$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa File: f9ad2b65-bee0-4429-a46c-6a261fba811b.roa (raw, json) Hash identifier: KyukOYWVrVL4B7qgXMeh0Lg00nF5cGT1BQce6jANi9o= Subject key identifier: C6:63:89:E2:42:D6:45:CE:97:23:7A:1C:39:6C:2E:22:AE:56:61:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64CEFF076632EDF8E8F2113CBC20DDAB10018DF6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa Signing time: Mon 30 Jun 2025 15:00:34 +0000 ROA not before: Mon 30 Jun 2025 15:00:34 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.173.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ce:ff:07:66:32:ed:f8:e8:f2:11:3c:bc:20:dd:ab:10:01:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:00:34 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=33ee85c96f10516b24957c483775e81b2f2f8c67da62778f7534b5a6dc5a68e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:09:ed:d6:3c:f7:eb:5c:78:11:32:58:b2: d5:4d:c4:dc:4e:df:c9:9e:7b:18:1c:1d:d8:70:d6: 9e:46:4a:0e:28:38:e4:c2:b0:b7:b1:77:e5:59:41: ef:43:af:b5:66:09:31:82:d9:de:57:ce:ac:da:68: 53:50:3d:bb:e9:a5:4e:51:25:c5:b0:e8:63:8e:5e: 7f:9c:a1:c7:82:00:1c:5b:1c:a8:c1:5a:9b:6b:9e: e6:5a:bc:b0:cb:a9:bf:03:ec:19:88:2a:61:cc:87: 99:d0:62:d7:19:43:6c:89:13:39:9f:c3:77:a2:6a: a0:97:c9:3f:ab:0a:79:52:16:d1:48:4d:6e:9f:43: f7:36:7c:50:6f:ff:f9:74:ce:f9:82:f5:59:e1:66: 19:e6:22:e8:0f:82:d5:a0:0c:ff:06:34:9f:35:c9: 6e:27:61:22:af:3b:31:21:8b:8a:52:5c:a0:d3:b9: fe:0f:96:4c:9e:65:ce:a9:9f:c6:6b:e8:af:dc:17: c8:d4:f7:70:f0:97:d3:e6:50:4f:91:67:65:d1:a0: c6:a8:28:dd:cb:8d:82:51:fb:95:72:8b:cf:8a:10: 7a:30:00:8a:0d:fc:e5:dc:45:68:b7:7f:f7:d8:b8: a7:8e:7d:4b:81:b1:23:85:4c:c5:bc:1d:ca:17:62: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:89:E2:42:D6:45:CE:97:23:7A:1C:39:6C:2E:22:AE:56:61:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.173.0.0/18 Signature Algorithm: sha256WithRSAEncryption 4d:6c:12:d1:16:fe:79:e0:7e:43:e1:85:d8:5c:72:bc:24:8e: ab:0f:e3:81:9d:b1:41:7c:16:ae:c3:99:df:76:18:37:ed:d4: 7a:86:52:bc:60:41:57:0d:10:8e:35:3b:9e:d1:88:ed:90:d8: 88:0e:8c:8e:13:c2:80:6d:9e:bc:17:b7:c7:e3:c2:bd:de:4c: 0b:28:2f:4d:94:fb:a2:46:d7:bb:a8:6a:b8:3b:7e:3a:76:22: 87:29:83:40:86:d3:e1:57:f1:e1:82:7b:9e:2a:10:f1:59:66: 88:1e:e8:9b:97:a7:df:ff:2d:91:9b:2a:c2:a9:06:51:2c:86: 04:ec:ce:fc:05:7c:26:c7:29:ba:9e:88:62:90:dd:10:4e:8d: 2e:88:6a:23:3b:d2:b7:a4:93:cd:15:a9:de:eb:8d:13:f4:85: 42:1e:1f:9a:91:0c:ae:7c:75:6b:ee:30:25:aa:e7:78:fc:b3: 97:ab:f8:91:97:c0:27:32:24:6e:47:bf:d3:29:69:eb:0a:8f: 9f:78:ba:32:2b:b4:81:4c:16:ef:3b:53:12:db:4a:5e:28:71: b0:ad:ee:df:52:16:f4:87:73:45:27:ad:7a:03:c9:88:6b:12: b3:e8:b2:43:8e:b2:47:74:68:77:26:59:45:07:71:fa:e3:07: 1d:13:b8:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZM7/B2Yy7fjo8hE8vCDdqxABjfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUwMDM0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2VlODVjOTZmMTA1MTZiMjQ5NTdjNDgzNzc1ZTgxYjJm MmY4YzY3ZGE2Mjc3OGY3NTM0YjVhNmRjNWE2OGU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrsgnt1jz361x4ETJYstVNxNxO38meexgcHdhw1p5GSg4o OOTCsLexd+VZQe9Dr7VmCTGC2d5XzqzaaFNQPbvppU5RJcWw6GOOXn+coceCABxb HKjBWptrnuZavLDLqb8D7BmIKmHMh5nQYtcZQ2yJEzmfw3eiaqCXyT+rCnlSFtFI TW6fQ/c2fFBv//l0zvmC9VnhZhnmIugPgtWgDP8GNJ81yW4nYSKvOzEhi4pSXKDT uf4PlkyeZc6pn8Zr6K/cF8jU93Dwl9PmUE+RZ2XRoMaoKN3LjYJR+5Vyi8+KEHow AIoN/OXcRWi3f/fYuKeOfUuBsSOFTMW8HcoXYpLtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxmOJ4kLWRc6XI3ocOWwuIq5WYW8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5YWQyYjY1LWJlZTAtNDQyOS1hNDZjLTZhMjYxZmJhODExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYrQAwDQYJKoZIhvcNAQELBQADggEBAE1sEtEW/nngfkPhhdhccrwkjqsP 44GdsUF8Fq7Dmd92GDft1HqGUrxgQVcNEI41O57RiO2Q2IgOjI4TwoBtnrwXt8fj wr3eTAsoL02U+6JG17uoarg7fjp2Iocpg0CG0+FX8eGCe54qEPFZZoge6JuXp9// LZGbKsKpBlEshgTszvwFfCbHKbqeiGKQ3RBOjS6IaiM70rekk80Vqd7rjRP0hUIe H5qRDK58dWvuMCWq53j8s5er+JGXwCcyJG5Hv9MpaesKj594ujIrtIFMFu87UxLb Sl4ocbCt7t9SFvSHc0UnrXoDyYhrErPoskOOskd0aHcmWUUHcfrjBx0TuAw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:38 2025 by rpki-client