$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa File: 4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa (raw, json) Hash identifier: 3Q0hW/6mA2S5kcBAgp9R4kp6Q/6hJfU/c+dAVNMcC1s= Subject key identifier: D3:89:12:45:88:84:38:ED:A8:D2:A7:EC:3E:04:93:38:D4:6F:47:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B2C28499B8169DE8E3CC40D28CC9103BC8AB10C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa Signing time: Wed 09 Jul 2025 00:11:14 +0000 ROA not before: Wed 09 Jul 2025 00:11:14 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2c:28:49:9b:81:69:de:8e:3c:c4:0d:28:cc:91:03:bc:8a:b1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:11:14 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=fd6025075a00ceab2a9e77c4190db49b68e18f4680212c4d2fac6733cc6fcb82, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:c6:93:ef:f6:42:45:6e:73:19:a1:88:bd: d2:dc:a9:9c:e4:40:6b:ce:ef:ef:a0:1f:7c:b4:d9: df:b1:fc:e8:2f:d1:d4:cc:68:91:a5:88:d0:3d:4a: fd:96:74:c0:f4:3c:02:d5:59:37:2f:5c:46:c0:5a: e8:8a:22:6b:1b:7b:3a:ef:de:e7:df:10:a6:ad:dc: a0:c0:c2:38:ee:ff:2a:34:fe:31:f4:ae:b7:e1:f8: 1e:ec:ed:46:dd:e7:9a:ec:33:3d:db:5d:b3:e6:5c: ef:60:12:92:ab:01:5d:40:66:7f:45:85:d5:a0:47: 72:ae:13:77:d1:61:ee:57:67:1c:49:76:fb:26:ca: 3f:ef:2d:39:2e:1a:15:ad:b8:7b:b3:fe:4b:4b:f0: cc:35:8a:3d:07:a4:35:bd:84:f8:cb:1c:70:53:3f: 5a:2f:ca:b6:8f:e1:10:3e:59:35:d4:01:da:a6:e8: 38:18:c0:75:1b:f2:7f:6d:ac:2d:91:42:7f:25:7f: fd:2c:2a:ca:96:92:4b:b2:9a:ad:86:31:6d:a2:8f: 72:e2:01:bd:f3:25:b9:14:c0:e0:ea:f6:2c:fa:34: 8f:ab:ef:b1:49:50:11:0c:ee:66:93:ce:02:dd:58: 10:68:a5:fc:24:c1:56:8d:91:cf:8c:d6:41:04:41: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:12:45:88:84:38:ED:A8:D2:A7:EC:3E:04:93:38:D4:6F:47:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ddd28bf-a4b9-446f-94ab-e6c873a5128a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.172.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:97:89:4e:99:ec:44:54:d9:5b:72:42:15:41:0c:0b:2e:c7: 22:16:5b:7d:7b:2e:5d:69:ca:7d:15:4e:66:c4:fc:fe:60:ec: 68:0e:31:d1:24:49:4a:d4:d2:11:d2:ff:26:04:e6:fb:69:1b: 9b:12:44:96:ee:75:de:da:54:e6:97:e4:74:2d:5d:0f:59:9b: 70:5f:80:89:28:6a:98:39:69:db:0f:74:bd:5a:76:e0:49:8a: 45:57:2b:11:95:a1:d6:d2:8c:22:83:cf:a1:99:c6:4d:7c:c3: 18:89:47:76:f2:cb:fe:6f:58:82:6d:56:32:a8:f8:d9:6d:d3: 19:82:ee:d0:6a:1f:d2:09:16:ec:f9:bd:30:10:ca:10:13:ed: 32:e9:33:2b:18:25:c3:84:ad:46:9e:87:05:2f:11:4b:8e:2b: bd:4e:37:ff:d2:89:72:0a:3a:ca:c5:59:80:a5:d5:6d:36:94: 82:f4:78:90:ab:fa:7e:8a:0e:5a:7c:93:a3:3a:c4:71:c2:2a: 92:91:38:79:e1:90:dd:6c:88:d3:e5:e6:68:69:e3:55:ff:54: 81:3e:4a:64:96:48:62:e1:03:3d:a6:52:a2:21:79:40:0c:9d: cb:c8:5d:17:94:a6:6c:f2:df:6d:67:91:fc:82:ea:62:89:9c: 2c:ce:b9:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGywoSZuBad6OPMQNKMyRA7yKsQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAxMTE0WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDYwMjUwNzVhMDBjZWFiMmE5ZTc3YzQxOTBkYjQ5YjY4 ZTE4ZjQ2ODAyMTJjNGQyZmFjNjczM2NjNmZjYjgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3gsaT7/ZCRW5zGaGIvdLcqZzkQGvO7++gH3y02d+x/Ogv 0dTMaJGliNA9Sv2WdMD0PALVWTcvXEbAWuiKImsbezrv3uffEKat3KDAwjju/yo0 /jH0rrfh+B7s7Ubd55rsMz3bXbPmXO9gEpKrAV1AZn9FhdWgR3KuE3fRYe5XZxxJ dvsmyj/vLTkuGhWtuHuz/ktL8Mw1ij0HpDW9hPjLHHBTP1ovyraP4RA+WTXUAdqm 6DgYwHUb8n9trC2RQn8lf/0sKsqWkkuymq2GMW2ij3LiAb3zJbkUwODq9iz6NI+r 77FJUBEM7maTzgLdWBBopfwkwVaNkc+M1kEEQc0nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU04kSRYiEOO2o0qfsPgSTONRvR6swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkZGQyOGJmLWE0YjktNDQ2Zi05NGFiLWU2Yzg3M2E1MTI4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBsqwwDQYJKoZIhvcNAQELBQADggEBAIqXiU6Z7ERU2VtyQhVBDAsuxyIW W317Ll1pyn0VTmbE/P5g7GgOMdEkSUrU0hHS/yYE5vtpG5sSRJbudd7aVOaX5HQt XQ9Zm3BfgIkoapg5adsPdL1aduBJikVXKxGVodbSjCKDz6GZxk18wxiJR3byy/5v WIJtVjKo+Nlt0xmC7tBqH9IJFuz5vTAQyhAT7TLpMysYJcOErUaehwUvEUuOK71O N//SiXIKOsrFWYCl1W02lIL0eJCr+n6KDlp8k6M6xHHCKpKROHnhkN1siNPl5mhp 41X/VIE+SmSWSGLhAz2mUqIheUAMncvIXReUpmzy321nkfyC6mKJnCzOuZ0= -----END CERTIFICATE-----Generated at Mon Jul 21 13:05:04 2025 by rpki-client