$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71884691-f7c8-4e2c-9a5e-7431c3d4b3a5.roa File: 71884691-f7c8-4e2c-9a5e-7431c3d4b3a5.roa (raw, json) Hash identifier: VhJNgbY7uD8MVqQ97NGGiNc2UX4DGJYPhI6lDls8kWo= Subject key identifier: FB:7D:5F:52:E0:36:B1:2B:C8:E1:54:51:9A:8C:89:44:4F:7F:6D:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4612EE353EBD61D4F186A68FF96CC33C6BE0848A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71884691-f7c8-4e2c-9a5e-7431c3d4b3a5.roa Signing time: Sat 12 Jul 2025 00:20:47 +0000 ROA not before: Sat 12 Jul 2025 00:20:47 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.228.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:12:ee:35:3e:bd:61:d4:f1:86:a6:8f:f9:6c:c3:3c:6b:e0:84:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:20:47 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=36d4c91900ad783dc7b46586562f713481ccbf4c46c6e9c19b40da28b1e2f873, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:06:bf:b5:17:7c:84:1c:1d:a7:3b:03:28: a4:45:4f:46:e4:91:71:4a:b3:59:14:43:39:fa:18: cf:60:96:b6:d7:7f:1a:55:9e:e4:d8:59:8a:0e:a0: 77:3e:63:09:2f:89:8a:b0:cd:e9:01:e4:07:60:74: d7:8b:17:40:38:ef:ab:90:e0:71:20:f3:b2:5c:5f: 85:71:d2:8f:c6:30:3c:3e:be:df:17:38:c1:31:f7: 88:58:50:d5:de:6a:5f:8b:10:06:00:16:cc:9e:a1: a7:8f:e9:ef:11:b1:fa:de:11:50:eb:c9:ed:3c:41: e4:fc:68:0b:46:06:1c:7b:0e:6f:15:ff:f6:39:e7: e2:1f:fe:f0:fb:f8:3a:d9:6c:4e:9e:35:ae:48:e1: bb:80:ed:0f:1e:36:93:7c:8c:3e:c1:96:1f:a8:da: 4a:96:3e:6e:81:62:04:4e:03:40:a6:85:1b:71:c8: cb:5a:22:15:d2:67:db:b9:8c:7c:8a:cd:69:c4:cf: 51:3a:06:78:7b:35:17:e7:aa:9e:1b:8c:e7:59:6f: 38:9a:59:7d:8f:36:10:b7:73:73:a1:1e:99:29:39: 51:db:2c:cd:74:f5:af:2f:57:ab:20:6f:58:07:a5: 3c:99:a8:6e:c3:07:7e:05:ed:ac:55:99:b3:67:31: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:5F:52:E0:36:B1:2B:C8:E1:54:51:9A:8C:89:44:4F:7F:6D:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71884691-f7c8-4e2c-9a5e-7431c3d4b3a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.228.193.0/24 Signature Algorithm: sha256WithRSAEncryption a8:62:3c:93:59:ad:e7:07:a9:1b:95:48:59:36:e9:3a:7c:17: e5:63:56:15:6b:fd:53:06:a9:83:58:d8:0d:ed:d2:b9:74:22: 3e:ff:09:7f:6b:f3:36:d6:31:55:8f:f6:6a:5a:4f:89:77:c7: b8:53:cd:2e:ea:04:eb:96:34:3c:00:cf:48:b3:36:b1:ea:9d: 99:61:d0:f9:e8:b2:ee:91:a5:4e:6c:95:f3:20:ed:80:ea:cf: ec:ee:f8:61:57:c6:e1:4f:0a:df:0c:e0:91:eb:cd:01:ca:a7: a0:49:de:4f:bd:6f:c3:e6:b2:7e:d0:8f:a7:ad:be:56:aa:db: 7a:2e:85:ab:c4:9c:8f:19:83:10:be:d5:98:af:47:74:9a:a5: 96:42:b9:75:f9:18:79:15:be:8c:a9:b3:78:34:3d:8c:c8:a9: 09:58:97:bd:7f:30:4d:a0:6c:c5:73:60:e7:c8:f4:1c:cf:8f: 24:1c:be:99:8a:56:06:26:c1:76:7f:ae:4f:57:63:a2:31:e7: f4:99:9f:fc:e4:7a:8b:b1:41:96:a8:cd:55:55:55:76:dc:43: 71:86:d1:0b:ff:00:19:65:50:53:2d:68:d7:5b:07:93:9b:d5: ed:72:40:f2:17:75:81:22:ef:db:19:df:ba:6d:c5:95:78:cf: fb:38:58:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURhLuNT69YdTxhqaP+WzDPGvghIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAyMDQ3WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmQ0YzkxOTAwYWQ3ODNkYzdiNDY1ODY1NjJmNzEzNDgx Y2NiZjRjNDZjNmU5YzE5YjQwZGEyOGIxZTJmODczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJCga/tRd8hBwdpzsDKKRFT0bkkXFKs1kUQzn6GM9glrbX fxpVnuTYWYoOoHc+YwkviYqwzekB5AdgdNeLF0A476uQ4HEg87JcX4Vx0o/GMDw+ vt8XOMEx94hYUNXeal+LEAYAFsyeoaeP6e8RsfreEVDrye08QeT8aAtGBhx7Dm8V //Y55+If/vD7+DrZbE6eNa5I4buA7Q8eNpN8jD7Blh+o2kqWPm6BYgROA0CmhRtx yMtaIhXSZ9u5jHyKzWnEz1E6Bnh7NRfnqp4bjOdZbziaWX2PNhC3c3OhHpkpOVHb LM109a8vV6sgb1gHpTyZqG7DB34F7axVmbNnMQFnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+31fUuA2sSvI4VRRmoyJRE9/bT0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxODg0NjkxLWY3YzgtNGUyYy05YTVlLTc0MzFjM2Q0YjNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX5MEwDQYJKoZIhvcNAQELBQADggEBAKhiPJNZrecHqRuVSFk26Tp8F+Vj VhVr/VMGqYNY2A3t0rl0Ij7/CX9r8zbWMVWP9mpaT4l3x7hTzS7qBOuWNDwAz0iz NrHqnZlh0Pnosu6RpU5slfMg7YDqz+zu+GFXxuFPCt8M4JHrzQHKp6BJ3k+9b8Pm sn7Qj6etvlaq23ouhavEnI8ZgxC+1ZivR3SapZZCuXX5GHkVvoyps3g0PYzIqQlY l71/ME2gbMVzYOfI9BzPjyQcvpmKVgYmwXZ/rk9XY6Ix5/SZn/zkeouxQZaozVVV VXbcQ3GG0Qv/ABllUFMtaNdbB5Ob1e1yQPIXdYEi79sZ37ptxZV4z/s4WOM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:21 2025 by rpki-client