$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/314c7065-54b1-44ae-a830-288d71b28af0.roa File: 314c7065-54b1-44ae-a830-288d71b28af0.roa (raw, json) Hash identifier: FnWwAOJg7wbk6sVpbHDhlxoB06+IEjbwcDhaoCzuBkE= Subject key identifier: A8:58:55:76:F2:20:F7:4D:61:4B:DF:63:85:AE:73:18:3B:F9:03:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15BB3B7D9B1020422C3F5C0C37C5FF1DFAFCC1BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/314c7065-54b1-44ae-a830-288d71b28af0.roa Signing time: Wed 09 Jul 2025 00:52:08 +0000 ROA not before: Wed 09 Jul 2025 00:52:08 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.25.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bb:3b:7d:9b:10:20:42:2c:3f:5c:0c:37:c5:ff:1d:fa:fc:c1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:52:08 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=1a01e23cc4a6375784cbc8ff6732623b99f0d0bf2ee9661083f8efeb3c0c3391, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:6c:fc:c8:50:e4:c9:b1:06:40:51:c2:10: cf:90:56:09:10:b6:da:27:06:7e:91:78:1e:9a:37: 6e:0f:5d:5d:e2:db:4d:20:72:07:e7:44:20:61:ab: 5e:89:7d:26:68:ac:21:70:63:53:15:41:3c:64:8f: d7:9c:11:4c:6c:37:51:c9:59:60:dd:f5:3b:94:ed: 20:4e:e5:f9:14:14:5f:4e:ed:49:ab:12:7a:52:81: dc:f9:bc:66:fb:01:34:b8:d8:44:49:33:6a:47:b4: c2:69:d0:79:10:0e:cc:56:1f:20:04:53:19:b0:50: 9b:bb:5e:8f:94:6f:e5:2a:e3:24:9c:15:9e:be:97: 60:69:4d:b9:bd:a2:4d:7c:bc:07:a5:a2:48:ce:9b: 44:5a:97:18:2d:26:8b:f4:90:b8:3d:8f:3d:fc:e3: 8b:9b:7c:68:34:bc:77:7b:50:db:39:ab:9d:7e:86: 12:a4:0e:3f:5a:67:50:c6:77:0d:90:31:35:bf:1e: ee:85:c5:55:37:7c:d6:79:17:23:50:c2:f9:0c:19: 7f:8e:19:32:2d:1a:39:0e:c1:8c:6c:0b:b8:81:ef: 92:99:e9:63:65:e9:32:15:c2:13:f3:1d:30:34:a6: da:b7:0a:d1:b7:47:48:bc:e4:7b:db:1b:21:4c:07: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:55:76:F2:20:F7:4D:61:4B:DF:63:85:AE:73:18:3B:F9:03:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/314c7065-54b1-44ae-a830-288d71b28af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.25.67.0/24 Signature Algorithm: sha256WithRSAEncryption 86:be:a8:00:3f:67:85:ab:f8:d7:dd:5e:79:35:3a:e9:ec:41: d8:d7:20:38:6d:4e:cf:c6:ac:63:0a:8d:21:9b:78:64:57:2f: 52:43:ad:05:f9:41:e9:90:34:07:3a:19:b1:10:53:8d:1f:1a: 8c:60:5e:df:b2:3b:98:5d:cb:9c:25:7d:91:b0:c1:98:40:02: 67:2e:71:63:f8:d2:43:9f:80:98:9c:c6:9c:02:b0:fc:61:64: cb:df:7c:32:d3:96:49:13:2c:21:e8:01:e7:01:31:1f:e5:a9: 3e:57:fe:96:d0:6a:92:be:1b:fb:09:37:55:b9:6d:e2:e4:f9: ff:86:4f:b8:cd:a6:c7:34:13:b7:d5:05:0c:1e:5e:e2:ab:2d: c2:eb:b3:85:24:52:9f:16:a1:50:9f:b3:06:ef:c3:cc:2a:52: 28:64:ef:b4:07:f8:a6:e2:78:37:57:0a:d0:e3:34:c7:ee:37: cc:4f:5d:79:18:2f:e5:97:7d:00:a2:cc:5c:c1:c8:25:a5:46: 9e:b9:18:9f:93:f6:34:de:1b:5d:89:d3:87:b7:c9:ce:9c:35: ec:f7:07:9b:d8:49:af:d5:ef:51:b5:a5:a2:cc:03:26:43:ab: c1:8f:7d:33:ac:46:85:8d:06:31:da:e1:3f:d7:68:57:9b:49: bc:65:54:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFbs7fZsQIEIsP1wMN8X/Hfr8wbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MjA4WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTAxZTIzY2M0YTYzNzU3ODRjYmM4ZmY2NzMyNjIzYjk5 ZjBkMGJmMmVlOTY2MTA4M2Y4ZWZlYjNjMGMzMzkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqumz8yFDkybEGQFHCEM+QVgkQttonBn6ReB6aN24PXV3i 200gcgfnRCBhq16JfSZorCFwY1MVQTxkj9ecEUxsN1HJWWDd9TuU7SBO5fkUFF9O 7UmrEnpSgdz5vGb7ATS42ERJM2pHtMJp0HkQDsxWHyAEUxmwUJu7Xo+Ub+Uq4ySc FZ6+l2BpTbm9ok18vAelokjOm0RalxgtJov0kLg9jz3844ubfGg0vHd7UNs5q51+ hhKkDj9aZ1DGdw2QMTW/Hu6FxVU3fNZ5FyNQwvkMGX+OGTItGjkOwYxsC7iB75KZ 6WNl6TIVwhPzHTA0ptq3CtG3R0i85HvbGyFMB+1DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqFhVdvIg901hS99jha5zGDv5A+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxNGM3MDY1LTU0YjEtNDRhZS1hODMwLTI4OGQ3MWIyOGFmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GUMwDQYJKoZIhvcNAQELBQADggEBAIa+qAA/Z4Wr+NfdXnk1OunsQdjX IDhtTs/GrGMKjSGbeGRXL1JDrQX5QemQNAc6GbEQU40fGoxgXt+yO5hdy5wlfZGw wZhAAmcucWP40kOfgJicxpwCsPxhZMvffDLTlkkTLCHoAecBMR/lqT5X/pbQapK+ G/sJN1W5beLk+f+GT7jNpsc0E7fVBQweXuKrLcLrs4UkUp8WoVCfswbvw8wqUihk 77QH+KbieDdXCtDjNMfuN8xPXXkYL+WXfQCizFzByCWlRp65GJ+T9jTeG12J04e3 yc6cNez3B5vYSa/V71G1paLMAyZDq8GPfTOsRoWNBjHa4T/XaFebSbxlVO0= -----END CERTIFICATE-----Generated at Tue Jul 22 12:23:12 2025 by rpki-client