$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa File: d6153df2-9363-4807-8c81-35df18551a61.roa (raw, json) Hash identifier: 71HNWm3CmPtGo2ZhV8D13i4DUFfE8oEWUXT36xMyW6o= Subject key identifier: 57:AD:47:D9:BE:CD:A0:4B:5F:9E:29:5C:91:2C:62:07:A1:B8:01:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68E2A0624387CD9128CBCD85EBB7F1DC9448795C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa Signing time: Wed 09 Jul 2025 00:51:53 +0000 ROA not before: Wed 09 Jul 2025 00:51:53 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.112.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e2:a0:62:43:87:cd:91:28:cb:cd:85:eb:b7:f1:dc:94:48:79:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:51:53 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=597ac721d2ac9af0e9fddcaccaa719dd6550e5b30fe529fc0dde9bc926cccc33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:33:49:48:a4:7c:38:65:14:27:4d:0d:44: e5:07:99:6c:33:5a:23:2d:bc:b3:9b:db:e9:49:f6: 2a:cb:bf:4d:32:b9:52:7f:20:ec:81:23:53:61:22: 31:e9:36:d8:4e:be:87:b2:2c:79:4d:68:cd:3a:cc: 69:e2:fd:7d:a4:64:e7:01:ac:1b:ef:2c:27:46:82: b5:92:f5:be:d1:37:3a:d9:53:43:61:46:0d:66:86: 1e:05:d3:bc:24:82:9e:12:21:94:3b:ae:ef:c8:c2: 72:df:5c:e8:32:19:d6:5d:c2:39:54:a3:bb:a0:38: 57:98:a5:a5:b2:b6:66:90:f3:25:3a:5e:5f:48:40: 74:b7:3e:f7:e0:43:2b:03:70:ff:15:7e:d3:db:6c: 0b:6a:d9:d5:f5:d0:15:93:a2:c7:fd:77:39:ec:85: 41:ca:73:d8:2f:83:0e:7c:d6:c6:48:ac:56:17:ef: 28:1b:26:66:ea:cd:b1:af:70:0d:6d:cd:02:2c:11: d9:24:b5:85:17:4b:b0:f9:57:b4:d1:6c:18:00:5f: 99:7e:e2:4c:cd:fc:60:e4:7c:aa:a9:60:1f:f9:aa: 0c:09:b7:9c:28:8a:94:f2:a8:66:51:e6:9f:55:1c: 58:67:c1:f8:16:e3:cb:b3:94:57:d9:70:b4:d1:90: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:47:D9:BE:CD:A0:4B:5F:9E:29:5C:91:2C:62:07:A1:B8:01:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6153df2-9363-4807-8c81-35df18551a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.112.0.0/18 Signature Algorithm: sha256WithRSAEncryption 8d:89:5d:4f:8e:b0:19:7a:26:7b:7c:b7:23:4d:7a:91:9a:4a: b0:c3:60:6b:72:24:26:cb:13:e4:ef:0e:bb:0d:07:8a:c1:ec: ce:61:87:4e:41:3a:9f:52:3c:72:43:d1:49:d0:18:c5:b9:9c: bc:ee:5d:26:47:cb:b7:84:57:d1:6d:b0:e6:bb:41:cc:5e:34: 2b:00:9a:64:86:60:86:7f:12:9c:43:be:d0:c7:73:78:aa:1c: b4:d2:f7:cc:cb:0c:27:ff:f4:70:98:8a:b6:38:f6:a1:fb:bf: 70:f8:c6:31:d8:e0:68:13:b0:65:27:71:5d:ff:2b:ba:f1:84: 00:67:86:e8:fd:eb:36:b8:cd:b4:4a:4b:b1:65:be:25:94:e1: 1f:51:f3:50:c2:b2:ec:2d:96:cc:08:11:32:2a:5c:ce:39:f9: e9:90:c9:9c:d2:dc:92:a6:31:76:d1:10:66:18:96:8a:39:7d: c9:90:62:6f:e6:1d:37:fe:d6:01:0b:f2:7e:7e:9a:59:7b:ce: 14:1e:b8:ae:e0:16:83:c7:df:f3:46:5c:45:92:7c:06:a3:9f: fd:6b:0f:c0:62:b1:da:c6:29:3c:9a:c1:e1:e7:bc:47:bb:58: 03:85:72:c4:33:da:2e:60:84:b4:82:ee:d8:5d:ad:8c:63:62: 03:95:ea:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaOKgYkOHzZEoy82F67fx3JRIeVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MTUzWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTdhYzcyMWQyYWM5YWYwZTlmZGRjYWNjYWE3MTlkZDY1 NTBlNWIzMGZlNTI5ZmMwZGRlOWJjOTI2Y2NjYzMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWGDNJSKR8OGUUJ00NROUHmWwzWiMtvLOb2+lJ9irLv00y uVJ/IOyBI1NhIjHpNthOvoeyLHlNaM06zGni/X2kZOcBrBvvLCdGgrWS9b7RNzrZ U0NhRg1mhh4F07wkgp4SIZQ7ru/IwnLfXOgyGdZdwjlUo7ugOFeYpaWytmaQ8yU6 Xl9IQHS3PvfgQysDcP8VftPbbAtq2dX10BWTosf9dznshUHKc9gvgw581sZIrFYX 7ygbJmbqzbGvcA1tzQIsEdkktYUXS7D5V7TRbBgAX5l+4kzN/GDkfKqpYB/5qgwJ t5woipTyqGZR5p9VHFhnwfgW48uzlFfZcLTRkBF3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV61H2b7NoEtfnilckSxiB6G4AdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2MTUzZGYyLTkzNjMtNDgwNy04YzgxLTM1ZGYxODU1MWE2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2cAAwDQYJKoZIhvcNAQELBQADggEBAI2JXU+OsBl6Jnt8tyNNepGaSrDD YGtyJCbLE+TvDrsNB4rB7M5hh05BOp9SPHJD0UnQGMW5nLzuXSZHy7eEV9FtsOa7 QcxeNCsAmmSGYIZ/EpxDvtDHc3iqHLTS98zLDCf/9HCYirY49qH7v3D4xjHY4GgT sGUncV3/K7rxhABnhuj96za4zbRKS7FlviWU4R9R81DCsuwtlswIETIqXM45+emQ yZzS3JKmMXbREGYYloo5fcmQYm/mHTf+1gEL8n5+mll7zhQeuK7gFoPH3/NGXEWS fAajn/1rD8BisdrGKTyaweHnvEe7WAOFcsQz2i5ghLSC7thdrYxjYgOV6ko= -----END CERTIFICATE-----Generated at Thu Jul 24 12:10:39 2025 by rpki-client