$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07dc4f6d-7b9d-49fa-9765-75c8f4dab02a.roa File: 07dc4f6d-7b9d-49fa-9765-75c8f4dab02a.roa (raw, json) Hash identifier: fUPaz5K8zji8EKuLaUAtkNL0PKPJhYIEGsm4QcAT/4g= Subject key identifier: B7:53:6E:B3:3B:29:F6:64:21:91:CB:40:41:7E:63:E7:87:44:59:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33D4F3F6F71D615D00D124500F3F6F341CE35CD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07dc4f6d-7b9d-49fa-9765-75c8f4dab02a.roa Signing time: Mon 14 Jul 2025 15:02:10 +0000 ROA not before: Mon 14 Jul 2025 15:02:10 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.76.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d4:f3:f6:f7:1d:61:5d:00:d1:24:50:0f:3f:6f:34:1c:e3:5c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:02:10 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=638e2a4054a9aee48742cc4d2d43437ed821965709d198baf26848b00f2e2cde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:39:4f:b4:64:ad:bb:56:ba:81:42:76:d7: e0:13:5e:b0:4d:7b:72:ce:6a:f0:eb:85:c8:45:4d: fa:af:f8:cb:aa:f6:63:e7:dc:e6:e1:94:0a:d8:26: 6a:58:50:e4:fe:28:80:e6:d1:b9:7f:99:1b:34:8e: be:5e:09:21:f9:86:e7:60:86:9f:8c:77:16:13:33: 66:ff:52:b8:da:b8:2d:5a:0e:70:54:4f:73:4f:c2: 2f:27:a9:31:ed:d5:60:26:0a:07:3a:34:29:02:93: ac:b3:cb:2e:00:b6:76:a0:6f:68:30:54:ba:6d:32: ea:f5:a0:d8:6f:b1:54:64:11:58:3d:43:ed:43:56: bb:10:a7:02:47:e8:f5:9b:71:4b:9e:e3:e5:ea:5c: e4:de:88:c3:ad:c2:07:f7:54:6a:0a:eb:ea:57:b3: ce:12:6a:fa:bb:fc:c8:72:ef:bf:a0:f2:fe:a6:bd: 64:18:3c:b1:29:fd:0e:b8:d0:38:c4:cc:a3:98:d3: 7e:71:0b:d0:67:e3:d0:71:1a:94:61:38:a8:eb:ba: 4b:29:66:f1:17:cb:14:e2:5f:a0:a8:c7:dd:0f:12: 4c:5b:ae:c1:11:9c:4e:b2:35:f8:f9:1e:58:58:39: 05:6f:5f:f4:ea:51:46:60:3a:a2:2f:8a:87:3c:bc: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:53:6E:B3:3B:29:F6:64:21:91:CB:40:41:7E:63:E7:87:44:59:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07dc4f6d-7b9d-49fa-9765-75c8f4dab02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.76.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:35:fc:20:7f:39:78:f8:ef:60:7e:74:07:73:97:0e:53:18: 60:14:ee:c5:56:1a:88:5c:96:a9:7f:9b:7b:3d:ec:cb:08:d2: fb:23:5b:42:6d:fd:a2:ba:75:5e:c4:71:b1:65:5c:9b:cd:d6: cf:22:2e:78:72:85:73:c7:8d:43:00:6b:04:da:5e:00:15:78: 55:a6:a3:58:35:a4:c6:56:84:b8:b5:ae:08:dc:3e:76:1b:a6: 85:5f:d5:2d:aa:ee:c0:6c:f1:8a:40:10:ce:51:c7:ea:43:54: 26:a1:f2:bd:3b:bf:22:f5:19:56:f3:f2:f5:38:b9:f4:a0:fb: 2f:f5:43:9c:37:62:b2:cb:8d:d9:7b:2f:df:4a:61:e0:e8:04: 97:0c:04:41:76:b9:e6:a1:4f:b5:fc:31:95:cc:da:52:31:5c: d2:f9:7c:04:e4:60:65:17:3e:39:17:bf:60:96:98:22:df:91: 87:39:95:6b:40:bf:0c:e8:c9:5d:1f:b9:13:21:9a:05:cb:78: 70:5a:23:00:93:da:0c:3a:2c:fd:45:6f:c5:7f:96:20:21:f9: d7:dc:98:2e:81:f4:77:ef:d8:a2:c5:5d:85:fa:72:17:1f:f2: d6:13:67:d1:ff:89:2a:f1:c6:bd:66:30:99:63:3f:dc:a2:f7: fc:a0:ec:cf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM9Tz9vcdYV0A0SRQDz9vNBzjXNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMjEwWhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzhlMmE0MDU0YTlhZWU0ODc0MmNjNGQyZDQzNDM3ZWQ4 MjE5NjU3MDlkMTk4YmFmMjY4NDhiMDBmMmUyY2RlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeyTlPtGStu1a6gUJ21+ATXrBNe3LOavDrhchFTfqv+Muq 9mPn3ObhlArYJmpYUOT+KIDm0bl/mRs0jr5eCSH5hudghp+MdxYTM2b/UrjauC1a DnBUT3NPwi8nqTHt1WAmCgc6NCkCk6yzyy4Atnagb2gwVLptMur1oNhvsVRkEVg9 Q+1DVrsQpwJH6PWbcUue4+XqXOTeiMOtwgf3VGoK6+pXs84Savq7/Mhy77+g8v6m vWQYPLEp/Q640DjEzKOY035xC9Bn49BxGpRhOKjrukspZvEXyxTiX6Cox90PEkxb rsERnE6yNfj5HlhYOQVvX/TqUUZgOqIvioc8vAmbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUt1Nuszsp9mQhkctAQX5j54dEWeMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3ZGM0ZjZkLTdiOWQtNDlmYS05NzY1LTc1YzhmNGRhYjAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQTDANBgkqhkiG9w0BAQsFAAOCAQEANTX8IH85ePjvYH50B3OXDlMYYBTu xVYaiFyWqX+bez3sywjS+yNbQm39orp1XsRxsWVcm83WzyIueHKFc8eNQwBrBNpe ABV4VaajWDWkxlaEuLWuCNw+dhumhV/VLaruwGzxikAQzlHH6kNUJqHyvTu/IvUZ VvPy9Ti59KD7L/VDnDdissuN2Xsv30ph4OgElwwEQXa55qFPtfwxlczaUjFc0vl8 BORgZRc+ORe/YJaYIt+RhzmVa0C/DOjJXR+5EyGaBct4cFojAJPaDDos/UVvxX+W ICH519yYLoH0d+/YosVdhfpyFx/y1hNn0f+JKvHGvWYwmWM/3KL3/KDszw== -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:12 2025 by rpki-client