$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa File: 40f26a4b-62f1-40da-8ebc-27801bd5f757.roa (raw, json) Hash identifier: xFLdJi1oH6zOoQIzp3ta53KDpajkP1hGEXDWj1Hpswg= Subject key identifier: CA:94:5B:1A:94:A7:02:55:B7:03:67:CC:8B:B5:70:E6:9C:FB:97:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44D769FCAA2DC4AC44F468B869ECD18806E0E8DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa Signing time: Wed 28 May 2025 00:00:39 +0000 ROA not before: Wed 28 May 2025 00:00:39 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d7:69:fc:aa:2d:c4:ac:44:f4:68:b8:69:ec:d1:88:06:e0:e8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:00:39 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=3add0b8e9d432415581d77dfa5be43721cef27503ed3f9854d03f475066a9c2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:78:d7:69:44:e9:2f:5d:18:1f:9d:52:56: 9b:b4:ae:1f:5e:4a:7c:ef:80:39:60:dd:6c:3a:51: 0c:20:5a:48:52:31:ad:ee:51:5d:be:a4:f0:11:2b: f6:cb:df:0b:30:03:ac:71:6d:3b:02:ad:ab:aa:9b: ab:91:78:ae:56:80:ce:f0:d6:98:3d:55:ec:38:bf: ce:77:b8:fa:39:72:35:d1:37:b2:d8:4b:36:24:45: 88:36:17:34:e0:a5:3d:2d:f7:45:65:11:ba:83:79: 34:5c:98:0a:20:fa:bd:00:1e:cc:5b:37:20:92:10: 75:8f:92:58:39:8b:de:46:f1:67:77:b1:d0:5c:fc: 07:e0:1a:24:ac:a6:c8:e9:e1:b3:48:14:4a:b3:76: 36:02:0c:95:84:84:a9:5c:66:57:a6:ef:1c:a6:ff: 5b:13:0a:31:85:30:36:2a:37:b2:bf:d1:44:02:a1: 17:8f:44:e9:f4:e8:03:07:60:9b:6f:d7:2f:95:ce: 19:53:6a:53:14:47:43:d9:56:96:b5:c5:5c:73:71: 22:76:6f:ce:d5:15:cf:2f:89:cd:2c:c2:8f:36:47: b5:35:b1:d2:0b:c2:be:31:80:63:07:d8:b9:bb:77: b7:f3:2a:7a:52:b0:df:e2:31:61:ba:fb:c0:71:4a: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:94:5B:1A:94:A7:02:55:B7:03:67:CC:8B:B5:70:E6:9C:FB:97:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:39:d2:16:3c:d4:68:f7:f2:09:bd:9b:a0:b1:39:3d:6f:7c: 16:78:2d:ea:c7:20:53:09:3e:2d:99:4a:ce:51:b0:01:5b:4c: 5b:69:39:a7:79:db:99:51:4a:6d:c2:8b:0b:09:36:12:bd:99: 54:31:50:21:d8:8e:cb:bb:6f:8b:3c:b8:9a:ee:eb:88:e3:39: 0a:6b:46:32:93:bd:63:3d:1b:37:39:a3:60:23:d0:80:75:d7: 0b:1c:a8:a6:b5:dd:9d:4a:3f:5f:70:31:81:0e:c7:3b:16:6c: 60:a7:55:a6:89:dd:91:b6:0f:c2:c6:29:c1:13:a5:10:09:00: 9e:8d:96:63:1d:9d:33:92:70:34:7c:12:b1:41:f3:ee:33:30: b3:c6:7d:7f:32:de:89:42:d2:33:dc:13:a6:11:80:d1:7d:9f: ae:ec:0d:64:72:16:33:e3:bc:c0:1f:6b:5c:13:b0:4f:a4:f1: b2:7d:f2:52:02:da:bb:23:08:ab:c1:5f:3f:9c:66:e0:0a:12: a5:a2:fb:99:8f:39:82:ae:0b:38:2d:88:64:52:1f:90:e2:14: 76:be:7c:97:cf:dd:63:7c:1e:99:bb:b2:05:db:b7:cd:1a:12: 31:22:68:c8:cb:92:6d:84:24:aa:59:5f:e0:12:53:d8:09:11: 7f:63:df:9c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURNdp/KotxKxE9Gi4aezRiAbg6N4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAwMDM5WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWRkMGI4ZTlkNDMyNDE1NTgxZDc3ZGZhNWJlNDM3MjFj ZWYyNzUwM2VkM2Y5ODU0ZDAzZjQ3NTA2NmE5YzJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC25njXaUTpL10YH51SVpu0rh9eSnzvgDlg3Ww6UQwgWkhS Ma3uUV2+pPARK/bL3wswA6xxbTsCrauqm6uReK5WgM7w1pg9Vew4v853uPo5cjXR N7LYSzYkRYg2FzTgpT0t90VlEbqDeTRcmAog+r0AHsxbNyCSEHWPklg5i95G8Wd3 sdBc/AfgGiSspsjp4bNIFEqzdjYCDJWEhKlcZlem7xym/1sTCjGFMDYqN7K/0UQC oRePROn06AMHYJtv1y+VzhlTalMUR0PZVpa1xVxzcSJ2b87VFc8vic0swo82R7U1 sdILwr4xgGMH2Lm7d7fzKnpSsN/iMWG6+8BxShZ1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUypRbGpSnAlW3A2fMi7Vw5pz7lw4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwZjI2YTRiLTYyZjEtNDBkYS04ZWJjLTI3ODAxYmQ1Zjc1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQXzANBgkqhkiG9w0BAQsFAAOCAQEAoznSFjzUaPfyCb2boLE5PW98Fngt 6scgUwk+LZlKzlGwAVtMW2k5p3nbmVFKbcKLCwk2Er2ZVDFQIdiOy7tvizy4mu7r iOM5CmtGMpO9Yz0bNzmjYCPQgHXXCxyoprXdnUo/X3AxgQ7HOxZsYKdVpondkbYP wsYpwROlEAkAno2WYx2dM5JwNHwSsUHz7jMws8Z9fzLeiULSM9wTphGA0X2fruwN ZHIWM+O8wB9rXBOwT6Txsn3yUgLauyMIq8FfP5xm4AoSpaL7mY85gq4LOC2IZFIf kOIUdr58l8/dY3wembuyBdu3zRoSMSJoyMuSbYQkqllf4BJT2AkRf2PfnA== -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:48 2025 by rpki-client