$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa File: 3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa (raw, json) Hash identifier: uzIMfxYkazpcppxeL3VgKvl3meHVDJt115Urv3K3fj4= Subject key identifier: 16:1F:B6:C7:38:1E:B1:C7:3F:6E:94:8D:89:1A:90:B8:BA:D3:A8:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 144DE067EE1F00FD4A8F9DE594B12D9F4EBEF8C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa Signing time: Sat 12 Jul 2025 00:21:45 +0000 ROA not before: Sat 12 Jul 2025 00:21:45 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.52.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4d:e0:67:ee:1f:00:fd:4a:8f:9d:e5:94:b1:2d:9f:4e:be:f8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:21:45 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=3529e2f44448dac9cc10ddd9f8058a56b162c230a098952a43c3f1f9311d47e5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:59:6a:5d:32:d9:f7:b8:49:6b:83:8b:a0: 3f:93:4a:da:5a:5b:62:e0:b5:75:ed:75:bf:74:66: 78:ab:0d:b6:fc:57:d5:5c:bd:db:fd:87:09:5b:4b: 5f:da:11:1c:ac:a5:a3:66:a0:cb:4e:38:38:3c:93: 34:95:d8:35:81:7f:ed:14:62:a2:15:f9:d8:4e:bc: 8e:9c:67:f7:f1:1b:ba:f2:c6:0e:f7:19:f9:71:26: 70:4f:b3:02:4b:7d:49:88:b0:3e:be:6c:8f:ea:9e: 18:3f:66:fe:e2:92:68:4c:88:6f:f7:f2:92:2b:89: 3c:5e:d8:60:b2:48:6f:37:84:41:47:be:fe:db:5b: d7:28:7a:d1:92:8a:55:cc:c7:7a:80:93:01:41:32: 05:49:ab:ad:eb:53:49:64:f1:ef:49:c9:23:cf:a5: b9:44:3c:cc:af:ef:e7:db:07:4d:1e:18:5a:ff:85: 89:0f:09:44:99:6b:83:4f:67:88:31:3f:3f:49:b7: 44:5a:8c:71:e0:06:6e:b4:77:61:9d:a8:c6:49:0e: 3c:20:f2:cf:55:b5:1d:9d:6c:0e:dc:76:20:94:cc: f3:4d:4d:a2:5b:1b:a5:11:b0:d4:26:a5:a3:67:26: 64:24:a6:6c:12:9f:14:7c:80:f3:3d:c4:93:88:7d: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1F:B6:C7:38:1E:B1:C7:3F:6E:94:8D:89:1A:90:B8:BA:D3:A8:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3826e8f9-3f41-4a06-8e6d-456abe1ffa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.52.32.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:96:1a:18:09:f8:94:c7:4d:aa:17:0c:f7:32:b5:94:e3:4a: c6:e8:76:f5:2c:22:76:91:0f:b4:82:44:a0:26:4e:17:62:0c: 01:c7:dc:28:23:be:86:86:65:01:79:54:31:81:fb:f7:1d:63: 25:41:37:12:83:26:5c:e8:6c:86:31:d7:93:64:f0:6b:31:9f: 83:a6:48:f9:1f:06:05:a7:48:04:47:e8:aa:ae:1a:5c:a6:d6: 12:5f:f2:f9:a7:44:ea:57:8f:8d:25:1c:f1:c8:45:31:ac:8b: fa:e1:7c:96:22:90:70:23:e8:2c:28:3d:11:d1:8a:99:02:a8: 8b:24:09:f4:3e:98:5f:c1:f4:21:09:7e:b9:4b:d5:bc:0d:70: 12:c6:05:54:8d:20:8a:19:02:ec:d2:f2:df:86:20:b8:54:a5: d6:a7:70:8a:01:5f:b8:cb:d2:cc:9c:d3:79:52:8d:09:63:cf: b1:59:28:9c:f7:2a:ba:e9:28:cf:d0:c9:0e:b7:26:a6:a2:76: b8:22:70:0e:f7:a3:29:a5:34:97:60:cb:72:1c:c0:7f:52:1e: ee:37:99:7b:99:31:4f:b0:9b:8f:fd:49:ec:b1:14:3d:c5:c9: 77:09:57:6b:da:29:07:25:28:2a:c6:68:ba:e5:7e:38:51:ea: 36:19:b2:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFE3gZ+4fAP1Kj53llLEtn06++MMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMTQ1WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTI5ZTJmNDQ0NDhkYWM5Y2MxMGRkZDlmODA1OGE1NmIx NjJjMjMwYTA5ODk1MmE0M2MzZjFmOTMxMWQ0N2U1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXP1lqXTLZ97hJa4OLoD+TStpaW2LgtXXtdb90ZnirDbb8 V9Vcvdv9hwlbS1/aERyspaNmoMtOODg8kzSV2DWBf+0UYqIV+dhOvI6cZ/fxG7ry xg73GflxJnBPswJLfUmIsD6+bI/qnhg/Zv7ikmhMiG/38pIriTxe2GCySG83hEFH vv7bW9coetGSilXMx3qAkwFBMgVJq63rU0lk8e9JySPPpblEPMyv7+fbB00eGFr/ hYkPCUSZa4NPZ4gxPz9Jt0RajHHgBm60d2GdqMZJDjwg8s9VtR2dbA7cdiCUzPNN TaJbG6URsNQmpaNnJmQkpmwSnxR8gPM9xJOIfYqdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFh+2xzgescc/bpSNiRqQuLrTqN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MjZlOGY5LTNmNDEtNGEwNi04ZTZkLTQ1NmFiZTFmZmE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXMNCAwDQYJKoZIhvcNAQELBQADggEBAJyWGhgJ+JTHTaoXDPcytZTjSsbo dvUsInaRD7SCRKAmThdiDAHH3CgjvoaGZQF5VDGB+/cdYyVBNxKDJlzobIYx15Nk 8Gsxn4OmSPkfBgWnSARH6KquGlym1hJf8vmnROpXj40lHPHIRTGsi/rhfJYikHAj 6CwoPRHRipkCqIskCfQ+mF/B9CEJfrlL1bwNcBLGBVSNIIoZAuzS8t+GILhUpdan cIoBX7jL0syc03lSjQljz7FZKJz3KrrpKM/QyQ63JqaidrgicA73oymlNJdgy3Ic wH9SHu43mXuZMU+wm4/9SeyxFD3FyXcJV2vaKQclKCrGaLrlfjhR6jYZsvo= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:17 2025 by rpki-client