$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64e78129-ac11-43de-b8e1-4be355cca335.roa File: 64e78129-ac11-43de-b8e1-4be355cca335.roa (raw, json) Hash identifier: 8owqgDstaG5pEpR5K4T5FlyE73kRBMet1RjkArBMwbw= Subject key identifier: 44:69:25:32:20:58:1F:80:66:52:1C:C8:8D:79:B7:52:38:0E:6F:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FFBEFCAD45DDBEE5FB1703659F05E3CF4CCD7AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64e78129-ac11-43de-b8e1-4be355cca335.roa Signing time: Tue 17 Jun 2025 00:10:15 +0000 ROA not before: Tue 17 Jun 2025 00:10:15 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fb:ef:ca:d4:5d:db:ee:5f:b1:70:36:59:f0:5e:3c:f4:cc:d7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:10:15 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=8191a782f7e4f81f6b299da2ccb5c24dc8c15ee70218fc6ad67ee8090e23db23, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:10:0b:10:7c:2e:fe:a2:a7:f2:25:aa:3a: 2b:a2:82:f8:94:b3:e3:1b:79:24:fa:9a:cf:18:ff: 2b:2d:4e:09:6c:ec:a3:d8:68:cb:f6:e5:ae:47:06: e7:f7:72:1f:60:37:f3:e8:09:32:90:4f:f9:cc:fb: 59:38:a3:42:90:85:b8:1a:87:ea:82:74:fc:0f:a9: b8:f5:0b:a1:b9:6e:d7:78:27:c5:54:12:a3:98:b3: c1:08:86:72:1f:3e:10:d5:00:a3:42:e1:6c:19:71: fb:15:9c:f5:c3:37:21:4b:1c:12:1e:22:81:82:ef: 49:9b:72:9e:d7:eb:0b:a7:99:c9:68:bc:c9:93:c7: a5:5c:88:47:47:da:c1:d5:66:32:f0:c2:df:af:cc: 63:a0:e9:cc:aa:03:8d:39:7d:b6:66:f6:c3:e1:48: 50:19:06:77:c1:5a:08:48:7b:da:01:9c:7d:bd:5b: 18:60:2b:5b:f8:ea:e1:8a:22:01:08:15:35:b2:de: bd:f1:3d:68:7e:2a:08:4c:4f:74:e6:af:3f:c9:47: d0:e8:b4:94:42:97:b2:e4:24:f2:b5:ac:c9:9f:95: cd:ec:4d:67:f9:35:cf:b5:94:f9:a7:7c:5f:56:ee: bb:17:77:02:e1:53:0a:b1:75:ac:8a:56:98:32:54: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:69:25:32:20:58:1F:80:66:52:1C:C8:8D:79:B7:52:38:0E:6F:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64e78129-ac11-43de-b8e1-4be355cca335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:30:6b:8f:07:75:1f:21:99:0e:03:f9:51:60:05:2a:0b:f0: 20:3e:89:f5:64:82:ac:75:77:2d:81:1e:b6:8b:c1:d1:3d:24: d0:a4:c8:4e:42:92:f0:2a:3b:cd:1b:7e:97:ef:3f:f6:42:8c: f5:34:45:0a:26:4c:36:03:47:4a:b3:a5:c8:0a:3f:0b:4f:14: 88:b2:37:d7:6f:69:9f:13:77:1b:96:0e:43:29:35:ca:3f:8e: 8c:c8:72:8b:26:d9:c2:90:4c:d2:0f:eb:ca:7e:45:7e:15:8f: 70:bb:59:0a:0e:2d:91:45:5f:23:90:f8:bf:65:d7:c3:ff:ce: 15:ce:73:50:da:f9:65:59:bd:59:0a:66:50:c9:02:c9:d0:56: 39:c2:ec:7d:7c:e6:74:75:09:16:ff:a1:9b:d8:84:64:5f:b6: ec:64:42:f2:90:ee:1e:04:3a:82:fc:2f:0e:1b:fd:78:43:19: cc:f2:94:62:ae:a2:f4:6b:9e:72:95:be:cc:ff:19:eb:2b:55: 48:f0:53:af:ce:5a:f7:72:61:cf:55:ac:07:b9:d7:04:1a:41: 2c:24:23:15:59:39:88:69:98:f5:f0:b3:c9:c6:ff:1f:c2:e7: 1f:39:a6:68:4b:d4:cb:83:27:ca:fb:74:fd:84:30:d9:07:17: 39:6d:85:9e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUf/vvytRd2+5fsXA2WfBePPTM16wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAxMDE1WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTkxYTc4MmY3ZTRmODFmNmIyOTlkYTJjY2I1YzI0ZGM4 YzE1ZWU3MDIxOGZjNmFkNjdlZTgwOTBlMjNkYjIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF6RALEHwu/qKn8iWqOiuigviUs+MbeST6ms8Y/ystTgls 7KPYaMv25a5HBuf3ch9gN/PoCTKQT/nM+1k4o0KQhbgah+qCdPwPqbj1C6G5btd4 J8VUEqOYs8EIhnIfPhDVAKNC4WwZcfsVnPXDNyFLHBIeIoGC70mbcp7X6wunmclo vMmTx6VciEdH2sHVZjLwwt+vzGOg6cyqA405fbZm9sPhSFAZBnfBWghIe9oBnH29 WxhgK1v46uGKIgEIFTWy3r3xPWh+KghMT3Tmrz/JR9DotJRCl7LkJPK1rMmflc3s TWf5Nc+1lPmnfF9W7rsXdwLhUwqxdayKVpgyVMnpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURGklMiBYH4BmUhzIjXm3UjgOb+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0ZTc4MTI5LWFjMTEtNDNkZS1iOGUxLTRiZTM1NWNjYTMzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQMDANBgkqhkiG9w0BAQsFAAOCAQEAszBrjwd1HyGZDgP5UWAFKgvwID6J 9WSCrHV3LYEetovB0T0k0KTITkKS8Co7zRt+l+8/9kKM9TRFCiZMNgNHSrOlyAo/ C08UiLI3129pnxN3G5YOQyk1yj+OjMhyiybZwpBM0g/ryn5FfhWPcLtZCg4tkUVf I5D4v2XXw//OFc5zUNr5ZVm9WQpmUMkCydBWOcLsfXzmdHUJFv+hm9iEZF+27GRC 8pDuHgQ6gvwvDhv9eEMZzPKUYq6i9GuecpW+zP8Z6ytVSPBTr85a93Jhz1WsB7nX BBpBLCQjFVk5iGmY9fCzycb/H8LnHzmmaEvUy4Mnyvt0/YQw2QcXOW2Fng== -----END CERTIFICATE-----Generated at Wed Jun 18 20:37:49 2025 by rpki-client