$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3550ed23-56cb-4039-b3db-d2d82f35e363.roa File: 3550ed23-56cb-4039-b3db-d2d82f35e363.roa (raw, json) Hash identifier: La//mT257cXeyq0atibEzrdr+E/UxZ5NjK59ncI/d/k= Subject key identifier: A3:03:38:EA:E8:80:95:BD:1C:DE:BD:C3:8E:05:04:DD:FE:6F:81:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52B04F50BEAF5B36DAE9F34ECCD7235505E57F5E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3550ed23-56cb-4039-b3db-d2d82f35e363.roa Signing time: Mon 07 Jul 2025 16:11:47 +0000 ROA not before: Mon 07 Jul 2025 16:11:47 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.225.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b0:4f:50:be:af:5b:36:da:e9:f3:4e:cc:d7:23:55:05:e5:7f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:11:47 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=b19ffa38715b356fd9c6dd5f3f7f8c54dd15818937a27e9938757cb15422a5d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:27:8c:b2:7c:2b:0a:6d:bd:c1:57:61:d2: d9:65:70:12:32:df:18:7a:ed:f2:31:bb:5c:0e:98: 79:b8:42:6c:ae:7a:03:f9:93:92:84:e9:b0:94:21: 75:80:9d:cb:71:61:c8:e9:9b:8e:e3:48:a3:06:25: fb:e7:15:db:dc:c0:37:10:c7:20:1b:d0:54:b9:5f: 16:38:93:ce:c9:07:62:45:cb:46:ed:ec:69:e4:0a: 7b:a0:3a:3b:e4:ba:8f:3b:09:6b:d7:f5:7c:ce:7e: ad:7e:9c:74:65:c6:a3:01:7b:b5:66:0c:6a:4c:75: dd:fb:cb:5b:73:f3:be:77:4d:f5:d5:d2:33:4f:86: 6d:ec:22:77:59:04:08:e4:d3:82:21:11:e8:bb:38: 19:73:b8:a8:f3:b4:30:c7:83:56:54:96:d7:9e:71: 95:74:58:80:7e:c9:81:a8:aa:1a:f9:a0:63:0f:a1: b9:64:c1:be:6c:01:f0:d7:10:4c:81:03:37:81:24: bd:cd:b9:51:3e:66:6a:d6:09:15:8d:37:68:e0:76: 33:bc:8a:e4:85:3a:ef:5a:33:e9:5b:49:01:63:51: 77:72:93:0e:53:6a:3c:e8:0f:61:c4:ee:13:ce:d5: 59:82:19:b2:44:0e:db:80:92:18:5e:d9:2f:8b:be: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:03:38:EA:E8:80:95:BD:1C:DE:BD:C3:8E:05:04:DD:FE:6F:81:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3550ed23-56cb-4039-b3db-d2d82f35e363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.225.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:61:cd:a8:67:21:bc:92:d4:6c:98:d5:25:2b:7f:44:cf:5f: e4:81:91:07:3d:ed:47:7f:61:21:13:e9:b9:e7:89:11:e4:f8: 26:4c:63:b1:a1:b8:67:f0:47:8a:96:70:5d:e6:25:c5:95:ab: 2c:b9:12:88:fa:be:ee:87:0e:37:49:82:ae:98:bd:e4:d0:a9: da:fe:5d:93:41:64:b8:f1:04:9b:1d:8a:0a:87:70:d1:f5:69: 5a:03:f8:54:08:2e:71:aa:5f:4e:86:ab:f8:6f:33:9c:27:cf: 90:e0:48:57:35:6c:3d:2b:be:29:ba:4e:eb:23:15:f4:aa:6d: 35:d9:21:ab:88:cd:80:a7:02:e7:2c:93:fb:d6:da:84:5b:84: 5b:a9:8c:fd:a6:4a:39:1d:81:35:51:a0:d5:55:cf:f0:65:34: 60:4a:9f:51:d1:f0:70:91:3d:e8:d2:bc:10:01:77:10:12:4d: b0:94:0c:34:e1:4d:36:6d:ba:c7:10:57:91:cc:f1:90:95:2b: 02:82:72:67:2d:a2:f4:f9:76:eb:8d:55:e1:a5:80:2e:c8:28: 67:d5:07:02:02:f0:1f:03:9b:a6:e0:b9:ea:42:f0:a0:c4:85: d3:87:69:76:c2:56:18:dc:86:f6:80:7a:9e:26:f7:49:a2:80: b7:18:dd:65 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUrBPUL6vWzba6fNOzNcjVQXlf14wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYxMTQ3WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTlmZmEzODcxNWIzNTZmZDljNmRkNWYzZjdmOGM1NGRk MTU4MTg5MzdhMjdlOTkzODc1N2NiMTU0MjJhNWQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz5SeMsnwrCm29wVdh0tllcBIy3xh67fIxu1wOmHm4Qmyu egP5k5KE6bCUIXWAnctxYcjpm47jSKMGJfvnFdvcwDcQxyAb0FS5XxY4k87JB2JF y0bt7GnkCnugOjvkuo87CWvX9XzOfq1+nHRlxqMBe7VmDGpMdd37y1tz8753TfXV 0jNPhm3sIndZBAjk04IhEei7OBlzuKjztDDHg1ZUlteecZV0WIB+yYGoqhr5oGMP oblkwb5sAfDXEEyBAzeBJL3NuVE+ZmrWCRWNN2jgdjO8iuSFOu9aM+lbSQFjUXdy kw5TajzoD2HE7hPO1VmCGbJEDtuAkhhe2S+Lvl1tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUowM46uiAlb0c3r3DjgUE3f5vgWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1NTBlZDIzLTU2Y2ItNDAzOS1iM2RiLWQyZDgyZjM1ZTM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP4TANBgkqhkiG9w0BAQsFAAOCAQEACWHNqGchvJLUbJjVJSt/RM9f5IGR Bz3tR39hIRPpueeJEeT4JkxjsaG4Z/BHipZwXeYlxZWrLLkSiPq+7ocON0mCrpi9 5NCp2v5dk0FkuPEEmx2KCodw0fVpWgP4VAgucapfToar+G8znCfPkOBIVzVsPSu+ KbpO6yMV9KptNdkhq4jNgKcC5yyT+9bahFuEW6mM/aZKOR2BNVGg1VXP8GU0YEqf UdHwcJE96NK8EAF3EBJNsJQMNOFNNm26xxBXkczxkJUrAoJyZy2i9Pl2641V4aWA LsgoZ9UHAgLwHwObpuC56kLwoMSF04dpdsJWGNyG9oB6nib3SaKAtxjdZQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:40 2025 by rpki-client