$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa File: c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa (raw, json) Hash identifier: 1+sf9auZjx6VEp1i6htRULc6NfXL7W7oVrG+teozbIE= Subject key identifier: 59:83:D7:49:DB:74:E9:9A:83:55:FD:ED:69:3B:07:A0:68:58:D6:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D319FA15A2B7195DDCF6801361C5FBAE3528967 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa Signing time: Sat 07 Jun 2025 00:20:20 +0000 ROA not before: Sat 07 Jun 2025 00:20:20 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 182.236.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:31:9f:a1:5a:2b:71:95:dd:cf:68:01:36:1c:5f:ba:e3:52:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 7 00:20:20 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=0e1a141f62ca4967ee666a56616d74ce2655dd8c7575f2229e0f6c5a5483df5a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:5c:a9:31:2d:8f:ef:4a:18:bb:55:42:0b: ab:4b:de:35:84:fe:8f:e4:b0:52:37:72:d2:a0:67: 4b:3b:cc:81:b3:5c:fe:75:fb:56:69:9a:43:f6:9d: 1d:18:11:68:e1:c2:9a:4e:35:07:77:b2:e9:83:be: e8:eb:78:3f:0d:24:f9:8e:15:37:09:61:e1:b9:98: 5e:2a:1e:8f:af:de:10:ff:89:c9:22:23:8a:e0:f2: 45:cb:e4:e6:2a:8f:3f:dc:e1:cd:dd:12:a5:44:cc: 53:fc:77:1d:6c:6e:b0:f4:cb:2c:43:8b:f3:2f:2f: d4:e7:9d:30:f8:5a:36:50:45:b8:f2:54:56:d8:c1: 20:55:3f:28:7d:f4:ec:5c:00:ef:00:a0:a3:b5:23: 2b:2e:df:cb:45:0b:66:f2:af:82:13:d1:7a:c1:35: ed:d4:bd:7f:e4:94:6f:90:34:8a:04:5f:2d:e1:28: a9:af:da:c1:99:0a:9c:df:a3:c7:f5:6d:d0:9c:f9: 88:4a:9e:5c:46:45:e9:7d:bb:4d:43:4c:02:e8:4e: 9e:57:32:e2:61:f7:6a:82:42:7d:55:1f:b1:53:3c: a5:25:2c:a7:db:a3:8a:d5:8f:66:48:72:49:d8:c8: b0:e3:01:d8:7e:fc:54:8b:29:14:5a:39:f9:a7:4d: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:83:D7:49:DB:74:E9:9A:83:55:FD:ED:69:3B:07:A0:68:58:D6:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1837eea-8b99-4b2d-b07e-1632d9f0d1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.236.118.0/23 Signature Algorithm: sha256WithRSAEncryption c9:1d:27:cb:e2:5c:94:30:c2:58:f7:bd:28:8a:b4:3f:87:f3: 30:37:3e:fa:44:17:d0:f0:8d:0a:24:d8:e0:2b:a9:24:3a:76: 83:41:9e:d3:98:a4:7a:a1:30:93:ad:71:cb:1f:5b:02:03:a9: c6:d4:8a:52:5f:08:c3:72:77:8e:0f:4d:1f:44:38:42:dc:3d: 5c:b3:ec:3d:a7:0b:18:a4:a3:44:25:87:8e:17:12:f4:91:d5: 3f:80:93:3f:2c:8d:6a:ff:74:06:f1:f0:a1:47:e1:5e:71:e3: d9:3c:6a:28:15:ed:dd:8c:2e:f4:4e:b9:b7:54:84:54:21:6c: e0:a3:a8:e5:ed:64:8f:4d:a0:b8:b6:8f:67:a6:7a:13:f9:12: 2e:b9:7a:4f:91:7b:be:04:cb:d3:ad:35:b7:2a:e7:b0:e6:ba: 7a:cf:f1:59:18:bf:bc:30:57:bd:b6:52:52:c2:66:ca:2a:fc: ea:e7:77:16:4e:53:dd:71:56:57:04:62:7b:f9:22:31:81:11: 3a:d8:7e:b0:3c:8a:a9:2c:9c:f8:db:43:fa:46:3a:2e:01:04: 07:95:e1:5a:28:6a:d8:ba:f2:7f:ed:18:ee:a9:c7:34:f0:cb: be:94:31:8c:5c:9d:3e:94:3c:1b:73:18:7d:8f:bf:59:5d:b2: 8e:79:30:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHTGfoVorcZXdz2gBNhxfuuNSiWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA3MDAyMDIwWhcNMjUwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTFhMTQxZjYyY2E0OTY3ZWU2NjZhNTY2MTZkNzRjZTI2 NTVkZDhjNzU3NWYyMjI5ZTBmNmM1YTU0ODNkZjVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRDVypMS2P70oYu1VCC6tL3jWE/o/ksFI3ctKgZ0s7zIGz XP51+1ZpmkP2nR0YEWjhwppONQd3sumDvujreD8NJPmOFTcJYeG5mF4qHo+v3hD/ ickiI4rg8kXL5OYqjz/c4c3dEqVEzFP8dx1sbrD0yyxDi/MvL9TnnTD4WjZQRbjy VFbYwSBVPyh99OxcAO8AoKO1Iysu38tFC2byr4IT0XrBNe3UvX/klG+QNIoEXy3h KKmv2sGZCpzfo8f1bdCc+YhKnlxGRel9u01DTALoTp5XMuJh92qCQn1VH7FTPKUl LKfbo4rVj2ZIcknYyLDjAdh+/FSLKRRaOfmnTRB7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWYPXSdt06ZqDVf3taTsHoGhY1hAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxODM3ZWVhLThiOTktNGIyZC1iMDdlLTE2MzJkOWYwZDFmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG27HYwDQYJKoZIhvcNAQELBQADggEBAMkdJ8viXJQwwlj3vSiKtD+H8zA3 PvpEF9DwjQok2OArqSQ6doNBntOYpHqhMJOtccsfWwIDqcbUilJfCMNyd44PTR9E OELcPVyz7D2nCxiko0Qlh44XEvSR1T+Akz8sjWr/dAbx8KFH4V5x49k8aigV7d2M LvROubdUhFQhbOCjqOXtZI9NoLi2j2emehP5Ei65ek+Re74Ey9OtNbcq57DmunrP 8VkYv7wwV722UlLCZsoq/OrndxZOU91xVlcEYnv5IjGBETrYfrA8iqksnPjbQ/pG Oi4BBAeV4Vooati68n/tGO6pxzTwy76UMYxcnT6UPBtzGH2Pv1ldso55MIc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:34:16 2025 by rpki-client