$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa File: f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa (raw, json) Hash identifier: V/GFV+5w2QUcverOosf7PBdnuH5Q0b1q9k8H41X3u0Y= Subject key identifier: 6E:2E:CB:84:E1:26:CB:13:21:D3:53:28:AE:F4:D1:E6:C7:66:01:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65BB7B9355F2FD00FF269BC610650F174D8B21A0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa Signing time: Sat 14 Jun 2025 00:41:32 +0000 ROA not before: Sat 14 Jun 2025 00:41:32 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.210.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:bb:7b:93:55:f2:fd:00:ff:26:9b:c6:10:65:0f:17:4d:8b:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:41:32 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=6b7c4d2553161747be3f2ab926eaf76a36a6076f4da9f988a2ad5e428bdd0ef3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:93:ab:b3:ee:e5:69:fa:d2:92:ef:d5:da: 88:cf:0a:19:5d:3c:d4:d1:52:c0:ae:05:d9:77:c3: 85:65:43:93:a4:05:04:d3:be:17:97:af:fe:6e:0b: 72:23:46:f0:4b:cf:f8:65:b0:03:d2:8b:52:f3:83: a3:f4:e9:0d:8d:89:96:15:bd:74:59:a4:cf:79:6e: eb:88:79:52:d3:99:15:67:8a:cc:0c:f0:f6:b4:c1: 09:d0:e0:6d:14:73:9e:75:63:89:68:64:f1:52:bd: 1f:53:c7:9e:0e:38:a5:99:67:32:48:07:ef:83:e0: 9d:ba:89:b9:95:5c:fc:67:d8:04:f3:3d:d0:fe:d9: 06:a9:82:00:fd:d5:94:72:49:77:6a:8f:e8:ae:34: 10:82:9e:0d:9e:26:3f:f0:59:d5:2f:c3:7c:85:26: 7b:70:d7:76:d1:a8:c2:75:df:dd:63:c7:1d:57:b4: 4a:a2:1f:ff:27:94:01:d8:f1:b6:84:3e:f2:eb:00: a9:c6:eb:57:bb:85:0b:c7:a3:4e:fc:89:fb:8e:ae: bc:0d:07:82:c4:74:1d:78:78:cd:63:6c:da:77:55: f6:06:06:dd:6b:85:e5:bc:eb:c2:25:8b:18:03:52: 6e:5b:df:ff:e4:05:e5:7d:6a:1a:a8:2c:9d:b1:8b: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2E:CB:84:E1:26:CB:13:21:D3:53:28:AE:F4:D1:E6:C7:66:01:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26a96cd-95c9-4c5e-9d0c-fb439302a52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption b9:90:58:f4:33:a1:bc:04:17:fe:1f:d3:bc:08:7d:cb:56:35: 23:a7:4a:f9:a8:0e:c9:45:f6:88:3a:46:f1:3d:54:97:73:26: 65:56:b8:6b:b9:42:92:39:be:5e:e8:c8:aa:35:ce:a6:73:7e: 05:35:49:76:7a:2c:b0:b4:05:a1:97:a9:c5:06:6b:26:64:2d: 6e:1e:15:8e:b1:5b:94:c0:4f:8b:54:d6:d2:b4:b7:4c:ae:52: 24:0b:e7:df:89:38:81:fa:76:b0:8e:6e:55:18:7f:1f:1c:3b: 29:13:18:3d:20:36:c8:e8:19:23:b9:65:29:06:a9:81:ea:b9: 08:07:ce:1e:54:4f:e7:6f:64:33:58:58:bc:5a:9a:52:ce:14: 52:ae:c6:2d:5f:d3:f6:a5:92:43:25:ac:64:9e:ec:0d:cc:bd: 32:3c:1d:0e:a1:96:ab:5e:9a:d4:5e:b1:f9:d5:09:4c:63:8d: 8b:16:a2:a7:6b:a7:db:00:96:50:46:68:c4:4e:cd:64:84:e3: b8:70:36:48:10:0c:10:87:8e:42:53:98:10:8c:31:73:68:0b: f1:81:63:07:3a:9f:15:53:6b:10:26:c5:75:93:a4:22:79:40: d4:8c:a5:e8:1a:8d:cd:53:5a:ec:13:cd:db:4d:8b:74:a5:4e: 1e:a4:85:70 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZbt7k1Xy/QD/JpvGEGUPF02LIaAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MTMyWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjdjNGQyNTUzMTYxNzQ3YmUzZjJhYjkyNmVhZjc2YTM2 YTYwNzZmNGRhOWY5ODhhMmFkNWU0MjhiZGQwZWYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBr5Ors+7lafrSku/V2ojPChldPNTRUsCuBdl3w4VlQ5Ok BQTTvheXr/5uC3IjRvBLz/hlsAPSi1Lzg6P06Q2NiZYVvXRZpM95buuIeVLTmRVn iswM8Pa0wQnQ4G0Uc551Y4loZPFSvR9Tx54OOKWZZzJIB++D4J26ibmVXPxn2ATz PdD+2QapggD91ZRySXdqj+iuNBCCng2eJj/wWdUvw3yFJntw13bRqMJ1391jxx1X tEqiH/8nlAHY8baEPvLrAKnG61e7hQvHo078ifuOrrwNB4LEdB14eM1jbNp3VfYG Bt1rheW868IlixgDUm5b3//kBeV9ahqoLJ2xi2CBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbi7LhOEmyxMh01MorvTR5sdmAUcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyNmE5NmNkLTk1YzktNGM1ZS05ZDBjLWZiNDM5MzAyYTUyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo0jANBgkqhkiG9w0BAQsFAAOCAQEAuZBY9DOhvAQX/h/TvAh9y1Y1I6dK +agOyUX2iDpG8T1Ul3MmZVa4a7lCkjm+XujIqjXOpnN+BTVJdnossLQFoZepxQZr JmQtbh4VjrFblMBPi1TW0rS3TK5SJAvn34k4gfp2sI5uVRh/Hxw7KRMYPSA2yOgZ I7llKQapgeq5CAfOHlRP529kM1hYvFqaUs4UUq7GLV/T9qWSQyWsZJ7sDcy9Mjwd DqGWq16a1F6x+dUJTGONixaip2un2wCWUEZoxE7NZITjuHA2SBAMEIeOQlOYEIwx c2gL8YFjBzqfFVNrECbFdZOkInlA1Iyl6BqNzVNa7BPN202LdKVOHqSFcA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:49:48 2025 by rpki-client