$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa File: 2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa (raw, json) Hash identifier: NF9Cyh8mUE9Q2KC9ITOMDk87Lx3XyMd1/wRw4r6/YEw= Subject key identifier: 76:BB:1C:35:0D:0E:C9:23:64:78:FC:9E:45:87:DE:CE:B3:B2:D0:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F647FC1C6AA6996BF7CC9FB80E42D46B7F10ACE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa Signing time: Sat 14 Jun 2025 00:20:27 +0000 ROA not before: Sat 14 Jun 2025 00:20:27 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:64:7f:c1:c6:aa:69:96:bf:7c:c9:fb:80:e4:2d:46:b7:f1:0a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:20:27 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=b1526112b39775e38a0bd4849f55408da11752d4a80aaa712e53f9cd0a7f6d12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:10:98:2b:bf:e3:5e:f4:e3:24:a3:d0:ce: 88:69:1c:8c:6a:be:98:c3:19:55:e8:9c:b0:31:0d: 4b:1d:fd:0a:a4:53:4a:cb:65:0f:c2:5e:57:7e:7b: 99:ca:a9:54:0c:35:39:4f:3d:f4:9b:00:1f:52:79: 17:8a:8d:9c:e0:6b:d0:e9:12:45:17:fb:bc:f4:36: a3:83:51:c2:2a:91:0d:0d:39:0e:67:f3:3d:2b:5e: 00:d9:57:16:05:60:bf:11:87:ca:ea:6a:f9:85:d3: 10:4f:f8:fb:c0:33:80:a4:4e:b9:9c:07:92:e1:51: a3:be:23:59:7d:9b:e4:98:42:7c:2e:ea:13:93:be: 3e:a7:35:56:5e:3e:fc:b8:98:da:cb:98:4b:06:ae: 1f:3e:18:cb:c8:4c:8e:04:53:26:3d:2a:91:e0:1e: 09:02:b8:5b:2b:d3:ba:f6:a1:04:2f:6b:1d:ba:c1: 6a:ab:23:c3:1b:62:5d:15:26:83:5a:43:36:8f:8c: b8:cf:f0:27:25:d5:fc:69:cd:d2:88:aa:b1:3f:42: 08:4a:20:50:87:66:0c:e2:9f:74:78:b6:14:2b:bc: b1:9e:dd:2f:45:77:10:c4:a8:fa:cd:63:01:b1:c4: e9:6b:ec:25:57:b9:da:df:f3:ed:8d:ed:72:5b:cb: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:1C:35:0D:0E:C9:23:64:78:FC:9E:45:87:DE:CE:B3:B2:D0:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fcfdeea-70f8-42a9-a49e-446a3af72d8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.0.0/20 Signature Algorithm: sha256WithRSAEncryption 01:94:7d:60:19:ec:05:99:2d:0d:3b:b7:4a:de:f3:cc:59:65: 07:07:49:c1:83:7c:79:08:30:b9:ab:a0:59:82:fe:08:31:74: 43:9f:f6:d5:cb:d0:af:01:48:a2:df:de:89:b5:1c:e0:fa:92: a8:78:f0:fe:b9:e2:45:b6:12:3c:22:0c:de:e6:c2:f9:e8:0e: fa:d4:39:61:dd:7f:7f:68:5b:ea:7d:f8:a6:65:ee:88:ca:3a: 99:b4:b3:07:bd:84:a8:a7:cf:e1:e5:6b:30:df:e9:57:87:0b: 1f:5c:17:cb:41:7c:58:93:0b:52:4c:49:d1:55:21:09:6a:97: 50:80:89:84:dd:50:c5:61:ed:2f:ff:9a:86:03:62:ba:e4:e4: 4a:d1:1d:04:83:61:4b:e3:48:42:6b:84:8e:b1:40:57:2d:75: a5:6a:db:0e:cd:7d:3d:cc:b7:7b:74:c3:06:db:40:c9:b3:34: 24:b2:d2:a4:f1:ac:2e:69:50:4b:42:30:5b:54:c5:8f:e6:66: 4d:15:f7:f0:4f:87:ad:95:a0:08:7c:0e:02:76:31:6f:99:02: 7d:50:ca:01:ee:75:11:11:cc:eb:11:ec:8c:06:be:cd:b8:4b: 47:22:3c:64:b4:0a:4a:5a:41:8e:66:44:df:fd:d8:2c:08:72: b6:f3:19:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL2R/wcaqaZa/fMn7gOQtRrfxCs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDAyMDI3WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTUyNjExMmIzOTc3NWUzOGEwYmQ0ODQ5ZjU1NDA4ZGEx MTc1MmQ0YTgwYWFhNzEyZTUzZjljZDBhN2Y2ZDEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPwxCYK7/jXvTjJKPQzohpHIxqvpjDGVXonLAxDUsd/Qqk U0rLZQ/CXld+e5nKqVQMNTlPPfSbAB9SeReKjZzga9DpEkUX+7z0NqODUcIqkQ0N OQ5n8z0rXgDZVxYFYL8Rh8rqavmF0xBP+PvAM4CkTrmcB5LhUaO+I1l9m+SYQnwu 6hOTvj6nNVZePvy4mNrLmEsGrh8+GMvITI4EUyY9KpHgHgkCuFsr07r2oQQvax26 wWqrI8MbYl0VJoNaQzaPjLjP8Ccl1fxpzdKIqrE/QghKIFCHZgzin3R4thQrvLGe 3S9FdxDEqPrNYwGxxOlr7CVXudrf8+2N7XJby/kvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdrscNQ0OySNkePyeRYfezrOy0FwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmY2ZkZWVhLTcwZjgtNDJhOS1hNDllLTQ0NmEzYWY3MmQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATGDQAwDQYJKoZIhvcNAQELBQADggEBAAGUfWAZ7AWZLQ07t0re88xZZQcH ScGDfHkIMLmroFmC/ggxdEOf9tXL0K8BSKLf3om1HOD6kqh48P654kW2EjwiDN7m wvnoDvrUOWHdf39oW+p9+KZl7ojKOpm0swe9hKinz+HlazDf6VeHCx9cF8tBfFiT C1JMSdFVIQlql1CAiYTdUMVh7S//moYDYrrk5ErRHQSDYUvjSEJrhI6xQFctdaVq 2w7NfT3Mt3t0wwbbQMmzNCSy0qTxrC5pUEtCMFtUxY/mZk0V9/BPh62VoAh8DgJ2 MW+ZAn1QygHudRERzOsR7IwGvs24S0ciPGS0CkpaQY5mRN/92CwIcrbzGbo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:12:59 2025 by rpki-client