$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa File: 68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa (raw, json) Hash identifier: S8oXToeKXNFrtfgALLnMjdOHYEC37kgeX73iMBXrw4A= Subject key identifier: 0E:09:6F:34:93:49:31:0F:AE:CB:4B:B5:83:22:D3:A8:0A:C3:76:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 736AF7386C543213E737CD9C46F7DD9313D68503 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa Signing time: Sat 12 Jul 2025 00:40:14 +0000 ROA not before: Sat 12 Jul 2025 00:40:14 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 77.123.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6a:f7:38:6c:54:32:13:e7:37:cd:9c:46:f7:dd:93:13:d6:85:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:40:14 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=2ddf092f6f79291b9c4e817baa53d68493c69dfae8f2f243c8ca84aba42d2e40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:ea:fe:8b:bf:3d:24:fc:6e:3d:40:73:74: 2d:a4:be:e7:95:e1:35:10:d9:4f:2a:df:0f:c4:5b: 7a:dd:2b:9b:ec:dd:d7:54:fb:4e:f4:c3:6d:81:f8: 5f:3e:4a:86:5f:39:d3:1d:77:00:ba:ae:51:f2:56: 8a:77:c1:2f:66:03:c7:cc:44:ba:19:55:93:13:f7: 2c:13:dc:2d:43:28:44:65:0a:a6:f4:10:5f:90:67: 0d:06:50:4c:f3:4d:67:15:5d:b3:10:16:31:9b:f8: e5:a3:a9:b5:12:1b:6c:c1:51:77:3c:da:c4:38:2c: 09:f3:65:23:14:bd:59:08:59:f7:4f:f0:24:eb:19: cf:a2:fc:94:bc:84:58:5b:49:17:ff:32:0a:ff:87: 60:88:86:03:ef:6d:d9:e5:32:5f:84:af:2f:6b:7f: 90:4b:2a:cc:42:f9:0c:df:ad:7a:59:67:eb:32:09: 6d:b8:f2:e7:29:f4:90:ef:02:53:88:c4:99:a0:0b: 6f:71:18:c8:d1:d0:91:2e:00:c7:19:6f:69:5d:3f: 4c:ee:87:db:2f:83:63:ff:e4:c6:d0:24:40:1d:e2: f1:7f:73:7d:3e:18:9c:c8:6b:1e:fd:8c:99:db:a7: 01:62:12:55:ce:fd:32:ae:a2:e8:bb:de:e5:d5:a9: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:09:6F:34:93:49:31:0F:AE:CB:4B:B5:83:22:D3:A8:0A:C3:76:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d10ddc-0e77-4eb8-a625-89c8780d49ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.123.0.0/17 Signature Algorithm: sha256WithRSAEncryption 27:f8:a4:3d:80:59:e4:2b:4d:62:0e:85:b3:2c:c9:01:e2:e0: 18:2d:b1:50:ae:d6:82:20:2b:8b:70:bd:61:6b:cf:00:7e:8e: 3e:60:50:5b:f2:4b:e0:ed:14:88:a7:ba:2a:98:92:5c:22:3d: 92:3b:ec:7c:83:65:b1:91:88:ec:bf:59:92:7e:ef:1f:6e:27: 6a:99:5d:01:3f:62:81:b6:71:19:92:6b:1c:ab:b9:38:bc:93: 0d:97:c1:3f:f3:c4:2a:df:e4:26:e2:e5:a0:c4:2f:8d:ba:f5: c3:2f:a6:b5:e8:fd:c2:c6:d9:3c:38:87:3c:d4:ce:74:12:d4: c0:37:52:3d:4d:a0:06:61:18:fe:19:37:26:57:bd:1d:6a:74: e0:b4:27:fd:d8:3e:a7:08:6c:56:84:46:50:db:9f:dd:19:f6: 60:d6:ff:dd:39:72:7a:5f:22:01:8a:28:14:ae:62:cd:d7:94: b3:c6:1d:ec:94:d9:5a:5f:ce:d2:d3:6e:b4:08:6c:38:40:69: 08:c6:a7:0e:1e:b1:8b:bc:be:83:7e:8e:ad:63:48:60:cc:00: 23:de:ec:91:a0:cc:5d:43:eb:3c:27:e1:72:8d:7b:24:df:e6: 3f:b4:cb:46:09:06:c1:72:3e:2d:98:6a:13:b9:de:98:28:0c: c4:ef:a1:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc2r3OGxUMhPnN82cRvfdkxPWhQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDA0MDE0WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGRmMDkyZjZmNzkyOTFiOWM0ZTgxN2JhYTUzZDY4NDkz YzY5ZGZhZThmMmYyNDNjOGNhODRhYmE0MmQyZTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDwer+i789JPxuPUBzdC2kvueV4TUQ2U8q3w/EW3rdK5vs 3ddU+070w22B+F8+SoZfOdMddwC6rlHyVop3wS9mA8fMRLoZVZMT9ywT3C1DKERl Cqb0EF+QZw0GUEzzTWcVXbMQFjGb+OWjqbUSG2zBUXc82sQ4LAnzZSMUvVkIWfdP 8CTrGc+i/JS8hFhbSRf/Mgr/h2CIhgPvbdnlMl+Ery9rf5BLKsxC+QzfrXpZZ+sy CW248ucp9JDvAlOIxJmgC29xGMjR0JEuAMcZb2ldP0zuh9svg2P/5MbQJEAd4vF/ c30+GJzIax79jJnbpwFiElXO/TKuoui73uXVqX4vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDglvNJNJMQ+uy0u1gyLTqArDdtwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4ZDEwZGRjLTBlNzctNGViOC1hNjI1LTg5Yzg3ODBkNDllYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdNewAwDQYJKoZIhvcNAQELBQADggEBACf4pD2AWeQrTWIOhbMsyQHi4Bgt sVCu1oIgK4twvWFrzwB+jj5gUFvyS+DtFIinuiqYklwiPZI77HyDZbGRiOy/WZJ+ 7x9uJ2qZXQE/YoG2cRmSaxyruTi8kw2XwT/zxCrf5Cbi5aDEL4269cMvprXo/cLG 2Tw4hzzUznQS1MA3Uj1NoAZhGP4ZNyZXvR1qdOC0J/3YPqcIbFaERlDbn90Z9mDW /905cnpfIgGKKBSuYs3XlLPGHeyU2VpfztLTbrQIbDhAaQjGpw4esYu8voN+jq1j SGDMACPe7JGgzF1D6zwn4XKNeyTf5j+0y0YJBsFyPi2YahO53pgoDMTvoaY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:17 2025 by rpki-client