$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa File: 4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa (raw, json) Hash identifier: lwJnCFzhvX5nzdhT0gxE7YIUistQo49Q8AKrFb6lsXk= Subject key identifier: 20:85:B6:DC:62:7A:24:4C:23:F8:1E:F6:1F:44:2D:51:DD:A0:17:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0550185993E44107B776F78CCEF4A5E8BC38379C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa Signing time: Tue 08 Jul 2025 00:41:29 +0000 ROA not before: Tue 08 Jul 2025 00:41:29 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 7224 IP address blocks: 198.14.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:50:18:59:93:e4:41:07:b7:76:f7:8c:ce:f4:a5:e8:bc:38:37:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:41:29 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=50f1e6658cebfba6e4271ee961a9cbeb618f40c6382a90d37d75c1963cc9bfa1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:31:bb:5c:98:b7:8e:da:1f:ae:0c:9f:46:a2: be:21:55:2c:98:a1:54:99:fd:7d:d3:05:f7:71:fa: 0b:9d:b6:b0:58:90:ae:53:0f:1a:67:13:c7:54:66: c6:a8:82:f3:94:e4:59:b5:be:aa:30:60:12:6e:6f: e3:cf:77:a1:15:17:b1:1b:32:c7:87:a7:d1:31:d5: 39:d7:90:d3:2c:a8:85:06:40:8c:73:9e:d8:77:cf: a3:2e:79:36:f9:66:86:79:4a:ea:e5:70:fd:65:80: 36:1f:96:4e:56:c3:05:ce:4f:52:45:eb:23:2b:e3: 7f:1d:4d:75:9d:01:b6:86:5c:d1:6e:7a:b4:97:00: 7a:68:69:55:a4:7e:a8:45:22:14:bb:93:77:13:a8: ef:e1:7e:f1:45:c2:e3:26:6e:0a:a5:bf:a4:cd:be: 77:0f:a3:d4:57:3d:43:78:1e:7a:99:5f:48:7d:c9: 77:d6:65:84:4a:ee:c3:72:d8:01:b9:86:f4:1f:01: a5:fe:49:5a:d7:1f:82:54:3b:df:3e:14:77:41:24: 5e:ab:ba:3f:3d:17:52:23:6c:85:61:5e:42:93:3d: 32:ae:4c:14:19:bc:a5:2c:a5:2b:d4:88:00:17:d9: f6:75:fd:d9:c5:4d:cb:33:3a:5c:33:3c:60:cb:fc: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:85:B6:DC:62:7A:24:4C:23:F8:1E:F6:1F:44:2D:51:DD:A0:17:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.14.2.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:8a:74:76:50:0d:6f:82:eb:9c:11:95:a5:27:a2:d4:1b:df: 24:d8:a2:8b:9e:ac:ae:57:95:47:9c:fe:c1:31:8f:51:a5:d7: 4e:df:17:f5:08:a6:0a:db:d8:d8:00:3d:14:7f:17:04:44:01: fc:9f:d3:91:f3:82:4e:4a:4f:e4:68:6a:1f:1c:1e:9f:3e:88: c2:5c:ce:6c:92:50:df:26:a1:df:e3:c0:92:23:1e:47:b9:36: 97:3b:28:50:7d:1e:f8:29:19:ca:cb:05:31:13:b7:26:1b:c6: fa:74:22:68:d5:ec:d1:37:30:3e:91:6b:c2:47:50:58:9e:4a: f6:cd:14:94:cf:2a:c1:5b:70:01:aa:8c:bd:5a:ad:ec:1e:66: 6d:a2:9f:00:91:ee:38:6b:de:9f:56:0f:e6:b0:90:1a:de:46: 72:d9:24:f0:9d:2b:3e:63:5c:e0:fc:54:24:32:11:8e:a1:85: ce:66:37:28:c2:dc:b0:35:a5:28:a0:11:b9:17:45:44:c4:de: ca:6a:cc:8a:2e:c2:0a:49:fd:12:16:ad:1b:1c:c9:6c:7c:a4: f4:0e:a1:5f:3c:dd:06:1a:5e:05:4a:29:66:3e:60:23:97:38: fc:c9:ab:5a:f0:57:97:19:3d:0e:d8:12:07:b7:f5:f2:8a:93: e1:c3:2c:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBVAYWZPkQQe3dveMzvSl6Lw4N5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDA0MTI5WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGYxZTY2NThjZWJmYmE2ZTQyNzFlZTk2MWE5Y2JlYjYx OGY0MGM2MzgyYTkwZDM3ZDc1YzE5NjNjYzliZmExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuMbtcmLeO2h+uDJ9Gor4hVSyYoVSZ/X3TBfdx+gudtrBY kK5TDxpnE8dUZsaogvOU5Fm1vqowYBJub+PPd6EVF7EbMseHp9Ex1TnXkNMsqIUG QIxznth3z6MueTb5ZoZ5SurlcP1lgDYflk5WwwXOT1JF6yMr438dTXWdAbaGXNFu erSXAHpoaVWkfqhFIhS7k3cTqO/hfvFFwuMmbgqlv6TNvncPo9RXPUN4HnqZX0h9 yXfWZYRK7sNy2AG5hvQfAaX+SVrXH4JUO98+FHdBJF6ruj89F1IjbIVhXkKTPTKu TBQZvKUspSvUiAAX2fZ1/dnFTcszOlwzPGDL/IMvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIIW23GJ6JEwj+B72H0QtUd2gF0AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkYjJiNDBiLWY3MWYtNGU4OS05NmE2LTc2NTFkYWUxMmZiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGDgIwDQYJKoZIhvcNAQELBQADggEBAIqKdHZQDW+C65wRlaUnotQb3yTY oouerK5XlUec/sExj1Gl107fF/UIpgrb2NgAPRR/FwREAfyf05Hzgk5KT+Roah8c Hp8+iMJczmySUN8mod/jwJIjHke5Npc7KFB9HvgpGcrLBTETtyYbxvp0ImjV7NE3 MD6Ra8JHUFieSvbNFJTPKsFbcAGqjL1areweZm2inwCR7jhr3p9WD+awkBreRnLZ JPCdKz5jXOD8VCQyEY6hhc5mNyjC3LA1pSigEbkXRUTE3spqzIouwgpJ/RIWrRsc yWx8pPQOoV883QYaXgVKKWY+YCOXOPzJq1rwV5cZPQ7YEge39fKKk+HDLEk= -----END CERTIFICATE-----Generated at Mon Jul 21 05:48:13 2025 by rpki-client