$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa File: f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa (raw, json) Hash identifier: iOvzKnKiE2+XlEv2ezvT8YhSjGliQHNgy7PcgTbT2PE= Subject key identifier: 4B:B8:1B:0F:EE:A9:05:B3:FC:2E:16:08:AD:37:4A:37:D8:79:55:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 614EB078F78E5FB8A776844CB887597D09C7A0AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa Signing time: Fri 13 Jun 2025 15:20:11 +0000 ROA not before: Fri 13 Jun 2025 15:20:11 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4e:b0:78:f7:8e:5f:b8:a7:76:84:4c:b8:87:59:7d:09:c7:a0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:20:11 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=166df5992ad9c2d2e33f85f73ae31d568189f4a837096375a8cbf943d1350b48, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:eb:16:1f:47:96:fa:00:3f:8b:8d:df:96: ed:5a:85:f5:1d:f2:b4:98:7c:98:53:4d:e5:f3:8d: 1b:0a:8f:65:da:ce:9b:40:92:b9:75:12:e8:4d:18: 43:63:cc:6a:34:30:16:d7:a2:4f:c7:18:e0:66:96: b3:f0:0a:e9:91:9f:10:cb:1b:11:9a:2a:2d:1c:f4: 00:c2:4f:13:d3:d9:1a:ee:72:a9:88:29:8e:6f:97: 31:71:30:3e:83:6d:66:59:b4:69:73:c9:39:11:3d: f8:f0:2b:3d:46:32:e8:66:da:af:6b:6f:2b:83:f9: 92:33:8d:35:ea:aa:84:14:59:de:91:d7:c8:96:57: 67:d5:7d:1f:29:01:c3:bd:5c:7c:15:4a:9b:3f:5d: f4:63:7c:dc:4d:07:7d:8d:0c:c5:87:8a:40:91:e2: 61:d9:34:2f:07:18:b8:cf:31:70:de:d9:91:b8:86: 29:57:48:b2:c6:26:35:70:5f:ae:75:c1:25:e2:73: d4:5e:d8:7c:4e:53:9b:89:36:70:d6:92:7b:46:98: 73:7c:12:0e:ae:2b:55:f5:cc:b0:0f:0c:6f:2d:d1: 1a:ab:3a:c6:74:5d:2e:d3:90:30:94:97:90:10:54: f1:72:db:b4:92:17:8b:03:7a:dc:62:f4:ed:e2:2f: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B8:1B:0F:EE:A9:05:B3:FC:2E:16:08:AD:37:4A:37:D8:79:55:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1ae60f1-f54f-42fc-bbea-ef4fda136b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.16.0/20 Signature Algorithm: sha256WithRSAEncryption 21:99:70:d3:3a:13:91:82:1a:96:4e:83:47:16:3f:24:0c:56: 76:0d:2a:4f:8b:fb:17:7d:01:23:02:1d:6d:03:7b:a8:e3:e7: d7:96:40:be:50:6a:1b:b8:1c:20:87:dc:23:6b:f2:2c:c7:69: d8:49:4c:8e:29:96:cc:14:c6:71:3f:6e:fe:29:db:ce:2d:8e: 2e:da:c4:8b:04:a2:8d:98:2a:73:de:8d:89:94:ba:35:80:e1: 48:b1:e8:ef:1b:94:57:e4:d8:2e:7b:dc:83:bd:00:b7:0f:6a: b4:d5:4e:10:7d:63:76:5f:50:2b:1f:f3:17:e6:c7:26:9f:7c: 2e:be:86:bf:4e:be:ad:42:3e:bf:43:2e:58:8d:04:ac:ca:89: 13:02:dc:4c:26:43:f6:e4:40:9b:3b:aa:aa:5b:7c:fe:7e:f5: 02:ef:ad:19:2e:2d:69:40:08:83:4c:ad:da:ad:3d:c6:91:66: 45:10:da:e2:05:6d:3b:62:ec:d2:66:f4:84:4a:3c:7a:82:a1: 93:df:83:42:bf:e2:57:47:d7:08:0f:6c:e7:e1:bf:de:ce:a0: 87:89:ac:bf:b9:7e:46:82:9e:13:fb:ad:fb:88:4c:11:33:05: 3c:bf:97:6f:d2:b1:92:4f:21:55:2c:c4:44:fb:56:cd:8b:37: 4f:dc:d2:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYU6wePeOX7indoRMuIdZfQnHoKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTUyMDExWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjZkZjU5OTJhZDljMmQyZTMzZjg1ZjczYWUzMWQ1Njgx ODlmNGE4MzcwOTYzNzVhOGNiZjk0M2QxMzUwYjQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvJ+sWH0eW+gA/i43flu1ahfUd8rSYfJhTTeXzjRsKj2Xa zptAkrl1EuhNGENjzGo0MBbXok/HGOBmlrPwCumRnxDLGxGaKi0c9ADCTxPT2Rru cqmIKY5vlzFxMD6DbWZZtGlzyTkRPfjwKz1GMuhm2q9rbyuD+ZIzjTXqqoQUWd6R 18iWV2fVfR8pAcO9XHwVSps/XfRjfNxNB32NDMWHikCR4mHZNC8HGLjPMXDe2ZG4 hilXSLLGJjVwX651wSXic9Re2HxOU5uJNnDWkntGmHN8Eg6uK1X1zLAPDG8t0Rqr OsZ0XS7TkDCUl5AQVPFy27SSF4sDetxi9O3iL1FJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS7gbD+6pBbP8LhYIrTdKN9h5VXEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxYWU2MGYxLWY1NGYtNDJmYy1iYmVhLWVmNGZkYTEzNmI1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBshAwDQYJKoZIhvcNAQELBQADggEBACGZcNM6E5GCGpZOg0cWPyQMVnYN Kk+L+xd9ASMCHW0De6jj59eWQL5Qahu4HCCH3CNr8izHadhJTI4plswUxnE/bv4p 284tji7axIsEoo2YKnPejYmUujWA4Uix6O8blFfk2C573IO9ALcParTVThB9Y3Zf UCsf8xfmxyaffC6+hr9Ovq1CPr9DLliNBKzKiRMC3EwmQ/bkQJs7qqpbfP5+9QLv rRkuLWlACINMrdqtPcaRZkUQ2uIFbTti7NJm9IRKPHqCoZPfg0K/4ldH1wgPbOfh v97OoIeJrL+5fkaCnhP7rfuITBEzBTy/l2/SsZJPIVUsxET7Vs2LN0/c0ow= -----END CERTIFICATE-----Generated at Sat Jun 14 06:49:54 2025 by rpki-client