$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66bb97c-25da-49d9-a04b-c61672e7b35d.roa File: c66bb97c-25da-49d9-a04b-c61672e7b35d.roa (raw, json) Hash identifier: hcNzUx+XVheLmoKiiGmPNt374fJFETLLGeFPjql7tqA= Subject key identifier: C0:C2:5B:ED:33:B8:0E:40:3D:A4:A1:0E:91:A7:3E:28:82:25:F1:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D4A7028E7E0CAA73D4D859C3B95F4B294A69809 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66bb97c-25da-49d9-a04b-c61672e7b35d.roa Signing time: Fri 18 Jul 2025 00:00:58 +0000 ROA not before: Fri 18 Jul 2025 00:00:58 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:70:28:e7:e0:ca:a7:3d:4d:85:9c:3b:95:f4:b2:94:a6:98:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:00:58 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=259a13c99a2a45335b84c9adfbaa133816771c8da1066128e39efc88434955c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:81:e3:1b:0a:3e:ac:a5:fb:66:8d:ec:63: 04:cb:db:a3:c8:a7:11:34:89:7f:2f:42:3f:8d:06: e6:5d:bb:1c:2f:ba:e0:d9:78:f1:87:a8:f2:ff:f1: 77:b4:fc:d5:ad:d2:d5:26:2f:92:98:37:af:82:31: 84:27:40:e0:ac:34:f7:02:bf:d1:ce:be:c7:c9:3a: 01:9e:80:13:27:34:0a:0f:6e:db:f5:db:7b:f3:5e: b0:58:d2:8e:89:44:33:60:44:06:f5:eb:8d:2e:6b: 7e:8e:40:16:65:39:23:db:b4:6e:4e:80:02:b4:e5: 06:d4:a1:08:e4:7e:06:aa:6d:86:09:e2:51:ca:9a: d9:4d:e8:06:af:22:d6:78:ab:98:00:94:26:e1:5c: 91:49:42:84:58:cf:1e:5a:8e:fb:3d:fa:8a:4e:49: ec:3f:e7:ff:b7:42:56:5b:b7:1a:c8:b9:68:e7:17: b1:c9:41:9c:23:a0:94:ba:ce:05:a2:a4:de:b9:c5: 6e:a5:a6:93:4a:30:7b:20:c5:e2:1c:01:e5:7f:d9: 83:39:05:22:fc:3f:2e:26:5b:f9:03:23:a2:e0:27: 7b:3c:73:3e:e0:f2:5f:99:e4:ac:51:3d:76:55:b2: 49:e1:29:93:36:b4:b2:72:b5:58:01:a7:b9:c9:76: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:5B:ED:33:B8:0E:40:3D:A4:A1:0E:91:A7:3E:28:82:25:F1:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66bb97c-25da-49d9-a04b-c61672e7b35d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:29:bd:8c:0f:66:95:18:84:b8:6a:3d:cb:7f:c8:fd:20:39: 19:89:43:37:84:44:63:e3:ac:ad:c5:11:bd:cc:7a:0c:46:21: 8c:00:b5:80:16:cb:ee:cf:52:18:a7:8a:df:29:56:7d:11:50: db:e1:d0:3a:98:b2:76:67:3c:02:4a:eb:49:2b:41:4d:80:db: 4d:dd:99:34:ca:3c:39:08:47:10:68:fc:67:c3:5b:97:3f:5f: 4f:34:41:6b:0e:2f:69:21:0e:69:48:aa:12:bd:ac:67:4c:21: cf:95:1c:68:9a:5c:18:c7:c8:43:8a:83:86:76:8a:46:94:c9: 3e:17:6e:bc:05:22:89:57:82:00:96:45:7f:85:df:98:f7:b1: 24:01:97:7e:db:1b:83:7b:42:3f:3c:86:e0:b2:cf:c4:f6:46: 1e:2d:17:5c:14:42:fa:04:bd:29:09:9b:ba:16:9e:9a:dc:f9: ad:a3:c3:b6:a5:7e:e5:f4:d5:95:d1:e8:c2:25:c7:66:dc:c8: 1d:c9:97:55:86:be:7a:09:fe:7b:b0:71:68:02:e9:67:65:f5: d6:02:5c:e9:6d:09:65:e4:3b:a1:52:e6:2c:c9:cd:df:ac:e6: 82:34:89:a5:60:32:c3:bb:ec:07:e0:bb:cc:4c:43:c6:bf:98: 07:7f:07:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXUpwKOfgyqc9TYWcO5X0spSmmAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAwMDU4WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTlhMTNjOTlhMmE0NTMzNWI4NGM5YWRmYmFhMTMzODE2 NzcxYzhkYTEwNjYxMjhlMzllZmM4ODQzNDk1NWMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVp4HjGwo+rKX7Zo3sYwTL26PIpxE0iX8vQj+NBuZduxwv uuDZePGHqPL/8Xe0/NWt0tUmL5KYN6+CMYQnQOCsNPcCv9HOvsfJOgGegBMnNAoP btv123vzXrBY0o6JRDNgRAb1640ua36OQBZlOSPbtG5OgAK05QbUoQjkfgaqbYYJ 4lHKmtlN6AavItZ4q5gAlCbhXJFJQoRYzx5ajvs9+opOSew/5/+3QlZbtxrIuWjn F7HJQZwjoJS6zgWipN65xW6lppNKMHsgxeIcAeV/2YM5BSL8Py4mW/kDI6LgJ3s8 cz7g8l+Z5KxRPXZVsknhKZM2tLJytVgBp7nJdtIbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwMJb7TO4DkA9pKEOkac+KIIl8bkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2NmJiOTdjLTI1ZGEtNDlkOS1hMDRiLWM2MTY3MmU3YjM1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQBjANBgkqhkiG9w0BAQsFAAOCAQEAcim9jA9mlRiEuGo9y3/I/SA5GYlD N4REY+OsrcURvcx6DEYhjAC1gBbL7s9SGKeK3ylWfRFQ2+HQOpiydmc8AkrrSStB TYDbTd2ZNMo8OQhHEGj8Z8Nblz9fTzRBaw4vaSEOaUiqEr2sZ0whz5UcaJpcGMfI Q4qDhnaKRpTJPhduvAUiiVeCAJZFf4XfmPexJAGXftsbg3tCPzyG4LLPxPZGHi0X XBRC+gS9KQmbuhaemtz5raPDtqV+5fTVldHowiXHZtzIHcmXVYa+egn+e7BxaALp Z2X11gJc6W0JZeQ7oVLmLMnN36zmgjSJpWAyw7vsB+C7zExDxr+YB38HQA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:07 2025 by rpki-client