$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0432d89e-91f1-496c-bcef-63c4e038da59.roa File: 0432d89e-91f1-496c-bcef-63c4e038da59.roa (raw, json) Hash identifier: FLgFvx8a6/H1NCMUZx94ZLrXrIYSv6OD/MlBfr+hvr4= Subject key identifier: CB:4F:D9:94:15:3A:FD:79:81:98:6C:AB:C0:6C:AF:40:29:CE:69:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62564BF89C4A2F9B4ED64617BD8DA1A86BE90016 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0432d89e-91f1-496c-bcef-63c4e038da59.roa Signing time: Tue 08 Jul 2025 00:31:01 +0000 ROA not before: Tue 08 Jul 2025 00:31:01 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 149.128.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:4b:f8:9c:4a:2f:9b:4e:d6:46:17:bd:8d:a1:a8:6b:e9:00:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:31:01 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=62321c171499180d6933377db501d68c97649afc957854acef1ad7f4877aeda5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:bc:d0:e5:0d:3a:73:b2:12:42:48:ed:db: 46:97:cc:c7:13:92:58:bc:c3:a4:8c:aa:4d:fe:79: d6:83:d5:57:bc:06:d0:6b:ee:19:00:4a:90:ca:c7: 1c:17:ec:ea:46:80:28:ef:fc:f7:ee:ce:e0:d0:77: 34:6c:b6:2a:45:cc:2d:11:ab:1c:ad:e2:75:fa:27: 8e:29:73:f1:72:34:b4:b7:28:4f:8b:b7:a3:8e:b6: 9a:9a:91:ee:6a:f6:23:d9:52:21:76:af:d1:91:5e: c3:39:df:dd:c6:c1:1a:fc:76:5f:e0:6f:14:57:2a: cc:d3:df:e1:31:17:66:a7:d0:fb:94:ee:2b:d4:a4: 42:93:89:39:b2:f2:ee:54:cd:fb:76:90:4a:9f:f0: e6:cd:02:63:c7:1e:ba:b8:0c:77:59:17:84:2a:c9: db:af:57:f1:65:13:1e:cd:ec:c5:ef:ca:22:e7:d7: d6:fc:66:c2:fd:49:3e:47:a9:b2:82:db:4d:ac:ec: ac:99:11:98:82:9f:24:5b:d3:40:04:49:0a:9d:e8: 9d:4e:d9:3d:57:bf:bb:3f:82:5b:72:fb:5b:4e:56: 14:19:be:fe:af:ab:a1:48:93:00:0a:a9:15:91:ad: a0:cd:66:e0:79:10:6c:5f:f1:f1:70:10:6c:f0:cd: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:D9:94:15:3A:FD:79:81:98:6C:AB:C0:6C:AF:40:29:CE:69:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0432d89e-91f1-496c-bcef-63c4e038da59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption a7:ef:51:e1:70:bf:ec:de:11:99:f7:1d:bf:c9:7e:b2:dc:41: 94:7a:97:df:d7:54:f6:6e:0f:f6:bf:6a:eb:46:f6:28:93:78: 01:f4:56:a2:3e:c4:9e:50:40:57:ec:49:60:24:69:a8:c7:72: 32:c0:83:87:fa:f3:90:4f:d0:84:a1:26:93:2b:ae:64:ae:2d: 4b:81:47:2a:b2:f0:06:94:a3:d2:55:6e:00:74:1c:06:42:86: 16:24:28:92:01:c5:d9:c8:2e:a1:fd:e7:00:87:18:81:c3:59: f1:fc:35:4f:9a:91:98:2c:de:f0:8a:11:d6:5f:08:2b:14:fb: a4:ee:96:0c:2f:d8:d5:53:09:51:91:a0:2d:c9:8d:0d:e2:b5: ae:4a:7d:de:d2:90:69:23:9b:45:66:c6:ea:80:08:d7:f5:23: 16:fc:bd:1c:8e:c9:3e:3b:78:7b:66:19:c8:39:94:81:a3:ea: ac:01:37:1c:6b:1e:58:28:d6:47:14:5b:76:73:96:3f:9e:c6: bd:4f:e0:61:cb:95:dc:c1:90:09:c3:48:74:81:11:93:61:9c: 9b:06:11:f8:f5:32:a6:94:44:ab:14:a5:ea:30:aa:53:ac:fb: 90:dd:48:ae:4a:98:75:9b:04:a4:6c:55:f8:5d:4b:cf:de:0f: fd:a1:aa:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYlZL+JxKL5tO1kYXvY2hqGvpABYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAzMTAxWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjMyMWMxNzE0OTkxODBkNjkzMzM3N2RiNTAxZDY4Yzk3 NjQ5YWZjOTU3ODU0YWNlZjFhZDdmNDg3N2FlZGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbXbzQ5Q06c7ISQkjt20aXzMcTkli8w6SMqk3+edaD1Ve8 BtBr7hkASpDKxxwX7OpGgCjv/PfuzuDQdzRstipFzC0Rqxyt4nX6J44pc/FyNLS3 KE+Lt6OOtpqake5q9iPZUiF2r9GRXsM5393GwRr8dl/gbxRXKszT3+ExF2an0PuU 7ivUpEKTiTmy8u5Uzft2kEqf8ObNAmPHHrq4DHdZF4QqyduvV/FlEx7N7MXvyiLn 19b8ZsL9ST5HqbKC202s7KyZEZiCnyRb00AESQqd6J1O2T1Xv7s/glty+1tOVhQZ vv6vq6FIkwAKqRWRraDNZuB5EGxf8fFwEGzwzSa1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy0/ZlBU6/XmBmGyrwGyvQCnOaUEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0MzJkODllLTkxZjEtNDk2Yy1iY2VmLTYzYzRlMDM4ZGE1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaVgEAwDQYJKoZIhvcNAQELBQADggEBAKfvUeFwv+zeEZn3Hb/JfrLcQZR6 l9/XVPZuD/a/autG9iiTeAH0VqI+xJ5QQFfsSWAkaajHcjLAg4f685BP0IShJpMr rmSuLUuBRyqy8AaUo9JVbgB0HAZChhYkKJIBxdnILqH95wCHGIHDWfH8NU+akZgs 3vCKEdZfCCsU+6Tulgwv2NVTCVGRoC3JjQ3ita5Kfd7SkGkjm0VmxuqACNf1Ixb8 vRyOyT47eHtmGcg5lIGj6qwBNxxrHlgo1kcUW3Zzlj+exr1P4GHLldzBkAnDSHSB EZNhnJsGEfj1MqaURKsUpeowqlOs+5DdSK5KmHWbBKRsVfhdS8/eD/2hqng= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:59 2025 by rpki-client