$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa File: 55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa (raw, json) Hash identifier: riGjiApwTv/w6avyn4h0aZ+Pb2MDA1VMp70XDcNTakE= Subject key identifier: 71:C3:74:E8:C5:15:61:84:24:11:D9:08:ED:D0:C9:1F:88:01:E6:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70496DE873039D266BF852A192BDB3DA667E01D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa Signing time: Wed 09 Jul 2025 00:32:03 +0000 ROA not before: Wed 09 Jul 2025 00:32:03 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.22.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:49:6d:e8:73:03:9d:26:6b:f8:52:a1:92:bd:b3:da:66:7e:01:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:32:03 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=1570612da111aa6b21dcc4a4a97e7db1d3a68f4ae4385546f638889dc0c046bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:f3:20:02:22:12:1f:f0:61:47:e6:d7:8a: 79:89:65:9c:8e:3d:a4:50:9e:1a:d8:e5:b4:73:33: 91:4b:89:88:07:e5:a5:39:04:59:df:61:66:33:1c: 59:b2:b3:58:c5:04:05:54:56:1b:c4:62:54:33:5c: be:ae:3f:f6:a9:34:1e:0f:69:c1:e6:b4:82:95:93: 62:94:d6:43:12:89:ec:03:db:f7:d3:8d:6f:a5:ee: 72:4b:98:46:74:70:c2:85:cd:01:e9:51:e8:a5:b9: ee:db:db:46:00:5c:a5:d6:7d:37:61:bc:52:6e:c5: 16:9c:7f:df:35:4c:82:c3:0a:a6:6f:69:c2:91:78: cb:fb:ca:90:1a:bc:f1:1c:6f:53:d8:86:0e:68:20: 0e:ef:7c:bc:23:cd:5d:dc:52:4d:7a:59:8e:02:da: 88:dc:e7:37:eb:86:e5:7c:9c:ad:d9:cd:5a:de:d4: 99:db:65:79:3c:bf:41:39:b8:d6:ea:ad:79:90:80: 93:fd:f0:2b:c3:cf:c1:e0:57:0c:7b:10:3b:7d:e1: a7:4e:a8:2a:86:bf:f0:71:42:a7:5f:36:f3:fe:be: 27:b6:8a:d4:02:df:92:55:70:fe:88:72:0a:1c:34: 3b:e8:5a:2e:98:5b:9c:18:1b:4a:5b:94:bd:16:c7: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:74:E8:C5:15:61:84:24:11:D9:08:ED:D0:C9:1F:88:01:E6:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.76.0/22 Signature Algorithm: sha256WithRSAEncryption 52:47:2a:ab:5e:e4:63:0c:99:5c:7c:c0:85:38:5c:a9:f1:58: fd:98:12:3a:db:ac:b0:73:62:43:b7:47:f0:6a:12:73:ce:ed: d8:02:2a:af:5b:f0:bc:df:4b:d8:a9:cd:65:b3:ab:99:a6:71: cb:b2:dd:b9:7f:ef:1c:6e:6c:a0:7a:bd:50:25:00:7a:9c:8d: 3e:a5:f8:6c:01:38:06:35:07:90:59:10:dc:b8:fd:54:d1:2f: cf:1d:e7:90:14:e2:b9:a4:cf:84:a5:93:56:a2:74:ba:9a:76: 4d:d3:f1:a3:d0:75:77:a6:7a:60:4d:3e:5a:92:65:b0:77:e0: e4:49:55:0b:4a:66:1c:16:3a:b3:6c:27:46:b6:a5:bb:b7:db: 25:34:fc:fd:ff:f9:94:cb:e0:fb:4b:ed:5d:90:9b:df:80:b3: 7e:ef:7e:8c:02:1d:64:bc:48:04:6c:d5:26:5f:54:4c:4c:10: 35:bc:ea:90:54:00:49:72:71:93:af:5d:74:af:11:67:b9:7e: 90:19:4d:ce:b0:11:b2:2f:79:7a:5b:28:dd:90:c0:70:1d:11: 84:3f:e3:c8:ec:7c:87:fa:6f:b0:ca:d6:66:a4:03:b7:67:fb: 24:a0:81:9c:7d:81:aa:6e:8f:da:3a:e2:39:0e:5e:93:8d:df: 93:0d:41:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcElt6HMDnSZr+FKhkr2z2mZ+AdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAzMjAzWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTcwNjEyZGExMTFhYTZiMjFkY2M0YTRhOTdlN2RiMWQz YTY4ZjRhZTQzODU1NDZmNjM4ODg5ZGMwYzA0NmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSqfMgAiISH/BhR+bXinmJZZyOPaRQnhrY5bRzM5FLiYgH 5aU5BFnfYWYzHFmys1jFBAVUVhvEYlQzXL6uP/apNB4PacHmtIKVk2KU1kMSiewD 2/fTjW+l7nJLmEZ0cMKFzQHpUeilue7b20YAXKXWfTdhvFJuxRacf981TILDCqZv acKReMv7ypAavPEcb1PYhg5oIA7vfLwjzV3cUk16WY4C2ojc5zfrhuV8nK3ZzVre 1JnbZXk8v0E5uNbqrXmQgJP98CvDz8HgVwx7EDt94adOqCqGv/BxQqdfNvP+vie2 itQC35JVcP6IcgocNDvoWi6YW5wYG0pblL0Wx2U1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUccN06MUVYYQkEdkI7dDJH4gB5m4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1ZjZiZTZlLWExMGYtNGYwMy05YTllLTlkNGEzNTY1ODBjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXFkwwDQYJKoZIhvcNAQELBQADggEBAFJHKqte5GMMmVx8wIU4XKnxWP2Y EjrbrLBzYkO3R/BqEnPO7dgCKq9b8LzfS9ipzWWzq5mmccuy3bl/7xxubKB6vVAl AHqcjT6l+GwBOAY1B5BZENy4/VTRL88d55AU4rmkz4Slk1aidLqadk3T8aPQdXem emBNPlqSZbB34ORJVQtKZhwWOrNsJ0a2pbu32yU0/P3/+ZTL4PtL7V2Qm9+As37v fowCHWS8SARs1SZfVExMEDW86pBUAElycZOvXXSvEWe5fpAZTc6wEbIveXpbKN2Q wHAdEYQ/48jsfIf6b7DK1makA7dn+ySggZx9gapuj9o64jkOXpON35MNQdE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:06 2025 by rpki-client