$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa File: 7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa (raw, json) Hash identifier: 9pJvtSeImuuM2rLjndO1Q2ixwC00b226/ALAMAPKCYk= Subject key identifier: D3:56:D3:64:11:6F:C6:3E:F3:ED:70:94:BD:46:BB:48:70:0D:D9:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 437557E5B284F398D6B7AF22A45117E5B50E9347 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa Signing time: Tue 01 Jul 2025 00:20:16 +0000 ROA not before: Tue 01 Jul 2025 00:20:16 +0000 ROA not after: Tue 05 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 93.78.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:75:57:e5:b2:84:f3:98:d6:b7:af:22:a4:51:17:e5:b5:0e:93:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 1 00:20:16 2025 GMT Not After : Aug 5 23:59:59 2025 GMT Subject: serialNumber=7cb5ed383865fa60111b424d7ff8fc42f621476d2175b1edd706bd78d725fe13, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:65:05:d5:93:c3:71:8c:49:07:13:ce:c2: c1:58:b9:94:95:ad:1e:6e:0c:cf:8d:70:ef:7f:22: fa:37:c6:f9:6b:04:2a:8e:7b:0a:ad:99:50:1b:58: ac:70:a8:d2:ec:77:86:b7:de:3e:16:cf:8d:11:62: cb:ae:4b:48:69:22:b0:98:96:94:95:da:2c:eb:9f: df:78:34:8e:5b:44:04:78:22:c2:1e:ee:4a:51:e9: 96:bd:ff:94:6c:7b:5a:a4:a0:e3:68:0f:0f:14:83: 8e:6f:26:3f:27:24:4d:4c:31:75:34:fa:f5:42:7f: b4:1a:6a:08:93:62:6b:b9:16:8b:93:03:ef:91:8d: 1a:ec:a4:6d:03:19:83:66:d3:a7:5d:f3:87:9a:d5: 96:61:26:47:3a:c6:27:77:ec:56:0c:89:10:8e:34: f4:ab:f7:91:e8:34:4d:e1:f0:f0:d8:f8:47:7e:cc: 10:29:a7:18:c7:ad:15:b6:1a:76:f4:25:34:82:70: 71:40:5e:9a:76:b0:4e:c0:eb:bf:b1:57:2c:06:07: 1b:50:e8:86:44:2b:9c:6c:ac:19:b6:08:80:c3:63: 6a:65:e9:45:09:80:65:26:bd:14:92:9c:b3:3f:ec: d9:be:aa:2f:a7:5e:6e:8b:8d:0d:0b:04:3d:94:b7: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:56:D3:64:11:6F:C6:3E:F3:ED:70:94:BD:46:BB:48:70:0D:D9:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a373310-e697-4fb7-91aa-bd2254f6ceaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.78.128.0/17 Signature Algorithm: sha256WithRSAEncryption ba:54:dc:f9:25:8f:66:8a:a8:74:00:7e:9d:d6:e1:78:75:74: 16:e3:7d:a0:03:7f:6d:0b:b5:19:bd:2d:f6:de:cc:33:ed:ac: 91:31:29:27:68:23:5b:11:cc:51:24:5f:c1:02:2c:6f:0f:30: 44:97:f9:3c:66:8f:cf:88:0c:46:e6:31:59:cb:db:a7:34:48: 28:13:d2:b4:6e:c5:5b:6d:f6:2e:ec:90:8d:70:a6:99:32:e9: ac:45:8f:c4:f7:54:68:45:ec:c7:06:ac:b5:0d:0d:ce:d2:1e: 49:27:7e:1d:da:51:f3:67:24:36:d9:97:44:05:0a:d6:7f:69: 56:a5:68:f4:fa:e7:58:7d:4a:f2:25:44:b3:91:09:40:5d:e8: e7:37:29:32:91:15:4e:df:fb:c3:5b:65:9b:fd:fb:55:7b:b9: 61:0a:b5:69:03:93:ab:7f:3e:87:95:ff:d4:62:5e:19:ab:fe: 69:03:de:4c:ab:87:a2:11:07:97:86:5e:ef:f9:8c:39:9b:9f: b8:6d:ff:b4:5f:83:4a:eb:e9:87:5d:bc:f0:64:a8:1f:4d:f7: 08:9d:8a:10:a5:01:c6:1d:29:eb:6f:d2:ae:1a:a9:ae:9f:1f: 0b:bb:7f:6d:35:a3:b5:7c:f7:eb:c5:1b:06:73:f4:ae:75:74: c0:ed:67:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ3VX5bKE85jWt68ipFEX5bUOk0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzAxMDAyMDE2WhcNMjUwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2I1ZWQzODM4NjVmYTYwMTExYjQyNGQ3ZmY4ZmM0MmY2 MjE0NzZkMjE3NWIxZWRkNzA2YmQ3OGQ3MjVmZTEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy62UF1ZPDcYxJBxPOwsFYuZSVrR5uDM+NcO9/Ivo3xvlr BCqOewqtmVAbWKxwqNLsd4a33j4Wz40RYsuuS0hpIrCYlpSV2izrn994NI5bRAR4 IsIe7kpR6Za9/5Rse1qkoONoDw8Ug45vJj8nJE1MMXU0+vVCf7QaagiTYmu5FouT A++RjRrspG0DGYNm06dd84ea1ZZhJkc6xid37FYMiRCONPSr95HoNE3h8PDY+Ed+ zBAppxjHrRW2Gnb0JTSCcHFAXpp2sE7A67+xVywGBxtQ6IZEK5xsrBm2CIDDY2pl 6UUJgGUmvRSSnLM/7Nm+qi+nXm6LjQ0LBD2Ut7U9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU01bTZBFvxj7z7XCUvUa7SHAN2TowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhMzczMzEwLWU2OTctNGZiNy05MWFhLWJkMjI1NGY2Y2VhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAddToAwDQYJKoZIhvcNAQELBQADggEBALpU3Pklj2aKqHQAfp3W4Xh1dBbj faADf20LtRm9LfbezDPtrJExKSdoI1sRzFEkX8ECLG8PMESX+Txmj8+IDEbmMVnL 26c0SCgT0rRuxVtt9i7skI1wppky6axFj8T3VGhF7McGrLUNDc7SHkknfh3aUfNn JDbZl0QFCtZ/aValaPT651h9SvIlRLORCUBd6Oc3KTKRFU7f+8NbZZv9+1V7uWEK tWkDk6t/PoeV/9RiXhmr/mkD3kyrh6IRB5eGXu/5jDmbn7ht/7Rfg0rr6YddvPBk qB9N9widihClAcYdKetv0q4aqa6fHwu7f201o7V89+vFGwZz9K51dMDtZyA= -----END CERTIFICATE-----Generated at Tue Jul 22 05:12:55 2025 by rpki-client