$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa File: b1374a67-dfa3-499e-88a9-33619dcae730.roa (raw, json) Hash identifier: +HgREQB47ozCxkd/Ki4w168H2MTQ10poFg487mj/IYM= Subject key identifier: 4C:DF:42:ED:62:4A:0E:16:B5:E0:45:F1:0C:5D:DD:5C:18:2C:72:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50EB18CE7F62DD7646A3064634E303748F1C24E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa Signing time: Mon 02 Jun 2025 15:00:53 +0000 ROA not before: Mon 02 Jun 2025 15:00:53 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:eb:18:ce:7f:62:dd:76:46:a3:06:46:34:e3:03:74:8f:1c:24:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:00:53 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=7b683c5b9ab88eda6db7c8ce20288c746252da7674af15d296576d36314439f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:3b:a6:8f:d0:2f:72:36:cd:8a:e0:b2:aa: 70:bc:5b:6f:44:16:ac:73:47:6b:a6:ed:6e:0b:28: 64:6a:09:c1:15:07:6a:d0:20:b2:75:de:66:a0:8a: d5:7b:d9:bc:f8:ea:c1:ef:97:92:56:23:d4:64:9b: 14:08:9f:ac:e3:c3:01:16:ed:cb:20:75:58:9f:a8: 36:8c:aa:9b:26:1d:2d:b9:ff:d4:52:d9:1d:53:85: af:68:26:88:43:63:75:2c:02:aa:80:e4:d2:3c:25: 89:33:21:d3:57:86:59:dd:2c:58:65:b8:44:7e:34: 43:3d:1d:e9:b8:36:6e:c3:6e:15:83:f5:3f:6f:5a: f4:80:64:54:93:10:ff:89:fc:53:00:92:d2:db:a2: aa:ac:f3:97:d2:2f:06:49:de:15:7f:eb:f2:da:28: 0d:60:e1:54:84:d6:b5:b1:22:d1:2f:1d:57:84:ea: f4:0b:64:3b:c5:68:a9:7d:93:54:5f:8e:fc:16:44: 47:bf:cc:7e:04:2d:5f:a5:36:93:d7:8d:0a:e2:92: fb:82:12:45:01:98:7f:17:68:df:c6:89:5e:3e:41: b5:de:c6:c2:bf:72:b3:9f:fe:26:ae:1a:fd:c9:fb: b0:49:b8:40:bd:c6:f7:3b:6c:68:f4:0f:8f:ab:1c: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:42:ED:62:4A:0E:16:B5:E0:45:F1:0C:5D:DD:5C:18:2C:72:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1374a67-dfa3-499e-88a9-33619dcae730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:6f:68:c7:35:15:6d:ed:27:96:72:1c:8e:97:32:53:d7:b1: 57:ff:88:b1:63:2c:32:60:6d:80:4c:80:d3:51:f0:d0:46:26: 4e:a4:f0:ca:24:9c:a6:7f:a9:ee:97:66:d3:c7:6f:ad:4f:eb: 21:86:bd:f3:34:71:f0:19:5d:2e:d4:8b:b2:96:69:ab:f2:1c: e2:92:a6:4d:dc:a5:3f:36:ce:5d:63:34:96:c7:f0:e2:26:bc: 8b:7d:4b:d8:96:36:c0:50:a3:90:02:52:a0:1c:42:eb:9b:0b: 99:cb:ea:91:66:76:37:0e:f2:48:11:c4:fd:ef:dc:ee:21:67: 1e:2b:ee:fc:44:d5:b2:85:4f:20:5b:38:7e:3e:78:fc:f5:9f: bd:a8:b2:c1:fe:07:13:8e:5a:e6:da:7f:d7:a1:3c:8f:ce:74: 43:0b:ec:76:fe:b7:86:ea:9c:15:ab:8a:4b:83:d2:4a:a1:43: 58:ae:33:88:3f:4d:8a:0b:82:bf:dd:18:63:0f:c9:4e:f4:83: c2:9a:55:08:c6:d0:0f:4a:eb:ad:69:85:0a:08:54:84:e6:e8: 72:90:55:a7:15:08:5d:15:f5:b5:35:af:a6:7e:d2:25:b9:2e: eb:69:10:60:6b:ca:2e:a1:34:43:0d:4e:1b:61:19:ff:bc:a0: 17:7f:b2:6f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUOsYzn9i3XZGowZGNOMDdI8cJOYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUwMDUzWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjY4M2M1YjlhYjg4ZWRhNmRiN2M4Y2UyMDI4OGM3NDYy NTJkYTc2NzRhZjE1ZDI5NjU3NmQzNjMxNDQzOWYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+LTumj9AvcjbNiuCyqnC8W29EFqxzR2um7W4LKGRqCcEV B2rQILJ13magitV72bz46sHvl5JWI9RkmxQIn6zjwwEW7csgdVifqDaMqpsmHS25 /9RS2R1Tha9oJohDY3UsAqqA5NI8JYkzIdNXhlndLFhluER+NEM9Hem4Nm7DbhWD 9T9vWvSAZFSTEP+J/FMAktLboqqs85fSLwZJ3hV/6/LaKA1g4VSE1rWxItEvHVeE 6vQLZDvFaKl9k1RfjvwWREe/zH4ELV+lNpPXjQrikvuCEkUBmH8XaN/GiV4+QbXe xsK/crOf/iauGv3J+7BJuEC9xvc7bGj0D4+rHC4fAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTN9C7WJKDha14EXxDF3dXBgscjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxMzc0YTY3LWRmYTMtNDk5ZS04OGE5LTMzNjE5ZGNhZTczMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANgDANBgkqhkiG9w0BAQsFAAOCAQEAWG9oxzUVbe0nlnIcjpcyU9exV/+I sWMsMmBtgEyA01Hw0EYmTqTwyiScpn+p7pdm08dvrU/rIYa98zRx8BldLtSLspZp q/Ic4pKmTdylPzbOXWM0lsfw4ia8i31L2JY2wFCjkAJSoBxC65sLmcvqkWZ2Nw7y SBHE/e/c7iFnHivu/ETVsoVPIFs4fj54/PWfvaiywf4HE45a5tp/16E8j850Qwvs dv63huqcFauKS4PSSqFDWK4ziD9NiguCv90YYw/JTvSDwppVCMbQD0rrrWmFCghU hObocpBVpxUIXRX1tTWvpn7SJbku62kQYGvKLqE0Qw1OG2EZ/7ygF3+ybw== -----END CERTIFICATE-----Generated at Sat Jun 14 06:31:28 2025 by rpki-client