$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa File: 22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa (raw, json) Hash identifier: R4LsrsblJ7j02mpdrGykhY8L9SD6lNGo5JNtt3iUHVU= Subject key identifier: 3F:1B:16:D3:5C:F4:A1:FF:93:90:23:A2:56:4C:86:81:E9:C8:83:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3039247735FE58619E8B613105621938D40B97EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa Signing time: Tue 08 Jul 2025 15:31:54 +0000 ROA not before: Tue 08 Jul 2025 15:31:54 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.25.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:24:77:35:fe:58:61:9e:8b:61:31:05:62:19:38:d4:0b:97:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:31:54 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=87a72f0574dc6ade921f9b8ae5aa59530f08878c98b432bc98f37fbbda39ab85, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:1e:38:33:5c:1b:0a:b3:53:6f:8b:9a:c9: a7:07:b9:a6:64:48:51:10:00:d9:4f:53:8c:81:61: 5e:ed:51:50:f6:c4:a5:38:04:a8:d8:44:41:df:a9: ea:30:26:c4:c3:39:28:bb:0b:20:6a:34:db:e2:7f: 72:01:6d:76:cd:ca:db:45:63:26:14:bc:84:9f:f1: 8d:50:f5:3b:a0:0d:89:93:5a:80:8e:3d:9f:75:1d: 6e:fe:b5:46:9a:33:0f:0e:26:91:2d:c2:a7:11:f5: f6:f6:8a:78:2d:73:2d:19:16:10:15:08:a2:e9:76: 91:87:8a:98:c0:85:d8:2e:4a:11:5a:de:2e:6b:dd: 2f:10:c0:2a:c4:d4:f5:89:79:54:26:bf:be:a6:e4: 51:cc:49:e4:06:d7:14:96:85:69:c2:5f:3b:3b:6a: a1:5b:31:6a:d2:96:8c:b7:8f:ba:4e:3c:7b:5f:ff: 97:99:f6:08:4d:1a:ce:8e:92:0c:06:08:95:39:b9: da:41:90:99:46:52:ca:b7:bc:aa:9d:b9:e5:86:20: 89:85:19:ac:ab:8b:d7:e8:f2:bf:63:99:95:68:f1: b2:a0:68:18:46:ae:ef:11:4e:2e:60:18:ec:a8:a0: 43:83:85:47:63:f5:4e:4a:07:bf:8d:fa:52:e3:ae: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:16:D3:5C:F4:A1:FF:93:90:23:A2:56:4C:86:81:E9:C8:83:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22be50bd-a1f0-4e6a-af31-b1d4335b25a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.25.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:b0:69:6a:bc:52:64:17:6b:9c:22:07:18:b4:fa:b8:94:3c: fc:2c:e4:a8:43:20:56:af:83:94:6f:25:dc:fd:1f:bb:8e:bf: 08:5e:cc:72:bb:10:6b:8f:9e:b1:16:10:73:ae:43:f7:e5:8f: 37:21:e4:93:ac:79:13:2b:3b:72:09:1a:2e:fa:d6:5a:40:f7: 06:d5:e0:5d:6d:68:ea:2b:03:1a:5e:5b:ae:78:1a:e9:36:ac: 1d:29:9c:78:29:6b:d7:40:81:37:06:7b:76:69:cc:31:cf:2d: e8:94:41:9f:77:7f:76:9a:0b:e4:ef:02:9b:09:c2:ca:8c:5f: 09:33:ab:8a:4f:d8:42:d0:07:34:9c:c5:01:09:f8:73:2b:5b: 6f:e9:a9:b6:f6:ce:66:0e:fa:b9:f2:5e:62:b3:91:9a:e4:42: 6d:62:54:fe:07:e6:93:a7:dd:ff:69:02:74:84:f8:ef:a6:fa: 31:22:53:b3:eb:5a:c2:71:73:8a:1a:75:17:4a:60:6b:b4:c0: 1f:54:5d:74:c6:d5:22:cd:f9:50:e3:6d:d0:c6:08:90:7c:8a: d4:e3:7b:fa:b2:1f:39:63:8d:a9:28:7a:aa:a8:40:b3:d7:44: 97:2d:d6:28:6c:14:83:7c:51:78:22:8f:55:d0:2a:e3:20:13: f5:2f:89:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMDkkdzX+WGGei2ExBWIZONQLl+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUzMTU0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2E3MmYwNTc0ZGM2YWRlOTIxZjliOGFlNWFhNTk1MzBm MDg4NzhjOThiNDMyYmM5OGYzN2ZiYmRhMzlhYjg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKIB44M1wbCrNTb4uayacHuaZkSFEQANlPU4yBYV7tUVD2 xKU4BKjYREHfqeowJsTDOSi7CyBqNNvif3IBbXbNyttFYyYUvISf8Y1Q9TugDYmT WoCOPZ91HW7+tUaaMw8OJpEtwqcR9fb2ingtcy0ZFhAVCKLpdpGHipjAhdguShFa 3i5r3S8QwCrE1PWJeVQmv76m5FHMSeQG1xSWhWnCXzs7aqFbMWrSloy3j7pOPHtf /5eZ9ghNGs6OkgwGCJU5udpBkJlGUsq3vKqdueWGIImFGayri9fo8r9jmZVo8bKg aBhGru8RTi5gGOyooEODhUdj9U5KB7+N+lLjrhSvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPxsW01z0of+TkCOiVkyGgenIg90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYmU1MGJkLWExZjAtNGU2YS1hZjMxLWIxZDQzMzViMjVhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGTANBgkqhkiG9w0BAQsFAAOCAQEAhLBparxSZBdrnCIHGLT6uJQ8/Czk qEMgVq+DlG8l3P0fu46/CF7McrsQa4+esRYQc65D9+WPNyHkk6x5Eys7cgkaLvrW WkD3BtXgXW1o6isDGl5brnga6TasHSmceClr10CBNwZ7dmnMMc8t6JRBn3d/dpoL 5O8CmwnCyoxfCTOrik/YQtAHNJzFAQn4cytbb+mptvbOZg76ufJeYrORmuRCbWJU /gfmk6fd/2kCdIT476b6MSJTs+tawnFzihp1F0pga7TAH1RddMbVIs35UONt0MYI kHyK1ON7+rIfOWONqSh6qqhAs9dEly3WKGwUg3xReCKPVdAq4yAT9S+JeQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:33 2025 by rpki-client