$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa File: 7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa (raw, json) Hash identifier: xDcIj0bj/r8bXZSsXhR+1lEU+pZ5KqIQ/5Px5CnsdLA= Subject key identifier: 54:7E:D8:4F:CB:86:03:5B:31:2F:A5:1D:8F:E2:84:82:6C:FE:2D:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36A6C7B0FEF426C858B02508B62CB43116F046BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa Signing time: Sat 19 Jul 2025 00:40:17 +0000 ROA not before: Sat 19 Jul 2025 00:40:17 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 96.0.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a6:c7:b0:fe:f4:26:c8:58:b0:25:08:b6:2c:b4:31:16:f0:46:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:40:17 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=a7fafb7c9875ff9544788f1ccc96a0b7ac1934036c56bb3f027ca7acb54a8bf6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:f6:17:ce:8c:87:35:73:aa:78:ae:cd:d8: 30:5e:19:86:54:24:f8:e8:17:0e:17:96:15:73:47: db:aa:2d:f6:51:f8:29:dc:8e:95:b0:d1:a2:b4:19: 38:de:35:fe:b6:f4:1d:0b:0d:f2:9a:d8:58:43:5b: 35:f3:6d:c9:4e:20:67:f8:ae:0f:61:f2:50:95:d0: e1:ed:e2:d7:ec:ca:02:73:ae:22:77:0b:bc:72:40: fe:49:58:5b:c0:f0:21:b0:f8:b0:81:73:2b:c6:c0: 19:8e:21:83:d1:16:d8:a6:fa:cf:5a:db:00:96:86: 78:85:12:78:60:55:36:7a:71:da:67:b6:01:42:a0: af:76:75:45:d8:8d:26:64:05:66:c2:23:0d:f3:84: 74:01:b2:9f:9b:70:84:8f:7f:22:6d:f1:77:47:a8: 52:41:ba:80:08:85:76:64:b8:00:26:8f:21:2b:4d: b6:c7:18:05:73:ed:71:b0:a0:f8:45:87:30:cb:9d: dc:66:c0:2f:f6:e7:8e:6b:6c:cc:9e:f0:73:98:eb: b5:03:d0:1b:fb:fe:65:4d:e7:8f:5d:4b:fa:19:2e: 75:84:db:3d:ac:55:5f:4e:5a:71:a1:e3:5b:c7:6c: 69:89:4b:09:b7:7d:98:95:82:02:14:0b:c3:d5:00: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7E:D8:4F:CB:86:03:5B:31:2F:A5:1D:8F:E2:84:82:6C:FE:2D:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b82bd71-8baf-49aa-8d18-c0d7ec0774f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.0.92.0/23 Signature Algorithm: sha256WithRSAEncryption 42:86:0e:1e:e8:1d:75:a1:01:2b:17:65:ab:b5:66:4d:ad:57: 62:31:5c:2a:4b:77:e0:38:5f:bb:49:01:b4:c9:76:28:67:10: f0:3e:5b:03:71:3f:c4:f2:bf:00:1a:7d:10:51:b7:e7:c0:f9: 08:2c:6d:b4:2c:45:7c:fd:c1:90:fd:c7:d9:6a:20:6c:36:f4: 0c:e0:25:37:58:bf:0c:09:e6:f4:04:36:b1:64:a9:4c:7d:08: 74:81:0f:a8:27:ac:10:d2:0b:d1:c1:12:6e:6c:8d:1c:a3:f3: c0:f8:40:d5:0a:86:b9:11:30:dc:5a:d7:de:7d:ea:cd:db:e0: 31:b0:1d:4c:69:57:f7:54:36:ec:50:b7:ae:73:e9:d6:25:d0: e2:54:e2:0c:e0:3e:d0:f7:8f:63:3e:f9:f0:82:26:ee:9a:6a: 2a:79:6d:06:58:8f:e9:82:47:c9:b7:5b:b5:78:af:ff:02:a6: bd:7a:bc:c7:09:15:d9:02:94:9d:20:c9:24:e4:8c:a3:6f:a9: d0:1a:83:8b:f7:09:a9:92:8f:84:99:72:9a:f3:4c:cd:0b:30: 4c:cd:26:f2:6d:9c:2f:36:7b:9a:fd:62:6e:34:3d:f1:c9:83: 32:66:ef:f0:76:82:52:83:e9:e0:15:39:bb:50:dd:c1:9d:86: 7b:e5:9d:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNqbHsP70JshYsCUItiy0MRbwRrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA0MDE3WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2ZhZmI3Yzk4NzVmZjk1NDQ3ODhmMWNjYzk2YTBiN2Fj MTkzNDAzNmM1NmJiM2YwMjdjYTdhY2I1NGE4YmY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNdvYXzoyHNXOqeK7N2DBeGYZUJPjoFw4XlhVzR9uqLfZR +CncjpWw0aK0GTjeNf629B0LDfKa2FhDWzXzbclOIGf4rg9h8lCV0OHt4tfsygJz riJ3C7xyQP5JWFvA8CGw+LCBcyvGwBmOIYPRFtim+s9a2wCWhniFEnhgVTZ6cdpn tgFCoK92dUXYjSZkBWbCIw3zhHQBsp+bcISPfyJt8XdHqFJBuoAIhXZkuAAmjyEr TbbHGAVz7XGwoPhFhzDLndxmwC/2545rbMye8HOY67UD0Bv7/mVN549dS/oZLnWE 2z2sVV9OWnGh41vHbGmJSwm3fZiVggIUC8PVAFelAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVH7YT8uGA1sxL6Udj+KEgmz+LbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdiODJiZDcxLThiYWYtNDlhYS04ZDE4LWMwZDdlYzA3NzRmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgAFwwDQYJKoZIhvcNAQELBQADggEBAEKGDh7oHXWhASsXZau1Zk2tV2Ix XCpLd+A4X7tJAbTJdihnEPA+WwNxP8TyvwAafRBRt+fA+QgsbbQsRXz9wZD9x9lq IGw29AzgJTdYvwwJ5vQENrFkqUx9CHSBD6gnrBDSC9HBEm5sjRyj88D4QNUKhrkR MNxa19596s3b4DGwHUxpV/dUNuxQt65z6dYl0OJU4gzgPtD3j2M++fCCJu6aaip5 bQZYj+mCR8m3W7V4r/8Cpr16vMcJFdkClJ0gySTkjKNvqdAag4v3CamSj4SZcprz TM0LMEzNJvJtnC82e5r9Ym40PfHJgzJm7/B2glKD6eAVObtQ3cGdhnvlnTI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:38:55 2025 by rpki-client