$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f23fa9-613c-47f3-9f21-444d78462070.roa File: a2f23fa9-613c-47f3-9f21-444d78462070.roa (raw, json) Hash identifier: cgpmTwYbGZyZqZk2WbnW5fTLOcsTKobwuUJ6LJHkIJI= Subject key identifier: F9:FC:FA:BE:C7:90:77:72:B8:30:99:84:6D:49:72:B5:18:6E:88:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 401C34AE66DEE20E55225AAF4932596820F802AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f23fa9-613c-47f3-9f21-444d78462070.roa Signing time: Mon 02 Jun 2025 15:11:04 +0000 ROA not before: Mon 02 Jun 2025 15:11:04 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.154.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1c:34:ae:66:de:e2:0e:55:22:5a:af:49:32:59:68:20:f8:02:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:11:04 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=febc62263e92d9ab0bca707de672be5d8ee771a73c707c066f2f3e221fa76eaa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:94:d8:ab:fc:b1:1e:27:9d:95:01:48:fb: 96:c3:9d:de:9b:4e:0d:03:0f:d9:ee:a4:59:04:c1: e1:be:16:42:1b:5f:aa:22:38:ca:ea:eb:56:c2:17: e8:d5:d4:8b:71:1b:3e:37:e0:ee:1c:10:87:f2:74: 0d:67:1f:9a:d9:ac:a7:e9:8b:02:87:82:05:ee:ac: c9:b7:ba:ff:29:7a:ae:4d:1d:b6:e3:a7:3e:35:a8: 5d:9c:a9:94:79:3e:87:bb:61:ff:5b:df:7b:93:cd: fb:99:eb:bb:d1:d5:8f:ea:03:25:d9:7f:67:f1:5b: 7e:8c:52:dd:70:e1:dc:f5:7d:fa:72:e4:a4:b8:ba: b1:35:ec:1d:46:77:61:2b:d5:f3:8f:36:cc:1e:f4: 01:8d:3e:b4:28:94:48:16:f3:86:3f:4e:02:13:56: e0:21:85:bb:da:8f:b9:67:3c:b3:ea:37:ab:06:ca: bc:d9:ae:b6:f8:31:9b:63:47:ee:4f:65:6d:c2:5e: 68:4d:86:3d:86:21:71:f7:43:d7:69:08:90:35:ee: f0:d6:09:ae:e4:7f:e7:a1:f9:6e:d8:b7:63:65:04: e9:2f:27:f5:59:f4:03:59:c3:58:44:45:36:ca:63: 09:64:25:30:48:44:b5:ba:6b:8e:71:0f:51:2d:1c: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FC:FA:BE:C7:90:77:72:B8:30:99:84:6D:49:72:B5:18:6E:88:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f23fa9-613c-47f3-9f21-444d78462070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.154.16.0/20 Signature Algorithm: sha256WithRSAEncryption 94:79:9e:3b:88:a5:18:20:b2:a9:52:bf:8f:9c:bd:9d:33:7f: bc:f4:23:44:e1:35:7c:4b:b2:ad:57:e2:5c:56:3c:f4:b1:51: 0f:57:9a:e2:ff:2c:4f:76:a0:0b:db:e3:22:9e:71:2b:0e:9b: a7:9b:11:d1:db:38:a2:f3:af:bd:40:18:55:fc:f8:b2:b3:51: 27:f2:1f:20:0d:39:2e:53:74:58:b9:ac:7f:61:3c:87:b9:dd: ae:3c:58:22:fe:02:3b:72:fc:8d:d2:a4:95:16:24:e5:4e:3f: fd:ec:6e:f7:81:14:84:af:4e:e6:66:54:0d:48:08:0d:bc:81: 0d:0a:4c:27:da:2e:6d:de:cb:27:cb:28:68:f6:29:ef:bd:c4: 01:c9:c7:6f:5b:ad:28:55:07:83:b2:ee:07:b1:44:f7:83:17: 24:ff:ee:c7:78:8a:7b:43:5a:6a:ff:c7:f6:5a:a6:70:f7:9d: b6:de:44:7e:2f:d7:6f:3c:ed:e6:9d:fc:d5:6e:52:c2:50:a3: de:4b:4f:22:29:1a:f2:fa:58:73:7a:59:b5:04:94:1b:9d:59: 49:18:6e:85:56:9c:2b:ad:10:3e:a7:7c:40:e4:95:c4:70:53: 78:77:b9:d4:dd:08:7c:94:eb:88:d5:dd:cf:b1:1d:71:09:05: 28:6d:30:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQBw0rmbe4g5VIlqvSTJZaCD4Aq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUxMTA0WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWJjNjIyNjNlOTJkOWFiMGJjYTcwN2RlNjcyYmU1ZDhl ZTc3MWE3M2M3MDdjMDY2ZjJmM2UyMjFmYTc2ZWFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVxpTYq/yxHiedlQFI+5bDnd6bTg0DD9nupFkEweG+FkIb X6oiOMrq61bCF+jV1ItxGz434O4cEIfydA1nH5rZrKfpiwKHggXurMm3uv8peq5N Hbbjpz41qF2cqZR5Poe7Yf9b33uTzfuZ67vR1Y/qAyXZf2fxW36MUt1w4dz1ffpy 5KS4urE17B1Gd2Er1fOPNswe9AGNPrQolEgW84Y/TgITVuAhhbvaj7lnPLPqN6sG yrzZrrb4MZtjR+5PZW3CXmhNhj2GIXH3Q9dpCJA17vDWCa7kf+eh+W7Yt2NlBOkv J/VZ9ANZw1hERTbKYwlkJTBIRLW6a45xD1EtHGLXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+fz6vseQd3K4MJmEbUlytRhuiHowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZjIzZmE5LTYxM2MtNDdmMy05ZjIxLTQ0NGQ3ODQ2MjA3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNmhAwDQYJKoZIhvcNAQELBQADggEBAJR5njuIpRggsqlSv4+cvZ0zf7z0 I0ThNXxLsq1X4lxWPPSxUQ9XmuL/LE92oAvb4yKecSsOm6ebEdHbOKLzr71AGFX8 +LKzUSfyHyANOS5TdFi5rH9hPIe53a48WCL+Ajty/I3SpJUWJOVOP/3sbveBFISv TuZmVA1ICA28gQ0KTCfaLm3eyyfLKGj2Ke+9xAHJx29brShVB4Oy7gexRPeDFyT/ 7sd4intDWmr/x/ZapnD3nbbeRH4v12887ead/NVuUsJQo95LTyIpGvL6WHN6WbUE lBudWUkYboVWnCutED6nfEDklcRwU3h3udTdCHyU64jV3c+xHXEJBShtML4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:37:24 2025 by rpki-client