$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f7eeb32-d339-4a93-a800-a390010eb44a.roa File: 1f7eeb32-d339-4a93-a800-a390010eb44a.roa (raw, json) Hash identifier: 0hWhL83gzs87KfLFJ44CE5p+fkQWjLB556NkzEKYkcA= Subject key identifier: CD:50:9E:C4:DE:A3:15:F1:A9:4B:19:D1:C1:5E:18:C7:9C:A7:9B:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76EEE334B3377E6D903033500BB7C6E2382289DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f7eeb32-d339-4a93-a800-a390010eb44a.roa Signing time: Wed 04 Jun 2025 00:00:25 +0000 ROA not before: Wed 04 Jun 2025 00:00:25 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ee:e3:34:b3:37:7e:6d:90:30:33:50:0b:b7:c6:e2:38:22:89:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:00:25 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=3e12ea76c4a1ce2cacfc1f69822579fb674193bbc20fa03ad11287de1a96d696, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:99:4e:7f:d6:13:8f:6a:1a:c2:dc:70:e6: 77:14:28:5c:cb:7a:fd:e0:4f:d8:23:39:ff:32:4b: 37:f5:89:5d:43:e2:d4:6f:e2:ef:d4:69:8a:e5:f4: 69:45:2f:2b:20:4c:38:29:ae:7a:c8:e8:cc:34:b1: dc:bc:4f:d6:40:e6:b2:e6:d6:1f:d8:4d:05:38:29: f3:0a:66:dd:02:15:46:14:4c:46:33:70:98:69:b0: 4d:32:57:f0:1b:bf:ea:30:8b:a1:30:5b:16:ef:d0: 0a:f3:e7:17:57:ff:cb:17:d6:3e:47:b7:03:60:ad: 2f:bf:64:36:05:7a:5c:e6:ec:d7:20:44:cf:68:3c: ec:26:d7:f4:04:f8:fb:e0:5c:c6:7f:8c:bf:22:ef: 29:20:f1:9a:d6:03:f8:f4:df:b1:a4:5c:f2:11:aa: 22:fd:69:4d:3f:51:ac:de:b7:19:38:cd:9e:39:6b: eb:71:35:56:de:ff:6f:5d:aa:3b:cc:d1:84:6a:db: 6e:6e:94:00:14:81:27:c2:aa:dd:37:33:63:1d:29: c7:c6:16:da:0f:7f:f9:88:39:59:8a:66:d7:90:f8: b8:ea:34:2b:11:7d:f5:09:20:a7:ab:99:75:90:ac: fb:99:a3:59:a6:b5:66:da:37:17:38:c6:d5:27:28: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:9E:C4:DE:A3:15:F1:A9:4B:19:D1:C1:5E:18:C7:9C:A7:9B:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f7eeb32-d339-4a93-a800-a390010eb44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:73:9a:65:80:cb:2f:d5:82:42:8f:85:a8:f1:17:06:b7:db: ef:59:d7:68:fc:ba:c9:65:ec:77:51:8f:39:2c:97:15:d0:9c: 0e:92:1b:27:49:4b:dc:84:cc:7c:c0:d1:c6:09:3c:4f:4b:24: a8:0a:98:73:9d:ee:31:e3:2c:64:c4:77:24:a6:6c:de:2c:14: 9e:ac:7b:bf:74:73:a0:0f:4f:81:19:36:80:aa:35:bc:c2:36: f0:7c:ad:65:dc:12:eb:a7:6a:87:9e:44:f6:55:6b:72:e6:56: 12:d1:ab:61:a7:25:6e:ed:eb:31:43:62:6b:ec:77:be:85:14: 1f:5d:bc:e1:c8:45:76:d3:95:c1:27:7e:b7:82:04:54:d2:09: cd:f9:98:eb:6f:53:5d:11:37:57:f1:de:91:fd:d8:a3:0b:f7: a7:d5:4e:bf:05:c7:3a:a7:9f:cc:d4:a8:b8:fb:98:68:09:37: d0:85:ef:59:be:b1:49:f6:98:64:72:70:f8:05:30:6c:2d:04: c1:c9:fa:bc:e6:76:4c:b0:a4:80:87:70:96:e6:8a:c1:21:f7: 3e:07:7a:2a:13:68:ff:47:4d:94:e2:91:91:89:4a:eb:11:45: 7c:3c:6a:0e:2b:38:f6:58:35:22:5c:5f:25:08:2e:03:89:ec: 1b:35:46:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdu7jNLM3fm2QMDNQC7fG4jgiid0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAwMDI1WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTEyZWE3NmM0YTFjZTJjYWNmYzFmNjk4MjI1NzlmYjY3 NDE5M2JiYzIwZmEwM2FkMTEyODdkZTFhOTZkNjk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCerZlOf9YTj2oawtxw5ncUKFzLev3gT9gjOf8ySzf1iV1D 4tRv4u/UaYrl9GlFLysgTDgprnrI6Mw0sdy8T9ZA5rLm1h/YTQU4KfMKZt0CFUYU TEYzcJhpsE0yV/Abv+owi6EwWxbv0Arz5xdX/8sX1j5HtwNgrS+/ZDYFelzm7Ncg RM9oPOwm1/QE+PvgXMZ/jL8i7ykg8ZrWA/j037GkXPIRqiL9aU0/Uazetxk4zZ45 a+txNVbe/29dqjvM0YRq225ulAAUgSfCqt03M2MdKcfGFtoPf/mIOVmKZteQ+Ljq NCsRffUJIKermXWQrPuZo1mmtWbaNxc4xtUnKBbfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzVCexN6jFfGpSxnRwV4Yx5ynmz4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmN2VlYjMyLWQzMzktNGE5My1hODAwLWEzOTAwMTBlYjQ0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQjDANBgkqhkiG9w0BAQsFAAOCAQEAj3OaZYDLL9WCQo+FqPEXBrfb71nX aPy6yWXsd1GPOSyXFdCcDpIbJ0lL3ITMfMDRxgk8T0skqAqYc53uMeMsZMR3JKZs 3iwUnqx7v3RzoA9PgRk2gKo1vMI28HytZdwS66dqh55E9lVrcuZWEtGrYaclbu3r MUNia+x3voUUH1284chFdtOVwSd+t4IEVNIJzfmY629TXRE3V/Hekf3Yowv3p9VO vwXHOqefzNSouPuYaAk30IXvWb6xSfaYZHJw+AUwbC0Ewcn6vOZ2TLCkgIdwluaK wSH3Pgd6KhNo/0dNlOKRkYlK6xFFfDxqDis49lg1IlxfJQguA4nsGzVGyw== -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:23 2025 by rpki-client