$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa File: 6a62da10-7a91-4f00-8d90-807e784a45e8.roa (raw, json) Hash identifier: X2+FVox83N7/WTMMcVUKgA/j7zt9dnU4og3Zaif8R/w= Subject key identifier: 50:54:42:32:9B:F4:D1:34:DE:80:15:06:F8:48:A1:B8:74:56:48:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1166AA2083D52F449E1D044F5E818F8F5A7DBDFB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa Signing time: Wed 09 Jul 2025 00:31:25 +0000 ROA not before: Wed 09 Jul 2025 00:31:25 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.23.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:66:aa:20:83:d5:2f:44:9e:1d:04:4f:5e:81:8f:8f:5a:7d:bd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:31:25 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=d18ce14d9eac782d6c3034a6137ff10aa0ed5ca2c1ee101853748bba4602c6df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:7c:2c:55:b7:1e:dc:a5:9b:7f:7f:a1:f0: e9:a4:40:2a:0b:ad:4f:f9:62:a2:b3:5d:11:c2:8f: 94:92:81:98:c7:0b:de:28:e3:26:5a:e6:36:53:0d: 12:1f:1d:ba:b6:26:12:20:f8:41:65:4e:af:10:b9: 56:ad:50:18:f8:fc:44:3f:df:f8:7b:6f:f4:d8:fe: 5e:3c:c0:98:05:3d:30:fa:54:e6:80:b8:c4:6b:a1: b5:06:2b:5c:e3:2f:0c:4d:5b:ce:55:f4:e0:a2:ad: b5:cb:ba:8b:5b:63:8a:16:a7:2a:e2:32:53:fa:62: 9c:89:52:09:86:a6:b0:69:9c:c3:49:0f:17:39:bc: 89:69:2b:51:1a:9a:c7:bc:6a:7a:75:39:6e:bd:bb: 0b:45:37:ce:28:86:d5:0e:8e:2a:0d:47:8c:26:ae: e3:18:c9:e3:10:32:e7:46:b5:74:09:3e:1a:77:60: 27:79:6a:c8:9a:f3:be:e2:7d:53:8d:af:e0:2e:2f: 58:3b:fb:75:4c:87:df:3a:27:1a:85:62:3c:52:bb: cd:88:ef:73:dd:94:a8:29:b0:db:44:ec:fd:f8:23: 33:cc:35:3d:01:e0:52:ff:19:25:16:bd:ea:8f:52: 70:4e:e0:d1:39:74:37:5d:dd:cd:24:fa:ea:2c:3d: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:42:32:9B:F4:D1:34:DE:80:15:06:F8:48:A1:B8:74:56:48:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a62da10-7a91-4f00-8d90-807e784a45e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.96.0/19 Signature Algorithm: sha256WithRSAEncryption a9:f8:96:0c:df:b6:a6:82:41:3c:91:a3:b9:f0:b2:6a:4e:1c: 33:2e:3d:9b:ff:9b:da:d4:27:81:03:8b:fe:1f:c1:6d:91:ba: 6e:2b:31:89:55:5f:27:e1:03:ac:55:85:27:81:ee:60:8c:ae: 49:90:e2:f1:ca:5f:bc:1f:58:fa:9e:23:b9:3f:74:00:18:04: b1:8f:76:15:c3:5d:3d:03:af:c6:89:68:66:e2:07:ec:db:e7: e2:b2:f3:0b:7f:af:47:3a:1d:54:b9:15:5b:b7:f1:b4:05:2b: 1a:af:c8:c4:7a:c0:c6:d7:06:ba:21:e0:e3:78:c2:bc:cc:16: cd:83:5f:ed:48:fa:3e:66:a7:ae:d2:a8:22:41:0d:00:ed:bd: a6:12:a6:33:60:cf:56:d4:4e:97:4c:1d:e6:ff:ca:64:0d:f5: 48:9a:87:c6:bf:92:bf:1c:83:b5:07:91:f6:ba:1f:13:3d:ce: c2:e6:66:8b:92:03:8c:8f:67:48:65:c8:50:ae:82:3d:d8:3a: 59:69:51:d7:f4:2a:f0:7a:38:77:fe:5a:4a:4c:92:2a:49:ab: 54:7e:86:85:ab:51:88:e0:83:e5:ca:96:9b:8f:27:2b:34:2c: 06:f1:b2:87:91:b5:8e:f4:0f:66:8e:ac:fe:5e:65:2a:da:e1: ec:86:a2:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEWaqIIPVL0SeHQRPXoGPj1p9vfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAzMTI1WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMThjZTE0ZDllYWM3ODJkNmMzMDM0YTYxMzdmZjEwYWEw ZWQ1Y2EyYzFlZTEwMTg1Mzc0OGJiYTQ2MDJjNmRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0P3wsVbce3KWbf3+h8OmkQCoLrU/5YqKzXRHCj5SSgZjH C94o4yZa5jZTDRIfHbq2JhIg+EFlTq8QuVatUBj4/EQ/3/h7b/TY/l48wJgFPTD6 VOaAuMRrobUGK1zjLwxNW85V9OCirbXLuotbY4oWpyriMlP6YpyJUgmGprBpnMNJ Dxc5vIlpK1Eamse8anp1OW69uwtFN84ohtUOjioNR4wmruMYyeMQMudGtXQJPhp3 YCd5asia877ifVONr+AuL1g7+3VMh986JxqFYjxSu82I73PdlKgpsNtE7P34IzPM NT0B4FL/GSUWveqPUnBO4NE5dDdd3c0k+uosPQ5hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUFRCMpv00TTegBUG+EihuHRWSDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhNjJkYTEwLTdhOTEtNGYwMC04ZDkwLTgwN2U3ODRhNDVlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUXF2AwDQYJKoZIhvcNAQELBQADggEBAKn4lgzftqaCQTyRo7nwsmpOHDMu PZv/m9rUJ4EDi/4fwW2Rum4rMYlVXyfhA6xVhSeB7mCMrkmQ4vHKX7wfWPqeI7k/ dAAYBLGPdhXDXT0Dr8aJaGbiB+zb5+Ky8wt/r0c6HVS5FVu38bQFKxqvyMR6wMbX Broh4ON4wrzMFs2DX+1I+j5mp67SqCJBDQDtvaYSpjNgz1bUTpdMHeb/ymQN9Uia h8a/kr8cg7UHkfa6HxM9zsLmZouSA4yPZ0hlyFCugj3YOllpUdf0KvB6OHf+WkpM kipJq1R+hoWrUYjgg+XKlpuPJys0LAbxsoeRtY70D2aOrP5eZSra4eyGomA= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:51 2025 by rpki-client