$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a370b-b7ff-4d29-8cc6-b57287923a22.roa File: 225a370b-b7ff-4d29-8cc6-b57287923a22.roa (raw, json) Hash identifier: Z+ZbJ+ydj140zZu/3ED5RcXYAg/XptYFTVL0Rar2Meg= Subject key identifier: BD:6A:08:85:CE:26:8E:29:06:19:E4:4B:12:24:A6:2C:19:4D:4E:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AE84945D8AEB72DF9EF35C5281F668F7CA9B539 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a370b-b7ff-4d29-8cc6-b57287923a22.roa Signing time: Mon 07 Jul 2025 16:01:14 +0000 ROA not before: Mon 07 Jul 2025 16:01:14 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e8:49:45:d8:ae:b7:2d:f9:ef:35:c5:28:1f:66:8f:7c:a9:b5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:01:14 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=76017241c6e43d0e442bb4ec4d1ff5b949d6dc0a15f4fbf81ec27fcf9f395f9e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:9f:66:47:f7:a3:aa:f5:9d:13:b8:6b:74: 7e:11:15:bd:51:5c:58:43:ce:e0:c5:5e:d8:20:b3: ec:c9:2d:b3:0c:cc:32:df:3e:66:16:28:f9:f6:bf: fe:e3:5e:e0:6d:5b:69:82:61:a0:6d:b9:8e:4f:32: 98:18:b0:92:9b:ac:02:30:0c:bd:10:b7:de:67:f6: 78:08:b9:44:bb:00:56:61:af:84:f0:37:fb:e1:62: 48:43:37:fb:94:ad:95:e7:a8:5a:3d:78:72:ed:11: 8f:d6:84:6b:00:a2:56:54:37:3a:04:7d:53:a2:ee: 5b:19:58:9b:1a:6f:e2:7c:a4:35:ee:53:34:75:42: cd:28:89:99:87:5d:5e:0d:47:16:09:42:bb:57:34: 69:ba:50:9b:68:19:61:21:9f:55:1b:a2:e4:19:71: ed:cc:7d:ac:26:19:43:5e:15:9e:59:07:5d:06:a2: 52:0f:d6:e6:f2:fa:c5:d0:12:e6:04:8a:29:c6:28: 71:12:6a:56:77:3c:5c:3a:0e:ab:14:c8:c4:b8:91: 5c:71:8b:16:52:3f:7e:cf:37:fd:7e:b2:08:87:6f: c3:0e:f0:8d:71:fc:88:1f:34:10:06:1f:7f:9e:28: 00:15:7e:1d:f7:16:ae:a7:73:36:d8:28:0a:7e:0b: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:08:85:CE:26:8E:29:06:19:E4:4B:12:24:A6:2C:19:4D:4E:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a370b-b7ff-4d29-8cc6-b57287923a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.4.0/22 Signature Algorithm: sha256WithRSAEncryption a1:e1:32:6a:1c:16:0c:3a:42:6f:7f:6b:3e:2b:77:68:83:fb: e2:a7:d0:80:b0:73:58:84:00:ae:18:51:99:fe:24:6c:d5:0e: 26:f5:15:e9:c9:29:5c:7f:8e:5e:b0:5c:09:0a:db:f8:58:34: 8e:c9:a9:80:40:0c:b7:19:60:34:b7:ca:33:40:f7:12:63:4a: dc:3a:d2:0c:02:be:db:c6:38:fc:1e:97:40:be:e6:ce:7a:6d: be:06:59:34:7e:54:5d:d0:bb:ae:89:ca:5d:da:b8:f4:1a:c0: a5:f2:66:d0:34:fd:25:45:11:d7:87:94:c0:d6:97:14:17:06: 5e:55:68:3a:13:d7:ea:05:6d:cd:bc:c4:b0:c4:79:f5:34:39: 2d:79:39:ad:ad:ff:9a:2b:ef:23:f4:a6:ed:1c:58:56:13:e9: 3c:61:db:13:ab:32:c0:d6:e5:ed:04:57:55:b6:97:08:f0:d6: 61:32:63:dd:e4:6b:ba:20:e2:fb:72:97:75:78:bb:4a:0e:e0: a8:6e:9e:9b:47:9c:69:25:3f:9b:b8:c5:db:ff:58:00:78:7f: 64:3c:60:0a:bd:4e:ef:37:5a:f3:e6:08:39:c2:20:7e:9e:c5: 26:4b:b6:6b:2c:7d:e1:72:2f:80:5d:26:19:46:ba:dc:05:0d: 0b:cb:dc:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUauhJRdiuty357zXFKB9mj3yptTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYwMTE0WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjAxNzI0MWM2ZTQzZDBlNDQyYmI0ZWM0ZDFmZjViOTQ5 ZDZkYzBhMTVmNGZiZjgxZWMyN2ZjZjlmMzk1ZjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPE59mR/ejqvWdE7hrdH4RFb1RXFhDzuDFXtggs+zJLbMM zDLfPmYWKPn2v/7jXuBtW2mCYaBtuY5PMpgYsJKbrAIwDL0Qt95n9ngIuUS7AFZh r4TwN/vhYkhDN/uUrZXnqFo9eHLtEY/WhGsAolZUNzoEfVOi7lsZWJsab+J8pDXu UzR1Qs0oiZmHXV4NRxYJQrtXNGm6UJtoGWEhn1UbouQZce3MfawmGUNeFZ5ZB10G olIP1uby+sXQEuYEiinGKHESalZ3PFw6DqsUyMS4kVxxixZSP37PN/1+sgiHb8MO 8I1x/IgfNBAGH3+eKAAVfh33Fq6nczbYKAp+C5QhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvWoIhc4mjikGGeRLEiSmLBlNTo4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyNWEzNzBiLWI3ZmYtNGQyOS04Y2M2LWI1NzI4NzkyM2EyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBsgQwDQYJKoZIhvcNAQELBQADggEBAKHhMmocFgw6Qm9/az4rd2iD++Kn 0ICwc1iEAK4YUZn+JGzVDib1FenJKVx/jl6wXAkK2/hYNI7JqYBADLcZYDS3yjNA 9xJjStw60gwCvtvGOPwel0C+5s56bb4GWTR+VF3Qu66Jyl3auPQawKXyZtA0/SVF EdeHlMDWlxQXBl5VaDoT1+oFbc28xLDEefU0OS15Oa2t/5or7yP0pu0cWFYT6Txh 2xOrMsDW5e0EV1W2lwjw1mEyY93ka7og4vtyl3V4u0oO4KhunptHnGklP5u4xdv/ WAB4f2Q8YAq9Tu83WvPmCDnCIH6exSZLtmssfeFyL4BdJhlGutwFDQvL3HE= -----END CERTIFICATE-----Generated at Tue Jul 22 05:09:54 2025 by rpki-client