$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa File: a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa (raw, json) Hash identifier: qGtfLS+m5+/3IBVTF23X0ED4CtIj6WuMgy3QHQyU0Q8= Subject key identifier: E8:3F:36:F7:E1:FB:E2:E5:53:1A:53:61:A4:81:2E:3C:ED:BF:F2:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A313AEAB906D4C39AB59D85D0C950D9E8249F9F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa Signing time: Wed 04 Jun 2025 00:11:09 +0000 ROA not before: Wed 04 Jun 2025 00:11:09 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 56.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:31:3a:ea:b9:06:d4:c3:9a:b5:9d:85:d0:c9:50:d9:e8:24:9f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:11:09 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=c16953656bc0f8afc5fcbb4778d01b64c77290c39874e29f4d25c5337b9ec681, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:2d:f1:52:4d:c6:c3:50:76:32:42:c4:75: 0f:cf:e4:00:b5:83:19:1b:9b:3a:cc:97:f0:c0:75: 08:1b:b5:1c:db:d9:8b:08:eb:93:7b:59:17:a8:7e: cd:e0:11:4c:13:a8:fa:09:e0:bd:3f:43:cc:f1:d8: 25:8a:82:e6:5b:e6:33:d7:cc:00:7c:40:94:32:62: 62:6b:fc:5b:cd:90:6d:30:b3:19:a3:c5:7f:e3:b4: 77:2a:a0:e8:16:46:48:82:72:a0:79:08:c5:f5:78: c7:e4:be:8e:ab:00:ac:11:6b:5a:21:88:30:ab:41: 6e:9f:3c:e4:5d:80:88:10:e0:8f:a9:a0:7d:b5:89: 99:35:cb:8b:85:d5:36:4a:02:4a:d0:18:2c:f3:1b: 08:bb:82:37:a9:f2:87:bf:b7:6c:93:11:c4:2f:08: c8:a4:78:11:de:b0:b4:1e:f4:00:3c:9f:14:8c:26: 59:5d:00:ea:3f:54:c5:44:92:0e:5d:ee:69:17:84: 40:be:98:a9:04:7c:2c:27:df:20:44:9a:32:72:ad: 78:05:90:0e:49:e6:3a:d5:59:da:e0:c1:a7:94:df: ea:c7:44:69:9f:ec:94:ad:fc:e9:48:e6:fe:09:4a: b7:ae:63:dd:28:70:2f:93:5b:3f:c8:d9:59:6a:75: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:36:F7:E1:FB:E2:E5:53:1A:53:61:A4:81:2E:3C:ED:BF:F2:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a08ed856-e8dd-4f54-bbbf-bd73796b0bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption c4:d8:b2:28:10:20:59:0a:19:0f:9f:e3:ba:da:41:95:3d:e4: 29:1c:a8:1e:d1:eb:c7:04:22:4c:9b:a9:5d:4a:a4:b9:dd:9a: 19:8d:21:ea:72:98:ed:89:f9:c3:91:1e:e4:6d:7a:65:41:41: 70:4d:b2:ad:f0:3d:8a:80:dc:83:2b:84:58:d4:38:c9:85:79: 50:07:82:bb:83:ee:8a:50:43:85:77:4c:66:b0:1e:84:f1:0d: 18:a0:ac:b6:db:58:8b:e1:60:57:df:10:30:b6:72:99:9c:6a: a0:e7:d0:93:eb:fa:64:22:d7:48:ca:e2:8d:d5:80:89:d2:c7: f4:fb:77:10:19:d7:7d:a5:82:1a:06:4e:0f:ea:07:eb:55:39: 6f:f8:bb:e2:ea:6b:db:3f:53:f3:ff:36:0e:a9:b1:5b:bb:0c: 97:75:17:57:74:ff:c4:67:13:ce:82:95:15:c1:53:33:a6:a0: 59:5b:86:50:34:2c:b4:f1:b3:2f:bb:07:f9:56:70:53:a7:33: ec:f1:d2:60:37:5f:90:c6:d7:94:93:ca:2d:a7:f0:07:95:aa: 9e:be:a1:b9:5e:19:85:12:54:79:87:5f:66:da:64:1a:00:ae: 73:27:17:7f:69:70:32:05:a6:dc:cc:10:84:74:ac:45:a8:2b: 31:8c:38:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOjE66rkG1MOatZ2F0MlQ2egkn58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAxMTA5WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTY5NTM2NTZiYzBmOGFmYzVmY2JiNDc3OGQwMWI2NGM3 NzI5MGMzOTg3NGUyOWY0ZDI1YzUzMzdiOWVjNjgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtay3xUk3Gw1B2MkLEdQ/P5AC1gxkbmzrMl/DAdQgbtRzb 2YsI65N7WReofs3gEUwTqPoJ4L0/Q8zx2CWKguZb5jPXzAB8QJQyYmJr/FvNkG0w sxmjxX/jtHcqoOgWRkiCcqB5CMX1eMfkvo6rAKwRa1ohiDCrQW6fPORdgIgQ4I+p oH21iZk1y4uF1TZKAkrQGCzzGwi7gjep8oe/t2yTEcQvCMikeBHesLQe9AA8nxSM JlldAOo/VMVEkg5d7mkXhEC+mKkEfCwn3yBEmjJyrXgFkA5J5jrVWdrgwaeU3+rH RGmf7JSt/OlI5v4JSreuY90ocC+TWz/I2VlqdU41AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6D829+H74uVTGlNhpIEuPO2/8kIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwOGVkODU2LWU4ZGQtNGY1NC1iYmJmLWJkNzM3OTZiMGJjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4BjANBgkqhkiG9w0BAQsFAAOCAQEAxNiyKBAgWQoZD5/jutpBlT3kKRyo HtHrxwQiTJupXUqkud2aGY0h6nKY7Yn5w5Ee5G16ZUFBcE2yrfA9ioDcgyuEWNQ4 yYV5UAeCu4PuilBDhXdMZrAehPENGKCstttYi+FgV98QMLZymZxqoOfQk+v6ZCLX SMrijdWAidLH9Pt3EBnXfaWCGgZOD+oH61U5b/i74upr2z9T8/82DqmxW7sMl3UX V3T/xGcTzoKVFcFTM6agWVuGUDQstPGzL7sH+VZwU6cz7PHSYDdfkMbXlJPKLafw B5Wqnr6huV4ZhRJUeYdfZtpkGgCucycXf2lwMgWm3MwQhHSsRagrMYw4pA== -----END CERTIFICATE-----Generated at Tue Jun 17 01:36:36 2025 by rpki-client