$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa File: a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa (raw, json) Hash identifier: GSbYLTpwAvgvm2EQsXIGWwoRwmfpk1DW4bZB0ur+MR0= Subject key identifier: 1A:37:73:05:A8:0F:F0:9D:F8:CD:AD:4B:D5:2F:F5:1B:4F:A3:38:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E69C8CAB6722E0A4BD22C049B7BDFE21138C409 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa Signing time: Fri 13 Jun 2025 00:50:33 +0000 ROA not before: Fri 13 Jun 2025 00:50:33 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:69:c8:ca:b6:72:2e:0a:4b:d2:2c:04:9b:7b:df:e2:11:38:c4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:50:33 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=fe358be63f1aa993e9083a5e64db97d7ddcae2284343de83887e57c2bf635673, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:ed:3d:42:ae:33:e7:f6:5b:dc:55:71:c0: 08:c3:1e:d1:67:f5:bf:71:76:7f:bc:48:b8:47:d2: bb:26:74:44:06:df:f6:b0:ba:07:d7:2a:d9:2a:fd: 6e:2f:b9:c8:e8:5c:bd:da:a0:81:80:e6:31:bd:01: e6:a3:e4:8e:9f:41:b3:2d:30:26:cb:eb:35:8e:36: 6d:e0:af:54:a1:8c:87:25:79:36:f2:cf:62:51:4a: 3e:c7:da:a5:0e:ec:15:2a:ef:dd:83:8b:30:c4:eb: 77:2b:e6:2c:55:c1:98:bd:04:7b:f9:f8:c3:3f:e2: 57:6f:ff:85:67:00:1f:b9:1c:1a:52:20:10:c6:e8: 40:59:98:89:64:a1:a4:af:79:f9:15:df:0a:b4:17: cc:89:31:32:17:bf:a4:46:d3:f8:9b:fc:df:a6:3e: 6c:2f:2d:6b:8e:5d:ba:2a:f1:e1:e1:04:84:93:cf: cb:a4:2f:d8:d3:1e:c1:0e:7e:a2:04:ff:f3:63:1b: b1:43:61:68:cb:01:b6:6b:01:07:38:35:7d:52:48: af:35:e8:71:9c:25:a1:8d:8f:54:17:e0:0b:c0:23: 54:ed:f5:02:b4:9b:64:26:d9:c7:76:d9:64:89:ab: e3:e9:dd:06:09:9b:4b:fb:8f:66:4e:27:bc:6f:a9: b1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:37:73:05:A8:0F:F0:9D:F8:CD:AD:4B:D5:2F:F5:1B:4F:A3:38:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8c2b78e-8c6c-4311-a68c-2246a6fd1450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.216.0/24 Signature Algorithm: sha256WithRSAEncryption b6:b9:f8:49:56:7e:21:c3:3a:ab:d1:c9:9d:c4:e9:d2:c2:7e: 30:78:d5:a6:f4:04:65:c9:50:ea:90:2e:a2:61:6a:b6:cc:06: da:a8:1c:8b:69:36:95:55:0d:5d:73:67:29:22:35:a6:ab:34: b9:f0:8e:10:e6:d0:61:9d:1f:08:b6:26:7e:a1:c2:24:b4:25: be:ea:f8:1b:3d:61:be:1f:d2:a4:14:d7:a3:b9:13:a0:d0:02: 41:f0:61:1e:6e:ae:81:f3:aa:fa:2a:c9:20:42:69:cd:43:88: 7c:0b:0b:c3:21:ef:b1:44:9d:8d:0a:a7:54:af:5e:b5:64:38: e3:b1:8d:75:27:a5:4e:2b:96:7b:20:ff:d9:63:5a:ef:ab:31: ce:e9:8f:71:a0:9f:a7:e3:c2:11:cd:f0:71:8f:d1:3e:20:8e: ac:a5:51:c7:85:7a:ac:89:15:37:77:b6:34:a9:e6:e7:41:05: b0:1c:24:ab:39:96:35:9a:15:fd:17:9f:56:69:09:2f:a5:b5: 22:03:bb:a5:97:3f:82:eb:24:92:bd:84:df:52:31:01:fe:a3: 70:69:16:ad:90:b1:6d:4d:eb:66:bd:67:0f:20:5e:88:4f:13: 2c:a8:ac:b1:f6:1b:34:5d:e1:e0:34:d8:94:3c:26:48:c7:bb: 79:9d:d5:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULmnIyrZyLgpL0iwEm3vf4hE4xAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA1MDMzWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTM1OGJlNjNmMWFhOTkzZTkwODNhNWU2NGRiOTdkN2Rk Y2FlMjI4NDM0M2RlODM4ODdlNTdjMmJmNjM1NjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz6+09Qq4z5/Zb3FVxwAjDHtFn9b9xdn+8SLhH0rsmdEQG 3/awugfXKtkq/W4vucjoXL3aoIGA5jG9Aeaj5I6fQbMtMCbL6zWONm3gr1ShjIcl eTbyz2JRSj7H2qUO7BUq792DizDE63cr5ixVwZi9BHv5+MM/4ldv/4VnAB+5HBpS IBDG6EBZmIlkoaSvefkV3wq0F8yJMTIXv6RG0/ib/N+mPmwvLWuOXboq8eHhBIST z8ukL9jTHsEOfqIE//NjG7FDYWjLAbZrAQc4NX1SSK816HGcJaGNj1QX4AvAI1Tt 9QK0m2Qm2cd22WSJq+Pp3QYJm0v7j2ZOJ7xvqbEvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGjdzBagP8J34za1L1S/1G0+jOEgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4YzJiNzhlLThjNmMtNDMxMS1hNjhjLTIyNDZhNmZkMTQ1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADM7NgwDQYJKoZIhvcNAQELBQADggEBALa5+ElWfiHDOqvRyZ3E6dLCfjB4 1ab0BGXJUOqQLqJharbMBtqoHItpNpVVDV1zZykiNaarNLnwjhDm0GGdHwi2Jn6h wiS0Jb7q+Bs9Yb4f0qQU16O5E6DQAkHwYR5uroHzqvoqySBCac1DiHwLC8Mh77FE nY0Kp1SvXrVkOOOxjXUnpU4rlnsg/9ljWu+rMc7pj3Ggn6fjwhHN8HGP0T4gjqyl UceFeqyJFTd3tjSp5udBBbAcJKs5ljWaFf0Xn1ZpCS+ltSIDu6WXP4LrJJK9hN9S MQH+o3BpFq2QsW1N62a9Zw8gXohPEyyorLH2GzRd4eA02JQ8JkjHu3md1U8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:57 2025 by rpki-client