$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa File: 69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa (raw, json) Hash identifier: 933mYFGEfhdBQOby901jjEmafUtfc/xGwTbgSizMrQA= Subject key identifier: CB:CB:E7:E3:EB:C8:E8:61:75:00:F6:9D:FC:BA:D3:FF:C1:BA:3E:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 403C17C9FA404D9A48C455EF39907B1D3FC41763 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa Signing time: Wed 09 Jul 2025 00:50:27 +0000 ROA not before: Wed 09 Jul 2025 00:50:27 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 45.33.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3c:17:c9:fa:40:4d:9a:48:c4:55:ef:39:90:7b:1d:3f:c4:17:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:50:27 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=a8bb8cf1fd63d364d426922f6eb6aeef802caf00bce517453bf61b477eb888f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:0f:3e:49:c9:9f:cb:6f:3a:74:a0:76:8a: 17:79:3f:63:38:e6:41:33:af:5d:a3:a1:d2:2b:0d: 70:e1:87:9b:95:86:66:f7:5a:fb:64:1c:84:58:98: e5:7f:a0:02:a1:5f:ee:88:64:f3:ab:8b:2e:81:3c: 41:79:c5:de:dc:80:7f:3c:d8:e3:1b:2a:50:90:48: 7f:13:73:3e:3d:01:43:6c:81:e1:6a:9b:9c:72:cd: 08:4f:24:fc:79:15:ad:4d:02:2e:f9:6d:9a:e1:30: 60:e0:f2:ce:8d:d7:ca:18:53:ee:04:e4:8c:90:13: 9a:c4:01:a0:be:b5:02:80:c4:48:33:a6:7b:29:b2: 21:cd:c5:dd:4e:96:6a:2a:63:63:ed:05:e6:96:db: 63:d5:fa:6c:4c:a2:f5:d2:20:9b:2a:b6:f6:d7:66: e4:35:d3:87:db:0b:71:c6:a4:cb:96:6f:50:0c:6b: eb:5f:40:68:03:f1:9d:47:d0:e2:1c:58:c3:97:85: 9d:f5:7c:4f:d8:79:88:0f:5c:13:3a:4d:2f:03:6b: d8:43:f2:81:24:73:93:1b:84:fd:8f:2f:c1:96:fb: fb:77:85:02:05:58:0f:86:3c:a1:6d:4c:e1:12:15: e6:f0:d4:f4:f2:76:84:ce:57:fe:3e:e7:8f:a3:b6: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CB:E7:E3:EB:C8:E8:61:75:00:F6:9D:FC:BA:D3:FF:C1:BA:3E:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69e51013-5a25-4eee-a0a3-d6dbe81cf91f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.33.160.0/19 Signature Algorithm: sha256WithRSAEncryption d0:aa:1f:8a:9b:9d:79:52:c1:c0:93:b1:c8:a5:36:a6:14:7d: 1e:ab:13:19:d4:70:5b:1c:3d:54:98:5d:74:76:4a:8e:ef:aa: 1a:8a:a9:d5:c5:d5:1a:69:e4:1a:55:ce:33:a5:a3:74:77:c5: c0:1a:ba:a9:86:57:ce:db:57:a7:ac:ae:67:f8:83:89:6b:2d: 76:e5:9a:fa:ea:62:07:85:61:04:5c:27:42:ee:f5:84:c3:23: 9b:1f:a3:1d:cb:2a:9c:d3:44:27:50:c9:81:4b:01:a9:e6:e0: 2a:08:9e:c2:19:90:e4:42:0d:42:fc:3d:6c:92:95:78:82:48: 2d:f2:44:9c:6e:51:ea:f7:84:75:b5:54:ce:32:14:9c:88:db: 05:c8:7a:1c:c7:0c:d2:28:a4:d6:90:fb:c4:68:24:8e:aa:87: b3:10:17:f1:48:a4:2c:cb:a4:1a:8f:23:e0:86:05:2b:27:6b: 9c:ef:cc:94:99:e3:45:df:84:5f:80:f4:5e:84:7a:ca:fa:bf: f7:99:f4:49:20:49:27:e6:c9:b3:5f:39:35:f7:22:cf:9c:16: 07:df:11:dd:d4:27:01:9f:5d:56:19:26:48:62:81:57:1a:ae: 85:af:7b:4c:4d:32:dd:bf:8b:71:7a:1f:73:6f:6b:ba:d6:22: 4e:5a:f3:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQDwXyfpATZpIxFXvOZB7HT/EF2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA1MDI3WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGJiOGNmMWZkNjNkMzY0ZDQyNjkyMmY2ZWI2YWVlZjgw MmNhZjAwYmNlNTE3NDUzYmY2MWI0NzdlYjg4OGY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Tg8+Scmfy286dKB2ihd5P2M45kEzr12jodIrDXDhh5uV hmb3WvtkHIRYmOV/oAKhX+6IZPOriy6BPEF5xd7cgH882OMbKlCQSH8Tcz49AUNs geFqm5xyzQhPJPx5Fa1NAi75bZrhMGDg8s6N18oYU+4E5IyQE5rEAaC+tQKAxEgz pnspsiHNxd1OlmoqY2PtBeaW22PV+mxMovXSIJsqtvbXZuQ104fbC3HGpMuWb1AM a+tfQGgD8Z1H0OIcWMOXhZ31fE/YeYgPXBM6TS8Da9hD8oEkc5MbhP2PL8GW+/t3 hQIFWA+GPKFtTOESFebw1PTydoTOV/4+54+jtvghAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy8vn4+vI6GF1APad/LrT/8G6PtEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5ZTUxMDEzLTVhMjUtNGVlZS1hMGEzLWQ2ZGJlODFjZjkxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUtIaAwDQYJKoZIhvcNAQELBQADggEBANCqH4qbnXlSwcCTscilNqYUfR6r ExnUcFscPVSYXXR2So7vqhqKqdXF1Rpp5BpVzjOlo3R3xcAauqmGV87bV6esrmf4 g4lrLXblmvrqYgeFYQRcJ0Lu9YTDI5sfox3LKpzTRCdQyYFLAanm4CoInsIZkORC DUL8PWySlXiCSC3yRJxuUer3hHW1VM4yFJyI2wXIehzHDNIopNaQ+8RoJI6qh7MQ F/FIpCzLpBqPI+CGBSsna5zvzJSZ40XfhF+A9F6Eesr6v/eZ9EkgSSfmybNfOTX3 Is+cFgffEd3UJwGfXVYZJkhigVcaroWve0xNMt2/i3F6H3Nva7rWIk5a84A= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:48 2025 by rpki-client