$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9f44f1-03b1-4103-926c-a5b8cf47dc91.roa File: 7d9f44f1-03b1-4103-926c-a5b8cf47dc91.roa (raw, json) Hash identifier: oAI2vcq1/IixSefSPg/okZFnVbPHhfUwGcTcAF5rpGc= Subject key identifier: 3C:E1:C0:0E:52:CD:20:3B:B4:6C:26:79:41:30:94:59:24:D1:C0:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FD924E3B61BFA809737E60EFB160110F65F929D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9f44f1-03b1-4103-926c-a5b8cf47dc91.roa Signing time: Tue 08 Jul 2025 00:40:16 +0000 ROA not before: Tue 08 Jul 2025 00:40:16 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 100.24.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d9:24:e3:b6:1b:fa:80:97:37:e6:0e:fb:16:01:10:f6:5f:92:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:40:16 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=c9895476f740d0c0e1fa086d09a75a3e73d1a9c6f79a7a76b2bb3efc5e524c34, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:59:44:64:95:3a:36:4f:65:8b:4e:f4:3d: dd:90:51:7b:09:c6:74:e0:69:a3:ca:50:8a:4c:c5: fb:c5:88:4d:14:96:e1:79:bb:8f:6d:51:dd:de:8b: 3a:3d:0e:4b:6c:f5:52:ab:b1:65:c5:75:d8:ba:f1: be:8c:ae:e3:7a:a2:f2:32:f5:cc:0b:09:1e:df:fa: 5b:e3:b6:45:cd:5a:bd:ee:7f:38:97:8e:8b:3a:31: 33:f8:76:da:97:10:da:06:90:a1:52:48:6d:90:76: 29:9f:34:9e:21:4c:b9:75:40:b4:b4:39:0c:e5:2b: 9b:94:ea:a2:fd:00:ba:ba:26:89:ce:aa:e6:6b:bf: e8:34:93:66:83:24:ab:2d:6c:24:c8:d2:b0:44:df: e0:fe:19:69:a6:d3:a0:e5:19:26:6b:d7:4a:e6:69: 96:db:49:a8:5e:70:1f:71:a6:13:58:c9:6d:a7:10: 79:60:03:6f:71:e4:f8:d5:21:02:46:9b:35:a3:49: c3:e6:c5:43:79:9a:19:88:0d:7b:f6:e9:e5:1f:c8: 6a:a5:23:99:eb:14:f4:55:06:e3:4b:bb:32:b4:85: 73:31:cb:c0:e3:03:78:fd:18:62:0c:06:d8:c5:c2: 23:3d:31:9d:a5:ec:ad:41:ab:66:36:c9:7d:8d:4b: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E1:C0:0E:52:CD:20:3B:B4:6C:26:79:41:30:94:59:24:D1:C0:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9f44f1-03b1-4103-926c-a5b8cf47dc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 100.24.0.0/13 Signature Algorithm: sha256WithRSAEncryption 27:3f:e7:68:9a:54:18:84:c1:6a:5b:ce:6f:8f:cd:1f:71:5e: e4:96:c6:bf:99:5e:f4:be:48:54:e0:66:30:98:b0:02:b5:30: 9e:97:25:cd:5f:a7:ee:76:cf:e4:38:32:27:c7:db:10:bb:8e: 3c:10:85:7c:f4:e8:13:50:7c:5c:e0:2d:c5:88:55:46:5e:aa: 07:a3:37:5e:1c:83:ee:cf:2b:0c:44:5f:e5:8a:4f:b2:37:1e: ec:4c:52:28:a5:4f:25:ba:52:6c:18:c0:d1:68:47:b5:c2:70: a9:9f:fc:83:87:bb:a2:8a:2e:89:8d:29:84:cc:9b:4a:df:d8: 94:4e:da:76:e3:92:00:e8:1d:60:e8:94:4b:41:c8:08:6d:78: ae:4a:f7:73:4d:56:ca:bb:2a:9c:65:e7:38:39:0b:a1:da:55: cc:92:0b:90:0e:9d:ad:71:88:31:e0:d2:61:7e:54:45:67:0d: e3:75:d4:74:5c:f5:b8:79:82:3c:9e:73:25:2d:96:2c:f6:74: 41:8a:f6:4d:b3:a6:87:92:d3:2a:9f:32:4f:8b:28:76:30:6a: 38:f7:73:a4:7c:3f:bd:a5:44:36:a6:0b:13:7e:9f:ad:2a:c8: 64:43:80:29:e9:af:2e:94:7e:c3:89:30:f5:5d:c2:3f:cb:48: 83:79:cf:12 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUL9kk47Yb+oCXN+YO+xYBEPZfkp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDA0MDE2WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTg5NTQ3NmY3NDBkMGMwZTFmYTA4NmQwOWE3NWEzZTcz ZDFhOWM2Zjc5YTdhNzZiMmJiM2VmYzVlNTI0YzM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzfFlEZJU6Nk9li070Pd2QUXsJxnTgaaPKUIpMxfvFiE0U luF5u49tUd3eizo9Dkts9VKrsWXFddi68b6MruN6ovIy9cwLCR7f+lvjtkXNWr3u fziXjos6MTP4dtqXENoGkKFSSG2QdimfNJ4hTLl1QLS0OQzlK5uU6qL9ALq6JonO quZrv+g0k2aDJKstbCTI0rBE3+D+GWmm06DlGSZr10rmaZbbSahecB9xphNYyW2n EHlgA29x5PjVIQJGmzWjScPmxUN5mhmIDXv26eUfyGqlI5nrFPRVBuNLuzK0hXMx y8DjA3j9GGIMBtjFwiM9MZ2l7K1Bq2Y2yX2NSwVFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPOHADlLNIDu0bCZ5QTCUWSTRwJIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkOWY0NGYxLTAzYjEtNDEwMy05MjZjLWE1YjhjZjQ3ZGM5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNkGDANBgkqhkiG9w0BAQsFAAOCAQEAJz/naJpUGITBalvOb4/NH3Fe5JbG v5le9L5IVOBmMJiwArUwnpclzV+n7nbP5DgyJ8fbELuOPBCFfPToE1B8XOAtxYhV Rl6qB6M3XhyD7s8rDERf5YpPsjce7ExSKKVPJbpSbBjA0WhHtcJwqZ/8g4e7ooou iY0phMybSt/YlE7aduOSAOgdYOiUS0HICG14rkr3c01WyrsqnGXnODkLodpVzJIL kA6drXGIMeDSYX5URWcN43XUdFz1uHmCPJ5zJS2WLPZ0QYr2TbOmh5LTKp8yT4so djBqOPdzpHw/vaVENqYLE36frSrIZEOAKemvLpR+w4kw9V3CP8tIg3nPEg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:00 2025 by rpki-client