$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa File: bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa (raw, json) Hash identifier: 9RvtbiutpZary4uVWbiGF+Wi3BO1Pm56Ylu6MdC8fi4= Subject key identifier: 72:74:A4:41:C1:F7:8D:E7:7E:6A:DB:1F:A4:5E:2A:FA:63:73:D7:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CF9E891647C9BCB29F2EF5E103846331C6A8DA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa Signing time: Fri 13 Jun 2025 16:11:31 +0000 ROA not before: Fri 13 Jun 2025 16:11:31 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 210.56.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f9:e8:91:64:7c:9b:cb:29:f2:ef:5e:10:38:46:33:1c:6a:8d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 16:11:31 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=d4a5b3ece3426d8fd39230dd4855e3533eee9ed80d3967d7d55ddd5234068f3f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7c:9d:92:5c:88:1d:34:cf:12:7a:e1:38:75: 6a:25:a4:1f:39:d6:4f:d9:00:7a:b1:43:23:09:72: f5:1e:01:6b:41:1e:f9:62:e4:12:33:33:3a:36:97: 54:96:e3:fc:76:95:58:e8:50:fc:de:ed:69:cd:09: cd:82:e1:e7:9a:de:e8:66:c1:40:2f:5d:1f:b3:f1: 7e:71:66:fd:94:b6:e7:cf:b3:26:1a:63:d2:a4:85: 4a:ec:e1:4c:13:bb:2e:30:0f:ae:17:9e:28:d7:20: 7c:cf:8e:42:65:b4:cb:47:27:ca:1d:06:a0:c3:a3: 65:18:6f:80:1d:36:cf:47:ef:c4:af:8f:5e:eb:fb: 69:77:c4:ef:f5:3f:54:51:1b:31:8b:25:3c:d6:74: 84:c5:79:a8:5d:a7:95:a3:f3:78:3e:e9:c3:74:1b: 61:5e:50:15:e2:09:59:3c:ff:90:2c:89:3e:b5:4c: 6c:06:2b:47:1d:c5:b3:d0:ce:00:ee:b3:10:0c:d1: 44:64:a1:86:7a:82:79:aa:de:d1:e6:16:db:7f:50: b4:4d:94:90:40:45:25:93:7c:2a:20:79:6a:43:f4: 83:fd:4a:f5:51:03:f0:ab:5d:08:55:1e:f8:82:dd: 36:25:d6:5f:98:58:e1:43:4b:7f:24:43:e2:36:3d: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:74:A4:41:C1:F7:8D:E7:7E:6A:DB:1F:A4:5E:2A:FA:63:73:D7:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb13ad1-7a36-42c3-8b21-306fc8f914b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.56.72.0/21 Signature Algorithm: sha256WithRSAEncryption 90:0b:d3:62:2e:24:47:5b:7e:cd:26:ad:83:4c:85:e3:70:5c: 92:81:2e:45:39:fe:b9:d9:55:bd:d8:25:23:bb:a5:58:c6:37: ad:b5:e0:d1:e6:90:91:83:e8:97:e9:16:50:8b:5c:3f:e3:4b: aa:d2:8a:c7:37:7f:28:e5:eb:d6:c4:b0:28:bf:8f:ac:4a:08: 2b:b3:7b:c9:1b:a1:99:4d:3d:80:a8:c4:9a:91:5f:97:62:15: 6a:e9:88:bd:b7:d8:35:75:3d:60:e8:90:f0:87:f5:c0:85:34: b7:e1:4d:ca:96:ac:18:d0:d7:fc:99:c0:3b:a0:26:30:b7:d5: 7d:de:1f:21:e6:da:8f:97:fb:8a:52:f4:53:bb:70:d9:2b:24: 09:db:45:9f:ac:55:6b:a8:e9:e7:a9:3b:6e:6d:ec:c4:de:a2: 04:8f:25:d5:ee:aa:fe:12:6e:1e:2f:a1:a7:9c:ae:1e:6e:8a: f9:88:51:40:1e:42:0b:f0:e0:d8:7a:d1:5b:d9:2e:38:75:a4: 1d:f7:0e:0a:60:18:df:7c:c9:6d:03:b7:30:9f:fc:7b:6c:fd: 2d:54:f8:a4:a5:c2:2c:15:8c:8b:df:0a:eb:3d:45:33:df:07: f4:d9:19:13:b8:63:79:02:99:ed:a2:9c:b2:7c:48:5a:0b:6a: 0e:65:77:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfPnokWR8m8sp8u9eEDhGMxxqjaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTYxMTMxWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGE1YjNlY2UzNDI2ZDhmZDM5MjMwZGQ0ODU1ZTM1MzNl ZWU5ZWQ4MGQzOTY3ZDdkNTVkZGQ1MjM0MDY4ZjNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsfJ2SXIgdNM8SeuE4dWolpB851k/ZAHqxQyMJcvUeAWtB Hvli5BIzMzo2l1SW4/x2lVjoUPze7WnNCc2C4eea3uhmwUAvXR+z8X5xZv2UtufP syYaY9KkhUrs4UwTuy4wD64XnijXIHzPjkJltMtHJ8odBqDDo2UYb4AdNs9H78Sv j17r+2l3xO/1P1RRGzGLJTzWdITFeahdp5Wj83g+6cN0G2FeUBXiCVk8/5AsiT61 TGwGK0cdxbPQzgDusxAM0URkoYZ6gnmq3tHmFtt/ULRNlJBARSWTfCogeWpD9IP9 SvVRA/CrXQhVHviC3TYl1l+YWOFDS38kQ+I2PX11AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcnSkQcH3jed+atsfpF4q+mNz1zUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkYjEzYWQxLTdhMzYtNDJjMy04YjIxLTMwNmZjOGY5MTRiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPSOEgwDQYJKoZIhvcNAQELBQADggEBAJAL02IuJEdbfs0mrYNMheNwXJKB LkU5/rnZVb3YJSO7pVjGN6214NHmkJGD6JfpFlCLXD/jS6rSisc3fyjl69bEsCi/ j6xKCCuze8kboZlNPYCoxJqRX5diFWrpiL232DV1PWDokPCH9cCFNLfhTcqWrBjQ 1/yZwDugJjC31X3eHyHm2o+X+4pS9FO7cNkrJAnbRZ+sVWuo6eepO25t7MTeogSP JdXuqv4Sbh4voaecrh5uivmIUUAeQgvw4Nh60VvZLjh1pB33DgpgGN98yW0DtzCf /Hts/S1U+KSlwiwVjIvfCus9RTPfB/TZGRO4Y3kCme2inLJ8SFoLag5ld+Y= -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:55 2025 by rpki-client