$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa File: 3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa (raw, json) Hash identifier: hrh+OHEiogkpBvo9svTEqN7tn80g2MqNorEkfTdbBhM= Subject key identifier: B0:AC:BC:DD:60:00:F8:5A:69:11:BF:2F:B6:99:D0:28:34:58:A2:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78ECF4581F8AB56604786EE2F824DEFED9BB9FDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa Signing time: Tue 01 Jul 2025 00:00:28 +0000 ROA not before: Tue 01 Jul 2025 00:00:28 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 158.252.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ec:f4:58:1f:8a:b5:66:04:78:6e:e2:f8:24:de:fe:d9:bb:9f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 1 00:00:28 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=a7cb649689ef2385f422586740d060bab624dc5c4f7a48befd50e613a0c35842, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:2c:d8:4b:88:68:0c:84:d3:f9:25:28:6e: df:86:0e:53:22:ee:39:45:e8:d4:ed:aa:a4:a9:3c: ff:77:3c:96:2e:c1:2d:cf:85:22:c2:a5:3b:e2:0a: 63:c7:cd:56:33:8c:56:46:c7:8d:a8:33:02:68:90: c0:f7:3a:22:c1:ae:5b:4d:9f:2e:c5:4c:28:ee:c1: 53:eb:c3:d1:5c:23:62:37:b3:d3:35:9b:d0:94:80: 15:8e:25:86:af:d1:70:3b:c9:f0:70:94:a4:45:a4: 63:d6:cf:f0:ba:fe:ae:fa:2a:44:dc:95:4a:84:1c: 25:e3:dd:85:4a:7e:9d:51:15:f6:23:55:c8:fe:d5: 0d:a4:af:63:57:5d:dd:7c:66:ef:10:eb:11:1a:6c: 29:7d:37:67:65:82:38:b1:a7:6c:ec:09:a7:0d:e9: 78:a3:57:1d:e4:d2:16:df:ef:f0:27:6f:34:59:3e: d5:e2:b7:bc:00:5b:31:ef:bb:05:1f:1c:c1:79:60: 04:2a:11:4d:c5:bf:aa:2f:e9:f0:6b:df:4d:61:2e: b7:02:a4:48:35:83:1f:66:77:9f:32:33:c5:0e:9e: c6:df:27:c5:c8:52:26:f5:75:f8:55:d3:35:9a:02: df:a2:5b:d9:04:89:a3:a6:7c:d9:ae:77:4c:c1:11: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AC:BC:DD:60:00:F8:5A:69:11:BF:2F:B6:99:D0:28:34:58:A2:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.252.0.0/15 Signature Algorithm: sha256WithRSAEncryption 95:4e:11:33:34:c2:bc:bd:45:8a:d6:37:f1:9c:94:3d:49:82: 13:d2:e7:86:06:45:48:06:d9:76:84:77:9b:f5:76:2f:c2:d0: 0d:f4:4e:63:42:d2:94:10:1d:b8:25:c5:d0:66:91:05:9a:a5: 07:0b:b9:70:36:55:77:91:20:92:a8:6d:27:6a:55:0a:1d:2c: e2:ee:2b:33:44:f9:15:ef:b5:b5:7e:40:d2:bf:7c:2d:5a:39: 12:12:f8:6e:d7:33:85:ba:5e:82:a8:c5:0e:b9:1b:6f:0f:16: 0c:b1:b0:2e:aa:91:1b:dc:16:22:b9:92:21:c5:f8:d9:f6:02: 0d:aa:0e:78:1a:06:61:ae:c0:cc:ab:b0:fb:6b:ed:5f:35:69: f3:da:e8:42:ed:da:45:6e:62:4b:ea:74:e7:82:0a:ad:53:6e: 38:53:13:64:d6:56:d7:60:e1:ed:71:e5:25:f2:8d:e4:1b:8d: 64:ed:6e:a9:19:be:7d:e7:2a:21:11:f4:1d:d1:63:4d:7f:dd: 2b:37:a4:ac:49:a5:a1:82:12:a4:6d:24:03:5a:39:ac:15:d1: ba:66:bd:3e:19:d5:a6:02:5d:7f:35:3d:d1:f9:a9:e2:b5:6e: ae:ea:6e:9a:f8:9e:0f:23:16:0a:c5:3d:84:85:74:1b:ee:c0: 7f:73:23:04 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeOz0WB+KtWYEeG7i+CTe/tm7n9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAxMDAwMDI4WhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2NiNjQ5Njg5ZWYyMzg1ZjQyMjU4Njc0MGQwNjBiYWI2 MjRkYzVjNGY3YTQ4YmVmZDUwZTYxM2EwYzM1ODQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTOizYS4hoDITT+SUobt+GDlMi7jlF6NTtqqSpPP93PJYu wS3PhSLCpTviCmPHzVYzjFZGx42oMwJokMD3OiLBrltNny7FTCjuwVPrw9FcI2I3 s9M1m9CUgBWOJYav0XA7yfBwlKRFpGPWz/C6/q76KkTclUqEHCXj3YVKfp1RFfYj Vcj+1Q2kr2NXXd18Zu8Q6xEabCl9N2dlgjixp2zsCacN6XijVx3k0hbf7/AnbzRZ PtXit7wAWzHvuwUfHMF5YAQqEU3Fv6ov6fBr301hLrcCpEg1gx9md58yM8UOnsbf J8XIUib1dfhV0zWaAt+iW9kEiaOmfNmud0zBEW/vAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsKy83WAA+FppEb8vtpnQKDRYoscwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmYTBjODJiLTNmNjQtNGJmYy04NDU2LWFkMmM2ZmUwYmM2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGe/DANBgkqhkiG9w0BAQsFAAOCAQEAlU4RMzTCvL1FitY38ZyUPUmCE9Ln hgZFSAbZdoR3m/V2L8LQDfROY0LSlBAduCXF0GaRBZqlBwu5cDZVd5EgkqhtJ2pV Ch0s4u4rM0T5Fe+1tX5A0r98LVo5EhL4btczhbpegqjFDrkbbw8WDLGwLqqRG9wW IrmSIcX42fYCDaoOeBoGYa7AzKuw+2vtXzVp89roQu3aRW5iS+p054IKrVNuOFMT ZNZW12Dh7XHlJfKN5BuNZO1uqRm+fecqIRH0HdFjTX/dKzekrEmloYISpG0kA1o5 rBXRuma9PhnVpgJdfzU90fmp4rVurupumvieDyMWCsU9hIV0G+7Af3MjBA== -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:10 2025 by rpki-client