$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/704ca798-b9eb-42ba-8658-0b1776110a63.roa File: 704ca798-b9eb-42ba-8658-0b1776110a63.roa (raw, json) Hash identifier: d1Vpp8/FTXDJ5NGs67XSqpYW/o1eEJSQJaet6QN2bVA= Subject key identifier: 29:0E:E4:62:4F:8E:D1:98:25:A2:1B:BE:B1:89:43:F4:37:BA:1B:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35C1E68E7BC8BF2E1D37529F3E28F99A5913875A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/704ca798-b9eb-42ba-8658-0b1776110a63.roa Signing time: Tue 22 Jul 2025 00:00:26 +0000 ROA not before: Tue 22 Jul 2025 00:00:26 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c1:e6:8e:7b:c8:bf:2e:1d:37:52:9f:3e:28:f9:9a:59:13:87:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 22 00:00:26 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=357b716789695ec8f938f3ec60dabee6d559421f237202dd9c9d55be00394050, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:11:96:0b:cd:c8:ca:c9:a7:fc:82:66:37: 27:ed:73:60:bf:c6:3d:45:b6:ea:5c:ba:a5:60:eb: cb:0c:b9:ca:5a:84:76:a8:01:df:ad:cf:8e:e2:0d: fc:d3:a8:87:6e:3f:24:40:48:68:0d:53:72:c6:ce: 09:7b:e5:7c:48:11:92:e9:04:4d:29:a5:d9:63:61: 2a:a5:80:13:c6:0f:50:01:25:07:7f:70:f4:1d:03: 09:af:18:29:2c:da:de:8f:82:a2:aa:80:8e:9e:9f: d3:52:1c:bf:9e:e7:49:be:bc:00:b4:85:46:0f:a6: b4:0f:0d:8c:9a:4d:ed:d0:0a:82:a4:38:b8:f1:f6: 4d:7b:6f:fa:db:c6:d1:45:7e:8a:39:a3:fc:70:60: a1:d4:15:87:9a:0c:80:a9:25:2a:84:8d:fc:e3:86: cb:f4:b6:c3:b1:92:92:e7:96:a1:5c:4b:31:ba:0e: 00:7e:24:29:de:d1:49:f5:58:13:2d:90:87:7e:05: 4b:ca:00:e4:0c:fe:1b:03:c5:b7:6b:20:6c:7d:48: fc:78:2d:16:e7:3b:0b:dd:90:cf:60:3e:2c:4c:9f: f6:a9:f9:6a:66:31:a3:b2:59:ec:6e:ec:b2:1f:c4: fa:b4:ce:ac:4b:4f:bf:24:c6:72:f3:30:71:9b:b4: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:E4:62:4F:8E:D1:98:25:A2:1B:BE:B1:89:43:F4:37:BA:1B:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/704ca798-b9eb-42ba-8658-0b1776110a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.224.0/20 Signature Algorithm: sha256WithRSAEncryption 04:ab:f7:21:36:6c:b9:77:72:e3:04:76:04:68:b1:26:79:1e: d9:52:6a:1c:ef:08:15:87:39:4e:f5:54:ed:a1:0d:cc:69:df: a7:ee:1b:d1:44:e8:38:a6:3b:02:8e:ad:0d:65:f6:15:9e:58: ff:a2:07:a1:6f:96:22:23:d0:72:e7:c6:e4:0d:65:82:26:bd: 07:39:e4:07:50:4e:fa:55:f1:c1:b4:3e:d7:a6:a3:ee:07:6f: 58:a3:9f:97:ff:ca:ed:6e:52:a6:aa:92:bc:f8:f7:ad:ac:33: 33:3f:5c:44:b1:93:d8:8d:52:66:b0:1a:a8:51:38:c4:ce:6a: de:91:25:a0:e1:63:19:16:8f:f3:bd:44:14:d0:22:31:91:fc: 5a:f9:59:a5:af:4c:77:73:22:b0:f3:df:94:09:19:7f:5b:3d: db:01:be:83:87:f7:16:2e:9f:aa:71:f8:a7:f7:6a:74:09:f9: f5:8e:00:28:7b:c3:9f:f0:2a:0c:6e:ac:2e:e9:ea:03:0a:09: 33:cc:67:86:5d:e8:29:eb:0b:6d:d7:14:9e:56:71:73:bf:c8: 87:04:0d:1e:22:af:12:63:f6:06:65:f8:3a:c3:14:d4:8e:ac: 5d:c7:5e:f9:04:f8:4a:ce:32:1c:30:24:53:7a:32:9c:37:e3: 75:60:8c:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNcHmjnvIvy4dN1KfPij5mlkTh1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIyMDAwMDI2WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTdiNzE2Nzg5Njk1ZWM4ZjkzOGYzZWM2MGRhYmVlNmQ1 NTk0MjFmMjM3MjAyZGQ5YzlkNTViZTAwMzk0MDUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkKhGWC83Iysmn/IJmNyftc2C/xj1FtupcuqVg68sMucpa hHaoAd+tz47iDfzTqIduPyRASGgNU3LGzgl75XxIEZLpBE0ppdljYSqlgBPGD1AB JQd/cPQdAwmvGCks2t6PgqKqgI6en9NSHL+e50m+vAC0hUYPprQPDYyaTe3QCoKk OLjx9k17b/rbxtFFfoo5o/xwYKHUFYeaDICpJSqEjfzjhsv0tsOxkpLnlqFcSzG6 DgB+JCne0Un1WBMtkId+BUvKAOQM/hsDxbdrIGx9SPx4LRbnOwvdkM9gPixMn/ap +WpmMaOyWexu7LIfxPq0zqxLT78kxnLzMHGbtDN3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKQ7kYk+O0Zglohu+sYlD9De6G2IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNGNhNzk4LWI5ZWItNDJiYS04NjU4LTBiMTc3NjExMGE2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgOAwDQYJKoZIhvcNAQELBQADggEBAASr9yE2bLl3cuMEdgRosSZ5HtlS ahzvCBWHOU71VO2hDcxp36fuG9FE6DimOwKOrQ1l9hWeWP+iB6FvliIj0HLnxuQN ZYImvQc55AdQTvpV8cG0Ptemo+4Hb1ijn5f/yu1uUqaqkrz4962sMzM/XESxk9iN UmawGqhROMTOat6RJaDhYxkWj/O9RBTQIjGR/Fr5WaWvTHdzIrDz35QJGX9bPdsB voOH9xYun6px+Kf3anQJ+fWOACh7w5/wKgxurC7p6gMKCTPMZ4Zd6CnrC23XFJ5W cXO/yIcEDR4irxJj9gZl+DrDFNSOrF3HXvkE+ErOMhwwJFN6Mpw343VgjA8= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:54 2025 by rpki-client