$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa File: 7538292c-9697-4822-8500-3088da3cb9a2.roa (raw, json) Hash identifier: Y+qjQCQJEB4EScSX+JSvF+OzkmbjAFwt3JK7lTwDBmo= Subject key identifier: F4:87:2D:65:C3:D7:FF:25:55:36:CC:1C:27:DD:1D:C5:5D:92:2D:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5990DBE773C0122457AA1335BD7EA18B46993268 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa Signing time: Mon 07 Jul 2025 16:22:13 +0000 ROA not before: Mon 07 Jul 2025 16:22:13 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 209.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:90:db:e7:73:c0:12:24:57:aa:13:35:bd:7e:a1:8b:46:99:32:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:22:13 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=075d6e9d8c5dd83f2856c4092d9577dfdfb047a6b00cfac303c278ae72d3a6fd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:d1:81:d3:23:2d:f9:4d:79:11:ba:d4:3e: d7:49:0c:79:6c:6c:df:d1:61:6a:e6:71:ab:61:74: 36:e7:96:20:6b:5b:bb:ca:7f:0d:ff:b8:c9:25:3a: e3:68:4f:ea:e8:ba:bc:66:96:8a:43:3c:20:aa:42: 12:ae:f4:86:0f:3c:03:dc:a3:0c:e1:46:64:cb:ae: 4e:bf:ef:47:9f:8c:bd:2d:dc:f7:da:d2:48:57:2d: 28:31:52:02:e6:a8:9c:69:3b:7d:fa:7f:1c:c2:77: 0c:60:ea:33:96:c2:28:48:c6:b2:48:76:e1:14:10: 36:09:9b:70:2b:71:e8:cd:0b:ef:85:de:b2:b2:1f: 11:7b:18:ee:73:c0:90:16:31:92:e5:4a:02:11:05: ab:b2:aa:82:63:bd:51:0b:97:52:07:25:57:cf:f3: fc:af:0b:81:da:cb:43:8c:42:54:ea:a0:af:ed:5c: 82:c6:fb:04:84:05:27:12:6a:e6:a7:d2:ee:24:2e: 35:67:08:96:3c:2c:5d:23:b7:99:b2:92:8c:62:92: 4a:88:ce:70:17:38:d2:5a:ec:bb:e0:1e:f3:4a:36: 48:41:20:7f:9d:58:00:f6:3d:50:79:2e:d0:b7:ce: 59:a2:cc:d9:1a:2a:f9:2e:d1:fb:bf:f1:b2:9c:19: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:87:2D:65:C3:D7:FF:25:55:36:CC:1C:27:DD:1D:C5:5D:92:2D:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7538292c-9697-4822-8500-3088da3cb9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:22:d6:0a:65:dd:e3:1f:8a:21:9a:ad:03:9f:4d:cc:6f:9b: 98:48:8f:ca:79:bd:80:4c:45:41:58:b8:ea:16:21:37:84:aa: a7:ca:13:1a:31:f1:c0:66:da:2b:db:ad:1c:98:96:94:f4:8f: 1a:5b:e4:da:54:ce:9b:c6:1e:dc:ab:64:ff:02:1c:6a:db:38: 04:fa:17:95:3a:92:f6:6c:7e:bc:3c:b2:d4:87:d5:61:8a:f7: 2d:88:4d:bc:b7:f7:33:bf:5e:49:75:c5:28:6f:5f:58:1e:e0: 9b:9b:dc:ee:33:84:01:61:be:16:e4:d7:0f:84:7d:80:13:90: 4a:71:77:43:c4:79:39:d8:c8:ee:c8:6c:ce:1c:31:80:bb:ac: cf:af:0c:db:79:80:4f:b9:cf:ff:e0:95:4f:44:95:d5:49:d1: 7a:b3:0a:a2:7b:31:64:77:e8:f1:97:61:21:b8:12:fb:21:47: f9:4e:d7:87:00:8e:55:47:77:45:37:fd:9f:78:c2:cc:ba:d4: 57:56:d5:3e:e8:14:93:50:4e:b4:30:57:51:1d:19:09:86:03: 8c:68:15:05:87:14:9a:95:c9:d1:41:a9:9f:d3:b5:d5:89:76: 71:f9:f2:07:83:76:06:03:6a:cb:cc:4e:5f:bb:5c:9f:b8:ad: 44:a8:5f:54 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWZDb53PAEiRXqhM1vX6hi0aZMmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYyMjEzWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzVkNmU5ZDhjNWRkODNmMjg1NmM0MDkyZDk1NzdkZmRm YjA0N2E2YjAwY2ZhYzMwM2MyNzhhZTcyZDNhNmZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpa9GB0yMt+U15EbrUPtdJDHlsbN/RYWrmcathdDbnliBr W7vKfw3/uMklOuNoT+rourxmlopDPCCqQhKu9IYPPAPcowzhRmTLrk6/70efjL0t 3Pfa0khXLSgxUgLmqJxpO336fxzCdwxg6jOWwihIxrJIduEUEDYJm3ArcejNC++F 3rKyHxF7GO5zwJAWMZLlSgIRBauyqoJjvVELl1IHJVfP8/yvC4Hay0OMQlTqoK/t XILG+wSEBScSauan0u4kLjVnCJY8LF0jt5mykoxikkqIznAXONJa7LvgHvNKNkhB IH+dWAD2PVB5LtC3zlmizNkaKvku0fu/8bKcGRIZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9IctZcPX/yVVNswcJ90dxV2SLXwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MzgyOTJjLTk2OTctNDgyMi04NTAwLTMwODhkYTNjYjlhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDRWDANBgkqhkiG9w0BAQsFAAOCAQEAPCLWCmXd4x+KIZqtA59NzG+bmEiP ynm9gExFQVi46hYhN4Sqp8oTGjHxwGbaK9utHJiWlPSPGlvk2lTOm8Ye3Ktk/wIc ats4BPoXlTqS9mx+vDyy1IfVYYr3LYhNvLf3M79eSXXFKG9fWB7gm5vc7jOEAWG+ FuTXD4R9gBOQSnF3Q8R5OdjI7shszhwxgLusz68M23mAT7nP/+CVT0SV1UnRerMK onsxZHfo8ZdhIbgS+yFH+U7XhwCOVUd3RTf9n3jCzLrUV1bVPugUk1BOtDBXUR0Z CYYDjGgVBYcUmpXJ0UGpn9O11Yl2cfnyB4N2BgNqy8xOX7tcn7itRKhfVA== -----END CERTIFICATE-----Generated at Mon Jul 21 23:51:31 2025 by rpki-client