$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa File: 1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa (raw, json) Hash identifier: ddZw160X1aJnCgNRuqv1lAtZ8c+X04J1EV37UsffuFc= Subject key identifier: 9B:65:5B:31:BB:85:D8:2B:C1:B8:7A:02:8A:79:F3:B8:2E:0D:B7:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48E515F073A86248D55EEEB332B7FFD7BA445F59 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa Signing time: Tue 08 Jul 2025 17:32:05 +0000 ROA not before: Tue 08 Jul 2025 17:32:05 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.192.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e5:15:f0:73:a8:62:48:d5:5e:ee:b3:32:b7:ff:d7:ba:44:5f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:32:05 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=4cb5ada22c69b5f4f242a82d6e3ddf5a2cad0bbf24ab46aa818377fa6daad891, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:f9:46:ef:c5:50:51:f4:a0:f3:93:9b:f8: 23:5d:6b:22:91:c9:a5:8a:40:e0:62:53:1b:62:7a: cc:27:46:3a:10:2c:91:5b:e7:f8:0a:71:06:08:7b: bc:88:8a:63:6d:6c:57:41:e1:40:3e:bb:12:fd:d3: f6:cb:1c:76:81:06:cd:b2:fa:c8:2a:f2:77:55:a9: 8b:d0:80:9c:4d:99:f3:62:db:15:bb:24:d4:8d:8e: 85:bf:f9:85:d4:4c:07:ff:6a:1c:79:08:31:ac:7e: 58:a6:aa:17:f4:4b:b3:ec:87:67:06:cc:23:1c:34: 2f:4c:c0:50:69:c9:06:c5:2e:59:04:2a:40:59:8d: bf:2c:cc:84:93:26:67:ae:34:92:88:ae:e0:6d:84: f4:31:fc:59:59:60:bf:24:d3:53:12:24:e3:79:f6: 07:ae:7d:cf:0f:c5:7a:47:6b:85:0f:75:35:fe:ed: fc:60:f8:4e:44:22:02:63:3e:4f:66:3a:f7:63:f5: 21:bd:9d:20:8f:e9:61:7c:cc:4f:33:65:55:6a:d1: d7:0a:93:2c:8f:2c:d4:05:65:a9:ed:bc:d9:0d:38: cb:15:cc:8c:14:88:e3:10:40:d2:c6:a5:8a:b5:80: 07:4b:bf:30:02:45:97:ed:2c:c3:0f:79:50:e6:a6: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:65:5B:31:BB:85:D8:2B:C1:B8:7A:02:8A:79:F3:B8:2E:0D:B7:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e171ca1-b934-4cba-a81e-f7af9fa51bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.192.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:dd:76:f5:f6:fe:49:3c:07:28:b3:3a:77:13:b9:cd:d3:72: 24:47:ee:fa:e5:1a:a4:65:90:a1:29:0e:78:20:3c:fc:fc:04: 05:f6:b4:02:15:2d:2a:82:d0:34:8b:c2:a2:37:c2:06:5e:9e: 02:49:ee:13:a2:46:f9:2a:cb:9e:a5:b8:7c:f5:72:ea:a2:be: a1:4f:2a:5b:04:7c:74:de:58:ad:a1:3b:bb:7a:c9:08:47:d0: 4a:14:29:b5:3c:19:7e:2e:fc:8c:42:4a:3e:8a:8e:1d:e6:c1: ad:c3:35:5e:0b:de:f4:a1:0c:e3:76:c3:e4:68:30:bb:78:b1: 96:3f:7c:47:5e:3f:56:92:50:47:fa:fe:37:d2:40:79:da:13: 77:bd:19:f6:25:cb:cd:5e:46:b6:06:5a:79:07:e9:c8:c3:64: 4c:54:d7:3d:61:a2:30:99:f5:17:bc:27:ca:f8:09:d2:52:0f: 52:be:29:fb:e7:8c:72:a3:1a:ad:67:7a:84:c7:3e:0f:4e:bb: 07:7c:4a:b7:64:23:e5:11:3d:a5:99:d1:7f:e4:2e:4d:4b:54: 19:c5:31:46:c0:aa:22:b1:52:5a:1d:52:cb:93:d0:87:f2:40: 47:ad:11:75:55:69:9b:34:1d:bb:55:b7:83:c9:dd:08:24:38: 9c:fb:a9:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSOUV8HOoYkjVXu6zMrf/17pEX1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTczMjA1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2I1YWRhMjJjNjliNWY0ZjI0MmE4MmQ2ZTNkZGY1YTJj YWQwYmJmMjRhYjQ2YWE4MTgzNzdmYTZkYWFkODkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC34PlG78VQUfSg85Ob+CNdayKRyaWKQOBiUxtieswnRjoQ LJFb5/gKcQYIe7yIimNtbFdB4UA+uxL90/bLHHaBBs2y+sgq8ndVqYvQgJxNmfNi 2xW7JNSNjoW/+YXUTAf/ahx5CDGsflimqhf0S7Psh2cGzCMcNC9MwFBpyQbFLlkE KkBZjb8szISTJmeuNJKIruBthPQx/FlZYL8k01MSJON59geufc8PxXpHa4UPdTX+ 7fxg+E5EIgJjPk9mOvdj9SG9nSCP6WF8zE8zZVVq0dcKkyyPLNQFZantvNkNOMsV zIwUiOMQQNLGpYq1gAdLvzACRZftLMMPeVDmpuypAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm2VbMbuF2CvBuHoCinnzuC4Nt1UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlMTcxY2ExLWI5MzQtNGNiYS1hODFlLWY3YWY5ZmE1MWJmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAowDANBgkqhkiG9w0BAQsFAAOCAQEAkt129fb+STwHKLM6dxO5zdNyJEfu +uUapGWQoSkOeCA8/PwEBfa0AhUtKoLQNIvCojfCBl6eAknuE6JG+SrLnqW4fPVy 6qK+oU8qWwR8dN5YraE7u3rJCEfQShQptTwZfi78jEJKPoqOHebBrcM1Xgve9KEM 43bD5Ggwu3ixlj98R14/VpJQR/r+N9JAedoTd70Z9iXLzV5GtgZaeQfpyMNkTFTX PWGiMJn1F7wnyvgJ0lIPUr4p++eMcqMarWd6hMc+D067B3xKt2Qj5RE9pZnRf+Qu TUtUGcUxRsCqIrFSWh1Sy5PQh/JAR60RdVVpmzQdu1W3g8ndCCQ4nPupbg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:32 2025 by rpki-client