$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa File: 8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa (raw, json) Hash identifier: VcnrhjN6zeeJdql8+F9FqRFVovXJWewdeGRAbA/CFgM= Subject key identifier: DA:93:C2:43:91:2C:4E:BE:B2:81:AD:7B:7B:9E:31:1D:FC:8B:FE:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AFBBA958970F7A86A67F5943331163A11386E7F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa Signing time: Fri 13 Jun 2025 17:40:09 +0000 ROA not before: Fri 13 Jun 2025 17:40:09 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fb:ba:95:89:70:f7:a8:6a:67:f5:94:33:31:16:3a:11:38:6e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 17:40:09 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=0a21840c3f8751733ca67634f76cd6178ff10692b46fe09e6563c17296f7d232, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:17:aa:d7:0c:34:14:52:36:e9:5a:b6:ac: cd:83:5c:5b:b1:95:59:19:31:5e:50:f3:72:bc:2d: 02:b8:cb:5b:c9:11:97:c3:86:c7:45:e6:a2:94:19: d2:19:73:d6:92:da:e4:35:12:1d:74:c2:ec:b4:f7: 0f:97:a8:7c:88:fe:a5:e1:a7:a3:e9:3b:e9:b4:12: c7:09:21:85:7c:96:c5:7b:32:9e:5a:28:e5:0f:5b: a7:61:c6:b2:2a:3f:a3:03:8b:ce:e3:78:91:95:93: a7:8f:c3:7f:0c:6b:1f:3f:5e:81:f0:21:bf:70:3d: 11:7a:db:c4:e3:10:2a:1e:8f:d4:f9:e2:e0:02:bc: 93:ba:33:2c:ec:88:fd:06:fd:02:97:67:6c:fe:f1: 1e:3e:d8:02:6f:fa:c3:86:d6:c2:49:ef:6e:6a:4d: 42:76:52:2c:79:f0:53:f0:cf:ac:59:cb:43:be:bb: 20:75:b9:21:00:30:9b:b3:08:43:c0:a6:fe:64:6e: bc:a2:87:c9:91:68:1b:30:cd:87:bb:02:53:34:b4: f9:1c:95:5e:59:9c:33:98:f7:83:48:48:1c:02:46: 89:e9:71:6d:c0:49:c8:b9:94:8b:fc:a1:69:b5:4b: 9d:64:94:5d:6e:ea:20:31:92:11:d5:11:a9:27:52: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:C2:43:91:2C:4E:BE:B2:81:AD:7B:7B:9E:31:1D:FC:8B:FE:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.97.0/24 Signature Algorithm: sha256WithRSAEncryption 71:20:f6:53:f7:e5:b1:9a:42:e0:3f:c8:5d:7a:ff:bd:d3:48: 00:61:50:f6:65:59:b6:bf:7c:dc:1f:6b:42:d5:b1:f2:0c:88: 3c:84:9e:90:fc:e2:75:b2:dc:fa:c6:9a:ae:bc:09:af:0b:f5: 77:5c:ff:11:33:e1:54:ef:79:c7:b2:12:30:ba:79:d7:45:93: b8:4e:69:73:fe:c6:be:68:b7:95:31:3b:5e:87:02:8d:90:21: 90:a9:38:1f:8b:38:bc:24:d4:4f:59:32:e0:96:3d:41:74:e8: 84:c3:c4:e2:33:90:ae:1a:9a:e9:4d:57:69:54:89:92:f6:78: 71:80:74:3c:fc:13:0c:09:8a:49:be:28:d3:8d:12:a1:27:94: a5:7f:a9:28:7b:80:20:bf:d4:7f:06:1e:72:80:85:10:fa:be: 80:b2:08:be:c8:ad:31:2a:47:96:81:65:ee:5c:b3:42:0c:e7: 0d:04:6b:65:cc:6d:8c:c3:60:e0:85:47:b9:ba:69:b7:9c:9c: 10:10:56:0a:9d:6d:ed:4a:94:ce:6c:9c:1a:ff:e9:d3:8b:2a: 35:ee:7c:d8:50:a5:3e:e3:91:ef:25:fd:a4:d7:cf:04:ae:62: 8b:60:91:e9:1b:4c:2b:8c:65:85:23:21:c9:68:a3:06:54:9d: ee:c0:8b:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKvu6lYlw96hqZ/WUMzEWOhE4bn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTc0MDA5WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTIxODQwYzNmODc1MTczM2NhNjc2MzRmNzZjZDYxNzhm ZjEwNjkyYjQ2ZmUwOWU2NTYzYzE3Mjk2ZjdkMjMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt6xeq1ww0FFI26Vq2rM2DXFuxlVkZMV5Q83K8LQK4y1vJ EZfDhsdF5qKUGdIZc9aS2uQ1Eh10wuy09w+XqHyI/qXhp6PpO+m0EscJIYV8lsV7 Mp5aKOUPW6dhxrIqP6MDi87jeJGVk6ePw38Max8/XoHwIb9wPRF628TjECoej9T5 4uACvJO6MyzsiP0G/QKXZ2z+8R4+2AJv+sOG1sJJ725qTUJ2Uix58FPwz6xZy0O+ uyB1uSEAMJuzCEPApv5kbryih8mRaBswzYe7AlM0tPkclV5ZnDOY94NISBwCRonp cW3ASci5lIv8oWm1S51klF1u6iAxkhHVEaknUnf7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2pPCQ5EsTr6yga17e54xHfyL/p8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhZWE3ZjFmLTM3ZWItNDlkNS1iZTcwLWVkM2IyNDAwZDgxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GEwDQYJKoZIhvcNAQELBQADggEBAHEg9lP35bGaQuA/yF16/73TSABh UPZlWba/fNwfa0LVsfIMiDyEnpD84nWy3PrGmq68Ca8L9Xdc/xEz4VTveceyEjC6 eddFk7hOaXP+xr5ot5UxO16HAo2QIZCpOB+LOLwk1E9ZMuCWPUF06ITDxOIzkK4a mulNV2lUiZL2eHGAdDz8EwwJikm+KNONEqEnlKV/qSh7gCC/1H8GHnKAhRD6voCy CL7IrTEqR5aBZe5cs0IM5w0Ea2XMbYzDYOCFR7m6abecnBAQVgqdbe1KlM5snBr/ 6dOLKjXufNhQpT7jke8l/aTXzwSuYotgkekbTCuMZYUjIcloowZUne7Ai+w= -----END CERTIFICATE-----Generated at Sat Jun 14 06:32:27 2025 by rpki-client