$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c52c0e6-7237-4386-a1d8-c4738c01d3a3.roa File: 3c52c0e6-7237-4386-a1d8-c4738c01d3a3.roa (raw, json) Hash identifier: nRnbTNCYlpMI/j2cE47OnOCNrrk+S3Jx8CL6nKeTfXU= Subject key identifier: FA:41:E6:87:0D:43:9E:D9:80:A9:E0:3B:E1:96:24:47:CB:F4:D2:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 651B00C65464D0299D22AC799AEE45FA4A4D5CBD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c52c0e6-7237-4386-a1d8-c4738c01d3a3.roa Signing time: Fri 18 Jul 2025 00:21:08 +0000 ROA not before: Fri 18 Jul 2025 00:21:08 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 32.160.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1b:00:c6:54:64:d0:29:9d:22:ac:79:9a:ee:45:fa:4a:4d:5c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:21:08 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=35be3055da58961573a2ab73c5e9754514e79cd4e6497f7f8a2de53cf987174f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:e5:54:19:a8:f0:ef:03:7a:c7:79:c4:d2: 9b:95:f2:35:8a:f2:30:eb:27:bf:2d:40:8c:3b:7e: f5:74:2c:46:31:5d:f4:da:a0:df:80:f5:0e:88:f8: d0:2a:d1:39:3d:c0:40:64:b5:be:d3:17:d5:83:66: b3:31:70:ea:7f:bf:ad:d7:21:e1:fb:9a:34:3d:96: ed:bb:bd:ef:e6:ae:3a:46:a1:46:ff:7b:05:38:4e: 7e:41:36:13:fc:4c:b7:17:27:d4:6f:a5:4e:87:9e: f9:08:15:35:9e:f1:e3:b2:8b:26:1e:6c:94:1c:e7: 0d:e4:c1:4d:7f:29:d0:fa:1b:7e:df:c4:ae:c0:14: 2d:32:37:47:41:46:c4:cc:41:fb:8b:5f:7f:e4:38: 25:68:a2:1a:3a:91:76:cb:5f:46:1e:3f:0e:08:d3: 63:45:80:c2:65:7c:cb:0d:36:fa:34:6a:f4:57:88: 13:a6:72:60:cc:b5:de:5e:96:3c:0b:36:30:52:f9: ee:8d:63:eb:48:66:f5:e7:f5:32:7e:81:e8:34:a6: e2:b5:11:97:2b:de:06:a8:76:3a:6f:ff:85:6c:80: 05:59:f1:19:14:d7:5a:88:b5:01:f2:5c:c3:5d:e6: 13:6e:cb:40:dc:3f:4c:dc:f6:d9:4b:12:98:b0:b2: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:41:E6:87:0D:43:9E:D9:80:A9:E0:3B:E1:96:24:47:CB:F4:D2:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c52c0e6-7237-4386-a1d8-c4738c01d3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.160.0.0/14 Signature Algorithm: sha256WithRSAEncryption 58:75:9c:5d:9d:99:d0:1c:ee:d0:71:f2:40:bf:f0:fd:d9:27: 4e:15:b2:3e:88:c0:6b:01:fc:05:b9:51:32:09:b7:cc:65:0e: 2c:01:d6:02:78:d3:a1:40:4a:e8:b8:86:ea:12:1f:01:81:56: e1:b5:82:0c:9e:c8:c8:24:b7:47:c6:af:bf:5d:2c:15:10:be: d8:15:82:fb:47:ec:2f:0e:b9:ae:7e:b7:c0:c1:f3:b5:00:48: ac:23:a2:16:16:e0:cf:a2:fa:1a:2b:f5:9a:24:da:bd:66:9d: 1a:eb:20:d8:5e:fd:d2:cd:80:87:31:4e:ea:08:57:99:4f:f2: 2e:93:35:6a:08:dc:e3:9f:70:88:c0:46:7f:74:8e:85:91:d9: 9e:b5:18:be:98:a0:88:cf:1e:45:7f:33:79:d8:09:da:51:14: 54:9c:ed:29:fb:6a:79:ce:15:a8:69:a5:26:d4:de:51:18:3b: 50:69:71:d1:bd:07:da:5c:2a:f7:9b:ad:ef:6c:57:0a:f3:cd: 86:4a:e2:b2:ea:5b:26:e3:d9:ae:4f:36:b6:f0:0b:c3:be:53: 90:2e:a2:f1:78:e7:be:cc:8c:3a:fc:10:c1:e8:f2:91:ca:15: 03:74:e9:1f:32:7f:51:f9:64:81:84:8b:d5:3a:b2:77:53:13: fb:02:41:ab -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZRsAxlRk0CmdIqx5mu5F+kpNXL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAyMTA4WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWJlMzA1NWRhNTg5NjE1NzNhMmFiNzNjNWU5NzU0NTE0 ZTc5Y2Q0ZTY0OTdmN2Y4YTJkZTUzY2Y5ODcxNzRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQsOVUGajw7wN6x3nE0puV8jWK8jDrJ78tQIw7fvV0LEYx XfTaoN+A9Q6I+NAq0Tk9wEBktb7TF9WDZrMxcOp/v63XIeH7mjQ9lu27ve/mrjpG oUb/ewU4Tn5BNhP8TLcXJ9RvpU6HnvkIFTWe8eOyiyYebJQc5w3kwU1/KdD6G37f xK7AFC0yN0dBRsTMQfuLX3/kOCVooho6kXbLX0YePw4I02NFgMJlfMsNNvo0avRX iBOmcmDMtd5eljwLNjBS+e6NY+tIZvXn9TJ+geg0puK1EZcr3gaodjpv/4VsgAVZ 8RkU11qItQHyXMNd5hNuy0DcP0zc9tlLEpiwsnUVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+kHmhw1DntmAqeA74ZYkR8v00iQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjNTJjMGU2LTcyMzctNDM4Ni1hMWQ4LWM0NzM4YzAxZDNhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIgoDANBgkqhkiG9w0BAQsFAAOCAQEAWHWcXZ2Z0Bzu0HHyQL/w/dknThWy PojAawH8BblRMgm3zGUOLAHWAnjToUBK6LiG6hIfAYFW4bWCDJ7IyCS3R8avv10s FRC+2BWC+0fsLw65rn63wMHztQBIrCOiFhbgz6L6Giv1miTavWadGusg2F790s2A hzFO6ghXmU/yLpM1agjc459wiMBGf3SOhZHZnrUYvpigiM8eRX8zedgJ2lEUVJzt Kftqec4VqGmlJtTeURg7UGlx0b0H2lwq95ut72xXCvPNhkrisupbJuPZrk82tvAL w75TkC6i8XjnvsyMOvwQwejykcoVA3TpHzJ/UflkgYSL1Tqyd1MT+wJBqw== -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:39 2025 by rpki-client