$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd04f3e-2ac4-4c97-91d7-2ddff68451c4.roa File: 9fd04f3e-2ac4-4c97-91d7-2ddff68451c4.roa (raw, json) Hash identifier: zpyI9bhlw60Sn3ReKuHPqfHXC+w4/u5yxLo7AMt9qYQ= Subject key identifier: 82:3C:07:1C:4A:4C:3A:72:26:3E:DD:9E:A7:DB:94:10:A8:A7:CD:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FC6494656D4EC64E196CFA49656D2E3C3076BB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd04f3e-2ac4-4c97-91d7-2ddff68451c4.roa Signing time: Fri 13 Jun 2025 16:01:49 +0000 ROA not before: Fri 13 Jun 2025 16:01:49 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 140.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c6:49:46:56:d4:ec:64:e1:96:cf:a4:96:56:d2:e3:c3:07:6b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 16:01:49 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=5fb4337a5d4cfb102bb18202d771a3e17ea11b475bfff8fb140e7eb7e8c3ffc8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:a4:4c:c5:ec:e5:ba:b9:3a:c5:fd:e0:65: 5b:80:84:b5:46:0d:b7:cf:fb:f2:06:87:32:c0:0c: 60:4a:3e:0a:0f:a6:b7:7e:d0:28:35:2e:3c:c1:c3: b2:5a:94:eb:c3:c0:d7:95:f1:f0:ad:66:1f:f5:e2: e0:29:86:f8:5c:5f:ff:b0:ff:33:ac:81:f6:4a:46: 87:b8:06:bd:5f:0e:e6:24:21:d9:0a:33:d8:6f:9b: 27:c2:e5:63:1a:dc:78:70:15:b6:96:96:de:52:dd: 94:32:b7:9b:49:84:d8:b3:4d:56:76:58:a8:e9:16: b2:b7:f4:f0:16:49:82:81:77:9b:05:e4:50:5e:56: 73:87:d0:88:1d:bd:6a:2d:c3:79:a2:3f:df:a8:91: 53:74:e3:96:fd:e5:35:58:77:9a:ad:3b:3e:75:a3: dd:01:c9:5d:d7:ba:16:87:09:bf:86:93:7c:58:4c: 93:f5:2b:02:7d:3a:7a:c9:48:94:0e:12:98:f7:78: 72:c6:ad:c4:2e:43:61:63:01:a1:12:3f:ab:16:e2: c6:bf:25:8e:18:6d:7a:58:70:64:84:08:1f:47:3f: a3:39:f1:a5:fe:b6:f8:c1:fe:48:af:a0:12:5a:d6: 5a:c4:77:19:83:39:5b:9c:94:8b:b0:fc:a5:8c:f3: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:07:1C:4A:4C:3A:72:26:3E:DD:9E:A7:DB:94:10:A8:A7:CD:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd04f3e-2ac4-4c97-91d7-2ddff68451c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:96:4e:74:90:06:91:b1:18:30:66:46:07:ef:a9:7d:38:f3: 72:58:bc:d2:68:28:e6:29:65:48:0b:51:02:14:d4:9a:76:3d: 2b:f3:20:e1:64:88:1f:79:bc:e3:cb:f1:1b:94:2e:fa:96:95: d2:f5:da:3f:ff:39:cf:17:94:a7:56:76:3a:6a:62:e3:56:91: 53:05:7a:53:eb:d9:67:84:62:8b:67:c1:31:98:7a:0d:cc:89: 53:4a:41:f9:77:7d:68:27:60:31:6f:4b:10:20:62:7f:1c:bc: 77:43:50:87:74:87:68:6f:19:12:4f:59:78:ec:25:6a:02:b6: dd:04:fa:e6:b2:29:12:fd:a9:ea:71:34:b9:e7:21:b9:2c:e4: 4c:4d:5c:7f:78:b9:ff:65:03:99:fe:18:a5:f9:bd:45:b2:fd: 7f:52:48:8e:e5:ce:27:85:5e:64:50:85:c1:4e:d1:54:0a:79: 8b:a9:3c:7d:54:e5:f4:f6:bd:50:ce:cd:16:43:60:97:50:82: b6:da:ad:aa:12:8e:57:7a:da:53:f6:9f:ff:e8:d1:ea:e2:9d: fb:18:c0:d2:48:ce:ea:58:9c:ee:a8:9a:02:a1:54:69:9f:8d: ef:02:b9:d2:5b:d4:f1:54:df:d0:a8:c8:6e:a9:88:58:23:c8: 6f:1d:4a:fd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUP8ZJRlbU7GThls+kllbS48MHa7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTYwMTQ5WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmI0MzM3YTVkNGNmYjEwMmJiMTgyMDJkNzcxYTNlMTdl YTExYjQ3NWJmZmY4ZmIxNDBlN2ViN2U4YzNmZmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpTKRMxezlurk6xf3gZVuAhLVGDbfP+/IGhzLADGBKPgoP prd+0Cg1LjzBw7JalOvDwNeV8fCtZh/14uAphvhcX/+w/zOsgfZKRoe4Br1fDuYk IdkKM9hvmyfC5WMa3HhwFbaWlt5S3ZQyt5tJhNizTVZ2WKjpFrK39PAWSYKBd5sF 5FBeVnOH0IgdvWotw3miP9+okVN045b95TVYd5qtOz51o90ByV3XuhaHCb+Gk3xY TJP1KwJ9OnrJSJQOEpj3eHLGrcQuQ2FjAaESP6sW4sa/JY4YbXpYcGSECB9HP6M5 8aX+tvjB/kivoBJa1lrEdxmDOVuclIuw/KWM86YFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgjwHHEpMOnImPt2ep9uUEKinzUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmZDA0ZjNlLTJhYzQtNGM5Ny05MWQ3LTJkZGZmNjg0NTFjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCMyDANBgkqhkiG9w0BAQsFAAOCAQEAMpZOdJAGkbEYMGZGB++pfTjzcli8 0mgo5illSAtRAhTUmnY9K/Mg4WSIH3m848vxG5Qu+paV0vXaP/85zxeUp1Z2Ompi 41aRUwV6U+vZZ4Rii2fBMZh6DcyJU0pB+Xd9aCdgMW9LECBifxy8d0NQh3SHaG8Z Ek9ZeOwlagK23QT65rIpEv2p6nE0uechuSzkTE1cf3i5/2UDmf4Ypfm9RbL9f1JI juXOJ4VeZFCFwU7RVAp5i6k8fVTl9Pa9UM7NFkNgl1CCttqtqhKOV3raU/af/+jR 6uKd+xjA0kjO6lic7qiaAqFUaZ+N7wK50lvU8VTf0KjIbqmIWCPIbx1K/Q== -----END CERTIFICATE-----Generated at Sat Jun 14 06:51:52 2025 by rpki-client