JGAt+l2Ah2A/QgEPEdhvopkxUa/GVqf6lYAPFM/zIdQFTBDZNeemdiFB5Q== -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:03 2025 by rpki-client