$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa File: 22ee097c-78c8-4c75-866c-6092e78e76d5.roa (raw, json) Hash identifier: Pim/mCN7gK2WsHVzp9jQsxzOFFjMIqRpL9zZW3ifGGE= Subject key identifier: 62:D2:4C:0B:B4:A2:D3:38:C3:8B:05:2D:AE:FB:68:9B:55:78:33:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65953B8B1E4EDFCA7E3339F37B97639E483A5669 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa Signing time: Sat 19 Jul 2025 00:50:52 +0000 ROA not before: Sat 19 Jul 2025 00:50:52 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:95:3b:8b:1e:4e:df:ca:7e:33:39:f3:7b:97:63:9e:48:3a:56:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:50:52 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=6f6c5b944274da2da7db512a836dba19c36926520838ab4975b56e628b4f0d88, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:c7:4f:b3:c7:2c:d8:05:c9:7f:0f:d1:ff: aa:e4:1e:9c:af:cf:6e:e4:d0:36:5c:91:27:db:88: 53:17:f1:58:be:67:8a:d7:8a:2b:b0:6c:5d:c8:b5: 0c:2b:f8:5b:8f:b0:84:bd:26:01:3b:a0:05:e7:48: f6:e4:6b:87:8b:3e:51:7d:83:ed:ec:42:49:26:7b: 3c:a3:f7:f3:83:5d:b4:93:d8:d9:3d:e7:a2:9e:16: eb:e0:57:f6:b0:0b:c9:25:99:40:62:69:01:d5:12: 90:69:39:84:8e:2a:22:2d:fe:7e:84:2e:03:fc:84: e6:24:3f:3c:2d:9f:a9:49:b9:7e:5d:77:65:9d:a7: 68:8e:51:8d:d8:91:48:df:fd:50:c0:64:58:17:0b: 7d:a2:f7:e1:9f:51:64:40:d6:9c:8a:37:50:2a:9b: 5a:01:0e:6d:da:67:fa:66:e1:26:1a:0b:23:24:35: 64:e7:c3:a7:d3:50:ea:fa:87:56:86:8c:40:82:d9: 60:16:bb:0a:85:5c:f6:50:30:d6:8d:a8:2f:39:e3: 27:64:57:7c:10:ef:30:7c:c4:8c:a0:2f:b9:c7:10: 4f:eb:d8:be:fd:40:e3:db:96:04:af:b5:08:e7:49: eb:0e:09:ba:6c:86:7e:f3:3c:6c:bd:b7:b1:4f:d4: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:4C:0B:B4:A2:D3:38:C3:8B:05:2D:AE:FB:68:9B:55:78:33:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.128.0/18 Signature Algorithm: sha256WithRSAEncryption b9:d6:f2:5f:ff:ad:e2:66:00:d9:a5:1d:06:c9:b9:7f:22:bc: 02:01:c9:a1:14:ec:4c:57:ca:07:e7:37:00:0a:5a:d4:a4:e4: 48:73:4d:84:39:7c:64:d2:4b:37:e6:57:d2:cd:8e:35:6d:24: c7:6c:52:4f:ba:30:a5:c3:cc:0e:f2:67:fc:fd:2b:9a:9a:6d: a2:d3:59:fd:f6:71:4e:46:0f:c2:4e:51:4e:a8:a0:89:47:b4: 23:5d:7b:9f:55:9a:14:0f:07:e1:22:26:42:b8:b5:c4:3f:68: 06:99:7a:3c:fd:f7:ed:fb:b4:2b:81:9e:32:4c:f4:c3:de:04: 1d:3a:a8:26:64:6e:e0:bd:62:f2:7b:40:4d:ed:d8:65:52:87: 7e:c1:2b:6b:13:4f:ef:de:26:5c:7c:0d:bf:97:e7:00:f5:64: 4b:88:fe:76:f3:ff:85:6c:24:e2:08:e9:81:dd:cb:46:9b:78: dc:0a:62:34:ca:2c:0a:1f:9d:10:63:87:3e:c6:f3:92:78:19: 1b:87:84:75:65:b8:eb:09:9c:7d:de:22:d8:de:f5:18:28:f0: d4:58:21:cc:61:01:f8:1a:53:6b:09:41:d9:e3:3a:4f:ef:c9: 58:95:20:c6:f4:a0:72:a8:c1:3a:5f:67:e0:f4:41:da:a8:29: 80:c6:81:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZZU7ix5O38p+Mznze5djnkg6VmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA1MDUyWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjZjNWI5NDQyNzRkYTJkYTdkYjUxMmE4MzZkYmExOWMz NjkyNjUyMDgzOGFiNDk3NWI1NmU2MjhiNGYwZDg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTBcdPs8cs2AXJfw/R/6rkHpyvz27k0DZckSfbiFMX8Vi+ Z4rXiiuwbF3ItQwr+FuPsIS9JgE7oAXnSPbka4eLPlF9g+3sQkkmezyj9/ODXbST 2Nk956KeFuvgV/awC8klmUBiaQHVEpBpOYSOKiIt/n6ELgP8hOYkPzwtn6lJuX5d d2Wdp2iOUY3YkUjf/VDAZFgXC32i9+GfUWRA1pyKN1Aqm1oBDm3aZ/pm4SYaCyMk NWTnw6fTUOr6h1aGjECC2WAWuwqFXPZQMNaNqC854ydkV3wQ7zB8xIygL7nHEE/r 2L79QOPblgSvtQjnSesOCbpshn7zPGy9t7FP1MFlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYtJMC7Si0zjDiwUtrvtom1V4M9cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyZWUwOTdjLTc4YzgtNGM3NS04NjZjLTYwOTJlNzhlNzZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTYAwDQYJKoZIhvcNAQELBQADggEBALnW8l//reJmANmlHQbJuX8ivAIB yaEU7ExXygfnNwAKWtSk5EhzTYQ5fGTSSzfmV9LNjjVtJMdsUk+6MKXDzA7yZ/z9 K5qabaLTWf32cU5GD8JOUU6ooIlHtCNde59VmhQPB+EiJkK4tcQ/aAaZejz99+37 tCuBnjJM9MPeBB06qCZkbuC9YvJ7QE3t2GVSh37BK2sTT+/eJlx8Db+X5wD1ZEuI /nbz/4VsJOII6YHdy0abeNwKYjTKLAofnRBjhz7G85J4GRuHhHVluOsJnH3eItje 9Rgo8NRYIcxhAfgaU2sJQdnjOk/vyViVIMb0oHKowTpfZ+D0QdqoKYDGgS0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:02 2025 by rpki-client