$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa File: 7a63d989-b13f-46b2-ada6-94bd07a73e86.roa (raw, json) Hash identifier: o398GuLOnGAhaXF5ivESiH5SHGJocZIeLYHSiobhwb4= Subject key identifier: 4B:E2:30:54:E2:E3:4B:26:31:7C:58:61:90:5F:B9:8F:AF:FA:AA:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C31213CB9C52EB19AAE0F8C0699DED713735E59 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa Signing time: Wed 09 Jul 2025 00:30:20 +0000 ROA not before: Wed 09 Jul 2025 00:30:20 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.23.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:31:21:3c:b9:c5:2e:b1:9a:ae:0f:8c:06:99:de:d7:13:73:5e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:30:20 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=42a088c85acf42ad231aab024662b1fd62e0af3bd9bed256e85433b2c81f11d9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:c0:d7:18:46:1e:1f:c7:20:ce:76:16:a9: 2b:fb:3c:44:45:a5:eb:d1:a8:05:5d:1e:09:c3:66: c4:c6:67:93:83:9c:86:03:fc:95:22:83:70:ea:8d: b7:35:66:f1:da:cf:1b:0c:a9:2e:1f:c5:dc:5c:3e: 6c:80:cf:a2:e4:b7:81:29:81:dc:6d:2b:5f:7d:bb: 40:75:51:70:40:4d:43:ad:37:c4:f0:a1:de:31:43: 73:25:a7:ac:c6:d8:9b:91:09:84:3a:4a:f6:f7:da: de:35:19:69:af:4e:17:af:be:a2:f0:54:32:59:f1: 55:a4:cb:e7:37:b5:e5:0c:f0:8a:b3:95:b6:56:c9: cd:f6:2b:22:06:03:0f:90:fa:88:10:5e:00:ec:9b: 02:55:c8:5b:72:37:44:bd:a8:24:e8:e4:61:e7:11: 7a:89:ab:18:3e:d0:19:30:54:83:17:45:5b:4d:48: ea:2f:59:69:a1:98:8c:64:ef:b0:28:94:0c:b7:33: cd:fa:d7:24:9e:60:4e:17:ed:f9:6c:80:e5:6e:3e: 51:ae:79:23:9d:af:bf:8c:2c:9b:8b:78:08:64:83: 96:c9:2a:b2:0e:35:e3:d3:c9:25:75:4a:b7:11:21: 8d:cc:2c:48:56:5d:5c:f4:f5:9b:7d:e3:fa:85:96: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E2:30:54:E2:E3:4B:26:31:7C:58:61:90:5F:B9:8F:AF:FA:AA:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a63d989-b13f-46b2-ada6-94bd07a73e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.23.128.0/17 Signature Algorithm: sha256WithRSAEncryption 97:b7:86:5e:10:68:6c:c0:c1:27:fd:e8:2d:b1:fa:7d:a5:e9: b7:15:96:2a:c9:d7:95:6a:c1:d4:d7:5e:6c:c4:db:d9:42:4c: 17:73:9e:03:c4:3c:67:98:9c:5e:ee:cb:37:f5:c1:cc:db:4c: 76:d8:9b:ce:38:f4:d5:a2:71:4b:fa:ba:a4:20:ef:a5:6d:6e: e8:11:a1:3c:e3:bf:94:35:1f:3e:f9:53:c8:12:40:84:b8:67: b8:a7:0f:15:f2:7b:38:af:6c:8b:4c:8c:66:aa:f8:29:fb:14: 52:49:ce:62:fa:63:d8:ac:80:6d:38:be:3e:a1:5b:82:61:1f: 4d:f1:c5:82:64:b9:c2:f0:3c:f5:6b:59:90:82:2b:b2:fd:5f: a6:e5:69:ea:d6:a7:82:45:a5:94:6d:fb:e5:67:bc:f2:88:7e: 7a:9f:f8:00:10:36:6f:51:cf:c1:f5:8a:5f:54:68:87:00:67: 81:17:fd:8e:26:54:bc:d6:f8:d2:79:26:de:81:ae:cf:50:8b: f1:2d:e0:6e:58:51:cc:21:62:46:55:1e:90:b4:30:29:27:33: d0:20:61:78:01:34:d5:c9:8e:8f:2b:c0:49:9d:eb:3a:d3:96: ba:09:95:6d:71:73:40:74:49:0a:b3:dc:9c:b9:19:8a:75:c5: 14:f2:12:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHDEhPLnFLrGarg+MBpne1xNzXlkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDAzMDIwWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmEwODhjODVhY2Y0MmFkMjMxYWFiMDI0NjYyYjFmZDYy ZTBhZjNiZDliZWQyNTZlODU0MzNiMmM4MWYxMWQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUiMDXGEYeH8cgznYWqSv7PERFpevRqAVdHgnDZsTGZ5OD nIYD/JUig3Dqjbc1ZvHazxsMqS4fxdxcPmyAz6Lkt4EpgdxtK199u0B1UXBATUOt N8Twod4xQ3Mlp6zG2JuRCYQ6Svb32t41GWmvThevvqLwVDJZ8VWky+c3teUM8Iqz lbZWyc32KyIGAw+Q+ogQXgDsmwJVyFtyN0S9qCTo5GHnEXqJqxg+0BkwVIMXRVtN SOovWWmhmIxk77AolAy3M8361ySeYE4X7flsgOVuPlGueSOdr7+MLJuLeAhkg5bJ KrIONePTySV1SrcRIY3MLEhWXVz09Zt94/qFlhv5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS+IwVOLjSyYxfFhhkF+5j6/6qqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhNjNkOTg5LWIxM2YtNDZiMi1hZGE2LTk0YmQwN2E3M2U4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcXF4AwDQYJKoZIhvcNAQELBQADggEBAJe3hl4QaGzAwSf96C2x+n2l6bcV lirJ15VqwdTXXmzE29lCTBdzngPEPGeYnF7uyzf1wczbTHbYm8449NWicUv6uqQg 76VtbugRoTzjv5Q1Hz75U8gSQIS4Z7inDxXyezivbItMjGaq+Cn7FFJJzmL6Y9is gG04vj6hW4JhH03xxYJkucLwPPVrWZCCK7L9X6blaerWp4JFpZRt++VnvPKIfnqf +AAQNm9Rz8H1il9UaIcAZ4EX/Y4mVLzW+NJ5Jt6Brs9Qi/Et4G5YUcwhYkZVHpC0 MCknM9AgYXgBNNXJjo8rwEmd6zrTlroJlW1xc0B0SQqz3Jy5GYp1xRTyEnU= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:11 2025 by rpki-client