$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa File: 7db05471-313d-42cf-86d0-866ce19bc5fc.roa (raw, json) Hash identifier: AxK7FKEXHzxfKR3jyNKqGWJtJJofd4u4CVGWqD2MiXs= Subject key identifier: B3:CF:4C:74:73:FD:D3:6D:54:79:27:06:E4:90:CE:9A:01:51:60:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BB5F47EABD25154AB18341CAAC33825BFC713C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa Signing time: Mon 02 Jun 2025 15:01:04 +0000 ROA not before: Mon 02 Jun 2025 15:01:04 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b5:f4:7e:ab:d2:51:54:ab:18:34:1c:aa:c3:38:25:bf:c7:13:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:01:04 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=3b72a65dcff0ec7f62adeeffce20c63ffd3b3c7f2a60cc33df63aef8a910ddd8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ac:86:f7:ca:1c:56:0d:44:73:8a:a5:ed:e0: 3b:0f:62:fd:4c:7a:64:99:9f:9a:97:69:8e:d2:54: bd:00:94:bf:cd:b4:97:e8:ca:af:62:74:2b:51:40: cf:8c:1d:46:71:be:72:08:69:5e:6f:c8:60:0f:42: 25:94:a1:60:e2:78:db:b0:ad:3e:c9:75:82:fd:8e: 71:02:ca:39:47:e7:cf:c5:bc:bb:77:7f:0d:93:f8: ca:57:71:54:92:7c:55:d4:8f:41:61:52:9b:b0:7a: 56:a6:b2:7b:25:e5:1a:4b:54:b1:77:cf:03:2a:ee: 57:ad:3d:7a:bb:e2:da:b1:8f:23:c8:3a:90:6c:fc: fc:39:1e:b4:df:07:97:7e:53:b1:dc:b1:10:b4:c9: a1:91:01:c6:81:f1:8d:7c:e0:a9:24:dc:33:60:44: 5e:c9:90:a8:31:16:73:14:29:ab:64:77:48:1b:18: 30:57:a4:87:22:36:9a:30:e7:48:11:5d:dc:3b:76: b4:02:09:e9:8f:f3:ba:e4:13:e8:c5:a7:7c:6b:a3: 41:9f:02:be:da:29:f6:e4:b4:5c:e3:7d:88:80:d3: d9:4b:f7:3e:b9:19:57:1f:59:d2:e5:8b:b0:3b:a4: d5:6a:a9:bf:2e:16:95:d8:eb:31:6a:03:b6:6c:94: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CF:4C:74:73:FD:D3:6D:54:79:27:06:E4:90:CE:9A:01:51:60:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.80.0/20 Signature Algorithm: sha256WithRSAEncryption 60:85:27:e3:71:07:ee:b0:c9:f7:84:07:23:f4:d6:45:df:cc: 27:fc:7a:5b:30:cf:42:1f:62:a2:32:5f:ed:0a:8d:35:5e:da: 98:87:80:50:98:93:0d:61:54:29:d3:2b:c2:f4:91:65:6c:15: d9:a0:0c:bd:98:0c:79:f9:43:32:fe:13:00:db:ab:52:b7:22: ec:81:c8:30:10:f8:56:76:e8:d7:14:72:d1:e8:da:ee:b7:f5: 8a:b9:2d:cf:11:a8:4b:63:52:5a:ea:e9:d1:6d:ff:73:97:93: 23:8f:f6:e8:da:af:bf:5e:e7:6a:72:4d:da:99:cc:9c:7b:c8: e0:91:fc:60:00:5b:97:c6:b1:6f:0d:e2:c9:98:37:ed:53:34: fd:0e:d9:9e:6f:0a:5a:54:43:e2:a8:a7:3a:85:11:a5:22:1f: 0f:f4:2d:06:cb:1b:85:34:af:a2:da:20:54:38:eb:0d:5a:c2: 33:2f:f8:25:dc:e8:21:5c:85:2b:3e:64:b2:f8:5d:ee:59:89: 23:4d:4d:fc:a7:ed:19:1b:9f:16:a1:7e:36:3e:1f:e5:40:f0: 9d:72:a2:4f:c4:ba:12:19:a1:00:08:79:d8:4a:5e:7c:fb:e0: 09:64:da:c1:d3:ea:52:a1:aa:31:d2:68:24:97:a4:f6:28:d5: 73:e7:15:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa7X0fqvSUVSrGDQcqsM4Jb/HE8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUwMTA0WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjcyYTY1ZGNmZjBlYzdmNjJhZGVlZmZjZTIwYzYzZmZk M2IzYzdmMmE2MGNjMzNkZjYzYWVmOGE5MTBkZGQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbrIb3yhxWDURziqXt4DsPYv1MemSZn5qXaY7SVL0AlL/N tJfoyq9idCtRQM+MHUZxvnIIaV5vyGAPQiWUoWDieNuwrT7JdYL9jnECyjlH58/F vLt3fw2T+MpXcVSSfFXUj0FhUpuwelamsnsl5RpLVLF3zwMq7letPXq74tqxjyPI OpBs/Pw5HrTfB5d+U7HcsRC0yaGRAcaB8Y184Kkk3DNgRF7JkKgxFnMUKatkd0gb GDBXpIciNpow50gRXdw7drQCCemP87rkE+jFp3xro0GfAr7aKfbktFzjfYiA09lL 9z65GVcfWdLli7A7pNVqqb8uFpXY6zFqA7ZslKdjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs89MdHP9021UeScG5JDOmgFRYD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkYjA1NDcxLTMxM2QtNDJjZi04NmQwLTg2NmNlMTliYzVmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgFAwDQYJKoZIhvcNAQELBQADggEBAGCFJ+NxB+6wyfeEByP01kXfzCf8 elswz0IfYqIyX+0KjTVe2piHgFCYkw1hVCnTK8L0kWVsFdmgDL2YDHn5QzL+EwDb q1K3IuyByDAQ+FZ26NcUctHo2u639Yq5Lc8RqEtjUlrq6dFt/3OXkyOP9ujar79e 52pyTdqZzJx7yOCR/GAAW5fGsW8N4smYN+1TNP0O2Z5vClpUQ+KopzqFEaUiHw/0 LQbLG4U0r6LaIFQ46w1awjMv+CXc6CFchSs+ZLL4Xe5ZiSNNTfyn7RkbnxahfjY+ H+VA8J1yok/EuhIZoQAIedhKXnz74Alk2sHT6lKhqjHSaCSXpPYo1XPnFSI= -----END CERTIFICATE-----Generated at Sun Jun 15 01:09:09 2025 by rpki-client