$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa File: 6928a406-38e7-41d6-a4c4-6665e62bdcea.roa (raw, json) Hash identifier: EoMMwQ38tAWCra64RyZmtlToFyynM9RE22ucHHx5v3E= Subject key identifier: FD:B7:DA:7D:2C:EB:6C:F3:DB:E4:5E:B6:EC:B7:23:17:41:0F:4E:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 490F4A317D5A6004A4BF3467CBD75C9B189638B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa Signing time: Tue 22 Jul 2025 00:11:03 +0000 ROA not before: Tue 22 Jul 2025 00:11:03 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0f:4a:31:7d:5a:60:04:a4:bf:34:67:cb:d7:5c:9b:18:96:38:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:11:03 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=a96ba7a9a34e46e67d17851cf9aeb4e3fba2afd4f022b118992d5c7d15e763da, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cd:71:33:c3:00:cd:8c:d6:2c:85:40:9b:49: e1:a9:f6:47:97:43:51:c6:23:5a:e5:23:72:a6:de: 2e:ae:48:5d:87:e4:55:2a:21:03:5c:78:d9:f6:68: 11:3a:24:d6:6a:32:74:7e:c2:b2:82:3d:8c:56:68: 74:90:32:72:5b:1d:c0:a9:e2:cf:d2:19:11:4f:c0: 55:e2:20:f5:66:cb:8f:0a:d5:01:69:d8:4e:d9:d6: 91:11:70:c6:91:c7:0d:4b:2b:bb:ed:bc:61:ff:79: 8c:c0:42:4c:6a:50:82:57:0e:45:31:00:0b:ab:12: 1e:94:27:4e:03:50:38:15:57:03:c6:79:46:40:3c: 9a:c6:c6:8e:9f:1b:07:55:92:65:9a:e0:c5:b9:d5: 97:3b:78:12:5a:1a:77:42:93:50:e9:c1:22:d7:67: ae:f4:f0:73:37:4e:81:b9:55:e8:09:66:10:27:6c: 4a:0d:ac:05:cd:e5:16:9c:1a:40:50:13:63:71:0a: b4:8a:f2:69:d9:0b:ed:ed:a2:a2:11:58:34:23:6d: 6d:e9:c8:34:45:ed:99:89:93:2f:7f:cc:d0:7e:4e: 06:f7:d2:9d:89:04:0e:92:bc:74:1f:d5:77:29:ef: 43:8a:4f:4e:1f:15:25:3e:84:da:ea:43:01:a0:d1: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:DA:7D:2C:EB:6C:F3:DB:E4:5E:B6:EC:B7:23:17:41:0F:4E:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6928a406-38e7-41d6-a4c4-6665e62bdcea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.32.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:84:74:07:86:dc:7b:d4:79:16:ad:98:37:d3:ce:35:e7:5b: 3e:03:57:d0:95:18:79:ba:ca:46:02:c9:ff:70:4c:8c:82:fc: ec:fa:d2:b3:60:3c:cf:06:f8:77:88:7a:7f:f8:02:c6:88:7e: f8:f9:ed:17:c2:bc:df:56:99:e7:47:ca:2e:73:93:d7:41:a1: 43:7a:bd:29:e7:ee:11:e6:7b:cd:f7:64:56:00:5a:82:2a:09: 94:da:b5:68:a2:8e:d6:f5:3f:6e:c1:38:4e:1f:2c:48:4f:73: 4c:cb:9b:bd:72:c4:40:84:4a:cd:94:35:f5:08:e6:b9:2b:95: aa:ba:93:6e:23:10:2e:e1:26:bc:87:e5:4a:7c:14:73:37:b7: 39:e0:27:d3:6d:75:73:1c:c8:33:16:20:59:ec:11:c1:3a:dc: fe:b4:a1:1d:99:4a:99:43:e3:32:2d:dd:92:52:b7:86:e8:a7: 36:1d:fb:29:5d:27:91:dc:3c:e7:71:0f:4b:ae:2b:4e:91:ea: e4:cb:46:ee:d4:b2:02:53:d6:6a:ab:93:35:1c:ec:0a:d3:92: 96:f1:80:5f:82:1a:b2:4f:20:9e:0f:0e:50:2b:c4:54:eb:07: 0d:35:37:60:6a:73:18:0f:2c:45:75:65:bb:34:9b:1e:02:b4: e6:b2:2f:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSQ9KMX1aYASkvzRny9dcmxiWOLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAxMTAzWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTZiYTdhOWEzNGU0NmU2N2QxNzg1MWNmOWFlYjRlM2Zi YTJhZmQ0ZjAyMmIxMTg5OTJkNWM3ZDE1ZTc2M2RhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfzXEzwwDNjNYshUCbSeGp9keXQ1HGI1rlI3Km3i6uSF2H 5FUqIQNceNn2aBE6JNZqMnR+wrKCPYxWaHSQMnJbHcCp4s/SGRFPwFXiIPVmy48K 1QFp2E7Z1pERcMaRxw1LK7vtvGH/eYzAQkxqUIJXDkUxAAurEh6UJ04DUDgVVwPG eUZAPJrGxo6fGwdVkmWa4MW51Zc7eBJaGndCk1DpwSLXZ6708HM3ToG5VegJZhAn bEoNrAXN5RacGkBQE2NxCrSK8mnZC+3toqIRWDQjbW3pyDRF7ZmJky9/zNB+Tgb3 0p2JBA6SvHQf1Xcp70OKT04fFSU+hNrqQwGg0UNPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/bfafSzrbPPb5F627LcjF0EPTrIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5MjhhNDA2LTM4ZTctNDFkNi1hNGM0LTY2NjVlNjJiZGNlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNkCAwDQYJKoZIhvcNAQELBQADggEBAEyEdAeG3HvUeRatmDfTzjXnWz4D V9CVGHm6ykYCyf9wTIyC/Oz60rNgPM8G+HeIen/4AsaIfvj57RfCvN9WmedHyi5z k9dBoUN6vSnn7hHme833ZFYAWoIqCZTatWiijtb1P27BOE4fLEhPc0zLm71yxECE Ss2UNfUI5rkrlaq6k24jEC7hJryH5Up8FHM3tzngJ9NtdXMcyDMWIFnsEcE63P60 oR2ZSplD4zIt3ZJSt4bopzYd+yldJ5HcPOdxD0uuK06R6uTLRu7UsgJT1mqrkzUc 7ArTkpbxgF+CGrJPIJ4PDlArxFTrBw01N2BqcxgPLEV1Zbs0mx4CtOayLzg= -----END CERTIFICATE-----Generated at Tue Jul 22 04:32:10 2025 by rpki-client