$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c4982b-424f-4758-ab4b-70c50ea9d85b.roa File: 68c4982b-424f-4758-ab4b-70c50ea9d85b.roa (raw, json) Hash identifier: Kcujja/PURRVgTMDnbRY6fWRw0uGLMxs5NA9XokXLyM= Subject key identifier: E2:C8:9C:72:E0:9E:1D:F7:D2:F3:0E:0D:0A:DB:A8:1A:DD:85:7C:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DE027BDBD2FF3CDD551C81A5BAA39C55075946F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c4982b-424f-4758-ab4b-70c50ea9d85b.roa Signing time: Fri 18 Jul 2025 00:21:10 +0000 ROA not before: Fri 18 Jul 2025 00:21:10 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 32.184.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e0:27:bd:bd:2f:f3:cd:d5:51:c8:1a:5b:aa:39:c5:50:75:94:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:21:10 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=d8755f7d021c3dd414035e333106cc3a686beee0cbaf6cf9a5f1fe5d658b9701, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:43:a9:ca:b0:9a:7b:12:82:67:17:ec:7e:f1: 84:0c:b0:f4:70:5e:72:97:b4:14:ec:9a:5e:8d:18: f1:f3:0e:f8:b8:6e:48:c6:7b:26:b3:54:ca:cd:95: 4a:e3:26:9a:74:11:6c:4b:07:09:d4:ed:2b:4b:83: 25:d4:20:94:63:77:fd:a2:67:54:db:70:5c:5e:f8: cc:1b:ec:e3:11:97:a1:e3:a3:9c:ff:84:db:77:93: 25:61:c6:ab:0c:da:6e:8f:be:dc:9c:e1:db:9c:03: 6b:80:61:b7:18:27:f5:6b:fa:58:2c:15:5a:d3:aa: 47:65:f4:00:34:8d:29:0c:93:d8:0b:f7:d3:a3:36: a9:fd:24:a4:b8:bf:40:3f:58:a5:23:b1:bb:54:d9: 2f:2c:ba:c3:92:cf:76:9c:cb:13:f4:1b:02:c2:ec: 18:ca:df:3d:e8:e0:ba:8e:a9:55:ae:cf:e9:d2:65: 23:35:01:2c:31:f0:4e:25:b8:ff:6c:42:1c:9c:a8: 00:9a:80:16:7b:33:fb:fd:42:f6:1f:05:ac:ec:5e: c7:73:a8:e9:e9:77:ef:ef:85:64:5c:37:ce:37:2b: 04:1b:ce:a3:82:a4:28:c8:fe:8c:61:6c:53:36:77: 3d:d4:87:e8:5e:8c:ec:ba:9a:f4:a3:6f:8b:53:c6: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C8:9C:72:E0:9E:1D:F7:D2:F3:0E:0D:0A:DB:A8:1A:DD:85:7C:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68c4982b-424f-4758-ab4b-70c50ea9d85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.184.0.0/13 Signature Algorithm: sha256WithRSAEncryption ba:b5:f5:e7:4d:7b:18:02:d9:c6:d7:cc:d4:34:b3:2c:cc:c1: 01:2d:f0:cf:e6:a7:04:df:cc:05:af:8d:22:9f:f4:9d:d2:3f: b8:f5:1f:24:63:03:c4:64:6d:82:5f:48:71:ea:14:2a:e0:07: 81:c2:30:59:0f:c8:15:96:31:a0:61:93:ea:dc:f8:0a:b0:a8: a7:67:97:bd:1e:24:c9:ff:74:76:c7:d6:d9:ba:71:dc:fa:55: 79:de:a5:eb:cd:8c:a3:3f:13:1b:75:b2:da:ce:aa:69:0f:a5: ce:08:cd:56:2b:73:4f:8a:64:b1:4b:6a:c1:9e:79:47:d0:7e: b8:cc:90:37:72:7b:83:eb:bd:1e:0e:9f:3b:ba:8c:a7:c1:bb: 99:b1:72:c5:3b:47:4e:64:4d:b0:a1:0f:16:90:9d:fe:80:3c: f5:96:8d:4b:8d:1c:7d:c8:6c:da:84:1b:24:21:b8:58:9f:d0: 32:33:8c:c3:88:c2:05:09:51:00:d6:2f:f0:13:2a:70:d9:a0: 72:55:16:e3:37:59:59:f6:5f:82:06:96:04:1f:7d:62:53:66: ee:d7:c7:c1:e4:d6:2c:bd:19:48:cd:24:51:e7:7c:c8:3f:7b: b7:9b:36:a3:72:93:11:9f:91:c3:04:40:cf:7a:09:bf:48:68: 7f:c7:85:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPeAnvb0v883VUcgaW6o5xVB1lG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAyMTEwWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODc1NWY3ZDAyMWMzZGQ0MTQwMzVlMzMzMTA2Y2MzYTY4 NmJlZWUwY2JhZjZjZjlhNWYxZmU1ZDY1OGI5NzAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxQ6nKsJp7EoJnF+x+8YQMsPRwXnKXtBTsml6NGPHzDvi4 bkjGeyazVMrNlUrjJpp0EWxLBwnU7StLgyXUIJRjd/2iZ1TbcFxe+Mwb7OMRl6Hj o5z/hNt3kyVhxqsM2m6Pvtyc4ducA2uAYbcYJ/Vr+lgsFVrTqkdl9AA0jSkMk9gL 99OjNqn9JKS4v0A/WKUjsbtU2S8susOSz3acyxP0GwLC7BjK3z3o4LqOqVWuz+nS ZSM1ASwx8E4luP9sQhycqACagBZ7M/v9QvYfBazsXsdzqOnpd+/vhWRcN843KwQb zqOCpCjI/oxhbFM2dz3Uh+hejOy6mvSjb4tTxmVDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4siccuCeHffS8w4NCtuoGt2FfM4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4YzQ5ODJiLTQyNGYtNDc1OC1hYjRiLTcwYzUwZWE5ZDg1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMguDANBgkqhkiG9w0BAQsFAAOCAQEAurX15017GALZxtfM1DSzLMzBAS3w z+anBN/MBa+NIp/0ndI/uPUfJGMDxGRtgl9IceoUKuAHgcIwWQ/IFZYxoGGT6tz4 CrCop2eXvR4kyf90dsfW2bpx3PpVed6l682Moz8TG3Wy2s6qaQ+lzgjNVitzT4pk sUtqwZ55R9B+uMyQN3J7g+u9Hg6fO7qMp8G7mbFyxTtHTmRNsKEPFpCd/oA89ZaN S40cfchs2oQbJCG4WJ/QMjOMw4jCBQlRANYv8BMqcNmgclUW4zdZWfZfggaWBB99 YlNm7tfHweTWLL0ZSM0kUed8yD97t5s2o3KTEZ+RwwRAz3oJv0hof8eFTQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:29 2025 by rpki-client