$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa File: 2bd59750-5d84-4c08-a088-8ea8711b48d8.roa (raw, json) Hash identifier: KYASUrBdmg127uEWXVYpKLPUk3meGinwzvC2mhb9hK8= Subject key identifier: 52:0F:3E:A1:FE:3B:7B:B9:87:D2:5A:EC:66:09:5F:E8:10:BF:F3:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 731D5B6D9268DE06811EEA2AB1441778EC11322B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa Signing time: Mon 30 Jun 2025 15:40:25 +0000 ROA not before: Mon 30 Jun 2025 15:40:25 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1d:5b:6d:92:68:de:06:81:1e:ea:2a:b1:44:17:78:ec:11:32:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:40:25 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=2550d5c5582eb5250f3295bcd0ea902be30c9a3007fa68cefb65b7712a5a8b7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:be:73:34:d4:70:72:17:23:ca:a2:fe:6d: 2d:f9:1f:72:6b:e6:bb:f1:fd:63:c3:3f:aa:9e:14: 47:b5:73:fb:27:47:0b:51:55:ba:b4:60:63:fe:4f: fd:2f:5c:7f:7b:14:42:cf:90:83:34:bb:28:fa:3c: dc:16:b5:68:da:4d:d7:cf:bb:89:a5:ac:69:b7:49: a2:52:e3:ae:a4:78:14:64:e7:6f:72:14:88:58:ee: b1:2d:ba:18:4d:ca:0e:6c:c9:9b:15:15:99:fe:98: 08:b8:0e:a0:94:1e:32:a4:dd:73:87:08:17:bb:32: 46:98:0d:21:62:2f:34:1a:f8:71:cf:e7:a9:70:8a: de:f6:df:f1:59:ca:1e:b3:7e:5a:57:91:eb:50:8f: 54:1e:53:5e:6f:da:05:e8:ec:94:cb:c7:c0:75:13: 1b:bc:bc:0f:1f:39:2b:cb:d7:15:19:2d:ad:f7:20: 5e:62:ce:ac:f3:0a:d9:c9:4c:b4:44:13:4e:20:ac: 18:f2:29:81:0a:86:4b:55:1f:42:2c:39:0c:42:7a: 76:7d:51:4c:23:bd:ef:43:19:4e:d1:2c:34:86:d8: 03:0d:e3:10:4b:95:5b:a4:a1:43:9a:4d:ff:f3:5f: cf:2d:6c:b5:5c:06:ca:76:ab:8c:c5:c4:53:06:c9: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0F:3E:A1:FE:3B:7B:B9:87:D2:5A:EC:66:09:5F:E8:10:BF:F3:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.164.0/22 Signature Algorithm: sha256WithRSAEncryption a8:f3:47:34:9a:b1:d5:5e:d5:e9:d5:44:8d:b4:19:5e:1f:f4: 4b:52:4c:81:bc:45:43:81:a8:ef:92:a5:f4:40:13:ed:55:3a: 5c:d9:30:7e:e4:5c:72:e7:4f:b8:00:52:a0:73:d4:59:52:1f: 15:a3:18:47:d3:e2:bb:e0:37:41:0a:b9:d1:ba:19:25:51:8c: fc:fe:42:ce:a6:57:a6:1d:7e:03:21:6b:0b:37:34:18:25:89: e1:46:d1:31:7f:e6:da:b1:6e:f5:24:40:0d:59:6e:6f:f6:07: 73:9d:3c:d9:00:8a:c3:39:c9:33:22:ab:7b:be:14:ae:3a:38: 5a:c8:2c:54:5b:52:21:95:1a:4c:29:54:15:9c:31:6c:16:b6: 57:3d:f4:24:47:d0:3d:c8:3e:9c:8e:8f:60:53:36:2d:ae:4e: 6c:4d:3a:d4:57:cc:bf:a4:46:d7:fe:92:38:bb:e6:69:27:65: 6c:c8:85:04:d3:da:8f:27:bf:b8:7b:d6:a0:5e:8f:f7:ef:f6: 31:8c:5f:1c:ef:d5:71:70:29:04:06:17:38:ea:f6:e5:9f:5c: 88:85:8f:d2:d7:56:0e:60:8d:ef:e4:07:8a:93:05:1f:18:a7: 23:c3:48:4e:56:67:83:a5:dd:fc:2d:18:54:28:36:f7:9d:df: 17:c2:e9:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcx1bbZJo3gaBHuoqsUQXeOwRMiswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTU0MDI1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTUwZDVjNTU4MmViNTI1MGYzMjk1YmNkMGVhOTAyYmUz MGM5YTMwMDdmYTY4Y2VmYjY1Yjc3MTJhNWE4YjdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIg75zNNRwchcjyqL+bS35H3Jr5rvx/WPDP6qeFEe1c/sn RwtRVbq0YGP+T/0vXH97FELPkIM0uyj6PNwWtWjaTdfPu4mlrGm3SaJS466keBRk 529yFIhY7rEtuhhNyg5syZsVFZn+mAi4DqCUHjKk3XOHCBe7MkaYDSFiLzQa+HHP 56lwit723/FZyh6zflpXketQj1QeU15v2gXo7JTLx8B1Exu8vA8fOSvL1xUZLa33 IF5izqzzCtnJTLREE04grBjyKYEKhktVH0IsOQxCenZ9UUwjve9DGU7RLDSG2AMN 4xBLlVukoUOaTf/zX88tbLVcBsp2q4zFxFMGyXJLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUg8+of47e7mH0lrsZglf6BC/8yswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZDU5NzUwLTVkODQtNGMwOC1hMDg4LThlYTg3MTFiNDhkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjl6QwDQYJKoZIhvcNAQELBQADggEBAKjzRzSasdVe1enVRI20GV4f9EtS TIG8RUOBqO+SpfRAE+1VOlzZMH7kXHLnT7gAUqBz1FlSHxWjGEfT4rvgN0EKudG6 GSVRjPz+Qs6mV6YdfgMhaws3NBglieFG0TF/5tqxbvUkQA1Zbm/2B3OdPNkAisM5 yTMiq3u+FK46OFrILFRbUiGVGkwpVBWcMWwWtlc99CRH0D3IPpyOj2BTNi2uTmxN OtRXzL+kRtf+kji75mknZWzIhQTT2o8nv7h71qBej/fv9jGMXxzv1XFwKQQGFzjq 9uWfXIiFj9LXVg5gje/kB4qTBR8YpyPDSE5WZ4Ol3fwtGFQoNved3xfC6Sw= -----END CERTIFICATE-----Generated at Thu Jul 24 12:06:21 2025 by rpki-client