$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa File: 3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa (raw, json) Hash identifier: 2DH6v6KVjqmvTg8+E2qBsTc3QQAmSr8pQUjaKYIzHjA= Subject key identifier: 25:6C:C3:2B:FE:A4:D8:D8:72:1F:25:86:CB:F6:F0:CD:D2:14:57:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31ACE3D51CB680A8134FA9D3E08900425FDA9FE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa Signing time: Fri 11 Jul 2025 00:41:25 +0000 ROA not before: Fri 11 Jul 2025 00:41:25 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 63.34.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ac:e3:d5:1c:b6:80:a8:13:4f:a9:d3:e0:89:00:42:5f:da:9f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:41:25 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=50d49c8f3eb90d2174d8cf822f8855d96081725bb5592f0d2a91a048d255d2bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:7f:09:28:dc:f6:c8:4c:79:66:c6:1c:e5: 42:80:ef:10:8b:0f:e2:31:e9:59:d4:df:4e:bd:46: 3c:86:5b:d5:6b:2c:e7:61:d7:33:8d:0c:bc:e2:78: 4e:ee:00:8b:27:dd:bc:80:ca:9b:cb:71:a8:ab:ca: 23:ae:b8:53:3f:59:aa:c9:e0:88:4e:76:32:0d:3c: 65:67:16:20:21:11:92:2e:7d:3e:2a:0a:3b:f8:18: d0:15:d7:9c:14:d6:2e:80:6a:45:c9:0b:bd:d2:45: a8:fc:9c:4c:f7:03:f4:33:fe:cc:4f:09:c4:35:27: 85:59:c9:5a:da:df:3a:c8:f7:39:24:10:02:50:7f: 37:a9:64:79:78:ee:30:23:69:f1:ea:2d:3f:b3:67: 65:6b:18:5c:74:3f:83:5e:65:40:83:e6:af:c6:92: 46:3a:84:a3:e5:4a:00:09:82:35:a8:1c:e2:25:df: a1:76:b1:d7:67:0b:71:68:5b:da:22:7c:59:49:a6: 3f:7d:86:e5:74:25:00:ac:1f:6b:52:84:c8:fe:a2: 61:a8:98:97:46:10:e1:cb:74:bd:bb:1f:81:40:f5: bc:a3:e9:e8:47:59:f8:77:74:a8:4e:fa:28:e8:d8: df:9a:ab:ae:5d:6f:61:f9:e3:f9:47:49:5e:7f:84: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6C:C3:2B:FE:A4:D8:D8:72:1F:25:86:CB:F6:F0:CD:D2:14:57:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fdd46ae-ba05-4e5b-aa9a-bda4ac448a06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.34.60.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:97:26:94:a7:76:33:36:f0:c4:d6:8f:7e:47:94:e7:09:d1: 77:2c:c8:f6:0e:27:df:4d:d1:b1:1e:4d:8f:12:a9:a5:b9:b1: 47:ce:11:a3:ac:2e:39:5a:c2:1f:01:69:e3:ba:b5:82:32:48: 2e:10:62:96:61:42:ee:80:78:96:64:54:2e:e1:03:ba:4e:da: 8b:22:37:d3:25:bc:8a:c7:f9:32:b7:19:ee:04:35:b2:6c:4b: 60:c5:e9:cd:ea:45:88:c7:10:3c:cd:a7:33:e5:21:91:03:fd: 1d:b0:49:71:35:a4:8f:e1:38:c4:1c:f4:6f:63:ef:7b:b1:e6: 17:0b:60:b9:01:cf:d5:30:54:39:77:74:23:e6:e8:b6:70:4b: be:6b:d7:bc:9c:16:9c:d2:9d:36:67:c7:8d:65:57:a5:38:a6: 0d:14:9b:d8:b5:d9:d6:9d:7c:73:e4:4c:35:79:fd:fc:08:3e: 78:75:8f:dd:94:d3:f2:e9:75:6a:af:b1:37:12:f0:c0:ed:eb: 55:8c:09:fe:0f:73:b8:2c:a0:f9:40:d1:55:bb:b5:f2:75:50: 1c:f5:af:e9:3e:c5:38:4b:a6:29:31:68:06:b8:fc:53:d5:ef: e0:b0:35:85:9a:bf:eb:74:77:23:3b:64:c5:be:f9:0d:46:13: 2b:58:f5:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMazj1Ry2gKgTT6nT4IkAQl/an+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDA0MTI1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGQ0OWM4ZjNlYjkwZDIxNzRkOGNmODIyZjg4NTVkOTYw ODE3MjViYjU1OTJmMGQyYTkxYTA0OGQyNTVkMmJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjCX8JKNz2yEx5ZsYc5UKA7xCLD+Ix6VnU3069RjyGW9Vr LOdh1zONDLzieE7uAIsn3byAypvLcairyiOuuFM/WarJ4IhOdjINPGVnFiAhEZIu fT4qCjv4GNAV15wU1i6AakXJC73SRaj8nEz3A/Qz/sxPCcQ1J4VZyVra3zrI9zkk EAJQfzepZHl47jAjafHqLT+zZ2VrGFx0P4NeZUCD5q/GkkY6hKPlSgAJgjWoHOIl 36F2sddnC3FoW9oifFlJpj99huV0JQCsH2tShMj+omGomJdGEOHLdL27H4FA9byj 6ehHWfh3dKhO+ijo2N+aq65db2H54/lHSV5/hB+XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJWzDK/6k2NhyHyWGy/bwzdIUV68wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmZGQ0NmFlLWJhMDUtNGU1Yi1hYTlhLWJkYTRhYzQ0OGEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI/IjwwDQYJKoZIhvcNAQELBQADggEBAGqXJpSndjM28MTWj35HlOcJ0Xcs yPYOJ99N0bEeTY8SqaW5sUfOEaOsLjlawh8BaeO6tYIySC4QYpZhQu6AeJZkVC7h A7pO2osiN9MlvIrH+TK3Ge4ENbJsS2DF6c3qRYjHEDzNpzPlIZED/R2wSXE1pI/h OMQc9G9j73ux5hcLYLkBz9UwVDl3dCPm6LZwS75r17ycFpzSnTZnx41lV6U4pg0U m9i12dadfHPkTDV5/fwIPnh1j92U0/LpdWqvsTcS8MDt61WMCf4Pc7gsoPlA0VW7 tfJ1UBz1r+k+xThLpikxaAa4/FPV7+CwNYWav+t0dyM7ZMW++Q1GEytY9Zo= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:55 2025 by rpki-client