$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa File: df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa (raw, json) Hash identifier: QjgFrcsG9J8iYSXWazl1jz3/QaISm3XJm6kTu59ZysY= Subject key identifier: 98:A4:76:3E:B9:9D:9E:35:5F:62:BA:59:7B:15:CC:9B:CB:5D:F6:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15069F12A181E360434C4AD9A5080CD019F0D7F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa Signing time: Fri 11 Jul 2025 00:30:16 +0000 ROA not before: Fri 11 Jul 2025 00:30:16 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:06:9f:12:a1:81:e3:60:43:4c:4a:d9:a5:08:0c:d0:19:f0:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:30:16 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=6aebf5cf8f4bdf9f2c781289cd3ccda0b7c4bec0562f5b9170a9a949314c6259, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:01:56:16:b3:96:99:e2:a7:8f:47:c3:88: fa:46:66:44:34:5d:20:0a:d2:13:4a:1e:3c:10:b7: ee:54:fc:1e:5c:91:82:13:79:3d:d4:4a:90:ab:d6: 6e:2a:a8:49:61:7e:66:b5:d0:ef:01:7f:6d:90:b4: 60:5b:58:d4:db:82:c3:1e:e6:aa:ad:04:27:66:93: 1c:86:1c:6d:8d:21:53:bc:b7:4a:59:84:4b:89:af: 90:0e:97:f2:74:54:8e:66:0d:7d:f3:4b:05:cc:f1: cd:a5:c5:25:cd:bd:99:2b:b5:11:da:37:04:77:2a: 80:ae:df:4e:75:64:2e:07:0a:43:11:ad:f9:74:6b: 0c:83:65:e0:16:7d:bd:8e:27:c4:d3:a3:7f:64:b3: e7:af:da:2e:d5:fc:ad:e7:16:ec:21:3a:47:4b:eb: 71:45:a2:34:d1:61:28:32:3d:e4:14:d6:92:30:17: 86:d9:8e:46:8f:f6:4f:da:97:48:a1:88:d6:29:d7: 9f:48:df:ab:86:c1:dd:c1:17:9e:f2:c1:2c:50:2d: 20:78:5f:30:1f:a0:83:e1:73:f1:ae:ca:46:98:78: b7:ca:8c:53:d0:bc:da:64:5a:91:3f:cb:6f:e5:c2: 32:aa:e3:7c:74:d7:26:b6:8b:9a:fe:0d:4e:cd:c1: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A4:76:3E:B9:9D:9E:35:5F:62:BA:59:7B:15:CC:9B:CB:5D:F6:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df2bbec5-2a0a-4fce-b92a-c11585f2f6d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption a2:b8:4b:52:38:95:9d:35:eb:0f:ed:d5:76:8d:33:da:51:60: 59:6e:00:bb:f4:b1:20:b7:55:6b:65:a7:47:f9:d0:9a:95:dc: 59:f3:e2:37:2e:3d:55:86:a5:fc:0d:62:a1:7b:59:8a:b5:88: 71:79:4f:83:a6:be:0a:97:ad:f2:86:c1:ad:a5:3a:8e:68:8b: 25:58:c0:29:72:72:7a:b6:f7:67:70:31:0d:5c:bb:b6:7d:26: b8:28:53:23:c7:b0:53:ff:7f:89:ee:0a:8c:60:61:40:00:62: 31:10:8c:d0:4c:1b:9c:6c:c2:e0:84:e5:14:b6:67:b5:b4:07: c3:f9:0a:25:e1:ac:06:3e:27:bb:fa:9c:24:9f:73:63:f2:d1: 31:3c:27:90:f8:7c:69:1d:d0:bf:4c:67:4c:88:14:d2:f2:c6: 6e:80:ba:59:31:50:6b:fa:d5:72:b0:a2:60:3e:f2:bc:92:9f: fb:19:88:f4:1b:51:5c:ec:f0:03:14:3c:70:35:21:ab:70:9f: b3:92:9d:87:70:ba:55:8f:fc:58:d1:2b:71:35:c5:dc:b9:77: ca:c9:6c:1c:fa:e4:d2:7b:cf:da:8c:a7:23:f9:be:5b:04:2d: ac:02:c5:05:6e:a5:50:7e:5d:38:8f:b3:19:1b:92:d2:1f:8b: 44:ec:83:1a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFQafEqGB42BDTErZpQgM0Bnw1/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAzMDE2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWViZjVjZjhmNGJkZjlmMmM3ODEyODljZDNjY2RhMGI3 YzRiZWMwNTYyZjViOTE3MGE5YTk0OTMxNGM2MjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0QAFWFrOWmeKnj0fDiPpGZkQ0XSAK0hNKHjwQt+5U/B5c kYITeT3USpCr1m4qqElhfma10O8Bf22QtGBbWNTbgsMe5qqtBCdmkxyGHG2NIVO8 t0pZhEuJr5AOl/J0VI5mDX3zSwXM8c2lxSXNvZkrtRHaNwR3KoCu3051ZC4HCkMR rfl0awyDZeAWfb2OJ8TTo39ks+ev2i7V/K3nFuwhOkdL63FFojTRYSgyPeQU1pIw F4bZjkaP9k/al0ihiNYp159I36uGwd3BF57ywSxQLSB4XzAfoIPhc/GuykaYeLfK jFPQvNpkWpE/y2/lwjKq43x01ya2i5r+DU7NwZ4LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmKR2PrmdnjVfYrpZexXMm8td9tAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmMmJiZWM1LTJhMGEtNGZjZS1iOTJhLWMxMTU4NWYyZjZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4/DANBgkqhkiG9w0BAQsFAAOCAQEAorhLUjiVnTXrD+3Vdo0z2lFgWW4A u/SxILdVa2WnR/nQmpXcWfPiNy49VYal/A1ioXtZirWIcXlPg6a+Cpet8obBraU6 jmiLJVjAKXJyerb3Z3AxDVy7tn0muChTI8ewU/9/ie4KjGBhQABiMRCM0EwbnGzC 4ITlFLZntbQHw/kKJeGsBj4nu/qcJJ9zY/LRMTwnkPh8aR3Qv0xnTIgU0vLGboC6 WTFQa/rVcrCiYD7yvJKf+xmI9BtRXOzwAxQ8cDUhq3Cfs5Kdh3C6VY/8WNErcTXF 3Ll3yslsHPrk0nvP2oynI/m+WwQtrALFBW6lUH5dOI+zGRuS0h+LROyDGg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:49 2025 by rpki-client