$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa File: 4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa (raw, json) Hash identifier: XP7pX0BowVYoElwbD6rJEpHDrunBPCtf30uL/TrLnuQ= Subject key identifier: 57:5E:1A:CD:22:06:CC:56:F1:0F:D3:14:DE:07:28:24:90:62:0D:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F5BB2F2E0A10321E28B3C518BA0EBD6DFF1857F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa Signing time: Mon 21 Jul 2025 15:31:18 +0000 ROA not before: Mon 21 Jul 2025 15:31:18 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 204.33.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5b:b2:f2:e0:a1:03:21:e2:8b:3c:51:8b:a0:eb:d6:df:f1:85:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:31:18 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=edc41c0c994764b3d55b9bf84f905f6566b59643be2bf1ecc1e88f61eaf583a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:f3:2c:85:3b:1a:4b:4f:b6:9d:96:19:a7: ff:4a:58:48:98:41:b4:79:b7:e3:54:81:33:39:b3: c3:50:85:85:30:a9:a2:49:91:bf:2b:0a:89:93:39: 4a:f0:91:d4:5a:f0:91:6d:a1:e3:2a:ae:46:e9:1a: c8:e5:b9:24:a7:3f:b4:60:48:25:07:35:eb:7a:96: c8:37:1f:fe:e2:42:f5:1b:5b:31:ec:93:f9:78:5f: cc:d5:60:7e:c0:e7:22:63:99:a3:c3:a7:eb:fc:94: 86:b3:1a:43:1e:17:54:5b:a3:58:01:a7:4c:fe:9c: ba:7d:dc:fa:d7:d0:5b:ed:c3:ae:78:3b:1c:f8:df: 0a:67:8a:42:55:27:58:ca:35:62:bb:bd:d0:d6:05: e1:52:3d:0b:74:90:25:73:cd:ec:ea:e5:84:3d:71: 49:fd:b7:3e:cd:e2:12:00:8e:97:4a:45:30:68:6f: 0d:27:da:b8:ed:f6:3d:64:17:84:19:28:52:10:39: ea:f0:40:ea:6f:7f:49:1a:05:0b:03:dc:37:f4:48: b7:8d:0a:31:44:a5:48:79:6b:f3:c0:43:de:9a:73: 05:f1:ce:c6:44:e7:7c:d4:51:65:84:73:c3:dc:17: 35:e3:25:c4:80:90:60:b4:1f:3b:df:e8:f5:43:7c: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5E:1A:CD:22:06:CC:56:F1:0F:D3:14:DE:07:28:24:90:62:0D:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f5a2e02-8617-4677-a4c8-84780c2dc6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.33.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:64:bf:e1:51:25:c1:ea:c5:6a:5b:c6:66:56:8f:bb:96:e7: 5e:ee:f7:9e:4a:e5:41:5f:0c:aa:63:df:4f:1e:92:82:c0:c4: f8:89:26:c6:16:f1:d6:c0:d4:2f:7e:7d:57:50:22:bc:f1:ef: 6f:df:ad:eb:da:9b:00:7a:75:77:46:0a:1e:30:66:c2:bf:68: f2:a4:53:67:20:d5:91:5d:eb:64:a0:84:8d:7d:2d:4b:32:de: 51:24:cc:da:ec:4c:6d:57:c9:c0:a7:ac:42:2e:cf:3c:73:6a: fb:87:54:27:fa:75:28:60:7c:95:d6:c0:e3:2f:db:3f:ec:d3: 67:9f:7d:d6:c3:ce:9d:2a:9f:92:1c:ae:f6:27:07:ff:27:55: 03:3c:d3:b6:78:85:35:bb:bd:c6:cb:19:bc:a8:92:c5:0f:bf: 20:83:d8:ee:d8:90:80:30:1b:6d:30:ea:a4:b7:54:93:ef:5d: 40:94:f3:5e:cf:ca:8b:ea:d3:61:05:2f:72:cf:2c:82:1c:40: 61:91:2a:4f:78:7b:21:6a:2b:32:89:3d:e1:86:1a:d1:10:d3: 61:01:ef:ec:45:82:77:5c:3b:e9:2a:7f:5d:5c:13:0e:50:0e: e8:ba:fd:3e:10:09:0b:54:ce:d4:38:5c:e3:64:02:4d:d5:40: ac:e2:b8:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf1uy8uChAyHiizxRi6Dr1t/xhX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTUzMTE4WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGM0MWMwYzk5NDc2NGIzZDU1YjliZjg0ZjkwNWY2NTY2 YjU5NjQzYmUyYmYxZWNjMWU4OGY2MWVhZjU4M2EzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd3fMshTsaS0+2nZYZp/9KWEiYQbR5t+NUgTM5s8NQhYUw qaJJkb8rComTOUrwkdRa8JFtoeMqrkbpGsjluSSnP7RgSCUHNet6lsg3H/7iQvUb WzHsk/l4X8zVYH7A5yJjmaPDp+v8lIazGkMeF1Rbo1gBp0z+nLp93PrX0Fvtw654 Oxz43wpnikJVJ1jKNWK7vdDWBeFSPQt0kCVzzezq5YQ9cUn9tz7N4hIAjpdKRTBo bw0n2rjt9j1kF4QZKFIQOerwQOpvf0kaBQsD3Df0SLeNCjFEpUh5a/PAQ96acwXx zsZE53zUUWWEc8PcFzXjJcSAkGC0Hzvf6PVDfObZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV14azSIGzFbxD9MU3gcoJJBiDRQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmNWEyZTAyLTg2MTctNDY3Ny1hNGM4LTg0NzgwYzJkYzZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATMIbAwDQYJKoZIhvcNAQELBQADggEBAG1kv+FRJcHqxWpbxmZWj7uW517u 955K5UFfDKpj308ekoLAxPiJJsYW8dbA1C9+fVdQIrzx72/frevamwB6dXdGCh4w ZsK/aPKkU2cg1ZFd62SghI19LUsy3lEkzNrsTG1XycCnrEIuzzxzavuHVCf6dShg fJXWwOMv2z/s02effdbDzp0qn5IcrvYnB/8nVQM807Z4hTW7vcbLGbyoksUPvyCD 2O7YkIAwG20w6qS3VJPvXUCU817Pyovq02EFL3LPLIIcQGGRKk94eyFqKzKJPeGG GtEQ02EB7+xFgndcO+kqf11cEw5QDui6/T4QCQtUztQ4XONkAk3VQKziuFw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:25 2025 by rpki-client