$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa File: 6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa (raw, json) Hash identifier: V3MAcl9qZrxUy94oop2IvBQaZ/ojJTnCCq5J3lT/H64= Subject key identifier: E1:8B:5A:97:AA:AE:77:AB:1B:A3:98:A0:A8:04:0F:87:CE:86:AB:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DA6502B9F78CFA6241208D23A78991564AEE355 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa Signing time: Wed 16 Jul 2025 00:00:47 +0000 ROA not before: Wed 16 Jul 2025 00:00:47 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 107.176.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a6:50:2b:9f:78:cf:a6:24:12:08:d2:3a:78:99:15:64:ae:e3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 16 00:00:47 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=3c8321c61682cab5ec4e108aa85802d39d01859fb82714a0648f7b8a900c2757, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:50:4b:89:c4:d8:f2:b7:55:ed:42:6e:27: 1b:81:a4:65:e4:39:54:f7:6e:50:6b:a6:fc:6d:db: 96:36:a1:1e:56:4e:c4:11:db:16:95:8d:f0:90:cb: 6a:b4:ab:03:da:78:79:a3:da:a2:0f:7b:83:77:99: 1c:11:76:82:5f:8c:97:4d:5a:e2:5d:b5:2c:64:62: 2e:cf:53:db:58:7b:20:fc:b1:87:4f:05:1f:b1:f7: 38:a0:96:31:65:47:59:fb:a0:3f:bf:bf:49:fa:61: 5f:c2:46:ea:04:7e:4f:d9:94:59:40:1b:19:bb:c5: 0f:49:cb:62:c7:92:0c:92:95:f4:01:49:f5:08:fb: 1a:62:13:a8:60:85:a2:ff:14:df:c0:c8:e7:0e:a2: fe:ca:d7:10:a8:59:f8:f3:ce:b8:ae:ed:c9:6c:5d: 90:0a:14:29:67:dd:05:fb:8c:52:ed:d0:e3:64:51: c4:3c:a1:bb:53:25:e7:e5:eb:f5:29:cf:b8:bc:73: 3b:e4:80:cc:1f:8a:82:83:62:a8:2e:f6:61:e1:3f: eb:21:61:da:4c:40:0b:c2:3a:b6:fa:53:a8:40:82: 37:00:4f:b3:6f:1c:ee:f6:20:76:ad:f4:3e:51:3c: 7a:8e:13:72:4d:dd:58:e2:0c:fb:61:5b:a4:38:4d: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8B:5A:97:AA:AE:77:AB:1B:A3:98:A0:A8:04:0F:87:CE:86:AB:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ba022e7-1cb6-4fe8-b561-6e77abb73dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 76:95:16:90:0a:8b:8f:06:01:13:c5:8a:09:82:86:b3:c6:b0: e0:96:b5:35:0b:8f:ee:95:a9:6e:71:84:2a:80:7c:13:e5:fa: c3:82:cd:55:db:c8:37:c2:38:e2:64:75:58:fc:dc:37:17:de: cb:4e:7b:9b:d5:4c:ec:c0:f9:0f:aa:58:bc:13:69:d7:6c:a2: 92:17:bc:52:a8:79:58:7d:3d:a9:52:c2:15:73:f7:c8:a8:ee: 71:36:48:2c:a7:3c:0c:e6:d0:18:57:c7:d9:18:ab:93:a2:84: 48:97:6d:0b:d8:0d:05:6c:82:ca:3d:8e:4f:6b:18:f8:21:09: c7:ba:97:3f:80:42:18:cb:43:e9:3f:a0:77:6f:be:0d:6f:b9: 76:bc:72:fb:d0:0b:3f:3a:12:dd:f5:c6:12:fa:71:4c:f8:80: 97:c1:3f:ce:3c:59:14:0e:17:86:49:af:ea:d1:1f:d3:56:b7: 08:2b:da:e2:96:0b:8e:45:44:6a:5b:34:91:cf:e2:26:6d:af: 78:e5:07:41:4f:1b:70:ee:8c:2b:36:bd:93:db:07:4c:33:c5: 55:2f:72:1f:a7:16:1a:37:ae:8c:f6:b8:3f:1a:47:41:4b:68: b8:ce:2d:e7:c9:9e:79:28:b5:c0:b3:81:10:95:17:6f:c7:53: e8:42:9e:0f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTaZQK594z6YkEgjSOniZFWSu41UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE2MDAwMDQ3WhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzgzMjFjNjE2ODJjYWI1ZWM0ZTEwOGFhODU4MDJkMzlk MDE4NTlmYjgyNzE0YTA2NDhmN2I4YTkwMGMyNzU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUplBLicTY8rdV7UJuJxuBpGXkOVT3blBrpvxt25Y2oR5W TsQR2xaVjfCQy2q0qwPaeHmj2qIPe4N3mRwRdoJfjJdNWuJdtSxkYi7PU9tYeyD8 sYdPBR+x9zigljFlR1n7oD+/v0n6YV/CRuoEfk/ZlFlAGxm7xQ9Jy2LHkgySlfQB SfUI+xpiE6hghaL/FN/AyOcOov7K1xCoWfjzzriu7clsXZAKFCln3QX7jFLt0ONk UcQ8obtTJefl6/Upz7i8czvkgMwfioKDYqgu9mHhP+shYdpMQAvCOrb6U6hAgjcA T7NvHO72IHat9D5RPHqOE3JN3VjiDPthW6Q4TY3/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4Ytal6qud6sbo5igqAQPh86Gq2UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiYTAyMmU3LTFjYjYtNGZlOC1iNTYxLTZlNzdhYmI3M2RkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFrsDANBgkqhkiG9w0BAQsFAAOCAQEAdpUWkAqLjwYBE8WKCYKGs8aw4Ja1 NQuP7pWpbnGEKoB8E+X6w4LNVdvIN8I44mR1WPzcNxfey057m9VM7MD5D6pYvBNp 12yikhe8Uqh5WH09qVLCFXP3yKjucTZILKc8DObQGFfH2Rirk6KESJdtC9gNBWyC yj2OT2sY+CEJx7qXP4BCGMtD6T+gd2++DW+5drxy+9ALPzoS3fXGEvpxTPiAl8E/ zjxZFA4Xhkmv6tEf01a3CCva4pYLjkVEals0kc/iJm2veOUHQU8bcO6MKza9k9sH TDPFVS9yH6cWGjeujPa4PxpHQUtouM4t58meeSi1wLOBEJUXb8dT6EKeDw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:30 2025 by rpki-client