$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d972978-417c-4273-8923-d994ac6116e2.roa File: 5d972978-417c-4273-8923-d994ac6116e2.roa (raw, json) Hash identifier: SxR1nBn1YceUweqI0VZ180aWJ3hNX9ImwQzgRqcipG8= Subject key identifier: 00:03:E9:C5:E6:A1:F1:52:A6:23:69:47:81:F0:95:11:02:AB:C2:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 496CE200AAB1E1AA9A8C94B3CA257F49F2DC49AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d972978-417c-4273-8923-d994ac6116e2.roa Signing time: Fri 11 Jul 2025 00:00:13 +0000 ROA not before: Fri 11 Jul 2025 00:00:13 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 155.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6c:e2:00:aa:b1:e1:aa:9a:8c:94:b3:ca:25:7f:49:f2:dc:49:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:00:13 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=bb556e5fb073898d92d7a6cdaecbe3d947a7d288af870e59a2f617667ef09dcd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:73:97:77:8f:35:1f:a0:0b:d2:3c:95:cb: 3a:b5:df:d5:ca:99:4b:d0:a7:cf:dd:44:ce:d9:c9: 8a:ae:f0:62:6c:16:03:c8:d5:6d:39:f0:59:fa:1e: 8b:99:a3:d6:6b:8e:f7:39:31:d0:fb:ca:0e:37:21: e9:d7:b3:9b:30:03:40:a6:93:6d:e8:31:cb:20:ef: 5b:a3:14:70:96:8d:16:4b:e6:f9:10:78:74:49:74: c8:1e:0e:e9:7a:a1:c1:47:6d:67:03:d8:ea:2e:25: 6f:cd:35:d7:7d:64:ff:7e:28:50:c4:8a:01:76:3c: 16:b5:d4:c9:27:82:bb:47:72:95:cd:5f:fa:c4:ed: 28:ef:e3:ee:20:9b:b5:5f:3b:21:b4:26:49:8e:0b: 2c:25:fd:94:45:e5:b4:7e:08:99:91:df:4f:96:00: ae:a7:0f:b4:f9:58:5d:ce:01:9a:06:b6:0b:0f:cb: 4c:46:48:d8:a3:fc:22:45:c1:04:f8:61:c1:de:32: ca:a2:21:b5:c2:e4:37:6b:c2:ae:df:7a:b4:1e:c4: af:15:61:9d:72:a3:70:3f:c0:92:4c:97:59:db:ec: 72:d6:39:b8:40:2a:3b:b9:18:eb:16:3e:82:bc:a4: d8:0f:68:46:3a:d0:61:3b:0e:28:bc:85:ec:23:24: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:03:E9:C5:E6:A1:F1:52:A6:23:69:47:81:F0:95:11:02:AB:C2:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d972978-417c-4273-8923-d994ac6116e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.197.0.0/16 Signature Algorithm: sha256WithRSAEncryption c2:18:e7:31:86:7f:34:f1:27:26:25:a4:5d:3e:6a:ee:07:a5: b8:71:2f:40:50:4d:9e:78:b5:f1:f6:0e:f7:5b:53:39:35:2d: a0:3f:77:94:d3:7b:8e:51:56:08:dc:c7:20:06:fa:0d:7f:25: ab:75:49:a7:bd:c5:38:14:04:6c:71:0c:ef:ab:dd:d9:52:59: 4c:e7:71:07:2a:32:c4:2d:10:9b:00:a5:0e:47:26:a6:2f:55: 45:72:a3:0c:f4:1e:ec:9f:85:61:7d:64:07:88:65:66:64:b9: 59:92:1f:76:03:be:09:9a:fb:7b:65:b3:3c:66:20:3c:a7:f8: 57:6f:86:08:8a:44:86:ae:c1:4b:0e:8b:7f:10:dd:36:6d:76: f9:a6:76:a2:57:ff:1a:41:72:0b:74:6f:5d:8d:04:4c:f6:79: 61:e4:07:9d:1e:3b:d2:df:1c:d4:8d:6b:c3:7e:99:06:7f:01: 88:61:4f:79:7d:da:dd:f3:98:d2:a3:84:55:77:8c:ea:36:94: fe:5b:7f:d0:02:2c:6d:0e:7d:44:ed:c2:8f:cf:b0:5b:3a:82: 5f:1e:b1:15:7a:0a:f2:e6:60:99:f6:ac:3b:c5:8c:4a:d2:da: 72:88:e9:29:1f:3b:d4:6d:5b:b6:73:2a:e0:e7:1e:e8:19:89: 0c:72:94:1d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSWziAKqx4aqajJSzyiV/SfLcSa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAwMDEzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjU1NmU1ZmIwNzM4OThkOTJkN2E2Y2RhZWNiZTNkOTQ3 YTdkMjg4YWY4NzBlNTlhMmY2MTc2NjdlZjA5ZGNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHK3OXd481H6AL0jyVyzq139XKmUvQp8/dRM7ZyYqu8GJs FgPI1W058Fn6HouZo9Zrjvc5MdD7yg43IenXs5swA0Cmk23oMcsg71ujFHCWjRZL 5vkQeHRJdMgeDul6ocFHbWcD2OouJW/NNdd9ZP9+KFDEigF2PBa11MkngrtHcpXN X/rE7Sjv4+4gm7VfOyG0JkmOCywl/ZRF5bR+CJmR30+WAK6nD7T5WF3OAZoGtgsP y0xGSNij/CJFwQT4YcHeMsqiIbXC5Ddrwq7ferQexK8VYZ1yo3A/wJJMl1nb7HLW ObhAKju5GOsWPoK8pNgPaEY60GE7Dii8hewjJAiTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAAPpxeah8VKmI2lHgfCVEQKrwn4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkOTcyOTc4LTQxN2MtNDI3My04OTIzLWQ5OTRhYzYxMTZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCbxTANBgkqhkiG9w0BAQsFAAOCAQEAwhjnMYZ/NPEnJiWkXT5q7geluHEv QFBNnni18fYO91tTOTUtoD93lNN7jlFWCNzHIAb6DX8lq3VJp73FOBQEbHEM76vd 2VJZTOdxByoyxC0QmwClDkcmpi9VRXKjDPQe7J+FYX1kB4hlZmS5WZIfdgO+CZr7 e2WzPGYgPKf4V2+GCIpEhq7BSw6LfxDdNm12+aZ2olf/GkFyC3RvXY0ETPZ5YeQH nR470t8c1I1rw36ZBn8BiGFPeX3a3fOY0qOEVXeM6jaU/lt/0AIsbQ59RO3Cj8+w WzqCXx6xFXoK8uZgmfasO8WMStLacojpKR871G1btnMq4Oce6BmJDHKUHQ== -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:59 2025 by rpki-client