$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa File: 799c386f-67bd-428b-8c5a-c04024c7aaf2.roa (raw, json) Hash identifier: m7bu+ESYoftx6ei0NCDa9Skd7KN8ot6WoPIXI8lXAlg= Subject key identifier: F0:50:4C:0F:59:BB:98:7E:F8:7A:FB:79:23:DB:FD:DD:39:7E:FB:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65E9E36CCBDBF9C3AF849AC52BBBC194B86E5EC2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa Signing time: Fri 18 Jul 2025 00:00:51 +0000 ROA not before: Fri 18 Jul 2025 00:00:51 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 16.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e9:e3:6c:cb:db:f9:c3:af:84:9a:c5:2b:bb:c1:94:b8:6e:5e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:00:51 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=b67ec01abb498ec567e3a3f782712d3d4669e2038dba287ef57e068f6a1a7188, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:22:f6:28:b3:96:1c:cc:23:e4:b3:2b:a2: 65:0c:40:50:d0:ed:6b:c9:e5:4d:18:12:1c:39:39: 8f:60:64:fa:48:57:f2:2f:eb:9c:c6:81:18:ee:12: d3:10:1e:b4:80:bd:8a:e7:25:90:e6:f2:61:5c:8b: e0:16:f6:b8:1a:e3:a1:ff:22:e1:57:8a:da:94:ca: c7:42:1f:cd:a5:5b:65:ba:83:e5:7c:6d:c0:73:ba: 3a:09:ae:01:8f:70:63:21:30:67:12:6d:1c:72:c5: 6b:55:a7:8c:82:1a:7d:cc:6c:5c:24:28:f5:95:1c: 75:ae:46:b3:db:31:bd:34:cb:31:a9:61:3a:dc:63: d9:a0:8c:30:23:e3:25:e1:cb:1c:5c:27:4f:79:2b: 50:e6:5e:fc:9b:fe:65:5b:57:b0:b7:07:25:f9:75: 81:20:b8:cf:fd:5e:f9:37:cc:b3:d8:a7:93:f6:e3: 07:ef:a0:14:59:f7:81:42:54:64:ff:14:9c:13:35: 80:17:f5:dc:00:f8:94:0d:4e:c8:06:05:00:47:4f: 85:a8:b1:64:e9:55:0a:1f:c7:59:d7:bb:42:be:85: 7b:32:cd:0b:cc:53:e3:25:05:eb:dc:1e:50:75:98: fc:a8:dc:93:2d:db:91:5d:36:4a:3a:b8:07:39:a3: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:50:4C:0F:59:BB:98:7E:F8:7A:FB:79:23:DB:FD:DD:39:7E:FB:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/799c386f-67bd-428b-8c5a-c04024c7aaf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:6c:fc:b1:43:93:ac:fa:b9:76:64:e9:bb:ca:e3:7b:a9:2e: d9:e9:be:23:06:65:ba:63:2b:7f:ec:c4:09:d7:48:a5:ab:c8: e2:b4:fd:a5:ce:51:af:58:52:60:58:da:a7:80:5d:90:f7:87: 98:6d:29:4e:d0:d9:b4:ee:0e:dd:58:bf:c1:82:71:86:d4:ae: e9:50:83:ae:94:18:50:b2:69:f4:39:82:58:c4:c7:80:13:15: ba:d7:1f:3b:cc:e6:8c:62:3a:27:d6:99:55:6f:a1:5a:9d:25: e5:c4:46:54:3f:ca:a2:f9:37:b5:66:ad:0c:5c:7e:a9:b4:6f: 07:88:c1:26:e5:fb:bf:9e:9b:19:6b:39:32:cd:6e:d0:d3:6c: 5c:bd:11:d7:12:dc:71:44:ae:66:fa:12:38:e4:6d:51:e0:fd: d8:ca:0d:02:47:7c:2b:9e:34:71:61:22:2e:c3:53:59:43:c5: a0:3e:40:73:37:e1:26:77:46:dd:4d:fa:85:d1:8c:f0:ac:37: 3b:f3:a7:0f:e5:6f:cf:b0:24:6a:93:4b:e2:bf:25:7a:b2:c9: a1:23:89:99:c5:20:2f:ef:0c:73:7f:f3:19:21:e8:96:35:dc: 80:81:9a:49:51:b2:58:7b:a1:14:08:da:94:50:e8:76:10:15: 58:92:f1:fb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZenjbMvb+cOvhJrFK7vBlLhuXsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE4MDAwMDUxWhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjdlYzAxYWJiNDk4ZWM1NjdlM2EzZjc4MjcxMmQzZDQ2 NjllMjAzOGRiYTI4N2VmNTdlMDY4ZjZhMWE3MTg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwjyL2KLOWHMwj5LMromUMQFDQ7WvJ5U0YEhw5OY9gZPpI V/Iv65zGgRjuEtMQHrSAvYrnJZDm8mFci+AW9rga46H/IuFXitqUysdCH82lW2W6 g+V8bcBzujoJrgGPcGMhMGcSbRxyxWtVp4yCGn3MbFwkKPWVHHWuRrPbMb00yzGp YTrcY9mgjDAj4yXhyxxcJ095K1DmXvyb/mVbV7C3ByX5dYEguM/9Xvk3zLPYp5P2 4wfvoBRZ94FCVGT/FJwTNYAX9dwA+JQNTsgGBQBHT4WosWTpVQofx1nXu0K+hXsy zQvMU+MlBevcHlB1mPyo3JMt25FdNko6uAc5o7Y7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8FBMD1m7mH74evt5I9v93Tl++zcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5OWMzODZmLTY3YmQtNDI4Yi04YzVhLWMwNDAyNGM3YWFmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQiTANBgkqhkiG9w0BAQsFAAOCAQEAoWz8sUOTrPq5dmTpu8rje6ku2em+ IwZlumMrf+zECddIpavI4rT9pc5Rr1hSYFjap4BdkPeHmG0pTtDZtO4O3Vi/wYJx htSu6VCDrpQYULJp9DmCWMTHgBMVutcfO8zmjGI6J9aZVW+hWp0l5cRGVD/Kovk3 tWatDFx+qbRvB4jBJuX7v56bGWs5Ms1u0NNsXL0R1xLccUSuZvoSOORtUeD92MoN Akd8K540cWEiLsNTWUPFoD5AczfhJndG3U36hdGM8Kw3O/OnD+Vvz7AkapNL4r8l erLJoSOJmcUgL+8Mc3/zGSHoljXcgIGaSVGyWHuhFAjalFDodhAVWJLx+w== -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:54 2025 by rpki-client