$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa File: bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa (raw, json) Hash identifier: l+d3tGyJQJcHrXeh1Nb+9+suPJ8lDjJxN0nZdIk9X/A= Subject key identifier: 0D:E3:E6:AE:FC:8A:8E:9B:D7:55:28:F6:2D:3F:22:6B:94:B3:03:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31CE254DDF7CEC53ABF7CAF44492EA65EFB773AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa Signing time: Mon 02 Jun 2025 15:10:17 +0000 ROA not before: Mon 02 Jun 2025 15:10:17 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 143.171.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ce:25:4d:df:7c:ec:53:ab:f7:ca:f4:44:92:ea:65:ef:b7:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 2 15:10:17 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=82042dcb407db1bafd0187641eb3d7e88d195cb840993870d88268687572f35e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:b3:f0:ba:fc:41:2c:6f:6d:6c:46:61:3d: cb:4c:df:03:d9:75:8a:70:14:44:a0:92:3b:a7:e9: 99:c1:a9:dc:86:52:f0:d5:42:63:6c:4d:3b:a6:d3: fa:10:dd:83:91:74:63:50:63:73:b7:78:24:0a:be: b4:74:6f:85:34:af:55:35:44:27:1a:c9:48:fa:5d: eb:9a:82:04:45:c5:cd:76:c7:c0:84:c4:09:48:de: a1:8e:56:19:b8:63:d8:6d:2d:86:39:be:1a:a1:70: 2b:d3:de:e7:a3:3d:98:27:db:51:b0:5b:12:f9:e6: 97:07:eb:97:02:19:c1:cd:dd:45:4f:bf:89:f5:76: c3:bf:f1:1e:5f:fb:1f:44:6b:e6:c0:cb:d5:96:44: cf:30:2a:37:d7:07:a8:ee:02:ea:13:b6:c8:34:f7: bc:51:1e:30:96:63:b3:4f:5d:4f:0f:27:01:9c:cd: 55:68:76:3b:6c:9a:4c:41:7e:5f:05:91:01:8d:d2: f7:14:c6:98:42:0b:67:fc:3f:7d:76:56:46:56:b9: 1f:5e:41:65:6a:ba:68:b9:5e:50:e0:04:f5:58:2e: 9e:2c:f4:08:52:fe:6c:4a:56:89:32:f8:a9:9a:f7: f3:4a:44:e0:db:93:3d:1d:69:b3:38:c7:8d:16:44: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:E6:AE:FC:8A:8E:9B:D7:55:28:F6:2D:3F:22:6B:94:B3:03:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:cc:05:58:5d:15:5b:65:f8:d4:53:c9:cb:ce:56:ea:1d:2e: 37:11:8b:3e:e0:fc:af:f3:e0:ee:46:86:42:ea:38:b0:3e:83: 32:a7:f2:ec:d2:d4:cb:4d:e4:7a:a7:07:20:90:b0:34:ad:e6: 3d:fd:a8:1e:31:1d:48:a6:d9:41:07:1a:35:5c:42:b6:b7:6a: 70:c0:34:c7:07:ba:0b:32:b7:f1:91:41:6a:39:d8:df:bd:f5: f3:82:83:24:36:fd:c5:93:7a:73:02:fc:06:95:fb:92:82:ac: 42:3f:1a:f5:55:b2:04:58:f7:43:e2:2f:54:f7:fd:dd:d3:29: 4c:6c:1a:63:45:ad:fe:be:98:50:29:91:74:65:ba:07:82:a2: 29:53:02:52:56:5e:66:6b:e9:94:2f:7c:15:62:32:82:ff:fa: 9b:54:b6:03:b5:f5:09:31:27:f3:e4:bb:a6:68:fe:86:a7:1f: ee:1b:f1:84:0c:91:5a:cf:57:51:47:e5:bf:df:4a:15:84:7f: 76:bc:57:a1:c7:96:9e:ed:51:b1:61:cc:cf:43:20:ef:5d:cd: c4:6d:d9:aa:65:66:1c:e2:8e:ca:21:18:08:dd:ad:f5:e1:04: de:85:ba:3a:ea:12:97:fe:7b:f2:c0:2c:5e:13:a4:de:9c:92: 39:10:9b:34 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMc4lTd987FOr98r0RJLqZe+3c6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAyMTUxMDE3WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjA0MmRjYjQwN2RiMWJhZmQwMTg3NjQxZWIzZDdlODhk MTk1Y2I4NDA5OTM4NzBkODgyNjg2ODc1NzJmMzVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC7LPwuvxBLG9tbEZhPctM3wPZdYpwFESgkjun6ZnBqdyG UvDVQmNsTTum0/oQ3YORdGNQY3O3eCQKvrR0b4U0r1U1RCcayUj6XeuaggRFxc12 x8CExAlI3qGOVhm4Y9htLYY5vhqhcCvT3uejPZgn21GwWxL55pcH65cCGcHN3UVP v4n1dsO/8R5f+x9Ea+bAy9WWRM8wKjfXB6juAuoTtsg097xRHjCWY7NPXU8PJwGc zVVodjtsmkxBfl8FkQGN0vcUxphCC2f8P312VkZWuR9eQWVqumi5XlDgBPVYLp4s 9AhS/mxKVoky+Kma9/NKRODbkz0dabM4x40WRLUFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDePmrvyKjpvXVSj2LT8ia5SzA90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkMWYxYzhhLTRjOTAtNDMzMS1hMzljLTU3MGY3Yjc5YWQ1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCPqzANBgkqhkiG9w0BAQsFAAOCAQEAa8wFWF0VW2X41FPJy85W6h0uNxGL PuD8r/Pg7kaGQuo4sD6DMqfy7NLUy03keqcHIJCwNK3mPf2oHjEdSKbZQQcaNVxC trdqcMA0xwe6CzK38ZFBajnY373184KDJDb9xZN6cwL8BpX7koKsQj8a9VWyBFj3 Q+IvVPf93dMpTGwaY0Wt/r6YUCmRdGW6B4KiKVMCUlZeZmvplC98FWIygv/6m1S2 A7X1CTEn8+S7pmj+hqcf7hvxhAyRWs9XUUflv99KFYR/drxXoceWnu1RsWHMz0Mg 713NxG3ZqmVmHOKOyiEYCN2t9eEE3oW6OuoSl/578sAsXhOk3pySORCbNA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:36:29 2025 by rpki-client