$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa File: 7840150d-90b6-4a97-8609-5a40556c4e1b.roa (raw, json) Hash identifier: 4O+lthRHU6MAo8I3puCUMI+gmsms6vNrgeWk8GrxPFE= Subject key identifier: 18:68:C0:F9:E1:B8:57:F7:C5:4F:16:84:DF:1D:B1:A2:EF:C3:AA:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F314617E227C357F2CFE113FAB6C204DC2394E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa Signing time: Sat 19 Jul 2025 00:01:37 +0000 ROA not before: Sat 19 Jul 2025 00:01:37 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 205.149.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:31:46:17:e2:27:c3:57:f2:cf:e1:13:fa:b6:c2:04:dc:23:94:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:01:37 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=57d44253a02655ed4ff1851b3cb4f9b15db2dc9f436bb9c9d7896a7716f76930, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:49:2f:5e:5f:15:f0:77:af:c8:2c:41:d3: 38:c3:52:d2:20:6a:70:d3:fd:f7:fd:cb:bd:a7:ea: 92:a3:a0:19:e3:7b:dc:28:0d:42:c4:32:82:37:53: a4:11:f3:99:47:2a:65:8f:fa:16:11:b2:c0:cc:22: 29:17:3e:59:83:5b:36:47:75:bc:2a:6c:c6:18:f7: 2e:a0:92:3d:64:3c:37:0e:5f:85:03:e0:a0:24:31: 72:b0:e4:e2:88:1b:83:c9:a5:02:48:cf:bd:f4:0a: 82:d7:89:36:43:b7:b3:d3:aa:d6:50:95:c7:23:e6: 62:5b:c4:f6:6e:69:08:1f:56:4a:46:dd:90:37:e1: 21:be:d0:d7:c8:72:38:8d:2c:ec:66:02:47:53:3b: f6:f9:57:95:bf:70:22:8f:96:eb:1d:3b:7b:4f:f6: bb:08:5a:99:47:dc:04:05:16:9d:d3:2b:84:74:81: ba:d5:7a:6a:43:c6:af:1e:6a:88:45:bc:ba:cc:0f: c1:7e:b7:2f:20:5e:5e:ca:9a:db:4b:68:3e:a8:df: ff:de:fb:22:fb:73:64:95:3e:d1:8b:45:1c:04:d3: 8d:54:0f:eb:6b:70:ae:62:dd:6c:6d:b9:b5:3d:b1: f7:d9:ca:24:a4:7a:a1:97:75:b0:30:27:07:90:3b: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:68:C0:F9:E1:B8:57:F7:C5:4F:16:84:DF:1D:B1:A2:EF:C3:AA:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7840150d-90b6-4a97-8609-5a40556c4e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.149.32.0/19 Signature Algorithm: sha256WithRSAEncryption d0:12:ae:d6:8f:7f:be:84:1f:da:b6:2a:de:b5:cf:89:94:e5: 6e:2a:f2:67:a4:ad:86:c8:40:20:61:ef:90:d0:e6:fc:bd:fa: 0d:0d:7d:66:07:33:1d:b7:e0:5b:7b:ac:cc:d9:15:eb:e9:7a: cb:4f:4b:72:fc:50:94:10:6d:ae:4f:e4:8f:bf:5d:c7:10:fe: 17:5d:f3:a0:b1:8d:49:de:ac:3f:6a:1c:44:e3:61:09:9b:53: 21:85:3f:c7:ea:c5:aa:1d:a7:c6:79:7f:32:50:31:df:e1:3d: 96:b2:b7:4f:a5:e8:b5:ed:cb:44:ca:f7:43:03:eb:d2:76:6d: fa:bc:a0:7a:e7:81:7b:23:74:a2:f3:ba:b9:e0:d7:b6:9e:04: c2:d5:ad:4f:f0:19:42:dc:fb:78:67:4c:e3:ac:01:27:a3:6f: 13:21:77:53:67:b8:6a:06:58:e2:cf:1c:eb:c3:1b:25:b3:3f: 2e:82:70:e2:e3:3d:2b:02:a6:d4:aa:0d:ad:c6:b3:d6:21:e8: 74:85:3a:64:af:e1:89:88:3a:99:2f:34:d2:59:02:97:d0:74: 4f:1c:cb:5f:ee:1c:00:c1:89:9b:5d:31:59:f0:3a:18:1e:be: 8c:08:33:de:25:42:8f:20:44:9f:1f:db:f5:c5:b5:b8:49:10: 34:5d:2a:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDzFGF+Inw1fyz+ET+rbCBNwjlOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMTM3WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2Q0NDI1M2EwMjY1NWVkNGZmMTg1MWIzY2I0ZjliMTVk YjJkYzlmNDM2YmI5YzlkNzg5NmE3NzE2Zjc2OTMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa1EkvXl8V8HevyCxB0zjDUtIganDT/ff9y72n6pKjoBnj e9woDULEMoI3U6QR85lHKmWP+hYRssDMIikXPlmDWzZHdbwqbMYY9y6gkj1kPDcO X4UD4KAkMXKw5OKIG4PJpQJIz730CoLXiTZDt7PTqtZQlccj5mJbxPZuaQgfVkpG 3ZA34SG+0NfIcjiNLOxmAkdTO/b5V5W/cCKPlusdO3tP9rsIWplH3AQFFp3TK4R0 gbrVempDxq8eaohFvLrMD8F+ty8gXl7KmttLaD6o3//e+yL7c2SVPtGLRRwE041U D+trcK5i3WxtubU9sffZyiSkeqGXdbAwJweQOxsbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGGjA+eG4V/fFTxaE3x2xou/DqngwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4NDAxNTBkLTkwYjYtNGE5Ny04NjA5LTVhNDA1NTZjNGUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXNlSAwDQYJKoZIhvcNAQELBQADggEBANASrtaPf76EH9q2Kt61z4mU5W4q 8mekrYbIQCBh75DQ5vy9+g0NfWYHMx234Ft7rMzZFevpestPS3L8UJQQba5P5I+/ XccQ/hdd86CxjUnerD9qHETjYQmbUyGFP8fqxaodp8Z5fzJQMd/hPZayt0+l6LXt y0TK90MD69J2bfq8oHrngXsjdKLzurng17aeBMLVrU/wGULc+3hnTOOsASejbxMh d1NnuGoGWOLPHOvDGyWzPy6CcOLjPSsCptSqDa3Gs9Yh6HSFOmSv4YmIOpkvNNJZ ApfQdE8cy1/uHADBiZtdMVnwOhgevowIM94lQo8gRJ8f2/XFtbhJEDRdKgc= -----END CERTIFICATE-----Generated at Tue Jul 22 12:11:16 2025 by rpki-client