$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/329407c6-ade2-4e81-8e88-4118393e7f6a.roa File: 329407c6-ade2-4e81-8e88-4118393e7f6a.roa (raw, json) Hash identifier: LU68O6kLaUF3f4wrFVqYLJa0ooXCL/hzaQ4A/X3lFNY= Subject key identifier: 5B:BC:1E:A5:93:20:6A:CA:3A:36:53:8C:9A:51:56:77:89:04:64:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B748FC2C919A4D5995766B6280CA4913D454584 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/329407c6-ade2-4e81-8e88-4118393e7f6a.roa Signing time: Wed 02 Jul 2025 00:30:19 +0000 ROA not before: Wed 02 Jul 2025 00:30:19 +0000 ROA not after: Wed 06 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.109.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:74:8f:c2:c9:19:a4:d5:99:57:66:b6:28:0c:a4:91:3d:45:45:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 2 00:30:19 2025 GMT Not After : Aug 6 23:59:59 2025 GMT Subject: serialNumber=3fe86387d9c0f3a00851851410a286e1ff5efd8315f5ea0abe6aa30e4d1c1747, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:a0:3c:e3:4c:15:3c:db:4b:8e:83:a6:c4: 61:86:5f:a3:20:df:c7:4e:e1:91:25:7e:d6:d1:07: a8:25:0e:f6:e3:09:4f:30:6a:81:9b:6a:a8:c9:18: f8:27:1e:e6:79:48:6c:c2:28:05:ff:15:1b:02:c3: 7e:62:83:17:cc:08:95:4e:54:ac:e7:be:11:93:2e: 58:19:11:5e:38:ae:6d:3b:44:b9:10:33:9e:fb:02: ec:b1:5c:e6:f8:d1:d1:09:6f:22:78:7a:f2:fe:d3: d2:0d:21:1e:61:ad:cd:bb:06:b9:6d:9a:c3:1d:8d: 64:51:7c:8a:8d:ee:6c:5b:0d:b7:27:f5:d1:ed:91: cf:8b:ee:26:58:93:d3:b8:76:25:68:91:9b:bb:f8: e4:c4:7e:81:49:15:ab:e5:3f:27:85:fd:f0:83:df: 51:d0:88:b2:7d:32:a1:89:21:66:ca:fe:00:24:ff: 4a:73:10:f0:4f:58:00:51:1d:5f:75:a3:8d:42:3c: f5:eb:9f:bf:2f:e4:d2:ac:7c:06:05:db:cf:e0:a9: 62:66:c8:20:53:14:f2:f8:91:5a:b3:03:49:7b:a4: f6:78:60:0f:cf:57:e7:cb:bf:36:af:6a:86:ef:fb: 37:2c:b0:1c:46:f7:97:d9:a0:81:57:2c:2f:d6:a1: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:1E:A5:93:20:6A:CA:3A:36:53:8C:9A:51:56:77:89:04:64:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/329407c6-ade2-4e81-8e88-4118393e7f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.109.64.0/19 Signature Algorithm: sha256WithRSAEncryption 94:e4:21:1d:44:19:40:cf:e6:d6:34:76:11:51:1d:6c:a3:a2: b6:d6:2b:9f:77:1d:bd:1e:40:86:7e:fb:c6:e6:62:10:7a:81: 86:ad:8a:99:3d:51:6a:53:4e:54:4f:ea:59:d5:04:1e:41:df: 88:57:f7:15:b4:b5:92:1e:d3:8a:b2:7b:88:3a:b1:35:16:e0: 9c:5d:18:95:3a:fb:84:47:4c:45:a4:3b:1f:3b:54:c8:25:0a: aa:91:51:88:50:30:34:8c:a1:20:83:72:97:6c:22:51:6b:0f: 6b:13:5d:c1:ff:d4:bc:c3:e6:6c:16:46:7b:48:91:aa:37:9f: 21:56:fb:e1:2e:ce:a2:0e:98:d9:2f:30:44:8b:72:e2:8a:40: d3:b5:54:7c:6d:a9:70:2d:5d:49:04:4b:76:b8:14:cf:1d:ff: 4a:97:42:d7:67:81:85:a8:5b:e9:15:c5:30:83:a6:8b:11:e5: e4:b2:1e:51:7d:4a:0e:4e:a8:30:10:40:7b:43:fc:d8:38:ac: bc:05:24:b6:e6:6c:3d:ab:bc:0a:c3:65:64:f8:f6:68:89:c5: 40:86:45:be:60:eb:47:a4:11:b3:48:7f:33:5e:2b:3a:0a:1d: 01:1b:bf:ff:ec:b2:8e:b7:86:e0:42:d0:18:df:a8:c4:bf:85: a4:8a:18:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG3SPwskZpNWZV2a2KAykkT1FRYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAyMDAzMDE5WhcNMjUwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmU4NjM4N2Q5YzBmM2EwMDg1MTg1MTQxMGEyODZlMWZm NWVmZDgzMTVmNWVhMGFiZTZhYTMwZTRkMWMxNzQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfBKA840wVPNtLjoOmxGGGX6Mg38dO4ZElftbRB6glDvbj CU8waoGbaqjJGPgnHuZ5SGzCKAX/FRsCw35igxfMCJVOVKznvhGTLlgZEV44rm07 RLkQM577AuyxXOb40dEJbyJ4evL+09INIR5hrc27BrltmsMdjWRRfIqN7mxbDbcn 9dHtkc+L7iZYk9O4diVokZu7+OTEfoFJFavlPyeF/fCD31HQiLJ9MqGJIWbK/gAk /0pzEPBPWABRHV91o41CPPXrn78v5NKsfAYF28/gqWJmyCBTFPL4kVqzA0l7pPZ4 YA/PV+fLvzavaobv+zcssBxG95fZoIFXLC/WocC5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW7wepZMgaso6NlOMmlFWd4kEZBowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMyOTQwN2M2LWFkZTItNGU4MS04ZTg4LTQxMTgzOTNlN2Y2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXRbUAwDQYJKoZIhvcNAQELBQADggEBAJTkIR1EGUDP5tY0dhFRHWyjorbW K593Hb0eQIZ++8bmYhB6gYatipk9UWpTTlRP6lnVBB5B34hX9xW0tZIe04qye4g6 sTUW4JxdGJU6+4RHTEWkOx87VMglCqqRUYhQMDSMoSCDcpdsIlFrD2sTXcH/1LzD 5mwWRntIkao3nyFW++EuzqIOmNkvMESLcuKKQNO1VHxtqXAtXUkES3a4FM8d/0qX QtdngYWoW+kVxTCDposR5eSyHlF9Sg5OqDAQQHtD/Ng4rLwFJLbmbD2rvArDZWT4 9miJxUCGRb5g60ekEbNIfzNeKzoKHQEbv//sso63huBC0BjfqMS/haSKGEs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:19:29 2025 by rpki-client