$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa File: 92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa (raw, json) Hash identifier: rEfNywFDXoRA+h7uYdr8trdd+ioV/zXczLpk/FxtTdw= Subject key identifier: 9E:68:48:34:A4:90:31:1D:49:CC:32:C9:BE:65:52:88:31:F7:16:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72C05619923E4A3778309874028D4B2794E9F0A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa Signing time: Sat 14 Jun 2025 00:42:11 +0000 ROA not before: Sat 14 Jun 2025 00:42:11 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 37.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c0:56:19:92:3e:4a:37:78:30:98:74:02:8d:4b:27:94:e9:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:42:11 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=7255afd8d2d67a97474f71c8977b1b66c196f8135c09b43fb99403343ea62a97, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:70:b1:95:e0:45:bc:6b:7e:57:a8:a0:24: 3c:10:3f:48:40:35:e1:42:f0:e5:93:09:78:df:49: fd:38:8f:48:b4:da:a8:6a:3a:b2:fa:db:70:47:e9: 9a:97:3a:6f:55:f1:1e:9f:0c:8d:af:7e:77:81:ec: 06:31:44:a4:91:aa:05:28:4b:a1:7b:27:7d:33:f3: 3b:aa:66:41:cd:07:69:fa:7f:69:a9:69:a7:35:62: 77:e8:7e:85:f9:d3:8e:d1:25:23:48:6f:75:71:b9: a3:e8:bc:4e:7a:71:2b:73:3d:6a:b5:62:a8:dc:3c: 45:10:be:89:21:49:b8:3c:63:3e:7a:64:29:67:2e: 8d:b5:46:c2:dc:ed:07:e3:97:9a:df:1d:00:f7:fc: 6b:d8:9d:bb:3a:e2:b3:aa:85:37:ec:8a:5c:3f:0e: 82:bd:e1:f5:cd:df:88:46:8f:eb:c8:6e:94:7b:1f: 13:2f:43:8d:68:57:c8:86:26:f6:d4:92:1a:e7:75: a0:a8:ab:e6:1c:55:94:cd:a3:d3:26:37:01:97:b0: c2:23:f3:6a:b4:57:8a:cf:4c:5b:0e:15:ce:51:1f: 7d:59:7f:13:d7:5b:a4:f8:31:22:e7:cf:65:b9:e3: 3d:67:77:60:86:b4:08:58:ae:a7:4e:6c:62:7e:76: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:68:48:34:A4:90:31:1D:49:CC:32:C9:BE:65:52:88:31:F7:16:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92a2e6c9-9b53-4a57-8282-a3b860a77ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:8d:5a:98:be:16:26:5f:ab:a5:74:d6:37:5d:06:44:b0:02: af:a5:9c:38:4a:f7:0f:d8:0f:43:bb:66:bd:d2:c6:81:e5:7a: d9:59:af:c7:ed:78:12:d3:aa:57:d2:15:6f:67:d8:a0:c8:77: cf:cb:75:bb:0c:86:1e:bc:16:4f:02:94:22:25:59:69:89:4e: ee:ad:6f:51:fa:26:4a:a2:8d:85:06:e8:1f:2b:75:a1:df:e0: f1:23:f6:1c:94:1c:41:35:a8:9c:9d:e7:7b:43:79:79:3e:4f: 28:36:d3:41:91:aa:9c:06:9f:b2:b4:3d:2d:99:53:59:ad:20: 7d:7f:73:90:e8:e3:b5:52:37:ce:a0:43:02:28:c1:86:1a:2e: 17:37:c0:e1:ba:01:a7:6a:03:1c:45:20:72:40:d2:73:61:92: a3:d0:49:33:f0:7a:12:c4:1f:c7:26:79:6a:7e:bc:6a:ac:54: e4:b6:6e:28:54:84:6f:ff:31:20:38:e7:ef:b6:f1:b0:14:73: f7:11:fd:ec:2d:f7:20:9b:a8:95:5e:1d:e7:15:1e:9b:d6:05: 63:4d:de:cb:5d:59:50:72:8a:e0:cb:ac:80:67:15:7e:ee:ee: d2:da:68:62:b0:9d:aa:ab:99:6d:9f:00:c7:16:18:2d:46:61: 0a:de:30:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcsBWGZI+Sjd4MJh0Ao1LJ5Tp8KgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MjExWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjU1YWZkOGQyZDY3YTk3NDc0ZjcxYzg5NzdiMWI2NmMx OTZmODEzNWMwOWI0M2ZiOTk0MDMzNDNlYTYyYTk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7QXCxleBFvGt+V6igJDwQP0hANeFC8OWTCXjfSf04j0i0 2qhqOrL623BH6ZqXOm9V8R6fDI2vfneB7AYxRKSRqgUoS6F7J30z8zuqZkHNB2n6 f2mpaac1YnfofoX5047RJSNIb3VxuaPovE56cStzPWq1YqjcPEUQvokhSbg8Yz56 ZClnLo21RsLc7Qfjl5rfHQD3/GvYnbs64rOqhTfsilw/DoK94fXN34hGj+vIbpR7 HxMvQ41oV8iGJvbUkhrndaCoq+YcVZTNo9MmNwGXsMIj82q0V4rPTFsOFc5RH31Z fxPXW6T4MSLnz2W54z1nd2CGtAhYrqdObGJ+djOrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnmhINKSQMR1JzDLJvmVSiDH3Fn4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyYTJlNmM5LTliNTMtNGE1Ny04MjgyLWEzYjg2MGE3N2VhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAl+TANBgkqhkiG9w0BAQsFAAOCAQEAKY1amL4WJl+rpXTWN10GRLACr6Wc OEr3D9gPQ7tmvdLGgeV62Vmvx+14EtOqV9IVb2fYoMh3z8t1uwyGHrwWTwKUIiVZ aYlO7q1vUfomSqKNhQboHyt1od/g8SP2HJQcQTWonJ3ne0N5eT5PKDbTQZGqnAaf srQ9LZlTWa0gfX9zkOjjtVI3zqBDAijBhhouFzfA4boBp2oDHEUgckDSc2GSo9BJ M/B6EsQfxyZ5an68aqxU5LZuKFSEb/8xIDjn77bxsBRz9xH97C33IJuolV4d5xUe m9YFY03ey11ZUHKK4MusgGcVfu7u0tpoYrCdqquZbZ8AxxYYLUZhCt4wAg== -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:07 2025 by rpki-client