$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa File: 58c78734-91d9-4994-9461-7b6172f0caa6.roa (raw, json) Hash identifier: KIyPs6QlTMxxUcl0efzPJgR951G0xGLeLbDgbjE/7oM= Subject key identifier: C7:C7:BE:D6:A9:A8:99:58:1A:DD:BF:BD:D8:41:F4:AA:EE:32:A6:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3117961C8952BA92CE203F49493749F0C8AA81EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa Signing time: Mon 16 Jun 2025 15:31:19 +0000 ROA not before: Mon 16 Jun 2025 15:31:19 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 67.202.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:17:96:1c:89:52:ba:92:ce:20:3f:49:49:37:49:f0:c8:aa:81:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:31:19 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=0a52a30f990503cca696155dcd095ddd64edbbd50d1bf2213db3c2875440b036, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:65:64:5d:56:d7:07:98:47:73:08:0e:72: 47:18:e9:6b:8b:72:89:b9:ba:2f:f0:66:d9:ff:45: 0a:9c:1b:f3:84:ec:db:42:c4:20:ba:e9:9b:46:8e: 5b:f9:79:72:06:ac:5c:30:a3:d7:ac:69:35:af:e0: f8:f9:25:94:01:74:ac:a1:99:cb:48:d4:4f:b1:52: 68:02:d8:4e:e7:73:1b:bf:c9:eb:75:2c:cc:60:c7: 43:9d:3e:4a:45:7b:64:07:8e:cc:e6:52:3d:e5:3e: d5:37:47:51:13:2d:a2:02:0c:de:27:51:7b:42:bb: 43:94:c8:00:ce:43:f0:89:c6:a1:6e:79:5e:8b:03: 0d:28:a5:e9:70:b8:37:23:08:47:12:2e:5d:6c:9f: d1:71:ec:03:92:01:bb:26:36:ba:8f:31:6e:a0:fe: 26:be:a9:f3:4f:8b:0f:95:8a:47:48:88:c3:d7:85: 80:49:f5:22:c4:f2:58:35:83:8b:78:b3:b9:39:f6: 38:cf:53:74:50:90:88:52:6a:ae:00:97:df:ff:55: 81:93:0f:e6:d3:4b:55:6c:e1:ad:8b:36:22:fd:a8: e4:ee:93:50:e3:c4:55:aa:3b:9d:f2:35:03:4e:bb: d8:23:d2:32:40:17:91:86:d7:83:8f:21:ad:34:e5: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C7:BE:D6:A9:A8:99:58:1A:DD:BF:BD:D8:41:F4:AA:EE:32:A6:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58c78734-91d9-4994-9461-7b6172f0caa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.202.0.0/18 Signature Algorithm: sha256WithRSAEncryption a6:21:63:f9:25:21:9a:8d:2e:85:a7:c7:15:5d:1e:42:55:73: 93:1a:34:bd:93:71:8a:53:65:05:ea:20:59:0d:50:4d:27:ac: ec:2d:61:12:a6:72:e5:ff:bc:54:63:87:c2:71:88:ad:a3:1e: 87:d0:c2:37:47:13:b8:45:f1:cf:75:9b:f7:3d:6c:c7:e8:4a: 00:9f:04:4b:bf:74:b9:a5:0c:51:ca:17:54:0f:b5:39:b9:49: d2:01:02:52:2b:b3:95:fb:a9:c4:ce:d0:87:bb:8d:db:80:4f: bf:06:d1:7f:6e:d7:eb:a9:de:8a:af:aa:cc:d1:02:1e:2f:c7: e3:95:d7:01:7f:4d:08:c3:63:77:cb:bd:e4:58:a4:d6:2b:4f: 41:b3:05:d1:91:a8:2b:71:cb:b7:f0:e6:d1:e0:5d:7f:f9:0b: c6:39:3c:46:74:bc:fc:74:5c:8f:9f:b3:f3:22:9b:92:bb:95: 7d:f9:2a:07:fe:49:c7:89:52:86:13:7f:6d:e6:24:c8:b7:87: 79:30:aa:78:b5:80:ee:fc:fa:20:5b:4c:1e:37:06:19:47:74: 0d:b8:df:92:55:b5:90:25:d6:8c:d1:bf:de:e7:34:01:29:e6: 8b:dc:e2:62:36:fe:b9:29:bd:26:8d:60:11:25:21:11:7b:52: 90:cd:20:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMReWHIlSupLOID9JSTdJ8Miqge8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUzMTE5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTUyYTMwZjk5MDUwM2NjYTY5NjE1NWRjZDA5NWRkZDY0 ZWRiYmQ1MGQxYmYyMjEzZGIzYzI4NzU0NDBiMDM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXCGVkXVbXB5hHcwgOckcY6WuLcom5ui/wZtn/RQqcG/OE 7NtCxCC66ZtGjlv5eXIGrFwwo9esaTWv4Pj5JZQBdKyhmctI1E+xUmgC2E7ncxu/ yet1LMxgx0OdPkpFe2QHjszmUj3lPtU3R1ETLaICDN4nUXtCu0OUyADOQ/CJxqFu eV6LAw0opelwuDcjCEcSLl1sn9Fx7AOSAbsmNrqPMW6g/ia+qfNPiw+VikdIiMPX hYBJ9SLE8lg1g4t4s7k59jjPU3RQkIhSaq4Al9//VYGTD+bTS1Vs4a2LNiL9qOTu k1DjxFWqO53yNQNOu9gj0jJAF5GG14OPIa005T2jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx8e+1qmomVga3b+92EH0qu4ypsswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yzc4NzM0LTkxZDktNDk5NC05NDYxLTdiNjE3MmYwY2FhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZDygAwDQYJKoZIhvcNAQELBQADggEBAKYhY/klIZqNLoWnxxVdHkJVc5Ma NL2TcYpTZQXqIFkNUE0nrOwtYRKmcuX/vFRjh8JxiK2jHofQwjdHE7hF8c91m/c9 bMfoSgCfBEu/dLmlDFHKF1QPtTm5SdIBAlIrs5X7qcTO0Ie7jduAT78G0X9u1+up 3oqvqszRAh4vx+OV1wF/TQjDY3fLveRYpNYrT0GzBdGRqCtxy7fw5tHgXX/5C8Y5 PEZ0vPx0XI+fs/Mim5K7lX35Kgf+SceJUoYTf23mJMi3h3kwqni1gO78+iBbTB43 BhlHdA2435JVtZAl1ozRv97nNAEp5ovc4mI2/rkpvSaNYBElIRF7UpDNIEk= -----END CERTIFICATE-----Generated at Thu Jun 19 05:11:25 2025 by rpki-client