$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d171a8a1-9f08-410d-8286-615fcfbb13fc.roa File: d171a8a1-9f08-410d-8286-615fcfbb13fc.roa (raw, json) Hash identifier: lF2w357Cir/qGpmBM4Jpb4d3xmDOQzXhmFJmEkHLnE4= Subject key identifier: 6A:C4:B9:FF:A1:4E:01:23:D0:AA:DE:33:97:1A:7E:43:57:9C:41:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 672AA016E74DAFBA377CFA971A07EBCEB52D873B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d171a8a1-9f08-410d-8286-615fcfbb13fc.roa Signing time: Sat 28 Jun 2025 00:11:47 +0000 ROA not before: Sat 28 Jun 2025 00:11:47 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.15.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2a:a0:16:e7:4d:af:ba:37:7c:fa:97:1a:07:eb:ce:b5:2d:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:11:47 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=eff6266d6dfc40c567dfa89fc3994e39f3667488a7b2d473c158a9051256d0b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:f4:10:17:9f:45:76:3f:e7:49:c7:60:47: 45:2f:bf:a4:3c:3a:8a:da:11:9c:80:e9:8b:62:b6: 9b:90:0c:3d:fe:9e:18:7d:4f:23:74:51:b1:a4:79: 13:25:cb:4b:63:50:e9:a7:23:d3:ea:f3:42:55:af: 39:c4:05:3d:38:c5:67:65:cc:72:95:95:5e:31:0c: 9d:51:de:ca:f0:49:79:3f:15:3f:9d:76:bb:62:e0: 52:13:31:fa:98:8e:26:e4:4e:36:4e:34:8b:bc:b9: 03:41:8f:70:cd:7f:bb:a7:6b:0d:45:74:eb:6b:75: c6:b2:c5:d6:cd:cf:7b:4a:6c:81:70:ba:8b:ec:0f: 0a:2b:d9:30:cd:50:ab:dd:48:ba:5c:23:e8:57:de: 8f:bf:75:25:3c:34:9c:0c:88:3f:77:b4:e9:63:4a: e0:11:ae:1f:d8:f8:1a:b4:39:5c:69:04:8d:cf:cc: 29:c7:66:63:ab:f4:2c:6d:6f:3d:bf:8b:1d:f2:11: ca:db:45:4e:d3:58:71:c8:91:c8:c0:cc:6b:9a:5f: 2c:b6:2c:0f:e4:fa:c6:ca:dd:c9:68:81:9e:57:4d: a3:ce:e6:14:c3:e9:70:cb:51:e5:65:fa:49:cc:7f: 0b:2f:43:7e:85:2d:36:e0:8e:7e:71:8f:82:d3:21: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C4:B9:FF:A1:4E:01:23:D0:AA:DE:33:97:1A:7E:43:57:9C:41:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d171a8a1-9f08-410d-8286-615fcfbb13fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.176.0/20 Signature Algorithm: sha256WithRSAEncryption 10:a3:13:b8:f7:1b:de:b9:50:ed:11:a6:42:cf:54:68:24:94: 8e:51:b7:d9:35:da:26:9b:60:f3:3a:e6:b8:9b:a6:d0:e9:bb: b7:a6:0f:f8:3b:6a:8a:8c:66:80:86:4c:4b:f5:54:36:01:8b: 2d:69:61:f6:f7:70:ed:60:13:8b:33:5c:6c:dd:de:7d:fa:49: 22:92:91:ae:7d:41:07:6b:35:19:c9:8e:bc:29:13:c2:23:ea: d6:a3:a2:22:e1:e1:c1:ae:4d:0f:da:29:f7:55:43:64:8c:10: 8a:75:a6:40:ad:d5:d8:3d:fb:5e:69:06:a4:1c:a9:28:1c:c1: 09:2e:d0:33:8c:5c:52:82:ed:c6:70:4c:1b:e2:a6:13:16:d1: 82:63:6c:1a:3c:d3:5d:e8:03:4f:99:f1:9c:f4:33:64:30:23: 42:86:a4:af:9d:8f:8d:83:3d:06:c7:c4:4c:35:c9:d3:8e:c9: e8:df:0d:74:36:2b:30:77:50:56:40:ad:72:fc:b1:0c:d9:b3: 8c:6e:6e:0d:cb:9c:f2:80:fe:87:fb:80:d3:53:8f:ee:56:76: 47:a9:5c:ee:55:78:38:00:03:61:04:9d:52:9f:ea:79:be:0e: ea:8e:a5:f8:97:13:a6:f3:0a:1f:1f:a4:c6:33:e3:04:cb:a1: e0:f1:45:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZyqgFudNr7o3fPqXGgfrzrUthzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAxMTQ3WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmY2MjY2ZDZkZmM0MGM1NjdkZmE4OWZjMzk5NGUzOWYz NjY3NDg4YTdiMmQ0NzNjMTU4YTkwNTEyNTZkMGI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfW/QQF59Fdj/nScdgR0Uvv6Q8OoraEZyA6YtitpuQDD3+ nhh9TyN0UbGkeRMly0tjUOmnI9Pq80JVrznEBT04xWdlzHKVlV4xDJ1R3srwSXk/ FT+ddrti4FITMfqYjibkTjZONIu8uQNBj3DNf7unaw1FdOtrdcayxdbNz3tKbIFw uovsDwor2TDNUKvdSLpcI+hX3o+/dSU8NJwMiD93tOljSuARrh/Y+Bq0OVxpBI3P zCnHZmOr9Cxtbz2/ix3yEcrbRU7TWHHIkcjAzGuaXyy2LA/k+sbK3clogZ5XTaPO 5hTD6XDLUeVl+knMfwsvQ36FLTbgjn5xj4LTITAjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUasS5/6FOASPQqt4zlxp+Q1ecQfcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNzFhOGExLTlmMDgtNDEwZC04Mjg2LTYxNWZjZmJiMTNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQQD7AwDQYJKoZIhvcNAQELBQADggEBABCjE7j3G965UO0RpkLPVGgklI5R t9k12iabYPM65ribptDpu7emD/g7aoqMZoCGTEv1VDYBiy1pYfb3cO1gE4szXGzd 3n36SSKSka59QQdrNRnJjrwpE8Ij6tajoiLh4cGuTQ/aKfdVQ2SMEIp1pkCt1dg9 +15pBqQcqSgcwQku0DOMXFKC7cZwTBviphMW0YJjbBo8013oA0+Z8Zz0M2QwI0KG pK+dj42DPQbHxEw1ydOOyejfDXQ2KzB3UFZArXL8sQzZs4xubg3LnPKA/of7gNNT j+5WdkepXO5VeDgAA2EEnVKf6nm+DuqOpfiXE6bzCh8fpMYz4wTLoeDxRUw= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:52 2025 by rpki-client