$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07713a5d-4783-4fce-9ce6-4d8862eb914e.roa File: 07713a5d-4783-4fce-9ce6-4d8862eb914e.roa (raw, json) Hash identifier: 6B/yMdrdVISeZuSrDtq9e3EPrTs52apWQSKpuJiVIkM= Subject key identifier: 8B:A4:AD:35:72:99:8F:7E:13:F7:D0:26:75:44:6A:46:92:AE:76:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 101F73136C8F9AFE54A3B587EA22F01F23CC293E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07713a5d-4783-4fce-9ce6-4d8862eb914e.roa Signing time: Fri 11 Jul 2025 00:51:20 +0000 ROA not before: Fri 11 Jul 2025 00:51:20 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 75.2.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1f:73:13:6c:8f:9a:fe:54:a3:b5:87:ea:22:f0:1f:23:cc:29:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:51:20 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=e5dfaf292025ee390b2b26ea353930e8a077ffd1f5f91564a61bb4c7dbc4cbde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:ee:ba:b3:95:17:1f:aa:9f:81:96:35:c1: 9e:e9:54:8c:7d:b0:9a:a1:ae:3f:82:fb:6f:8e:ca: 74:40:9f:25:80:a4:d2:c8:97:2b:33:4c:e1:3a:49: 8c:02:c5:4d:0e:83:14:f9:81:27:4a:9f:4b:78:9e: 60:a8:3c:04:8d:f8:07:3a:fd:32:ee:7d:19:b1:72: 7e:99:11:e3:89:7f:82:8b:e7:d7:1f:6b:3e:ad:3c: fa:05:22:2d:ae:36:80:73:3a:40:f3:85:67:78:a7: ef:4e:20:bb:38:8a:83:ca:49:d2:69:d1:f6:8c:9d: f8:4b:9b:8b:82:bd:5a:b7:6b:99:60:ff:25:a7:9b: 58:18:6f:e7:0a:03:c5:ac:66:d0:08:bf:34:9a:c1: e1:d1:db:60:ff:aa:70:3f:c3:da:69:c9:7e:f6:2b: 35:3c:b8:4e:32:e5:a5:c4:f1:b3:f0:fe:aa:0d:03: 5d:df:33:46:a1:40:ea:da:6c:2c:11:8c:89:54:27: 81:38:c6:29:b4:c6:ba:83:4b:f1:a8:0f:b8:be:41: 4b:0b:5a:66:5b:cc:c7:0a:83:05:59:ea:a4:9e:15: 0f:b1:bf:54:0b:f1:4b:77:2f:1d:58:ad:9e:06:a1: a1:03:1f:45:11:97:c8:41:6c:a1:e3:d4:d8:4c:cc: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A4:AD:35:72:99:8F:7E:13:F7:D0:26:75:44:6A:46:92:AE:76:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07713a5d-4783-4fce-9ce6-4d8862eb914e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.128.0/18 Signature Algorithm: sha256WithRSAEncryption 7d:cc:15:f2:41:ad:f3:45:ab:f2:05:75:b1:e2:64:02:a1:ed: 76:60:89:c3:b3:e5:24:32:f1:5e:71:a8:3b:e6:55:67:1b:8c: 6d:43:22:40:a8:54:56:e9:53:67:4a:c7:b5:f2:53:65:a7:d9: 89:76:b4:aa:74:e1:e5:0d:75:29:6d:0c:c1:47:1b:f1:c4:c7: 60:e6:ae:ff:e5:04:43:a7:17:7c:1e:c8:77:f6:87:6a:02:f2: 22:45:fb:3f:71:82:84:4c:27:78:a1:f6:b0:ec:9c:50:d9:33: c0:96:80:7d:66:da:4d:74:35:ed:55:ab:91:f8:ad:2b:24:99: d6:ee:c0:8f:68:7b:76:8a:ab:07:64:89:22:80:21:8c:b2:4f: 5f:a4:c5:f6:a2:48:cd:5e:e1:c3:71:81:5d:b0:41:c8:25:1f: 8e:6d:66:26:a2:86:28:ca:35:51:e4:ce:75:e1:fa:a8:f2:31: a0:5a:da:a3:c7:33:45:7b:84:d6:d4:96:62:cb:d7:65:53:f1: e8:df:30:c0:fb:fe:0c:46:bc:91:f8:71:fc:18:45:7d:51:83: 70:58:95:dd:22:01:20:38:af:5e:da:43:41:b7:1b:df:09:06: bb:14:68:00:ac:92:f0:0f:a7:25:fb:c1:d8:65:39:46:91:ac: 09:17:83:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEB9zE2yPmv5Uo7WH6iLwHyPMKT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA1MTIwWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWRmYWYyOTIwMjVlZTM5MGIyYjI2ZWEzNTM5MzBlOGEw NzdmZmQxZjVmOTE1NjRhNjFiYjRjN2RiYzRjYmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDErO66s5UXH6qfgZY1wZ7pVIx9sJqhrj+C+2+OynRAnyWA pNLIlyszTOE6SYwCxU0OgxT5gSdKn0t4nmCoPASN+Ac6/TLufRmxcn6ZEeOJf4KL 59cfaz6tPPoFIi2uNoBzOkDzhWd4p+9OILs4ioPKSdJp0faMnfhLm4uCvVq3a5lg /yWnm1gYb+cKA8WsZtAIvzSaweHR22D/qnA/w9ppyX72KzU8uE4y5aXE8bPw/qoN A13fM0ahQOrabCwRjIlUJ4E4xim0xrqDS/GoD7i+QUsLWmZbzMcKgwVZ6qSeFQ+x v1QL8Ut3Lx1YrZ4GoaEDH0URl8hBbKHj1NhMzFz3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi6StNXKZj34T99AmdURqRpKudu8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3NzEzYTVkLTQ3ODMtNGZjZS05Y2U2LTRkODg2MmViOTE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZLAoAwDQYJKoZIhvcNAQELBQADggEBAH3MFfJBrfNFq/IFdbHiZAKh7XZg icOz5SQy8V5xqDvmVWcbjG1DIkCoVFbpU2dKx7XyU2Wn2Yl2tKp04eUNdSltDMFH G/HEx2Dmrv/lBEOnF3weyHf2h2oC8iJF+z9xgoRMJ3ih9rDsnFDZM8CWgH1m2k10 Ne1Vq5H4rSskmdbuwI9oe3aKqwdkiSKAIYyyT1+kxfaiSM1e4cNxgV2wQcglH45t ZiaihijKNVHkznXh+qjyMaBa2qPHM0V7hNbUlmLL12VT8ejfMMD7/gxGvJH4cfwY RX1Rg3BYld0iASA4r17aQ0G3G98JBrsUaACskvAPpyX7wdhlOUaRrAkXgw4= -----END CERTIFICATE-----Generated at Mon Jul 21 23:40:04 2025 by rpki-client