$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa File: f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa (raw, json) Hash identifier: g3hG5ESKewEaBHTSYg26UupaMDPMP2mCN1PpsV4pc0M= Subject key identifier: CC:15:AD:11:AC:EF:73:5C:2D:5C:E6:D2:C1:BA:22:FD:6D:1A:FC:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D38AF3988ECA2B08991457C47777538720BC7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa Signing time: Fri 13 Jun 2025 16:11:26 +0000 ROA not before: Fri 13 Jun 2025 16:11:26 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 162.222.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:38:af:39:88:ec:a2:b0:89:91:45:7c:47:77:75:38:72:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 16:11:26 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=cefcab82dcec3e97bbd853c15090a033b6f235b559b15f98a03fd390ccb3db4f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:70:ae:96:e5:96:df:b5:08:ff:6c:cf:b0: 57:18:bc:b3:89:34:e9:4b:6e:48:a8:88:45:14:9f: a4:eb:f7:71:2e:70:6e:57:39:96:9b:86:f7:ba:91: 87:47:c2:5c:a7:ce:18:2e:87:46:19:74:8d:5f:59: 68:69:4c:86:c5:c3:48:1f:1d:a9:77:34:f4:45:a9: d8:0d:d1:e9:1e:e1:04:11:7f:2b:6c:0b:4e:f2:68: 2d:96:4c:2a:bc:4a:ea:44:41:46:6f:0c:17:a1:95: 5f:ca:3c:27:03:0d:62:1a:8e:64:47:8f:a8:35:58: 08:93:52:df:89:70:7d:38:f7:45:d7:bf:9c:b0:35: 2f:b7:69:c5:ac:0a:92:f8:a4:71:5d:0f:eb:d5:2e: 56:53:2e:ba:44:43:4a:19:6b:92:04:89:73:f2:0a: f5:31:2d:7e:11:6c:ab:6b:0c:e8:01:e8:01:8e:72: 6f:63:36:42:d5:fd:53:d1:d3:bb:2a:b1:1f:e4:9b: 53:9e:8c:57:da:cd:37:10:8a:a8:75:c3:15:33:7a: f3:9d:13:ba:ba:65:f5:45:5d:18:be:60:19:02:57: c3:e2:43:08:6a:bc:fc:da:bc:d4:e9:b2:08:23:d5: 1d:6b:a7:5e:a6:c8:43:e7:77:be:94:81:46:d6:42: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:15:AD:11:AC:EF:73:5C:2D:5C:E6:D2:C1:BA:22:FD:6D:1A:FC:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87e1452-0bf6-4b5e-a5dc-b482f699f6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.222.148.0/23 Signature Algorithm: sha256WithRSAEncryption 79:77:15:52:5f:d8:bc:d0:84:6e:31:c7:7c:c3:9f:7e:a1:ae: 00:10:27:b6:99:35:3d:e8:bb:bc:59:14:5b:90:51:2d:d5:b4: 01:80:4e:ab:7b:37:90:15:43:78:6d:98:d1:74:ee:3b:ad:d1: cd:ba:a7:51:85:6c:ae:fd:7a:ac:cd:2b:e9:1c:a2:c9:90:cb: ce:8a:6e:7e:ed:e2:b9:4a:2e:48:8d:b6:9d:5b:9f:fe:fa:c2: 47:ef:2f:c7:2f:93:8d:bd:d7:4c:1d:e2:33:e1:f1:f5:ac:db: 3e:ac:f2:ef:5b:e1:2a:ec:2d:52:6d:dd:23:df:fc:16:14:53: 07:1c:51:b4:e4:56:8d:a8:38:7c:80:5f:9d:54:ba:a9:1a:87: 8f:94:f6:29:fc:57:24:94:bf:a0:e0:95:5b:9e:45:b4:d3:46: 20:5e:9e:31:16:3e:8d:44:59:01:36:a3:5c:01:cf:6a:75:a6: 43:4d:7d:a3:61:07:26:f1:fa:6d:3c:ac:ca:bc:04:96:12:f4: 2e:3d:dc:cd:b9:26:d8:66:54:15:f9:48:d8:1f:75:5b:2e:75: 19:d5:9e:2c:30:4c:aa:2e:0e:56:b7:68:b4:9a:41:3a:16:79: 57:ea:e6:a5:79:a3:23:fe:d4:25:4d:45:e7:a0:69:76:7b:d7: c7:e8:62:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITHTivOYjsorCJkUV8R3d1OHILxzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA2MTMxNjExMjZaFw0yNTA3MTgyMzU5NTla MHoxSTBHBgNVBAUTQGNlZmNhYjgyZGNlYzNlOTdiYmQ4NTNjMTUwOTBhMDMzYjZm MjM1YjU1OWIxNWY5OGEwM2ZkMzkwY2NiM2RiNGYxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOdncK6W5ZbftQj/bM+wVxi8s4k06UtuSKiIRRSfpOv3cS5w blc5lpuG97qRh0fCXKfOGC6HRhl0jV9ZaGlMhsXDSB8dqXc09EWp2A3R6R7hBBF/ K2wLTvJoLZZMKrxK6kRBRm8MF6GVX8o8JwMNYhqOZEePqDVYCJNS34lwfTj3Rde/ nLA1L7dpxawKkvikcV0P69UuVlMuukRDShlrkgSJc/IK9TEtfhFsq2sM6AHoAY5y b2M2QtX9U9HTuyqxH+SbU56MV9rNNxCKqHXDFTN6850Turpl9UVdGL5gGQJXw+JD CGq8/Nq81OmyCCPVHWunXqbIQ+d3vpSBRtZCzaMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTMFa0RrO9zXC1c5tLBuiL9bRr85TAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZjg3ZTE0NTItMGJmNi00YjVlLWE1ZGMtYjQ4MmY2OTlmNmI5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAaLelDANBgkqhkiG9w0BAQsFAAOCAQEAeXcVUl/YvNCEbjHHfMOffqGuABAn tpk1Pei7vFkUW5BRLdW0AYBOq3s3kBVDeG2Y0XTuO63RzbqnUYVsrv16rM0r6Ryi yZDLzopufu3iuUouSI22nVuf/vrCR+8vxy+Tjb3XTB3iM+Hx9azbPqzy71vhKuwt Um3dI9/8FhRTBxxRtORWjag4fIBfnVS6qRqHj5T2KfxXJJS/oOCVW55FtNNGIF6e MRY+jURZATajXAHPanWmQ019o2EHJvH6bTysyrwElhL0Lj3czbkm2GZUFflI2B91 Wy51GdWeLDBMqi4OVrdotJpBOhZ5V+rmpXmjI/7UJU1F56BpdnvXx+hi4Q== -----END CERTIFICATE-----Generated at Sat Jun 14 06:35:12 2025 by rpki-client