$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa File: 1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa (raw, json) Hash identifier: r9WA9dm0319ga2M69FC66mbYx0O8qnYvoOXVISMFKi0= Subject key identifier: 02:93:A0:5E:4E:CB:C6:34:80:81:E4:E4:A5:87:66:CA:99:5F:B7:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50BAFF77CE48959E6D41BA531B2F330B83B97F16 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa Signing time: Sat 19 Jul 2025 00:01:02 +0000 ROA not before: Sat 19 Jul 2025 00:01:02 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 167.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ba:ff:77:ce:48:95:9e:6d:41:ba:53:1b:2f:33:0b:83:b9:7f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:02 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=600ab6ad340d3b68fb0d13ed4cf468a3f5f42be1c089c4057a3e7a84e45938ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:f7:f1:84:f4:cd:de:52:f7:c6:b0:97:b8: bb:57:9f:54:d3:6e:91:a7:fa:f8:6d:f6:6f:fe:52: db:25:10:8d:f1:2f:b2:8d:e2:de:78:3d:4a:1a:2b: 7f:82:89:b4:a2:55:a6:c4:8e:62:c4:b7:a2:90:f5: 4d:03:6c:bd:2d:af:9e:ff:a0:f3:80:5b:40:2a:7a: 0c:8f:2a:0c:6a:2c:02:a5:0f:ba:15:23:ce:ff:5e: 93:95:a5:fd:fb:5b:96:80:6b:14:93:71:46:f3:5d: 27:f6:ed:10:0f:1b:29:55:95:b3:19:0e:fc:96:11: ff:ab:e6:92:5c:14:ee:7f:0d:3f:f3:3e:a6:68:31: e4:d1:1a:fe:a8:7d:b2:0b:7a:cf:62:a7:23:4b:02: 0d:58:3f:6b:20:9c:43:ca:1c:c6:4c:68:2d:2c:49: 8c:fa:77:67:7f:f0:d9:13:1a:5c:20:5f:66:00:e5: 64:a4:b7:d9:e3:ef:58:27:a5:a6:8d:b3:d5:ff:8e: ae:52:54:45:c0:11:85:8b:7a:0c:ba:0e:52:5d:39: 7d:3e:0d:37:d5:99:6c:95:ca:d6:b7:b3:12:13:56: d6:aa:11:40:2a:f3:af:46:27:8b:31:22:01:6f:2a: 2f:03:c7:c4:8f:ce:4a:08:0f:f7:e9:ec:36:43:1f: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:93:A0:5E:4E:CB:C6:34:80:81:E4:E4:A5:87:66:CA:99:5F:B7:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1b12b8-7d63-4bd6-949b-5ce09f1d110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.2.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:68:d4:e4:40:8f:1a:89:06:be:35:09:23:c0:07:eb:ed:95: 0c:f0:f5:4d:29:11:cc:c0:72:13:e4:64:49:35:5f:f0:28:2d: be:16:3c:9e:c1:ba:0f:76:f4:78:07:11:1f:ef:1d:9d:08:ec: a9:d2:24:32:1d:a5:db:70:25:a8:e1:57:e5:50:3a:9a:0c:c6: fa:0f:35:94:a8:37:bd:1d:87:1a:ef:96:96:34:5c:ba:4b:ab: a1:6a:4c:24:4d:96:9a:a7:cf:e8:f9:46:55:f5:ba:81:7e:e9: 23:71:a3:b7:49:9b:00:aa:98:76:c4:3f:a4:c2:34:32:60:e2: 38:5b:3b:1e:71:94:bf:fe:54:4e:da:22:63:29:34:ae:12:3b: dc:dc:96:9d:a4:b4:62:bf:3d:fe:e6:70:09:34:6f:ce:81:b1: f5:77:91:a8:9c:a7:70:b5:d2:b8:3d:ad:83:61:4a:fb:df:6e: 38:b0:59:9a:7c:61:bf:58:c4:8c:f5:ba:08:57:67:3f:3d:30: 77:59:52:7e:41:fe:23:c1:80:71:f4:36:59:e5:e6:f4:03:03: af:b5:97:6e:9f:e3:59:9c:4b:cc:ef:a7:8f:a1:83:d0:4c:7d: fb:c3:ed:b2:56:bb:00:3b:b0:20:b3:db:b2:71:a8:23:ff:ab: 73:f4:73:c5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUULr/d85IlZ5tQbpTGy8zC4O5fxYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTAyWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDBhYjZhZDM0MGQzYjY4ZmIwZDEzZWQ0Y2Y0NjhhM2Y1 ZjQyYmUxYzA4OWM0MDU3YTNlN2E4NGU0NTkzOGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY0ffxhPTN3lL3xrCXuLtXn1TTbpGn+vht9m/+UtslEI3x L7KN4t54PUoaK3+CibSiVabEjmLEt6KQ9U0DbL0tr57/oPOAW0AqegyPKgxqLAKl D7oVI87/XpOVpf37W5aAaxSTcUbzXSf27RAPGylVlbMZDvyWEf+r5pJcFO5/DT/z PqZoMeTRGv6ofbILes9ipyNLAg1YP2sgnEPKHMZMaC0sSYz6d2d/8NkTGlwgX2YA 5WSkt9nj71gnpaaNs9X/jq5SVEXAEYWLegy6DlJdOX0+DTfVmWyVyta3sxITVtaq EUAq869GJ4sxIgFvKi8Dx8SPzkoID/fp7DZDH3jNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUApOgXk7LxjSAgeTkpYdmyplft7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmMWIxMmI4LTdkNjMtNGJkNi05NDliLTVjZTA5ZjFkMTEwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCnAjANBgkqhkiG9w0BAQsFAAOCAQEAHGjU5ECPGokGvjUJI8AH6+2VDPD1 TSkRzMByE+RkSTVf8CgtvhY8nsG6D3b0eAcRH+8dnQjsqdIkMh2l23AlqOFX5VA6 mgzG+g81lKg3vR2HGu+WljRcukuroWpMJE2WmqfP6PlGVfW6gX7pI3Gjt0mbAKqY dsQ/pMI0MmDiOFs7HnGUv/5UTtoiYyk0rhI73NyWnaS0Yr89/uZwCTRvzoGx9XeR qJyncLXSuD2tg2FK+99uOLBZmnxhv1jEjPW6CFdnPz0wd1lSfkH+I8GAcfQ2WeXm 9AMDr7WXbp/jWZxLzO+nj6GD0Ex9+8Ptsla7ADuwILPbsnGoI/+rc/RzxQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:24 2025 by rpki-client