$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa File: 0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa (raw, json) Hash identifier: qPf/S7s7uuRRULEfvgoyyyCZJAMoFLRZEF9C3RVJ7Bc= Subject key identifier: 52:9B:0C:C5:37:DC:A7:1D:2F:02:5F:A5:6E:76:DE:97:C7:09:46:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B803878E2C09892F383B8794EDF64F0E875A71A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa Signing time: Fri 18 Jul 2025 00:12:06 +0000 ROA not before: Fri 18 Jul 2025 00:12:06 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 216.113.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:80:38:78:e2:c0:98:92:f3:83:b8:79:4e:df:64:f0:e8:75:a7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:12:06 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=82512b385caed8edfa629d92b8510dc84f71435d5f422dc1bce4315b5ae135dd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:88:d5:fe:bb:3d:ef:5c:57:71:dc:85:b3: f9:75:5b:df:fd:31:db:ba:3e:41:46:40:03:3b:6d: cd:73:6b:ff:b2:06:7f:6d:eb:11:c1:1b:a0:31:e9: fd:80:a9:72:84:d9:95:3a:30:ba:5d:5d:f9:8a:ed: c4:1e:52:24:27:71:78:d2:91:0b:b0:b2:23:df:be: 02:fa:40:80:0a:8e:5b:04:31:62:d8:44:d1:5f:b5: f6:85:31:a9:50:57:49:df:82:22:33:eb:7d:02:1a: ce:48:b1:bc:f4:84:9d:fc:a6:54:99:47:51:18:d5: 04:cc:82:cf:3b:9c:a1:cc:c7:f6:fb:4e:41:bf:6a: a7:ae:34:d3:ca:88:8f:7b:db:ce:f9:92:1d:dd:29: f5:5e:aa:9f:ba:ed:ab:d3:7e:69:23:ec:9a:59:ea: 9b:fc:ae:cd:3f:2c:42:2d:ff:cc:ca:dc:aa:0c:2f: ff:aa:77:37:ba:a0:c7:b9:c6:68:0a:b5:f5:15:b5: 64:8e:4f:7a:c6:de:a3:ac:21:6e:1c:18:5c:d4:15: 0d:ac:dd:e3:a1:40:49:a3:aa:ad:61:33:dc:e1:4a: 0e:0a:e7:d4:a8:40:2a:ac:f0:cd:4f:5d:c7:b3:2d: 0e:8c:70:ed:82:c2:29:79:c5:cf:2f:a6:f8:84:ca: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:0C:C5:37:DC:A7:1D:2F:02:5F:A5:6E:76:DE:97:C7:09:46:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.113.224.0/19 Signature Algorithm: sha256WithRSAEncryption d1:a6:a7:05:a7:79:f7:12:1b:2b:1f:94:d8:cc:c1:c8:1e:e9: fd:b6:83:e3:ee:00:b6:14:97:61:91:9e:55:ee:45:97:60:42: 3a:58:1f:cf:ff:f6:8b:46:5a:43:c1:1f:c6:89:d0:02:02:fa: 38:3d:60:6b:cc:84:6a:67:40:6e:7d:33:46:30:ef:f8:12:05: 6a:66:9a:41:2e:bc:19:26:79:d3:b5:13:a7:54:1b:fd:84:c7: 5d:aa:c3:3f:f2:60:a3:56:28:96:97:c0:a9:25:25:e2:2c:d9: b4:86:16:fd:f0:1a:db:83:02:38:23:e6:a1:e8:20:ac:e4:23: 34:7c:b0:d0:91:fc:20:1a:ed:b1:7e:58:c0:c2:c5:02:f4:8a: 52:9f:87:0f:74:2e:d7:a7:83:37:0c:12:fa:f6:9a:03:25:1b: 96:e2:d7:71:6b:d1:82:93:2e:a1:4f:2f:b3:6c:c9:9b:94:2b: fb:fb:04:95:5f:22:6f:d1:b0:58:d4:e3:39:4c:53:5f:ee:38: bd:2c:8d:37:a6:cd:f3:f0:eb:8d:a8:ba:cc:98:5b:02:47:6f: 68:6b:10:7e:6b:e1:0c:47:c1:6b:1e:96:c5:cf:82:c7:57:7b: 55:ea:80:d9:1e:0f:ad:14:a4:43:e7:d9:32:99:79:d1:c0:db: 00:f4:be:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK4A4eOLAmJLzg7h5Tt9k8Oh1pxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAxMjA2WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjUxMmIzODVjYWVkOGVkZmE2MjlkOTJiODUxMGRjODRm NzE0MzVkNWY0MjJkYzFiY2U0MzE1YjVhZTEzNWRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWv4jV/rs971xXcdyFs/l1W9/9Mdu6PkFGQAM7bc1za/+y Bn9t6xHBG6Ax6f2AqXKE2ZU6MLpdXfmK7cQeUiQncXjSkQuwsiPfvgL6QIAKjlsE MWLYRNFftfaFMalQV0nfgiIz630CGs5Isbz0hJ38plSZR1EY1QTMgs87nKHMx/b7 TkG/aqeuNNPKiI972875kh3dKfVeqp+67avTfmkj7JpZ6pv8rs0/LEIt/8zK3KoM L/+qdze6oMe5xmgKtfUVtWSOT3rG3qOsIW4cGFzUFQ2s3eOhQEmjqq1hM9zhSg4K 59SoQCqs8M1PXcezLQ6McO2Cwil5xc8vpviEygiPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUpsMxTfcpx0vAl+lbnbel8cJRr0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlNGQxNGE1LWVhOWQtNDE3NC05YjA1LTM5ZTI5MWM1NjE3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYceAwDQYJKoZIhvcNAQELBQADggEBANGmpwWnefcSGysflNjMwcge6f22 g+PuALYUl2GRnlXuRZdgQjpYH8//9otGWkPBH8aJ0AIC+jg9YGvMhGpnQG59M0Yw 7/gSBWpmmkEuvBkmedO1E6dUG/2Ex12qwz/yYKNWKJaXwKklJeIs2bSGFv3wGtuD Ajgj5qHoIKzkIzR8sNCR/CAa7bF+WMDCxQL0ilKfhw90LtengzcMEvr2mgMlG5bi 13Fr0YKTLqFPL7NsyZuUK/v7BJVfIm/RsFjU4zlMU1/uOL0sjTemzfPw642ousyY WwJHb2hrEH5r4QxHwWselsXPgsdXe1XqgNkeD60UpEPn2TKZedHA2wD0vhs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:25 2025 by rpki-client