$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa File: 2bd59750-5d84-4c08-a088-8ea8711b48d8.roa (raw, json) Hash identifier: Erg2Cim3d8aVwvxU5yQp9XZK6N6Tbl5mJ1fXhqGOyEM= Subject key identifier: EA:E7:BF:0D:3D:DB:61:BA:12:EF:81:2D:1D:66:7B:70:D0:7C:B1:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60C3C88569A24C0A8FFA5C6BC300163577AC158F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa Signing time: Fri 25 Jul 2025 00:40:22 +0000 ROA not before: Fri 25 Jul 2025 00:40:22 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c3:c8:85:69:a2:4c:0a:8f:fa:5c:6b:c3:00:16:35:77:ac:15:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:40:22 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=fe2bfa8829f523ed2707879b631f82c7328926b7076bbeb45ec42c6ee0a74819, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:05:f5:3d:04:b0:a0:28:1d:87:bf:6b:9e: 3b:f7:08:74:a4:35:69:22:cb:00:32:9b:e3:bf:91: 26:e8:ca:77:eb:ee:42:ef:a2:a8:86:f5:5d:62:5f: 7a:d9:c1:f4:3e:b3:6f:82:38:dd:68:4f:1a:62:bc: 0f:26:b2:ab:ca:e0:13:49:6c:6c:db:48:4e:bd:0e: ff:d8:3b:ff:8f:eb:9a:32:16:fa:ca:c5:b2:91:30: b9:6d:d3:a2:d2:ad:db:59:dc:75:e5:28:7d:1b:60: 99:4b:61:6f:12:d4:d1:29:37:9c:a8:2c:3a:b5:59: 3f:7b:ae:46:14:ac:82:f5:3a:f9:46:a6:bf:f7:1d: 6f:42:59:1f:50:8e:83:1b:91:be:b5:81:d0:25:37: 4e:02:52:e1:ae:41:c1:7a:d0:49:1a:89:c9:be:41: 99:36:66:a5:3f:41:ce:63:e6:95:11:dc:b4:8b:e6: 02:a9:eb:04:ac:8f:8a:fc:8f:08:8f:35:86:58:d4: 8c:e4:fb:e4:5a:11:cd:7a:8d:2e:83:4c:1b:4d:32: 12:a9:58:fd:19:39:da:3a:87:0a:92:01:ea:78:3d: 4d:ee:fe:54:27:14:b8:cc:65:97:5e:71:f8:17:5b: e0:51:be:6b:69:cb:f9:04:c5:a7:c9:c1:a2:09:2f: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E7:BF:0D:3D:DB:61:BA:12:EF:81:2D:1D:66:7B:70:D0:7C:B1:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.164.0/22 Signature Algorithm: sha256WithRSAEncryption 44:4b:50:90:27:d9:b6:bb:02:f1:f3:e1:30:8f:9c:34:fc:81: 94:09:24:ee:a7:e1:b4:45:ac:a0:30:a3:f1:01:c3:11:c9:cd: 93:3b:78:81:1f:bc:74:2e:33:b2:b0:f5:56:2b:b3:a6:e0:db: a5:61:7d:5f:5f:f2:f2:2e:d1:b4:e0:e5:ff:ed:0b:e2:9d:d1: 5d:d7:da:8f:4a:74:1f:3d:31:63:a1:9b:bb:53:4f:fd:c8:52: c1:f9:3e:a8:e4:5b:7a:15:d8:11:e5:90:72:e6:c0:1e:56:0f: 61:eb:10:51:15:2c:0d:08:92:27:28:ab:1a:42:35:84:96:7d: 70:e3:3d:33:96:d4:7d:97:e6:06:d6:67:e3:50:eb:96:24:74: 84:00:7f:96:ed:95:6d:89:07:8a:a3:f3:50:71:59:de:97:9b: d9:d6:f5:9f:12:ec:b4:4d:a5:22:b5:a9:7f:6e:ed:e6:9d:35: ef:c5:19:f0:fb:28:f4:da:25:35:a2:78:85:6f:6d:b8:32:6f: 09:f7:60:46:1d:90:6c:dd:68:62:87:d8:2f:53:29:04:6b:5c: 44:36:ce:38:a3:fe:e8:63:02:21:ec:7d:21:d9:ba:b6:b0:55: d5:73:65:7d:4d:f4:32:3a:d4:7c:ac:a4:9c:be:53:9a:94:d4: b1:24:3f:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYMPIhWmiTAqP+lxrwwAWNXesFY8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDA0MDIyWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTJiZmE4ODI5ZjUyM2VkMjcwNzg3OWI2MzFmODJjNzMy ODkyNmI3MDc2YmJlYjQ1ZWM0MmM2ZWUwYTc0ODE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu7QX1PQSwoCgdh79rnjv3CHSkNWkiywAym+O/kSboynfr 7kLvoqiG9V1iX3rZwfQ+s2+CON1oTxpivA8msqvK4BNJbGzbSE69Dv/YO/+P65oy FvrKxbKRMLlt06LSrdtZ3HXlKH0bYJlLYW8S1NEpN5yoLDq1WT97rkYUrIL1OvlG pr/3HW9CWR9QjoMbkb61gdAlN04CUuGuQcF60Ekaicm+QZk2ZqU/Qc5j5pUR3LSL 5gKp6wSsj4r8jwiPNYZY1Izk++RaEc16jS6DTBtNMhKpWP0ZOdo6hwqSAep4PU3u /lQnFLjMZZdecfgXW+BRvmtpy/kExafJwaIJLzI5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6ue/DT3bYboS74EtHWZ7cNB8saAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZDU5NzUwLTVkODQtNGMwOC1hMDg4LThlYTg3MTFiNDhkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjl6QwDQYJKoZIhvcNAQELBQADggEBAERLUJAn2ba7AvHz4TCPnDT8gZQJ JO6n4bRFrKAwo/EBwxHJzZM7eIEfvHQuM7Kw9VYrs6bg26VhfV9f8vIu0bTg5f/t C+Kd0V3X2o9KdB89MWOhm7tTT/3IUsH5PqjkW3oV2BHlkHLmwB5WD2HrEFEVLA0I kicoqxpCNYSWfXDjPTOW1H2X5gbWZ+NQ65YkdIQAf5btlW2JB4qj81BxWd6Xm9nW 9Z8S7LRNpSK1qX9u7eadNe/FGfD7KPTaJTWieIVvbbgybwn3YEYdkGzdaGKH2C9T KQRrXEQ2zjij/uhjAiHsfSHZurawVdVzZX1N9DI61HyspJy+U5qU1LEkP/Q= -----END CERTIFICATE-----Generated at Sat Jul 26 01:55:36 2025 by rpki-client