$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/144f4136-d260-4d67-abb0-f0af17a69e3b.roa File: 144f4136-d260-4d67-abb0-f0af17a69e3b.roa (raw, json) Hash identifier: lGiPAIrweLb6U+q2kMfrIcj0mR3PZczK7GLUKcKRf+k= Subject key identifier: 23:4C:BD:06:A0:E3:7B:A6:A7:5B:17:EA:1D:3A:1C:09:3F:A8:BB:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 514C4F1094390FF61448A9AD08B0DCCAE65E0836 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/144f4136-d260-4d67-abb0-f0af17a69e3b.roa Signing time: Wed 02 Jul 2025 00:42:00 +0000 ROA not before: Wed 02 Jul 2025 00:42:00 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4c:4f:10:94:39:0f:f6:14:48:a9:ad:08:b0:dc:ca:e6:5e:08:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:42:00 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=3996203d594f2704ec4c988997f577640732587c7bdc565954f0839ecefae981, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:a1:62:54:b8:2a:e1:2f:b6:4e:9f:af:a3: 60:88:80:0a:a8:01:1e:c8:9f:fa:32:e3:05:ef:be: e9:48:7e:ce:59:70:b9:67:7b:cc:03:53:d3:e4:02: 06:70:ed:cd:eb:fc:36:65:a5:fb:12:c3:e5:7d:80: fe:a3:8d:2f:38:32:48:2f:da:5a:d2:a4:aa:31:4f: a3:b8:43:ce:9e:33:7c:e0:4a:81:7c:53:78:dc:ab: 04:8c:16:a4:43:91:10:d3:13:e4:17:22:bd:f7:a3: a7:82:a9:70:b0:9c:5b:df:28:8b:a1:87:f1:f2:66: 16:6e:b6:9b:41:71:b2:ba:25:76:ab:88:97:21:13: b0:ef:d3:b6:c5:65:67:2b:f6:8a:aa:a4:69:92:eb: 71:e5:be:b8:f7:84:fd:05:93:ad:f2:30:83:76:11: 6e:01:b7:a1:05:b5:79:80:af:db:07:3e:88:70:22: 09:89:96:66:83:c1:5f:d0:a7:ba:71:18:9a:8c:e5: 4f:84:d4:c1:7f:e3:ad:f0:9b:73:b4:3b:21:95:fc: d4:74:f7:eb:52:80:9e:11:67:20:b4:e9:ff:1a:fe: f9:8f:f4:d4:df:56:01:1a:3d:67:ef:a9:28:a7:92: 79:45:49:cf:1b:10:be:b8:5a:e4:fa:e4:0f:8b:1d: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:BD:06:A0:E3:7B:A6:A7:5B:17:EA:1D:3A:1C:09:3F:A8:BB:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/144f4136-d260-4d67-abb0-f0af17a69e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.116.0/23 Signature Algorithm: sha256WithRSAEncryption a8:7a:c9:77:0d:0d:e7:25:f3:42:da:9b:53:54:be:b0:71:29: 25:7e:90:8a:76:8a:7e:a2:52:bd:bf:a1:8f:49:cd:da:94:5c: 58:1d:fc:60:84:64:d6:c9:0a:be:9a:21:28:aa:0c:e0:14:3b: a7:d6:7a:7b:ec:a8:3b:ac:5c:b1:4b:16:40:fa:b4:e1:3b:a6: cf:b6:a2:98:6e:2e:17:a6:4a:39:5a:84:3b:bc:3f:4f:10:9e: 97:32:52:8a:a2:bd:ed:e7:66:32:5c:b6:ef:b3:69:f0:df:86: e2:d0:e2:96:f0:b0:42:6f:d0:86:4d:6c:c6:ed:9d:40:be:e4: 39:b0:40:ce:d6:a7:62:0d:0c:a2:dd:24:a8:52:47:54:6c:ff: 53:01:2c:0b:d7:85:b5:e7:4d:87:7b:71:c6:2e:55:5c:72:5f: ca:aa:39:67:e8:d8:b7:63:29:e1:ab:a4:36:cc:15:1c:b7:73: c4:52:3f:5a:42:78:30:4f:65:79:d8:1f:7b:e7:46:a6:26:aa: c6:5d:0f:09:b1:3b:d0:29:00:a6:d7:4c:5d:e8:f3:2e:2e:ee: 14:84:a4:57:3c:7a:e8:b2:78:5d:bd:f1:c7:34:60:57:5a:7c: cd:99:3a:ac:fd:fe:71:aa:c6:b1:68:db:ae:96:08:ac:78:13: 02:6b:38:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUUxPEJQ5D/YUSKmtCLDcyuZeCDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDA0MjAwWhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTk2MjAzZDU5NGYyNzA0ZWM0Yzk4ODk5N2Y1Nzc2NDA3 MzI1ODdjN2JkYzU2NTk1NGYwODM5ZWNlZmFlOTgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB/aFiVLgq4S+2Tp+vo2CIgAqoAR7In/oy4wXvvulIfs5Z cLlne8wDU9PkAgZw7c3r/DZlpfsSw+V9gP6jjS84Mkgv2lrSpKoxT6O4Q86eM3zg SoF8U3jcqwSMFqRDkRDTE+QXIr33o6eCqXCwnFvfKIuhh/HyZhZutptBcbK6JXar iJchE7Dv07bFZWcr9oqqpGmS63Hlvrj3hP0Fk63yMIN2EW4Bt6EFtXmAr9sHPohw IgmJlmaDwV/Qp7pxGJqM5U+E1MF/463wm3O0OyGV/NR09+tSgJ4RZyC06f8a/vmP 9NTfVgEaPWfvqSinknlFSc8bEL64WuT65A+LHX2RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI0y9BqDje6anWxfqHTocCT+ou9EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE0NGY0MTM2LWQyNjAtNGQ2Ny1hYmIwLWYwYWYxN2E2OWUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFAvnQwDQYJKoZIhvcNAQELBQADggEBAKh6yXcNDecl80Lam1NUvrBxKSV+ kIp2in6iUr2/oY9JzdqUXFgd/GCEZNbJCr6aISiqDOAUO6fWenvsqDusXLFLFkD6 tOE7ps+2ophuLhemSjlahDu8P08QnpcyUoqive3nZjJctu+zafDfhuLQ4pbwsEJv 0IZNbMbtnUC+5DmwQM7Wp2INDKLdJKhSR1Rs/1MBLAvXhbXnTYd7ccYuVVxyX8qq OWfo2LdjKeGrpDbMFRy3c8RSP1pCeDBPZXnYH3vnRqYmqsZdDwmxO9ApAKbXTF3o 8y4u7hSEpFc8euiyeF298cc0YFdafM2ZOqz9/nGqxrFo266WCKx4EwJrOFw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:27 2025 by rpki-client