$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9467035e-ac22-4ed7-bdeb-771152f3e853.roa File: 9467035e-ac22-4ed7-bdeb-771152f3e853.roa (raw, json) Hash identifier: 0nksVmnXvtGjvbIpfX0vSclCWu0Zuccznf9hGIjfeJ8= Subject key identifier: A0:C5:72:7C:EB:6D:75:A9:8A:FA:DD:78:50:4A:4A:00:D1:62:EF:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39382B7B68ED66337DE84A1F122E430E4C461594 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9467035e-ac22-4ed7-bdeb-771152f3e853.roa Signing time: Mon 16 Jun 2025 15:01:19 +0000 ROA not before: Mon 16 Jun 2025 15:01:19 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 170.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:38:2b:7b:68:ed:66:33:7d:e8:4a:1f:12:2e:43:0e:4c:46:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:01:19 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=01588629758c7341329b35fdaaf0acd29217e759ae3522b0e3d2a1445657d00f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:b6:12:5c:43:82:32:c3:76:e7:92:06:59: 44:3c:2b:61:98:37:fa:88:6b:f7:4b:2f:52:3b:fc: d9:4d:5b:d4:1c:71:f8:99:c3:cd:9b:d2:94:2c:0a: 2d:e5:a5:2d:bd:6c:bb:cd:0a:8d:da:f5:d9:70:e7: c9:c7:d3:b1:21:f3:eb:59:bf:01:37:a6:2c:e8:a1: 97:a2:b9:b6:ce:13:c6:f2:d1:fc:cc:11:6c:ec:20: 2d:09:8f:ac:58:b8:db:52:9a:c8:7d:a0:e5:29:dc: c9:4b:62:dd:1b:63:d9:f7:61:b3:1c:c0:97:29:88: 22:2b:a7:e1:9c:8f:26:36:a8:0e:55:38:e9:cc:bb: 0d:96:cb:51:f9:5c:7e:97:6f:5c:ff:3c:25:dd:e4: e8:e6:d3:7e:6c:0c:b6:52:44:63:95:1b:32:d3:17: 74:96:13:95:b0:9f:b4:10:9c:a7:2d:d1:74:6e:a7: 05:89:b2:49:d0:cc:f4:d6:29:ce:df:d3:df:ab:5e: 0c:5d:b0:82:63:89:e7:13:c4:0f:c5:10:70:f9:3e: 91:60:34:53:7e:33:bd:33:b5:d5:54:35:d1:44:95: c1:3b:86:d3:ce:0e:49:e4:d9:ca:b1:ab:a9:d0:66: b6:77:c6:4d:a1:43:6e:20:6f:d4:e6:c5:c5:42:c3: 05:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:72:7C:EB:6D:75:A9:8A:FA:DD:78:50:4A:4A:00:D1:62:EF:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9467035e-ac22-4ed7-bdeb-771152f3e853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:a2:42:9c:e3:23:9e:10:2a:cd:e4:cc:fd:6f:74:77:97:95: d3:71:2b:52:0b:d8:f5:5c:ea:d2:1a:39:c1:35:a2:54:0d:3b: e5:f8:ae:b3:eb:8d:0b:07:b6:6e:81:cc:ef:b1:19:4f:67:bb: dc:25:51:10:2f:09:5b:0c:9a:29:f7:06:0c:81:de:e6:8f:43: 3c:c2:96:00:2c:2c:69:73:df:cd:0a:b5:6b:6e:8e:d1:91:56: 20:58:69:e7:ea:e4:62:71:15:62:a1:7b:91:30:f4:ab:f2:a1: c3:9f:58:a6:c8:b5:33:59:f3:60:c8:cf:0c:d5:60:67:58:6c: ce:1c:9b:63:f9:d2:d0:1b:63:d6:ed:9b:7b:21:81:96:33:df: f8:2a:38:b6:52:9c:5b:e0:a1:c7:79:f5:d2:83:4d:dd:35:7a: 6e:01:12:3f:5b:b2:6a:b3:6f:87:71:ed:95:3b:b4:5f:01:58: 97:1b:a0:c6:71:b0:84:26:a2:d4:94:f6:64:ef:d7:a6:8e:6b: 07:fd:92:0b:ba:6b:bf:81:e0:05:9f:f4:18:94:8c:97:46:d7: 51:41:98:87:0c:c9:7f:8d:12:fc:22:0f:75:2f:6c:94:6e:e5: 66:a2:37:9a:a9:33:2b:b8:bf:85:42:0c:5a:a1:28:06:a6:9a: 46:8a:ce:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOTgre2jtZjN96EofEi5DDkxGFZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUwMTE5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTU4ODYyOTc1OGM3MzQxMzI5YjM1ZmRhYWYwYWNkMjky MTdlNzU5YWUzNTIyYjBlM2QyYTE0NDU2NTdkMDBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZCrYSXEOCMsN255IGWUQ8K2GYN/qIa/dLL1I7/NlNW9Qc cfiZw82b0pQsCi3lpS29bLvNCo3a9dlw58nH07Eh8+tZvwE3pizooZeiubbOE8by 0fzMEWzsIC0Jj6xYuNtSmsh9oOUp3MlLYt0bY9n3YbMcwJcpiCIrp+GcjyY2qA5V OOnMuw2Wy1H5XH6Xb1z/PCXd5Ojm035sDLZSRGOVGzLTF3SWE5Wwn7QQnKct0XRu pwWJsknQzPTWKc7f09+rXgxdsIJjiecTxA/FEHD5PpFgNFN+M70ztdVUNdFElcE7 htPODknk2cqxq6nQZrZ3xk2hQ24gb9TmxcVCwwVDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoMVyfOttdamK+t14UEpKANFi7zkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0NjcwMzVlLWFjMjItNGVkNy1iZGViLTc3MTE1MmYzZTg1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCqRDANBgkqhkiG9w0BAQsFAAOCAQEAgKJCnOMjnhAqzeTM/W90d5eV03Er UgvY9Vzq0ho5wTWiVA075fius+uNCwe2boHM77EZT2e73CVREC8JWwyaKfcGDIHe 5o9DPMKWACwsaXPfzQq1a26O0ZFWIFhp5+rkYnEVYqF7kTD0q/Khw59Ypsi1M1nz YMjPDNVgZ1hszhybY/nS0Btj1u2beyGBljPf+Co4tlKcW+Chx3n10oNN3TV6bgES P1uyarNvh3HtlTu0XwFYlxugxnGwhCai1JT2ZO/Xpo5rB/2SC7prv4HgBZ/0GJSM l0bXUUGYhwzJf40S/CIPdS9slG7lZqI3mqkzK7i/hUIMWqEoBqaaRorOcw== -----END CERTIFICATE-----Generated at Tue Jun 17 06:22:51 2025 by rpki-client